Attestation Verify MCP

Verify HMAC-signed compliance attestations from any MEOK MCP server — checks cryptographic signatures, validates timestamps, and produces verifiable trust chains for AI compliance audits.

GitHub

meok-attestation-verify

Tiny zero-dependency verifier for MEOK AI Labs compliance attestations.

Pipe a cert on stdin — get VALID or INVALID back. Nothing installed, nothing to configure.

Install

pip install meok-attestation-verify

Verify a cert

# Via stdin
cat cert.json | meok-attestation-verify

# Via file
meok-attestation-verify cert.json

# Via cert ID only (opens the public verify page)
meok-attestation-verify MEOK-DORA-C8992DC765D8

Exit code 0 = valid, 1 = invalid/expired, 2 = malformed input, 3 = network error.

Why does this exist?

MEOK AI Labs issues HMAC-signed attestations for EU compliance frameworks (DORA, NIS2, CRA, EU AI Act, CSRD, AI-BOM, geospatial data provenance). Each cert carries:

  • cert_id — unique identifier
  • payload — canonical signed JSON
  • signature_sha256_hmac — cryptographic binding
  • verify_url — public verify page

Auditors, boards, and procurement teams can verify a cert without contacting MEOK by POSTing the cert to the public verify endpoint at https://meok-attestation-api.vercel.app/verify.

This CLI wraps that verify flow for humans and CI pipelines.

Get a signed attestation

Signed attestations are issued by these MCP servers (Pro tier, £199/mo):

Subscribe: https://buy.stripe.com/14A4gB3K4eUWgYR56o8k836

Full Compliance Platform

councilof.ai — the complete EU regulatory compliance platform. EU AI Act, DORA, NIS2, CRA, CSRD from £29/mo.

→ Get started at councilof.ai

If this tool helps your compliance workflow, please star this repo — it helps other teams find it.

License

MIT — MEOK AI Labs, 2026.

Serveurs connexes

NotebookLM Web Importer

Importez des pages web et des vidéos YouTube dans NotebookLM en un clic. Utilisé par plus de 200 000 utilisateurs.

Installer l'extension Chrome