TrustFloor
An open-source MCP (Model Context Protocol) approval gateway layer positioned between AI agents and target applications. It controls high-risk operations through a human approval mechanism and supports a trust accumulation mechanism based on historical interaction records.
Timeline (last 90 days)
TrustFloor is an open-source layer positioned between the agent and the application it operates on, requiring human approval before the agent executes high-risk operations such as payments, signing, and sending.
TrustFloor is implemented as an MCP gateway: after the agent calls the gateway, it executes a policy check and returns one of three results: allow, pending approval, or reject.
In real-world testing with 10 developers, agents tended to call the native MCP server directly rather than routing through the approval gateway.
Using a prompt to tell the agent to always route through the gateway works most of the time, but cannot achieve 100% reliability.
It is business owners rather than developers who truly need the approval functionality, but business owners will not go searching for an approval SDK.
The author proposes three elements for scalability: credential escrow plus one-click OAuth, a host-layer pre-tool-call hook, and delivering approvals to channels that business owners already use such as WhatsApp, email, and Slack.
All Facts (6)
TrustFloor is an open-source layer positioned between the agent and the application it operates on, requiring human approval before the agent executes high-risk operations such as payments, signing, and sending.
50%UnverifiedTrustFloor is implemented as an MCP gateway: after the agent calls the gateway, it executes a policy check and returns one of three results: allow, pending approval, or reject.
50%UnverifiedUsing a prompt to tell the agent to always route through the gateway works most of the time, but cannot achieve 100% reliability.
50%UnverifiedIt is business owners rather than developers who truly need the approval functionality, but business owners will not go searching for an approval SDK.
50%UnverifiedThe author proposes three elements for scalability: credential escrow plus one-click OAuth, a host-layer pre-tool-call hook, and delivering approvals to channels that business owners already use such as WhatsApp, email, and Slack.
50%UnverifiedIn real-world testing with 10 developers, agents tended to call the native MCP server directly rather than routing through the approval gateway.
50%