Skip to main content
AllMCPs
BrowseBestCategoriesStackCompareToolsGuidesBlog Log in Submit MCP

Stay in the loop

Get new MCP servers and top picks in your inbox.

AllMCPs

The open directory for discovering and installing Model Context Protocol servers.

Explore

  • Browse servers
  • Best MCP servers
  • Categories
  • MCP clients
  • Agent prompts
  • Stack Builder
  • Compare servers
  • Tags index
  • Submit a server
  • Pricing

Learn

  • Guides hub
  • What is MCP?
  • Install guide
  • Troubleshooting
  • Security
  • Blog
  • Blog RSS

Tools

  • All tools
  • Config generator
  • Config validator
  • MCP playground
  • OpenAPI β†’ MCP
  • Badge generator

For agents

  • API docs
  • Trust & traffic
  • llms.txt β†— (opens in a new tab)
  • Catalog JSON β†— (opens in a new tab)
  • Remote MCP β†— (opens in a new tab)

Company

  • About
  • Contact
  • X (@AllMCPs) β†— (opens in a new tab)
  • GitHub β†— (opens in a new tab)
  • Terms
  • Privacy
AllMCPs VerifiedAllMCPs VerifiedFeatured on Nick LaunchesFeatured on Nick LaunchesLaunch Llama NewsletterLaunch Llama NewsletterVerified DR - allmcps.comVerified DR - allmcps.comFeatured on SaaSGrowFeatured on SaaSGrowFeatured on Twelve ToolsFeatured on Twelve ToolsFeatured on Saaspa.geFeatured on Saaspa.geFeatured on Findly.toolsFeatured on Findly.toolsFeatured on Startup FameFeatured on Startup FameFeatured on LaunchKiwiFeatured on LaunchKiwiFeatured on ScrollLaunchFeatured on ScrollLaunchFeatured on DailyPingsFeatured on DailyPingsFazier badgeFazier badgeFeatured on NewTool.siteFeatured on NewTool.siteFeatured on saasfame.comFeatured on saasfame.comDR Checker - Domain RatingDR Checker - Domain RatingListed on Turbo0Listed on Turbo0Launched on LaunchBoard - Product Launch PlatformLaunched on LaunchBoard - Product Launch PlatformList on SimilarlabsList on Similarlabshttps://codetrendy.comhttps://codetrendy.comListed on DevTool.ioFeatured on BuildlistFeatured on BuildlistAllMCPs VerifiedAllMCPs VerifiedFeatured on Nick LaunchesFeatured on Nick LaunchesLaunch Llama NewsletterLaunch Llama NewsletterVerified DR - allmcps.comVerified DR - allmcps.comFeatured on SaaSGrowFeatured on SaaSGrowFeatured on Twelve ToolsFeatured on Twelve ToolsFeatured on Saaspa.geFeatured on Saaspa.geFeatured on Findly.toolsFeatured on Findly.toolsFeatured on Startup FameFeatured on Startup FameFeatured on LaunchKiwiFeatured on LaunchKiwiFeatured on ScrollLaunchFeatured on ScrollLaunchFeatured on DailyPingsFeatured on DailyPingsFazier badgeFazier badgeFeatured on NewTool.siteFeatured on NewTool.siteFeatured on saasfame.comFeatured on saasfame.comDR Checker - Domain RatingDR Checker - Domain RatingListed on Turbo0Listed on Turbo0Launched on LaunchBoard - Product Launch PlatformLaunched on LaunchBoard - Product Launch PlatformList on SimilarlabsList on Similarlabshttps://codetrendy.comhttps://codetrendy.comListed on DevTool.ioFeatured on BuildlistFeatured on Buildlist
Β© 2026 Jackalope Digital LLC. All rights reserved.
  1. Home
  2. πŸ”’ Security
  3. Attestix
A
Health: Not checked yetWe have not completed a health check for this listing yet.Last checked 8/11/2026, 12:19:18 AM

Attestix

Enrichment pendingWe haven’t run our AI enrichment pass on this listing yet, so the overview, use cases, and FAQ below may be sparse or missing. We work through the catalog over time β€” check back soon.
View Repository

AI agent identity, W3C credentials, EU AI Act compliance. 47 MCP tools.

