ECZ-ID Developer Trust Pro · VS Code
Both sides of the agent ↔ MCP connection.One licence.
Everything in MCP Trust Pro and Agent Trust Pro, under one subscription, with one licence key you paste into both extensions. The server side and the agent side of the same connection, inspected locally, with history on both.
Start with the free Community editions, no account: MCP Trust · Agent Trust · Already purchased? Activate
Developer Trust Pro
£19.99/month
or £199/year
- MCP Trust Pro + Agent Trust Pro bought separately
- £25.98/month · £238/year
- Licence keys to manage
- One
- Passport required
- No
Prices as published by TrustOps, which runs checkout. This site takes no payment.
What it includes
Pro on both extensions.
Both Community editions stay free and complete. Pro adds history, deeper analysis, authority mapping and optional local control. It never takes anything away.
Server and tool side
MCP Trust Pro
- Trust Epochs — a history of posture snapshots: compare any two, with retention you control
- Advanced Tool X-Ray — per-tool inspection of declared capability and schema, so a tool that quietly changes shape between versions is visible
- Local Trust Gate (Protect This MCP) — run a local gate in front of an MCP server and verify its mediation with a live proof
- Deterministic local policy inside the gate — ALLOW, WARN, REVIEW, BLOCK or QUARANTINE, from rules you set
- Secret Shield — minimise the environment a protected server is handed, through the gate’s Protect flow
- Remediation — preview a change, apply it and roll it back, with the diff shown first
Agent and authority side
Agent Trust Pro
- Authority Graph — what each agent can reach, across its declared tools and the MCP servers in the same workspace
- Dangerous action chains — capability chains such as external input → sensitive access → external send, surfaced as chains, not isolated findings
- Authority Epochs — a history of how an agent’s reach changed, with exact diffs and your own retention
- Reciprocal Agent ↔ MCP view — the same relationship read from the agent’s side
- Remediation — preview, apply and roll back posture changes
One licence
How the bundle works.
- Buy in TrustOps, then open the activation page to receive your licence key.
- Paste it into Activate Pro in the extension. It is stored in VS Code Secret Storage.
- The key is checked on your machine against a pinned ECZ-ID public key, with no call home.
- A bundle licence activates both extensions.
- No Passport is required and none is created: Developer Trust is a software subscription.
- Everything in MCP Trust Pro and Agent Trust Pro
- One licence key activates both extensions: paste the same key into each
- One subscription instead of two
- Less than the two Pro plans bought separately
Developer Trust Pro
- •Everything in MCP Trust Pro
- •Everything in Agent Trust Pro
- •One licence key for both extensions
Secure checkout by Shopify. Cancel any time. Already purchased? Activate here.
Activate the licence from your order confirmation. A Developer Trust Pro bundle key turns on both extensions.
Activate your purchase →Inspection is not enforcement
What Pro does and does not control.
Local-first
What never leaves your machine.
- No source uploaded.
- No prompts uploaded.
- No tool arguments uploaded.
- No tool results uploaded.
- No secret values uploaded. Secret values are never displayed, retained, fingerprinted, reported or transmitted.
- No telemetry.
Community performs no background outbound requests. Links you choose to the Resolver, TrustOps or this site open in your browser. If you enable the Pro Local Trust Gate, it binds to 127.0.0.1 and talks only to the MCP upstream you already configured. In Agent Trust’s optional metadata-only mode, filename and classification metadata is placed in a browser link after a disclosure; local-only is the default.
Questions
Before you buy.
Which one do I need?
If you are wiring or reviewing MCP servers, start with MCP Trust. If you are granting tool access to an agent, start with Agent Trust. If you do both — and most people building with MCP end up doing both — the bundle covers both sides for less than the two singles.
What does the bundle actually give me?
Everything in MCP Trust Pro and Agent Trust Pro, under one subscription, with one licence key you paste into both extensions. It costs less than buying the two Pro plans separately.
Can I start free and upgrade later?
Yes, and that is the intended path. Install both free, run real scans on your own workspace, and buy Pro only once you know which side you need history and deeper analysis on.
Is the free version time-limited or a trial?
No. Community is free permanently and needs no account. Pro adds to Community; it never removes anything. If a Pro subscription lapses, only the Pro features deactivate and your locally retained history stays where it is.
Does any of my code or configuration get uploaded?
No. No source, prompts, tool arguments, tool results or secret values are uploaded, and there is no telemetry. Community makes no background outbound requests; links you choose open in your browser. If you start the Pro Local Trust Gate, it binds to 127.0.0.1 and talks only to the MCP upstream you already configured. Results carry names, counts, states and local fingerprints only.
Does it read my environment variable values?
Never. Environment variable NAMES are inventoried so you can review intended exposure; values are not read into results, displayed, retained or transmitted. The posture fingerprint is deliberately invariant to secret rotation.
I already paid. How do I turn Pro on?
Use the activation page and paste the licence from your order confirmation. The bundle licence activates both extensions. Activation is verified locally with asymmetric cryptography and the token is never displayed or transmitted.
Can I cancel?
Yes, at any time, from your account. Checkout and billing are handled by Shopify; this site runs no checkout of its own.
Developer Trust is a software subscription for your editor. It does not create an ECZ-ID, a Passport, a binding or any public proof. For identity, see the quickstarts.