Attestable MCP Server

Example Use Cases

• 1

  Verify the integrity and provenance of an MCP server's runtime before exchanging sensitive model context metadata.

• 2

  TLS connections augmented with RA-TLS evidence (SGX quotes and pubkey-hash claims) to ensure the server code matches a reproducible, signed build.

• 3

  Reproduce and validate signed server artifacts locally or on secure hardware using the provided GitHub Actions and Gramine/SGX tooling.

Description

This project implements an MCP server running inside a trusted execution environment (TEE) that embeds SGX quotes and evidence claims into TLS certificates using RA-TLS, enabling clients to cryptographically verify the exact code image the server is running. The server can be built and signed in a reproducible way via GitHub Actions (or locally), and the RA-TLS certificate includes the SGX report, certificate chain, and a pubkey-hash claim tying the ephemeral key to the enclave image. It also supports optional mutual attestation where servers can attest clients, and provides Docker/Gramine integration for running on SGX hardware or local development.