Credential enforcement middleware for MCP servers β verifies scoped tokens on every tool call
Copy the AI prompt to install this server into Claude Code, Cursor, or another agent β or use 1-click editor setup below.
π‘ Paste the JSON block into your client's configuration file under mcpServers, then restart the application.
Attest controls and proves risky AI actions before they hit production systems. It gives agents signed, scope-limited credentials, routes high-risk mutations through policy and optional approval, issues short-lived execution grants, and leaves signed receipts that can be verified later.
This repository also includes a standalone MCP server:
issue_credential, delegate_credential, list_tasks, get_audit_trail, get_evidence, and approval actions.Scopes follow the pattern resource:action. Either field may be * as a wildcard.
| Expression | Meaning |
|---|---|
gmail:send | Send via Gmail only |
gmail:* | All Gmail actions |
*:read | Read access to any resource |
*:* | Full access (root grants only) |
Delegation still enforces that child scope is a strict subset of the parent scope. The Action API builds on top of that delegation substrate to gate risky writes.
Prerequisites: Docker and Docker Compose.
If you want to run the Go server outside Docker, point it at the Compose database:
| Method | Path | Description |
|---|---|---|
POST | /v1/orgs | Create an organization and get an API key |
POST | /v1/credentials | Issue a root credential |
POST | /v1/credentials/delegate | Delegate to a child agent |
GET | /v1/actions | List action requests |
POST | /v1/actions/request | Create an action request and run policy |
GET | /v1/actions/{id} | Fetch an action request |
POST | /v1/actions/{id}/approve | Approve a pending action |
POST | /v1/actions/{id}/deny | Deny a pending action |
POST | /v1/actions/{id}/execute | Record execution and mint a receipt |
GET | /v1/actions/{id}/receipt | Fetch the signed execution receipt |
DELETE | /v1/credentials/{jti} | Revoke credential and all descendants |
GET | /v1/revoked/{jti} | Check revocation status (public, no auth) |
GET | /v1/tasks/{tid}/audit | Retrieve the audit chain for a task |
POST | /v1/audit/report | Report an agent action to the audit log |
POST | /v1/audit/status | Report agent lifecycle event (started/completed/failed) |
POST | /v1/approvals | Request human-in-the-loop approval |
POST | /v1/approvals/{id}/grant | Grant a pending HITL approval |
GET | /orgs/{orgId}/jwks.json | Public key set for offline verification |
GET | /health | Health check |
The credential format is defined in spec/WCS-01.md (Attest Credential Standard, revision 01).
Apache 2.0 β see LICENSE.
No reviews yet β be the first to share how this listing worked for you.
Showcase your server listing on GitHub or your project documentation. Embed this dynamic SVG badge to highlight official listing status and live engagement.
[](https://allmcps.com/mcp/attest-mcp-2)<a href="https://allmcps.com/mcp/attest-mcp-2"><img src="https://allmcps.com/api/badge/attest-mcp-2?style=directory" alt="Attest MCP on AllMCPs" /></a>