Attestation Verify MCP

Verify HMAC-signed compliance attestations from any MEOK MCP server — checks cryptographic signatures, validates timestamps, and produces verifiable trust chains for AI compliance audits.

GitHub

meok-attestation-verify

Tiny zero-dependency verifier for MEOK AI Labs compliance attestations.

Pipe a cert on stdin — get VALID or INVALID back. Nothing installed, nothing to configure.

Install

pip install meok-attestation-verify

Verify a cert

# Via stdin
cat cert.json | meok-attestation-verify

# Via file
meok-attestation-verify cert.json

# Via cert ID only (opens the public verify page)
meok-attestation-verify MEOK-DORA-C8992DC765D8

Exit code 0 = valid, 1 = invalid/expired, 2 = malformed input, 3 = network error.

Why does this exist?

MEOK AI Labs issues HMAC-signed attestations for EU compliance frameworks (DORA, NIS2, CRA, EU AI Act, CSRD, AI-BOM, geospatial data provenance). Each cert carries:

  • cert_id — unique identifier
  • payload — canonical signed JSON
  • signature_sha256_hmac — cryptographic binding
  • verify_url — public verify page

Auditors, boards, and procurement teams can verify a cert without contacting MEOK by POSTing the cert to the public verify endpoint at https://meok-attestation-api.vercel.app/verify.

This CLI wraps that verify flow for humans and CI pipelines.

Get a signed attestation

Signed attestations are issued by these MCP servers (Pro tier, £199/mo):

Subscribe: https://buy.stripe.com/14A4gB3K4eUWgYR56o8k836

Full Compliance Platform

councilof.ai — the complete EU regulatory compliance platform. EU AI Act, DORA, NIS2, CRA, CSRD from £29/mo.

→ Get started at councilof.ai

If this tool helps your compliance workflow, please star this repo — it helps other teams find it.

License

MIT — MEOK AI Labs, 2026.

Máy chủ liên quan

NotebookLM Web Importer

Nhập trang web và video YouTube vào NotebookLM chỉ với một cú nhấp. Được tin dùng bởi hơn 200.000 người dùng.

Cài đặt tiện ích Chrome