Attestation Verify MCP

Verify HMAC-signed compliance attestations from any MEOK MCP server — checks cryptographic signatures, validates timestamps, and produces verifiable trust chains for AI compliance audits.

GitHub

meok-attestation-verify

Tiny zero-dependency verifier for MEOK AI Labs compliance attestations.

Pipe a cert on stdin — get VALID or INVALID back. Nothing installed, nothing to configure.

Install

pip install meok-attestation-verify

Verify a cert

# Via stdin
cat cert.json | meok-attestation-verify

# Via file
meok-attestation-verify cert.json

# Via cert ID only (opens the public verify page)
meok-attestation-verify MEOK-DORA-C8992DC765D8

Exit code 0 = valid, 1 = invalid/expired, 2 = malformed input, 3 = network error.

Why does this exist?

MEOK AI Labs issues HMAC-signed attestations for EU compliance frameworks (DORA, NIS2, CRA, EU AI Act, CSRD, AI-BOM, geospatial data provenance). Each cert carries:

  • cert_id — unique identifier
  • payload — canonical signed JSON
  • signature_sha256_hmac — cryptographic binding
  • verify_url — public verify page

Auditors, boards, and procurement teams can verify a cert without contacting MEOK by POSTing the cert to the public verify endpoint at https://meok-attestation-api.vercel.app/verify.

This CLI wraps that verify flow for humans and CI pipelines.

Get a signed attestation

Signed attestations are issued by these MCP servers (Pro tier, £199/mo):

Subscribe: https://buy.stripe.com/14A4gB3K4eUWgYR56o8k836

Full Compliance Platform

councilof.ai — the complete EU regulatory compliance platform. EU AI Act, DORA, NIS2, CRA, CSRD from £29/mo.

→ Get started at councilof.ai

If this tool helps your compliance workflow, please star this repo — it helps other teams find it.

License

MIT — MEOK AI Labs, 2026.

Related Servers

NotebookLM Web Importer

Import web pages and YouTube videos to NotebookLM with one click. Trusted by 200,000+ users.

Install Chrome Extension