Quick Install

Automated & IDE Setup

Copy the AI prompt to install this server into Claude Code, Cursor, or another agent β€” or use 1-click editor setup below.

Add to CursorAdd to VS Code
Manual Client & Custom JSON ConfigExpand JSON β–Ύ

Install Config Generator

Choose your client
claude_desktop_config.json
{
  "mcpServers": {
    "attestix": {
      "command": "npx",
      "args": [
        "-y",
        "attestix"
      ]
    }
  }
}

πŸ’‘ Paste into ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows)

Install Directory Badge Claim listing AlternativesπŸ”’ More in Security

Documentation Overview

Attestix

Attestix

Compliance Automation for AI Agents

CI Lint Security Coverage PyPI Python Downloads License Docs Website

Make your AI agents EU AI Act compliant with cryptographically verifiable proof.
Open-source identity, credentials, compliance automation, and trust scoring.
47 MCP tools across 9 modules, 44 REST API endpoints, 531-test suite (440 functional + 91 RFC / W3C conformance benchmarks).
Real integrations with LangChain, OpenAI Agents SDK, and CrewAI.

Status: v0.4.0 stable (pre-release 0.4.1rc1 available via the --pre channel). Single-maintainer project, community contributions welcome. No independent third-party security audit has been performed yet; deploy with the same diligence you would apply to any pre-1.0 open-source crypto stack.


Install

bash
# Stable 0.4.0:
pip install attestix

# Pre-release 0.4.1rc1 (opt in with --pre):
pip install --pre attestix

Stable 0.4.0 ships only the canonical attestix.* namespace. The older flat layout (from services... import, from auth... import, ...) keeps working via thin deprecation shims that emit a DeprecationWarning on first import and are scheduled for removal in v0.5.0. Update imports to from attestix.services... import at your earliest convenience.

CLI

bash
attestix status                          # System overview
attestix init --name MyBot               # Create agent identity
attestix compliance <agent-id>           # Check EU AI Act compliance
attestix verify <agent-id>               # Verify identity cryptographically
attestix audit <agent-id>                # View hash-chained audit trail
attestix credential --list               # List W3C Verifiable Credentials

REST API

Terminal
pip install fastapi uvicorn
uvicorn attestix.api.main:app --reload   # Swagger docs at http://localhost:8000/docs

Web Dashboard

Terminal
pip install streamlit
streamlit run demo/webapp/app.py         # Opens at http://localhost:8501

Quick Demo

bash
python examples/quickstart.py            # Full 9-module workflow in 0.1 seconds

Verify in any language

Attestix credentials are issued once (Python core or cloud) and verify anywhere. Six independent verifier implementations share one conformance suite (spec/verify/v1): verify offline, no Python runtime, zero trust in the issuer. The verifiers are verifier-only: issuance stays in the Python core.

LanguageInstallStatus
Pythonpip install attestixlive (full lib: issue + verify)
JS / TSnpm install attestixlive (attestix-js)
Gogo get github.com/VibeTensor/attestix-golive (attestix-go)
Rustcargo add attestixlive (attestix-rs)
Javacom.vibetensor:attestix:0.4.0publishing soon (attestix-java)
Rinstall.packages("attestix")coming to CRAN (attestix-r)

Every verifier checks the same canonical-JSON form (RFC 8785) and Ed25519 signatures (RFC 8032) against the shared spec/verify/v1 vectors. Verify in the browser at https://attestix.io/verify, or read the bundle wire-format at https://attestix.io/spec/bundle/v1.

Why Attestix

On August 2, 2026, the EU AI Act enforcement begins. Fines reach EUR 35M or 7% of global revenue.

Existing compliance tools (Credo AI, Holistic AI, Vanta) are organizational dashboards. None produce machine-readable, cryptographically verifiable proof that an AI agent can present to another agent, regulator, or system.

Agent identity is fragmenting across walled gardens (Microsoft Entra, AWS AgentCore, Google A2A, ERC-8004). No single tool combines agent identity + EU AI Act compliance + verifiable credentials in one protocol.

Attestix fills this gap.


