attestable-mcp-server

attestable-mcp-server

3.4

If you are the rightful owner of attestable-mcp-server and would like to certify it and/or have it hosted online, please leave a comment on the right or send an email to henry@mcphub.com.

The attestable-mcp-server is a remotely attestable Model Context Protocol (MCP) server that uses a trusted execution environment for secure operations.

The attestable-mcp-server is a Model Context Protocol (MCP) server that supports remote attestation by MCP clients. It utilizes a trusted execution environment to generate a certificate that represents the currently-running code. This certificate is sent during the TLS handshake to prove the code's integrity. The server uses RA-TLS, an extension to TLS, to add machine and code-specific measurements that can be verified by an MCP client. The RA-TLS certificate embeds an SGX quote in the X.509 extension field, which includes the SGX report and the Intel SGX certificate chain. The certificate also contains evidence claims, such as the 'pubkey-hash' claim, which includes the hash of the ephemeral public key generated by the TEE of the running MCP server.

Features

  • MCP Clients can remotely attest the code running on any MCP Server
  • MCP Servers can optionally remotely attest MCP Clients
  • Produces signed artifacts using a trusted execution environment
  • Supports independent validation of code integrity
  • Utilizes RA-TLS for secure communication