ECZ-ID MCP Trust Pro

Security and trust controls for Model Context Protocol workflows

ECZ-ID MCP Trust Pro helps developers, AppSec teams, platform engineers and security reviewers inspect Model Context Protocol servers, tools and trust surfaces before higher-reliance use.

It extends the free ECZ-ID MCP Trust Community capability with deeper inspection, local policy, supported trust controls, change history and advanced MCP security review.

Community remains free. Pro unlocks the additional MCP Trust capabilities while a valid Pro entitlement is active.

Understand the MCP surface before you rely on it

MCP can connect AI systems to files, APIs, databases, infrastructure, developer tools and other consequential systems.

ECZ-ID MCP Trust Pro helps make those connections easier to understand and review by bringing together:

• MCP server and configuration discovery,
• MCP tool inventory,
• Tool X-Ray inspection,
• higher-risk capability indicators,
• local trust policy,
• trust-state change detection,
• environment exposure review,
• Resolver-aware public proof review,
• remediation and history,

MCP Trust Pro capabilities

Advanced Tool X-Ray
Inspect discovered MCP tools and schemas in greater depth and surface characteristics that deserve closer security review.

Local Trust Gate
Apply local trust policy to supported MCP interactions. Where live mediation is supported, ECZ-ID can provide an explicit local trust decision point rather than relying only on passive observation.

Trust Epochs
Maintain meaningful snapshots of MCP trust state so material changes can be reviewed against an earlier known state.

Drift and rug-pull detection
Surface significant configuration, schema or capability changes after a previously reviewed MCP surface changes.

Secret Shield
Review credential-shaped environment-key exposure and help minimise unnecessary secret availability without exposing secret values during normal local inspection.

Custom local policy
Define local rules that reflect your organisation, project and risk posture.

Remediation and history
Retain useful local context around findings, changes and remediation so repeat reviews do not begin from zero.

Resolver-aware review
Detect ECZ-ID Resolver references and route reviewers to public, read-only proof where available.

Absence of public Resolver proof is a neutral finding. It does not by itself mean an MCP server is unsafe.

Local-first by design

ECZ-ID MCP Trust is designed around local-first inspection.

For normal local analysis:

• source code does not need to be uploaded,
• prompts do not need to be uploaded,
• tool arguments and results do not need to be uploaded,
• secret values do not need to be uploaded,
• local policy remains under customer control,

Public ECZ-ID evidence, where available, is checked separately through the ECZ-ID Resolver.

Community vs Pro

MCP Trust Community — Free

Use Community for fast local MCP discovery and baseline review, including:

• MCP configuration discovery,
• server and tool inventory,
• Tool X-Ray baseline inspection,
• environment key-name warnings,
• schema and fingerprint inspection,
• baseline and change detection,
• Resolver and well-known posture review,

MCP Trust Pro — £12.99/month or £119/year

Choose Pro for deeper MCP security and trust controls, including:

• Advanced Tool X-Ray,
• Local Trust Gate,
• Trust Epochs,
• deeper drift and rug-pull review,
• Secret Shield,
• custom local policy,
• richer remediation and history,

Annual billing saves £36.88 — approximately 24% compared with twelve monthly payments.

Built for

• MCP developers,
• AppSec teams,
• product-security teams,
• platform engineers,
• AI infrastructure teams,
• enterprise architects,
• security reviewers,
• organisations evaluating third-party MCP integrations,

How Pro access works

1. Choose monthly or annual billing.
2. Complete the ECZ-ID Pro activation flow.
3. Use ECZ-ID MCP Trust.
4. A valid Pro entitlement unlocks the available Pro capabilities.
5. If the Pro entitlement is no longer active, the available Community capability remains.

Important trust boundary

ECZ-ID MCP Trust Pro is developer security and trust-review software.

It does not certify an MCP server as safe, approved, compliant or suitable for every environment.

It does not replace secure architecture, code review, authentication, authorisation, sandboxing or your organisation's own security policy.

Evidence informs the decision. Local policy decides whether reliance is appropriate. Re-check when the MCP surface changes.

Product specifications

Product: ECZ-ID MCP Trust Pro
Product family: ECZ-ID Developer Trust
Product class: Developer security software
Primary technology: Model Context Protocol (MCP)
Primary environment: Visual Studio Code / supported compatible distribution environments
Delivery: Digital software subscription
Plan: Pro
Billing: Monthly or annual recurring subscription
Monthly price: £12.99 GBP
Annual price: £119 GBP
Community capability: Available separately at no charge
Physical shipment: None
Public proof surface: ECZ-ID Resolver
Vendor: ECZ-ID
Publisher: EcoCitizenz Ltd

Frequently asked questions

Is MCP Trust Pro a separate extension from MCP Trust Community?
No. Community is the free baseline capability. Pro is the paid capability layer for the ECZ-ID MCP Trust product identity.

Does MCP Trust Pro upload my source code?
Normal local inspection is designed not to require source-code upload.

Does a warning mean an MCP server is unsafe?
No. A finding describes observed posture, capability or change. Local policy determines what action is appropriate.

Does MCP Trust Pro certify MCP servers?
No. It is not a safety, approval or compliance certification.

What happens if my Pro subscription ends?
Pro-only capability is removed and the available Community capability remains.