Skip to content

Trust Commands

Manage project trust state. Trust is required for plugins and MCP operations. Trust state is stored per-project based on a hash of the project path.


trust status

Show the current project trust status.

superqode trust status [OPTIONS]

Options

Option Description
--json Emit JSON output

Output

Trust Status: trusted

Project: /Users/you/code/my-project
Path Hash: a1b2c3d4
Trusted: Yes
Trust File: ~/.superqode/trust/a1b2c3d4

trust doctor

Show trust-sensitive files in the current project.

superqode trust doctor

Scans the project for files that require trust: plugin manifests, MCP configurations, and other executable/hook files. Lists each file with its trust requirement and current status.


trust yes

Trust the current project.

superqode trust yes

Writes a trust marker to ~/.superqode/trust/<path-hash> enabling plugins and MCP operations in this project.


trust no

Mark the current project as untrusted.

superqode trust no

Removes the trust marker file, disabling plugins and MCP operations in this project.


Trust Model

Trust is a per-project setting determined by the project's absolute path hash. The trust state is stored in ~/.superqode/trust/<path-hash>:

State Description
trusted Plugins and MCP operations are allowed
untrusted Plugins and MCP operations are blocked

Projects are untrusted by default. Use trust yes to enable plugins and MCP operations after reviewing the project. The superqode init command may prompt for trust when creating project scaffolding.