Modules

ModuleToolsWhat it does
Identity8Unified Agent Identity Tokens (UAITs) bridging MCP OAuth, A2A, DIDs, and API keys. GDPR Article 17 erasure
Agent Cards3Parse, generate, and discover A2A-compatible agent cards
DID3Create and resolve W3C Decentralized Identifiers (did:key, did:web)
Delegation4UCAN-style capability delegation with EdDSA-signed JWT tokens
Reputation3Recency-weighted trust scoring (0.0 - 1.0) with category breakdown
Compliance7EU AI Act risk profiles, conformity assessments (Article 43), Annex V declarations
Credentials8W3C Verifiable Credentials with Ed25519Signature2020 proofs, presentations
Provenance5Training data provenance (Article 10), model lineage (Article 11), hash-chained audit trail (Article 12)
Blockchain6Anchor artifact hashes to Base L2 via Ethereum Attestation Service, Merkle batching

Quick Start

As an MCP Server (Claude Code)

Add to your Claude Code config (~/.claude.json):

config.json
{
  "mcpServers": {
    "attestix": {
      "type": "stdio",
      "command": "python",
      "args": ["-m", "attestix.main"]
    }
  }
}

Then ask Claude:

"Create an identity for my data analysis agent with capabilities: data_analysis, reporting"

As a Python Library

server.ts
from attestix.services.identity_service import IdentityService
from attestix.services.compliance_service import ComplianceService
from attestix.services.credential_service import CredentialService

identity_svc = IdentityService()
compliance_svc = ComplianceService()
credential_svc = CredentialService()

# 1. Create an agent identity
agent = identity_svc.create_identity(
    display_name="MyAgent",
    source_protocol="manual",
    capabilities=["data_analysis", "reporting"],
    description="Analyzes quarterly financial data",
    issuer_name="VibeTensor",
    expiry_days=365,
)
agent_id = agent["agent_id"]      # attestix:f9bdb7a94ccb40f1
agent_did = agent["issuer"]["did"]  # did:key:z6Mk...

# 2. Create a compliance profile
profile = compliance_svc.create_compliance_profile(
    agent_id=agent_id,
    risk_category="limited",
    provider_name="VibeTensor",
    intended_purpose="Analyzes quarterly financial data",
)

# 3. Issue a verifiable credential
credential = credential_svc.issue_credential(
    subject_id=agent_id,
    credential_type="AgentIdentityCredential",
    issuer_name="VibeTensor",
    claims={"capabilities": ["data_analysis", "reporting"]},
    expiry_days=365,
)
print(credential["proof"]["type"])  # Ed25519Signature2020

For a complete end-to-end walkthrough covering all 9 modules, run the quickstart:

bash
python examples/quickstart.py

From Source

bash
git clone https://github.com/VibeTensor/attestix.git
cd attestix
pip install -r requirements.txt
python -m attestix.main

EU AI Act Compliance Workflow

Take a high-risk AI agent from zero to fully compliant:

Code
1. create_agent_identity        --> UAIT with DID (Ed25519 signed)
2. record_training_data         --> Article 10 data governance
3. record_model_lineage         --> Article 11 technical documentation
4. create_compliance_profile    --> Risk categorization + obligations
5. record_conformity_assessment --> Article 43 third-party assessment
6. generate_declaration_of_conformity --> Annex V declaration + W3C VC
7. create_verifiable_presentation     --> Signed VP for regulator

High-risk systems are blocked from self-assessment:

Code
record_conformity_assessment(assessment_type="self", ...)
--> ERROR: "High-risk AI systems require third_party conformity assessment"

Full walkthrough: EU AI Act Compliance Guide


How It Works

Every artifact Attestix produces is cryptographically signed with Ed25519:

ArtifactStandardSigned
Agent Identity (UAIT)Custom + DIDEd25519
Verifiable CredentialW3C VC Data Model 1.1Ed25519Signature2020
Verifiable PresentationW3C VPEd25519Signature2020
Delegation TokenUCAN-style JWTEdDSA
Compliance RecordsEU AI Act Annex VEd25519
Audit TrailHash-chained logSHA-256 chain
Blockchain AnchorEAS on Base L2On-chain

No cloud dependency. All core operations work offline with local JSON storage.


