TrustOn Direct MCP ยท PROD

Connect your agent once

Give this page to Codex, Cursor, Claude Code, or Copilot CLI. The agent installs one user-global skill and the truston-prod MCP entry. OAuth and the active PROD grant control real access.

Agent setup contract

  1. Fetch /api/setup and require schema version 1.
  2. Detect the current client and back up its user-level MCP configuration.
  3. Add only truston-prod with URL https://api.truston.by/mcp; preserve every unrelated entry.
  4. Fetch the bootstrap skill, verify SHA-256, and install it globally for the current user.
  5. If a local bootstrap exists with different content, stop and ask before replacing it.
  6. Start the client's native OAuth flow with CIMD. Use oauthClientIdFallback only when the client cannot use CIMD, then preserve the exact callback URI displayed by the client.
  7. Verify the instruction tool before other Agent Data calls.
  8. Honor the MCP tool annotations: read-only tools may run normally, while mutation planning and apply must retain the client's write approval flow.

Global locations: Codex ~/.codex/config.toml and ~/.agents/skills; Cursor ~/.cursor/mcp.json and ~/.cursor/skills; Claude Code user-scoped MCP plus ~/.claude/skills; Copilot CLI ~/.copilot/mcp-config.json and ~/.copilot/skills.

PROD access

This public page contains no credentials and grants no access.

Manifest

{
  "schemaVersion": 1,
  "environment": "production",
  "mcp": {
    "name": "truston-prod",
    "url": "https://api.truston.by/mcp",
    "transport": "streamable-http",
    "auth": "oauth",
    "oauthClientIdFallback": "E28ovSSJFaI55Y1w"
  },
  "skill": {
    "name": "truston-agent-data",
    "scope": "user",
    "url": "https://access.truston.by/api/setup/skill",
    "sha256": "67f480a0cafff7b3cdfd2fefa7498f945de5fceeaa439e3a892b7a77e7a746b1"
  }
}