Skip to main content
MCP server CX Codex

Attestix — Claude Code MCP server: features and setup

Attestix records cryptographically verifiable evidence about AI agent identity, credentials, and delegated authority. Use it in AI governance workflows.

Install into Claude Code · Platform CLI All methods and platforms ↓
claude mcp add attestix -- uvx attestix
Open on GitHub

What Attestix does

Attestix supports agent identities, signed credentials, and governance records. Its CLI can verify an agent with attestix verify <agent-id> and display a hash-chained audit trail with attestix audit <agent-id>. The project also provides MCP and REST interfaces.

The REST API requires ATTESTIX_API_KEY by default and runs as a single-tenant server; it rejects headers for other tenants. Presentation checks require the caller’s expected challenge and domain, since a signature alone does not prevent replay. The project has not undergone an independent external security review, so assess key protection and the cryptographic components before deployment.

What it helps with

  • create a cryptographically verifiable agent identity
  • verify an agent’s credentials
  • inspect a hash-chained audit trail
  • check for gaps in compliance documentation
  • record delegated authority

Example prompts for the agent

  • Create an agent identity named MyBot.
  • Cryptographically verify agent <agent-id>.
  • Show the audit trail for agent <agent-id>.

How to install Attestix

Platform CLI

claude mcp add attestix -- uvx attestix

uvx runs the command named after the package; if the README names another one, use uvx --from attestix <command>

Step by step, with commands for each platform: How to add an MCP server to Claude Code, Codex, Cursor, VS Code, Gemini CLI and more

Questions about Attestix

How do I install Attestix in Claude Code?

Run claude mcp add attestix -- uvx attestix to add the Attestix MCP server.

What does Attestix do?

It records and verifies evidence about AI agent identities, credentials, and delegated authority. Its CLI also verifies identities and displays audit trails.

What does presentation verification require?

The caller must provide the expected challenge and domain. A signature on its own does not prevent replay.

Similar MCP servers

Everything for Security →

Project sponsors

Companies that keep this analytics open
Gold sponsor

Impressions, clicks and code copies — open statistics. We keep the numbers public for the same reason NeBlask itself is public. Become a sponsor