crunchtools

MCP Trentina — Development skill for Claude Code

Development community

Secure MCP server for quarantined web content extraction — two-layer defense against prompt injection.

How to install MCP Trentina

This entry records only its repository, not the path inside it, so there is no exact command to give. Open crunchtools/mcp-trentina and copy the folder into ~/.claude/skills/, or the file into ~/.claude/agents/.

What MCP Trentina does

Secure MCP server for quarantined web content extraction — two-layer defense against prompt injection.

Alternatives in Development

13 Bridge IDE — Prompt 13: Bridge Layer (VS Code / JetBrains IDE Integration) 2.3k ★
Content Shipped — Proactively detect and log shipped content when user mentions publishing, launching, or completing work 1k ★
01 Extract Strategy — Strategy Extraction Prompt 584 ★

README

Trentina

Trentina is a secure MCP gateway that inspects everything between your AI agents and the outside world — web content, MCP tool responses and tool definitions, Matrix messages, LLM completions, and monitoring alerts — through a [three-layer defense pipeline](docs/defense-pipeline.md) at every ingress, with per-profile enforcement (flag or block) and a full audit trail. Content is never silently modified: what your agent reads is what actually arrived, plus Trentina's verdict. (E2EE Matrix rooms are ciphertext at the gateway and outside what any proxy can defend.) Named after the 1377 quarantine system from Ragusa, where incoming ships had to anchor offshore for thirty days before anyone was allowed into the city. Same idea: keep the commerce flowing without letting something dangerous through.

Capabilities

[MCP Gateway](docs/gateway.md)

Single chokepoint between your agents and all their MCP backends. One endpoint, one bearer token, one audit log — instead of each agent connecting directly to dozens of MCP servers. Backend tools are namespaced automatically (`slack__slack_search_messages`, `github__list_issues_tool`) so there are no collisions.

[Authentication](docs/authentication.md)

Four ways a client can prove who it is, chosen per profile: a static bearer token, an OAuth identity Trentina issues while proxying login to Google (with dynamic client registration or a provisioned confidential client), or a token minted by an external identity provider that Trentina only verifies — for connectors that will not authenticate against a third-party authorization server.

[Per-Agent Profiles](docs/profiles.md)

Each consumer — Claude Code, Hermes, OpenClaw, or any MCP client — gets its own profile with independent tool access, defense settings, and authentication. Your human-supervised agent can have full tool access while your autonomous agent gets a locked-down subset, all through the same