- Conduid
- Marketplace
- #sigstore
MCP servers tagged sigstore
26 live MCP servers tagged "sigstore", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with sigstore.
Kai
An MCP Server for Kubernetes
Mda
MDA Open Spec — a Markdown superset for agent-facing documents. One .mda source compiles to drop-in SKILL.md, AGENTS.md, MCP-SERVER.md, and CLAUDE.md. JSON Schema validated, with…
Veritensor
The Anti-Virus for AI Artifacts & RAG Firewall. A static analysis tool scanning Models and Notebooks for RCE, Datasets and RAG docs for Data Poisoning, PII, and Prompt Injections.…
Meho
Governance backplane for AI agents acting on infrastructure — policy-gated, audit-grade, MCP-native. Apache 2.0.
supply-chain-mcp-server
90-tool MCP server for software supply chain security — OSV, GHSA, NVD, EPSS, CISA KEV, npm, PyPI, crates.io, RubyGems, NuGet, Packagist, Go, deps.dev, Scorecard, Rekor, ClearlyDe…
Attestor
Tamper-evident flight recorder for AI agents: hash-chained tool-call ledger, RFC 6962 Merkle checkpoints anchored in Sigstore Rekor, verify CLI, regulator-ready evidence packs.
Haldir
Framework-agnostic security for AI agent skills — signing, vetting, enforcement
Trust Layer
Certifying proxy for agent-to-agent transactions — SHA-256 proof chain, Ed25519 signatures, RFC 3161 timestamps, Sigstore Rekor
Context Report
An open, signed report format for whether an agent plugin, hook, skill, or AGENTS.md actually works.
Buckler
Agent gatehouse for AI coding harnesses (Cursor, Claude Code, …): declarative hook policies, harness-neutral core + adapters, YAML packs (polished Git pack by default). Cosign-sig…
Trustdex
Trust policy layer for AI agents, MCP servers, skills, and plugins.
Governance Kit
Runtime capability-state attestation for MCP agents. Companion implementation to the paper 'The MCP Governance Gap' (Teklenburg, 2026).
Stratos
Single-file zero-dep Node ESM CLI + library for CloudCDN. Agent-first: MCP stdio server, machine-readable `stratos schema`, NDJSON streaming, stable typed errors. ~35 commands acr…
ark-forge/arkforge-mcp
4, Mistral, LangChain, AutoGen, or any HTTP client.
Secretgenerator
Auditable CSPRNG-backed credential generator for AI agents and machine-readable pipelines. Stable JSON schema, NIST entropy floors, SLSA 3 + cosign signed releases. CLI, Go/Python…
Mcpkernel
The Security Kernel for AI Agents — MCP/A2A gateway with policy enforcement, taint tracking, sandboxed execution, deterministic envelopes, and Sigstore audit. OWASP ASI 2026 compl…
HA Codex Bridge
Run Codex privately inside Home Assistant with ChatGPT login, automations, skills, plugins, MCP, and a proxy-safe Codex-style UI.
Sigstore Cosign MCP
🔌 Exposes Sigstore cosign + Rekor transparency log verification.
Reeve
Audit AI agents, starting at the endpoint.
Attestload
attestload
Skillledger
Supply-chain security for AI agent skills — build, sign, verify, and runtime-protect skills across every major agent ecosystem.
Attestroot
Local-first, tamper-evident audit and evidence layer for AI agent activity. Hash-chained capture, RFC 6962 Merkle sealing, offline-verifiable bundles.
Atrib
Verifiable agent actions. Every action becomes signed context for the next. Ed25519 signatures, Merkle log proofs, independently verifiable by anyone.
Rousseau Agent
Self-hosted, container-native coding agent — 9 chat transports, 5 LLM providers, SLSA-3 provenance, cosign-signed releases, MCP-native. Zero telemetry.
Apohara Sealchain
Tamper-evident, independently-verifiable receipts for AI artifacts — a single Rust binary (CLI + MCP server) with five real cryptographic layers and always-offline verify.
Opsforge
Forge your DevOps workstation: TUI installer for 287 CLIs, policy-as-code shell guards, CVE-correlated SBOM + OpenVEX.