Architecture

Code
attestix/                  # Canonical Python package (v0.4.0)
  main.py                  # MCP server entry point (47 tools)
  cli.py                   # `attestix` console script
  config.py                # Environment-based configuration
  errors.py                # Error handling with JSON logging
  api/                     # FastAPI REST surface
    main.py                # uvicorn entry: `attestix.api.main:app`
    routers/               # one router per service (44 endpoints)
  auth/
    crypto.py              # Ed25519 key management
    ssrf.py                # SSRF protection for outbound HTTP
  services/
    identity_service.py    # UAIT lifecycle, GDPR erasure
    agent_card_service.py  # A2A agent card operations
    did_service.py         # DID creation and resolution
    delegation_service.py  # UCAN delegation tokens
    reputation_service.py  # Trust scoring
    compliance_service.py  # EU AI Act profiles and assessments
    credential_service.py  # W3C VCs and VPs
    provenance_service.py  # Training data, lineage, audit trail
    blockchain_service.py  # Base L2 anchoring via EAS
  storage/                 # Repository seam (file / memory / pg)
  signing/                 # Signer seam (in-process / kms)
  audit/                   # Tamper-evident event chain
  tenancy/                 # Tenant context
  idempotency/             # Stripe-style idempotency keys + middleware
  blockchain/
    merkle.py              # Merkle tree for batch anchoring
  tools/                   # MCP tool definitions (one file per module)

The pre-v0.4.0 flat layout (services/, auth/, storage/, ...) is preserved as deprecation shims at the same paths. They re-export from the canonical attestix.* namespace and emit a DeprecationWarning on first import. The shims are scheduled for removal in v0.5.0.


All 47 Tools

Identity (8 tools)
ToolDescription
create_agent_identityCreate a UAIT from any identity source
resolve_identityAuto-detect token type and register
verify_identityCheck existence, revocation, expiry, signature
translate_identityConvert to A2A, DID Document, OAuth, or summary
list_identitiesList UAITs with protocol/revocation filters
get_identityGet full UAIT details
revoke_identityMark a UAIT as revoked
purge_agent_dataGDPR Article 17 right to erasure across all stores
Agent Cards (3 tools)
ToolDescription
parse_agent_cardParse an A2A Agent Card JSON
generate_agent_cardGenerate agent.json for hosting
discover_agentFetch /.well-known/agent.json from a URL
DID (3 tools)
ToolDescription
create_did_keyGenerate ephemeral did:key with Ed25519 keypair
create_did_webGenerate did:web DID Document for self-hosting
resolve_didResolve any DID to its DID Document
Delegation (4 tools)
ToolDescription
create_delegationUCAN-style capability delegation token
verify_delegationVerify JWT signature, expiry, structure
list_delegationsList delegations by agent and role
revoke_delegationRevoke a delegation token
Reputation (3 tools)
ToolDescription
record_interactionRecord outcome and update trust score
get_reputationGet score with category breakdown
query_reputationSearch agents by reputation criteria
Compliance (7 tools)
ToolDescription
create_compliance_profileCreate EU AI Act profile with risk categorization
get_compliance_profileRetrieve full compliance profile
update_compliance_profileUpdate an existing compliance profile
get_compliance_statusGap analysis: completed vs missing requirements
record_conformity_assessmentRecord self or third-party assessment (Article 43)
generate_declaration_of_conformityGenerate Annex V declaration + auto-issue VC
list_compliance_profilesFilter by risk category and compliance status
Credentials (8 tools)
ToolDescription
issue_credentialIssue W3C VC with Ed25519Signature2020 proof
verify_credentialCheck signature, expiry, revocation
verify_credential_externalVerify any VC JSON from an external source
revoke_credentialRevoke a Verifiable Credential
get_credentialGet full VC details
list_credentialsFilter by agent, type, validity
create_verifiable_presentationBundle VCs into a signed VP for a verifier
verify_presentationVerify a VP with embedded credentials
Provenance (5 tools)
ToolDescription
record_training_dataRecord training data source (Article 10)
record_model_lineageRecord model chain and metrics (Article 11)
log_actionLog agent action with hash-chained audit trail (Article 12)
get_provenanceGet full provenance record
get_audit_trailQuery audit log with filters
Blockchain (6 tools)
ToolDescription
anchor_identityAnchor identity hash to Base L2 via EAS
anchor_credentialAnchor credential hash to Base L2 via EAS
anchor_audit_batchMerkle batch anchor of audit log entries
verify_anchorVerify an on-chain anchor against local data
get_anchor_statusGet anchoring status for an artifact
estimate_anchor_costEstimate gas cost for anchoring

