Server Attestation MCP Server

@studiomeyer-io

リポジトリホームページ

基本情報

ライセンス

MIT

作者

studiomeyer-io

投稿者

Matthias Meyer - StudioMeyer

Server Attestation MCP Server について

Layer-2 supply-chain hardening for MCP servers — Ed25519-signed tool manifests, runtime spawn-attestation, default-deny argument sanitizer. Defends against marketplace-poisoning + CVE-2025-69256 + CVE-2025-61591.

Server Attestation MCP Server の設定

以下の設定を使って、このサーバーを MCP 対応クライアントに追加してください。

{
  "mcpServers": {
    "mcp-server-attestation": {
      "command": "npx",
      "args": [
        "mcp-attest-demo"
      ]
    }
  }
}

Server Attestation MCP Server のツール

ツール一覧はまだありません

この掲載には表示できるツール一覧がまだありません。サーバーにツールがないという意味ではありません。対応機能はプロジェクトのドキュメントをご確認ください。

上のボタンで一時的なサンドボックスでこのサーバーを実行し、ツール一覧を取得できます。

概要

What is Server Attestation?

How to use Server Attestation?

The README includes setup instructions such as npx mcp-attest-demo.

Key features of Server Attestation

CVE-2025-69256 — Serverless Framework MCP RCE via child_process.exec() command injection
CVE-2025-61591 — Cursor MCP RCE through OAuth-installed malicious server with spawn hijack
Canonical JSON is the signed surface. Re-serialisation cannot change the signed bytes
Sandbox or containerise the server process
OAuth flow hardening (separate mcp-oauth-shield build)

Use cases of Server Attestation

Connect an MCP-compatible client to this repository's service.
Review the README-backed setup before enabling it in production.

よくある質問

Where is the source code for Server Attestation?

The source code is linked from the repository URL on this page.

Does Server Attestation include a standard MCP config?

If the README contains a parseable MCP configuration block, it is shown in the Config tab.

マーケットプレイスの他のコンテンツ

Full Self Browsing

Lakshman Turlapati

DOM-first AI browser automation for Chrome and MCP clients.

194

Meticulous

Gemini MCP

houtini-ai

Google Gemini MCP - Use Google's visual, video and chat capabilities in your AI Assistant. Uses MCP Apps to preview created images, landing pages, SVGs and video

OpenZiti / LLM-Gateway

openziti

NetFoundry LLM Gateway is an OpenAI-compatible API proxy that routes requests across multiple LLM providers using zero-trust networking. Zero trust LLM gateway. OpenAI-compatible proxy with semantic routing and load bala

LocalCan

Gives AI agents public URLs (tunnels) for localhost, live HTTP traffic inspection, snapshot publishing, and access control. Part of LocalCan, the ngrok alternative for Mac, Windows and Linux. Free plan.