# Attestix

Attestix records cryptographically verifiable evidence about AI agent identity, credentials, and delegated authority. Use it in AI governance workflows.

- MCP server · `type=mcp` · Claude Code, Codex, Cursor, GitHub Copilot, Windsurf (Devin Desktop), Cline, Zed · ★ 837
- Author: VibeTensor
- License: Apache-2.0 · policy=link-only · description only; the file stays with the author
- Source: https://github.com/VibeTensor/attestix
- Updated: 2026-10-23
- HTML: https://affpapa.org/en/nevibecode/mcp/attestix

## What it does

Attestix supports agent identities, signed credentials, and governance records. Its CLI can verify an agent with `attestix verify <agent-id>` and display a hash-chained audit trail with `attestix audit <agent-id>`. The project also provides MCP and REST interfaces.

The REST API requires `ATTESTIX_API_KEY` by default and runs as a single-tenant server; it rejects headers for other tenants. Presentation checks require the caller’s expected challenge and domain, since a signature alone does not prevent replay. The project has not undergone an independent external security review, so assess key protection and the cryptographic components before deployment.

## Requirements
- Needs: Python and uv (commands run via uvx)

## Install

### Claude Code (native platform)

**Platform CLI**
```bash
claude mcp add attestix -- uvx attestix
```
uvx runs the command named after the package; if the README names another one, use uvx --from attestix <command>

### Codex

**Platform CLI**
```bash
codex mcp add attestix -- uvx attestix
```
uvx runs the command named after the package; if the README names another one, use uvx --from attestix <command>

### Cursor

**Config file**
File `.cursor/mcp.json`:
```json
{
    "mcpServers": {
        "attestix": {
            "command": "uvx",
            "args": [
                "attestix"
            ]
        }
    }
}
```
uvx runs the command named after the package; if the README names another one, use uvx --from attestix <command>

### GitHub Copilot

**Config file**
File `.vscode/mcp.json`:
```json
{
    "servers": {
        "attestix": {
            "type": "stdio",
            "command": "uvx",
            "args": [
                "attestix"
            ]
        }
    }
}
```
uvx runs the command named after the package; if the README names another one, use uvx --from attestix <command>

### Gemini CLI

**Platform CLI**
```bash
gemini mcp add attestix uvx attestix
```
uvx runs the command named after the package; if the README names another one, use uvx --from attestix <command>

## When to use it
- create a cryptographically verifiable agent identity
- verify an agent’s credentials
- inspect a hash-chained audit trail
- check for gaps in compliance documentation
- record delegated authority

## Example prompts
- Create an agent identity named `MyBot`.
- Cryptographically verify agent `<agent-id>`.
- Show the audit trail for agent `<agent-id>`.

## Similar
- [REA](https://affpapa.org/en/nevibecode/mcp/rea.md) — MCP server · ★ 386989
- [World Monitor](https://affpapa.org/en/nevibecode/mcp/world-monitor.md) — MCP server · ★ 89408
- [mcp](https://affpapa.org/en/nevibecode/mcp/kubeshark-mcp.md) — MCP server · ★ 12109
- [Robin: AI-Powered Dark Web OSINT](https://affpapa.org/en/nevibecode/mcp/robin-ai-powered-dark-web-osint.md) — MCP server · ★ 7658
- [jshookmcp](https://affpapa.org/en/nevibecode/mcp/jshookmcp.md) — MCP server · ★ 2061
- [OpenOSINT](https://affpapa.org/en/nevibecode/mcp/openosint.md) — MCP server · ★ 1802

---
NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md