Standards Conformance

Every standards claim is validated by 91 automated conformance benchmarks that run alongside the rest of the suite for a total of 531 tests passing (1 skipped on Windows). These benchmarks demonstrate cryptographic conformance with the listed standards; they are not a substitute for a legal compliance audit. Run them yourself:

Terminal
docker build -f Dockerfile.test -t attestix-bench . && docker run --rm attestix-bench
StandardWhat is testedTests
RFC 8032 (Ed25519)4 IETF canonical vectors: key derivation, signature generation (exact match), verification, tamper rejection18
W3C VC Data Model 1.1Credential structure, Ed25519Signature2020 proof, mutable field exclusion, VP structure, replay protection25
W3C DID Core 1.0did:key and did:web document structure, roundtrip resolution, Ed25519VerificationKey202018
UCAN v0.9.0JWT header (alg/typ/ucv), all payload fields, capability attenuation, expiry enforcement, revocation18
MCP Protocol47 tools registered, 9 modules, async convention, snake_case naming5
PerformanceEd25519 key gen, JSON canonicalization, sign/verify, identity creation, credential ops7

Performance (median latency, 1000 runs)

OperationLatency
Ed25519 key generation0.08 ms
JSON canonicalization0.02 ms
Ed25519 sign + verify0.28 ms
Identity creation~14 ms
Credential issuance~17 ms
Credential verification~2 ms
UCAN token creation~9 ms

Security

  • Ed25519 signatures on all UAITs, VCs, assessments, declarations, and audit entries
  • Hash-chained audit trail with SHA-256 for tamper-evident logging
  • SSRF protection blocks private IPs, metadata endpoints, and DNS rebinding
  • Encrypted key storage with AES-256-GCM when ATTESTIX_KEY_PASSWORD is set
  • Private keys never exposed in tool responses
  • No external API calls required for core operations

Research Paper

Attestix is described in a research paper covering system architecture, cryptographic pipeline, EU AI Act compliance automation, and evaluation with 531 automated tests (440 functional + 91 RFC / W3C conformance benchmarks).

Attestix: A Unified Attestation Infrastructure for Autonomous AI Agents Pavan Kumar Dubasi, VibeTensor Private Limited, 2026.

Citing Attestix

If you use Attestix in your research, please cite:

bibtex
@article{dubasi2026attestix,
  title     = {Attestix: A Unified Attestation Infrastructure for Autonomous AI Agents},
  author    = {Dubasi, Pavan Kumar},
  year      = {2026},
  url       = {https://github.com/VibeTensor/attestix},
  note      = {Open-source. Apache License 2.0}
}

Documentation

Full documentation at attestix.io/docs

GuideDescription
Getting StartedInstallation and first identity in 5 minutes
EU AI Act ComplianceStep-by-step compliance workflow
Risk ClassificationHow to determine your AI system's risk category
ArchitectureSystem design and data flows
API ReferenceAll 47 tools with parameter tables
Integration GuideLangChain, OpenAI Agents SDK, CrewAI, MCP client
ConfigurationEnvironment variables, storage, Docker
Research PaperPaper, citation formats, evaluation highlights
Reputation ScoringRecency-weighted trust scoring and categories
ExamplesEnd-to-end code examples for common workflows

Disclaimer

Attestix generates machine-readable, cryptographically signed compliance documentation. It is a documentation and evidence tooling system. It does not replace legal counsel, notified body assessments, or official regulatory submissions. Always consult qualified legal professionals for compliance decisions.


Sponsors

Attestix is free and open-source. If you or your organization benefit from it, please consider sponsoring to support continued development, security audits, and infrastructure.

