Meok Attestation Verify

io.github.CSOAI-ORGPublished by GitHub account CSOAI-ORGv1.0.4Updated Nov 5, 2026

Tiny zero-dependency verifier for MEOK AI Labs compliance attestations (DORA, NIS2, CRA, EU AI Act,

VerifiedSTDIODesktop onlyDeveloper ToolsSecurity & Monitoring

Overview

AI-generated overview

A small local MCP server that verifies MEOK AI Labs compliance attestations (DORA, NIS2, CRA, EU AI Act and others) using HMAC-SHA256 signatures.

What you can do
  • Check signed compliance attestation certificates and get a VALID or INVALID result
  • Verify HMAC-SHA256 signatures on attestations for frameworks such as DORA, NIS2, CRA, EU AI Act, CSRD, AI-BOM and Gods Eye
  • Accept a signed certificate passed in on standard input
  • Run as a stdio MCP server alongside a desktop client
When to use it
Useful when you need an assistant to confirm that a MEOK AI Labs compliance attestation is authentic before relying on it, for example when checking regulatory or AI-BOM paperwork from that vendor.
Requirements
Runs locally as a stdio process; install the meok-attestation-verify Python package with pip or run it via uvx. No accounts, API keys, environment variables or headers are declared.
Before you install
The README is largely marketing: it advertises paid Pro and Enterprise tiers, a compliance diagnostic, and links to other MEOK sites, so treat the compliance claims as vendor statements rather than independent certification. Verification only covers MEOK-issued attestations, and the README does not document the tool names or input format.

Installation

In SourceWeft

  1. Open Meok Attestation Verify in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

[MCP Scorecard: 53/100]

Meok Attestation Verify

[MEOK AI Labs] [EU AI Act] [License] [PyPI]

Tiny zero-dependency verifier for MEOK AI Labs compliance attestations (DORA, NIS2, CRA, EU AI Ac...

Tiny zero-dependency verifier for MEOK AI Labs compliance attestations (DORA, NIS2, CRA, EU AI Act, CSRD, AI-BOM, Gods Eye). Pipe a signed cert on stdin, get VALID/INVALID back. HMAC-SHA256. By MEOK AI Labs.


🚀 Quick Start

bash
# Install via pippip install meok_attestation_verify
# Or install via Smitherynpx -y @smithery/cli@latest install meok-attestation-verify --client claude

✨ Features

  • MCP protocol compliant
  • Easy installation
  • Well-documented API
  • Production-ready
  • Active maintenance

📖 Documentation

🛡️ Compliance

This MCP server is built with EU AI Act compliance built-in:

  • ✅ Article 9 — Risk Management System
  • ✅ Article 13 — Transparency & Instructions for Use
  • ✅ Article 15 — Bias Detection & Testing
  • ✅ Article 26 — FRIA Support (where applicable)
  • ✅ Article 50 — AI Content Watermarking (where applicable)

Need help getting compliant? Book a free 15-min diagnostic →

🏢 Enterprise

Need custom development, SLA guarantees, or white-label deployment?

  • Pro: $99/mo — Full MCP suite + EU AI Act tracking
  • Enterprise: $499/mo — Custom dev + SLA + Dedicated support

View Pricing → | Contact Sales →

🤝 Part of the MEOK Ecosystem

This server is part of the MEOK AI Labs ecosystem — 300+ MCP servers for sovereign AI governance.

DomainPurpose
councilof.aiEU AI Act compliance marketplace
safetyof.aiAI safety & monitoring
meok.aiSovereign AI platform
cobolbridge.aiLegacy modernization

📜 License

MIT © CSOAI-ORG


Built with 💜 by MEOK AI Labs · UK Companies House 16939677

Configuration

Add to your claude_desktop_config.json (Claude Desktop) or your MCP client config:

json
{  "mcpServers": {    "meok-attestation-verify": {      "command": "uvx",      "args": ["meok-attestation-verify"]    }  }}

Or: pip install meok-attestation-verify then run the meok-attestation-verify command (stdio transport).

Examples

Once configured, ask your assistant, for example:

  • "Use the available tools to …"

Source: README.md at commit 6a1ba98

Tools

0
SourceWeft has not started this package in its sandbox yet, so its tools are not known.

Version history

1
  1. v1.0.4LatestSep 16, 2026

Score

50% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts

    Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.

  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts