attestable-mcp-server MCP Server

What is attestable-mcp-server?

attestable-mcp-server is an MCP (Model Context Protocol) server that can be remotely attested by MCP clients. It uses a trusted execution environment (Intel SGX) and RA-TLS to generate a certificate that proves the server is running the exact code built on GitHub Actions. This enables independent verification of the server’s integrity without trusting the hosting provider.

How to use attestable-mcp-server?

Install dependencies: Intel SGX hardware and SDK, Gramine, Python 3.13, and Ubuntu 22.04. Build the Docker image with docker build -t attestable-mcp-server . and run Gramine commands to produce a signed artifact. Start the server on secure hardware with docker run including SGX device mounts, or on a local machine without SGX. MCP clients connect using standard MCP protocol; the RA-TLS handshake provides attestation automatically.

Key features of attestable-mcp-server

• MCP clients can remotely attest the code running on any MCP server.
• MCP servers can optionally remotely attest MCP clients.
• Uses RA-TLS, an extension to TLS that embeds an SGX quote.
• Embeds SGX quote in X.509 certificate with TCG DICE “tagged evidence” OID.
• Enables independent verification via GitHub Actions or local rebuild.
• Docker image signed by GitHub and built in a TEE.

Use cases of attestable-mcp-server

• Ensuring an MCP server runs unmodified code in a confidential computing environment.
• Verifying server integrity before allowing sensitive data or agentic workflows.
• Auditing code provenance through independently reproducible measurements.
• Building bidirectional trust between MCP clients and servers.