GitHub Sponsors


Contributing

See CONTRIBUTING.md for development setup and guidelines.

License

Apache License 2.0. See LICENSE.


Attestix

Built by VibeTensor

Related MCP Servers

View all in Security View all alternatives
  • W
    Watermarking Authenticity Mcp

    EU AI Act Article 50 watermarking + C2PA 2.1 compliance. NEW: 2 December 2026 deadline (compress...

    πŸ”’ Security0 views
    Compare vs Watermarking Authenticity Mcp β†’
  • Shield logoShield

    Local guardrail proxy for AI coding agents. Wraps any MCP server (stdio or Streamable HTTP) and blocks destructive tool calls β€” DROP TABLE, rm -rf, force-push β€” before they execute. MCP supply-chain protection: TOFU tool-catalog pinning against rug pulls, plus tool-description and tool-result scanning for tool poisoning and prompt injection. 51 starter rules, approval gates, audit logging. Single binary, Apache-2.0.

    πŸ”’ Security3 views
    Compare vs Shield β†’
  • Emilia Protocol logoEmilia Protocol

    Human sign-off + trust receipts for AI agents: requires a named human's approval before an irreversible action (payment release, record change, deploy), then mints an offline-verifiable Ed25519 Trust Receipt. Also exposes trust profiles, receipt verification, disputes, and delegation. Apache-2.0; policy engine formally verified. Install: npx -y @emilia-protocol/mcp-server.

    πŸ”’ Security1 views
    Compare vs Emilia Protocol β†’
  • Mcp Maigret logoMcp Maigret

    MCP server for maigret, a powerful OSINT tool that collects user account information from various public sources. This server provides tools for searching usernames across social networks and analyzing URLs.

    πŸ”’ Security3 views
    Compare vs Mcp Maigret β†’

Frequently Asked Questions about Attestix

Add the following block to your claude_desktop_config.json under mcpServers: "mcpServers": { "attestix": { "command": "npx", "args": ["-y", "Attestix"] } }

AllMCPs Directory Badge

Full Badge Customizer

Showcase your server listing on GitHub or your project documentation. Embed this dynamic SVG badge to highlight official listing status and live engagement.

Badge Style:
Live Dynamic SVG PreviewAttestix AllMCPs Directory Badge
Markdown (GitHub README)
[![AllMCPs](https://allmcps.com/api/badge/attestix?style=directory)](https://allmcps.com/mcp/attestix)
HTML Embed
<a href="https://allmcps.com/mcp/attestix"><img src="https://allmcps.com/api/badge/attestix?style=directory" alt="Attestix on AllMCPs" /></a>

Technical Specs & Signals

CategoryπŸ”’Security
More technical detailsExpand β–Ύ
TransportSTDIO
RuntimeNode.js
0/4 checks healthy over the last 6h
Views0
Unique ViewsTotal visits recorded for this listing page on AllMCPs.
Installs0
Installs & Copy ActionsTotal times users copied install commands or configuration snippets for this server.
27Quality signal: Emerging Β· 27/100How this signal is calculated β–Ύ
Server availabilityNot measured

Not scored for repo-hosted servers β€” we can't reach the running server, only its GitHub page. Hosted MCP endpoints are health-checked live.

Verified ownership8/20
Documentation & tools11/30
Adoption & activity1/15
Community engagement0/10

A guidance signal from public completeness & health data β€” not a user rating. New listings start lower and rise as they add docs, get verified, and grow adoption. Signals we can't observe for a listing are skipped, not counted against it.

β˜… Spotlight Slot

Feature Your MCP Server

Get maximum visibility for your server across our directory, search results, and detail pages.

Spotlight Your Server

Own this project?

This directory is pre-filled from public sources. Claim via GitHub README, site badge, or DNS TXT to get the verified badge and attach your website.

Free dofollow backlink: after claiming, verify your product site and place a dofollow AllMCPs badge β€” we recheck it stays live.

Claim & get free dofollow

Share & Embed

Add our SVG badge (dark/light directory styles) or embeddable widget to your site.

Explore more

More in πŸ”’ Security β†’Best MCP servers for Security β†’Alternatives to Attestix β†’Install in Claude DesktopInstall in CursorInstall in VS Code