Certificate Trust Manager
Manage TOFU (Trust On First Use) certificates and Ed25519 cryptographic signatures for MCP server identity verification.
When to Use
- User asks about MCP server identity or trust
- User wants to manage certificates
- User asks about cryptographic verification of skills
Usage
jadegate cert list # List all trusted certificates
How TOFU Works
- First encounter with an MCP server creates a certificate fingerprint
- Subsequent connections verify the fingerprint matches
- If fingerprint changes, JadeGate alerts the user (possible MITM)
- Ed25519 signatures verify skill provenance
Trust Model
Similar to SSH known_hosts or browser certificate pinning — trust is established on first use and verified on every subsequent connection.