From 06dae0851c5dc392c48a163d7248acf6a102dd23 Mon Sep 17 00:00:00 2001 From: Imran Siddique Date: Thu, 6 Aug 2026 12:22:37 -0700 Subject: [PATCH] docs: cmcp_verify ships inside cmcp-runtime, not as its own package The cMCP integration tutorial tells readers to run `pip install cmcp-verify`. That 404s. There is no `cmcp-verify` distribution on PyPI. The `cmcp_verify` package is shipped inside `cmcp-runtime`, declared in cmcp's pyproject as `packages = ["src/cmcp_runtime", "src/cmcp_verify"]`, and confirmed present in the published cmcp-runtime 0.3.0 wheel. Only the install command changed. The prose references to `cmcp-verify` as the name of the verification library are left alone, here and in hardware-attestation-platforms.md, since they read correctly as a component name rather than an install target. Co-Authored-By: Claude Opus 5 (1M context) Signed-off-by: Imran Siddique --- docs/tutorials/integrating-with-cmcp.md | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/docs/tutorials/integrating-with-cmcp.md b/docs/tutorials/integrating-with-cmcp.md index cf29f8a..7eca195 100644 --- a/docs/tutorials/integrating-with-cmcp.md +++ b/docs/tutorials/integrating-with-cmcp.md @@ -15,8 +15,9 @@ Understand how TRACE trust records are generated by Confidential MCP (cMCP) and ```bash pip install agentrust-trace -# For full cMCP verification: -pip install cmcp-verify +# For full cMCP verification. cmcp_verify ships inside the cmcp-runtime +# distribution; there is no separate cmcp-verify package on PyPI. +pip install cmcp-runtime ``` ---