1. Conduid
  2. Agents
  3. Cullis
MCP server · Agents

Cullis

by · github.com/cullis-security/cullis

Zero-trust governance for autonomous AI agents in regulated organizations. Self-hosted gateway with verified identity, policy enforcement, cryptographic audit trail.

Unclaimed ai-agentsapi-gatewaycryptographydpopfastapiiammcpmtlsmulti-agent-systemspkipythonself-hostedspiffeworkload-identityzero-trust
InstallView source
34Low

Scored 21 days ago · breakdown

About Cullis

Cullis is an MCP server published by cullis-security in the Agents category: zero-trust governance for autonomous AI agents in regulated organizations. Self-hosted gateway with verified identity, policy enforcement, cryptographic audit trail.

The repository has 1 stars and 0 forks, with the last commit 4 days ago. Recent commit activity is the strongest signal that reported issues will get attention.

Install

From source
git clone https://github.com/cullis-security/cullis

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about Cullis

Powered by Claude · Grounded in docs

I know everything about Cullis. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

6 checks have not been run yet.

Releases

mastio-v0.7.0Mastio v0.7.0 · 13 Oct 2026[v0.7.0] — Local agent demo, authorization hardening and audit controls — 2026-10-13 Adds an isolated local agent demo to the downloadable bundle, makes authorization checks cumulative, and strengthens production authentication, key…
mastio-v0.6.6Mastio v0.6.6 · 4 Jun 2026[v0.6.6] — Security super-audit + production-shape resilience hardening — 2026-06-05 Two waves of adversarial work on top of v0.6.5. First, an 11-agent red-team super-audit with adversarial verification closed a batch of trust-boundary…
mastio-v0.6.5Mastio v0.6.5 · 2 Jun 2026[v0.6.5] — Production-shape hardening: DPoP-strict default, multi-worker Vault CA fix, DR guards — 2026-06-02 The output of taking the Postgres + HashiCorp Vault production shape through a faithful end-to-end dogfood and disaster-recovery…
mastio-v0.6.4Mastio v0.6.4 · 1 Jun 2026[v0.6.4] — Capability enforcement, opaque-404 fixes, cold-reader doc hardening — 2026-06-01 Minor on top of v0.6.3, accumulating two-plus weeks of polish. The headline is real capability enforcement on the chat and MCP-discovery…
mastio-v0.6.3Mastio v0.6.3 · 28 May 2026[v0.6.3] — Fix mastio_keys mint race + LOCAL_TOKEN auth recovery — 2026-05-28 Same-day patch on top of v0.6.2. Restores `/v1/auth/token` and every downstream surface that depends on it (SDK `list_mcp_tools` / `call_mcp_tool`, Connector…
Questions

About Cullis

How do I install Cullis?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is Cullis safe to use with an AI agent?

Its trust score is 34 out of 100 (low). Conduid hasn't run static security checks on this repository yet, so review the source yourself before granting it credentials. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Cullis still maintained?

Yes — the latest release is mastio-v0.7.0 (13 Oct 2026), and the last commit was 4 days ago. The repository has 1 stars and 1 open issues.