AI agent identity, W3C credentials, EU AI Act compliance. 47 MCP tools.
Most developer tooling work still happens through a UI a human drives. Attestix MCP server moves it into the conversation instead. AI agent identity, W3C credentials, EU AI Act compliance. 47 MCP tools.
Make your AI agents EU AI Act compliant with cryptographically verifiable proof.
Installation goes through your MCP client rather than a global install: point it at attestix on npm and it is fetched when the client starts. The copy-paste blocks for Claude Desktop, Claude Code and Cursor are further down this page.
The server publishes 14 tools. What each one is for:
create_agent_identity — Create a UAIT from any identity sourceresolve_identity — Auto-detect token type and registerverify_identity — Check existence, revocation, expiry, signaturetranslate_identity — Convert to A2A, DID Document, OAuth, or summarylist_identities — List UAITs with protocol/revocation filtersget_identity — Get full UAIT detailsrevoke_identity — Mark a UAIT as revokedpurge_agent_data — GDPR Article 17 right to erasure across all storesparse_agent_card — Parse an A2A Agent Card JSONgenerate_agent_card — Generate agent.json for hostingdiscover_agent — Fetch /.well-known/agent.json from a URLcreate_did_key — Generate ephemeral did:key with Ed25519 keypairAmong the developer tooling options, the useful question is rarely "what can it do" but "what does it cost you to run" — permissions, credentials, and how much of your context its toolset consumes. Attestix's toolset — create_agent_identity, resolve_identity, verify_identity and 11 more — is a fair guide to whether it matches your workflow. It is maintained by VibeTensor; worth a glance at recent repository activity before you build anything load-bearing on it.
This entry was verified against Attestix's own documentation before publication; SyncDev keeps the directory reviewed rather than auto-generated.
| Tool | What it does |
|---|---|
| create_agent_identity | Create a UAIT from any identity source |
| resolve_identity | Auto-detect token type and register |
| verify_identity | Check existence, revocation, expiry, signature |
| translate_identity | Convert to A2A, DID Document, OAuth, or summary |
| list_identities | List UAITs with protocol/revocation filters |
| get_identity | Get full UAIT details |
| revoke_identity | Mark a UAIT as revoked |
| purge_agent_data | GDPR Article 17 right to erasure across all stores |
| parse_agent_card | Parse an A2A Agent Card JSON |
| generate_agent_card | Generate agent.json for hosting |
| discover_agent | Fetch /.well-known/agent.json from a URL |
| create_did_key | Generate ephemeral did:key with Ed25519 keypair |
| create_did_web | Generate did:web DID Document for self-hosting |
| resolve_did | Resolve any DID to its DID Document |
{
"mcpServers": {
"attestix": {
"type": "stdio",
"command": "python",
"args": ["-m", "attestix.main"]
}
}
}Configuration as documented by the project. Restart the client after saving.
Kill hallucinated APIs — version-accurate, up-to-date library documentation injected straight into context.
Microsoft's official browser automation server — drive a real browser through the accessibility tree, no screenshots needed.
GitHub's official server — repos, issues, pull requests, Actions and code security, straight from your assistant.
Issue tracking at the speed of conversation — Linear's official hosted server with OAuth and zero install.
Local repository surgery — status, diffs, commits, branches and history for any repo on disk.
Timezone sanity for AI — current time anywhere and correct conversions, without the model doing date math.