attestable-mcp-serverVerify that any MCP server is running the intended and untampered code via hardware attestation.

— (0)

Reviewed by Daniel Nikulshyn·Updated July 2026

Overview

The attestable-mcp-server project enables remote attestation of MCP servers using hardware-based trusted execution environments. It generates a certificate representing the running code, which is sent to MCP clients during the TLS handshake. This allows clients to verify that the server is running the intended and untampered code. The project uses Intel SGX hardware and the RA-TLS protocol for remote attestation. The code is built and signed using GitHub Actions, and the resulting Docker image can be independently verified.

Key features

Remote attestation of MCP servers using RA-TLS protocol
Generation of signed artifacts using GitHub Actions
Support for Intel SGX hardware and software stack
Verification of server code integrity using SGX quotes and evidence claims

Pricing

Model: Free
Category: MCP Servers
Rating: No reviews yet

Use cases

Secure MCP Server Verification

Verify that an MCP server is running the intended and untampered code before establishing a connection.

Independent Verification of Server Code

Independently verify the code running on an MCP server using a Docker image and SGX quotes.

Pros & Cons

Pros

Enables remote verification of MCP server code integrity
Uses hardware-based trusted execution environments for secure attestation
Supports independent verification of server code using Docker images

Cons

Requires Intel SGX hardware for trusted execution environment
Dependent on specific software dependencies (e.g., Gramine, Python 3.13, Ubuntu 22.04)

Reviews

Sign in to leave a review.

No reviews yet. Be the first!

Q&A

What protocol is used for remote attestation?

The project uses the RA-TLS protocol, an extension to TLS that adds machine and code-specific measurements.

Asked by Jamal Carter · Jan 6, 2026

Can the server code be independently verified?

Yes, the Docker image can be independently verified by building and running the code locally on emulated hardware or secure hardware.

Asked by Julia Steiner · Dec 14, 2025

How is code integrity verified?

Code integrity is verified using SGX quotes and evidence claims, which are sent to MCP clients during the TLS handshake.

Asked by George Papadakis · Oct 26, 2025

What hardware is required?

The attestable-mcp-server project requires Intel SGX hardware for trusted execution environment.

Asked by Olamide Fashola · Oct 19, 2025

Ask a question

MCP Servers alternatives

Playwright MCP interface preview

Playwright MCPMCP Servers

Open-source MCP server that lets LLMs drive real browsers via Playwright and accessibility snapshots.

Pydantic AI interface preview

Pydantic AIMCP Servers

Python agent framework from the Pydantic team for building type-safe GenAI apps.

Cognee interface preview

CogneeMCP Servers

Adaptive memory layer that helps AI agents learn from context over time.

Inbox Zero interface preview

Inbox ZeroMCP Servers

AI email assistant that organizes, drafts replies, and helps you reach inbox zero faster.

Screenpipe interface preview

ScreenpipeMCP Servers

Open-source 24/7 local screen and audio recording for building context-aware AI apps

AgentKit interface preview

AgentKitMCP Servers

TypeScript library for building and orchestrating AI agents with tools, memory, and multi-agent workflows.

onchain-mcpMCP Servers

Bringing the bankless onchain API to MCP

markitdownMCP Servers

Python tool for converting files and office documents to Markdown.