Server Attestation MCP Server

@studiomeyer-io

代码仓库主页

基本信息

许可证

MIT

作者

studiomeyer-io

提交者

Matthias Meyer - StudioMeyer

关于 Server Attestation MCP Server

Layer-2 supply-chain hardening for MCP servers — Ed25519-signed tool manifests, runtime spawn-attestation, default-deny argument sanitizer. Defends against marketplace-poisoning + CVE-2025-69256 + CVE-2025-61591.

Server Attestation MCP Server 配置

使用下面的配置,将此服务器添加到你的 MCP 客户端。

{
  "mcpServers": {
    "mcp-server-attestation": {
      "command": "npx",
      "args": [
        "mcp-attest-demo"
      ]
    }
  }
}

Server Attestation MCP Server 工具

工具列表暂未提供

当前收录暂时没有可展示的工具列表，不代表服务没有工具。请查阅项目文档了解支持的能力。

点击上方按钮,在临时沙箱中运行此服务器并实时获取工具列表。

概览

What is Server Attestation?

How to use Server Attestation?

The README includes setup instructions such as npx mcp-attest-demo.

Key features of Server Attestation

CVE-2025-69256 — Serverless Framework MCP RCE via child_process.exec() command injection
CVE-2025-61591 — Cursor MCP RCE through OAuth-installed malicious server with spawn hijack
Canonical JSON is the signed surface. Re-serialisation cannot change the signed bytes
Sandbox or containerise the server process
OAuth flow hardening (separate mcp-oauth-shield build)

Use cases of Server Attestation

Connect an MCP-compatible client to this repository's service.
Review the README-backed setup before enabling it in production.

常见问题

Where is the source code for Server Attestation?

The source code is linked from the repository URL on this page.

Does Server Attestation include a standard MCP config?

If the README contains a parseable MCP configuration block, it is shown in the Config tab.

更多 MCP 服务器

datris-platform-oss

datris

The Datris Data Platform - Open Source Version

Official Porkbun MCP Server

Porkbun LLC

Official Porkbun MCP server, maintained by Porkbun. Check domain availability and pricing, register, renew and transfer domains, and manage DNS records, nameservers, URL forwarding, glue records, DNSSEC and domain contac

3gpp-mcp

higebu

An MCP (Model Context Protocol) server that makes 3GPP specifications accessible to LLMs.

x402-list-mcp

mcccsm

MCP server for x402-list.com: discover x402 payment services and on-chain-verified facilitator settlement volumes. Published on npm as x402-list-mcp.

Cronwatch

cronwatchdev

CronWatch records every run of your scheduled jobs in your own database, and speaks up when one is missed, fails, gets stuck, runs slow or costs too much. CronWatch is free and open-source.