Attest MCP Remote

Official8 tools

by SPAZIO-GENESI · JavaScript

Zero-install remote MCP server for proof-of-existence file attestation.

Captured live from the server via tools/list.

service_status

Health of the Spazio Genesi attestation service components: worker (attestation engine), archive (certificate storage), signer (PDF cryptographic signature), anchor (Bitcoin/OpenTimestamps calendars). Values: ok | degraded | down | n/d.

Parameters

No parameters.

Raw schema

{
  "type": "object",
  "properties": {},
  "$schema": "http://json-schema.org/draft-07/schema#"
}

check_anchor

Check whether a work's SHA-256 fingerprint has an OpenTimestamps proof anchored in Bitcoin. The proof is created at attestation time and matures (pending → Bitcoin-confirmed) within a few hours.

Parameters1

sha256

string

required

SHA-256 fingerprint of the work: 64 hexadecimal characters. Compute the SHA-256 locally if you have code execution (`sha256sum <file>` / `shasum -a 256 <file>` / `certutil -hashfile <file> SHA256`). NEVER send file bytes or base64 through tool arguments: this server never receives files. If you cannot compute a hash locally, point the user to the website (https://attestazione.spaziogenesi.org, full privacy: hashing happens in the browser) or the Telegram bot @SGAttestBot.

Raw schema

{
  "type": "object",
  "properties": {
    "sha256": {
      "type": "string",
      "description": "SHA-256 fingerprint of the work: 64 hexadecimal characters. Compute the SHA-256 locally if you have code execution (`sha256sum <file>` / `shasum -a 256 <file>` / `certutil -hashfile <file> SHA256`). NEVER send file bytes or base64 through tool arguments: this server never receives files. If you cannot compute a hash locally, point the user to the website (https://attestazione.spaziogenesi.org, full privacy: hashing happens in the browser) or the Telegram bot @SGAttestBot."
    }
  },
  "required": [
    "sha256"
  ],
  "$schema": "http://json-schema.org/draft-07/schema#"
}

verify_attestation

Verify the server HMAC signature of an attestation issued by the Spazio Genesi service. Confirms that the attestation string (fingerprint + timestamp) and any declared metadata are authentic and untampered. Note: this checks the SIGNATURE only. Whether a given file matches the fingerprint must be checked locally by re-hashing the file. If the certificate carried declared metadata (title/author/year/notes), they must be provided EXACTLY as printed for the signature to verify.

Parameters7

sha256	string	required	SHA-256 fingerprint of the work: 64 hexadecimal characters. Compute the SHA-256 locally if you have code execution (`sha256sum <file>` / `shasum -a 256 <file>` / `certutil -hashfile <file> SHA256`). NEVER send file bytes or base64 through tool arguments: this server never receives files. If you cannot compute a hash locally, point the user to the website (https://attestazione.spaziogenesi.org, full privacy: hashing happens in the browser) or the Telegram bot @SGAttestBot.
attestazione	string	required	The attestation string exactly as printed on the certificate: "SHA-256:<hash>@<ISO timestamp>Z"
hmac	string	required	The server HMAC signature exactly as printed on the certificate (base64, 44 characters ending with '=').
titolo	string	optional	Declared title, exactly as printed (only if the certificate shows it).
autore	string	optional	Declared author, exactly as printed (only if the certificate shows it).
anno	string	optional	Declared year/version, exactly as printed (only if the certificate shows it).
note	string	optional	Declared notes, exactly as printed (only if the certificate shows them).

Raw schema

{
  "type": "object",
  "properties": {
    "sha256": {
      "type": "string",
      "description": "SHA-256 fingerprint of the work: 64 hexadecimal characters. Compute the SHA-256 locally if you have code execution (`sha256sum <file>` / `shasum -a 256 <file>` / `certutil -hashfile <file> SHA256`). NEVER send file bytes or base64 through tool arguments: this server never receives files. If you cannot compute a hash locally, point the user to the website (https://attestazione.spaziogenesi.org, full privacy: hashing happens in the browser) or the Telegram bot @SGAttestBot."
    },
    "attestazione": {
      "type": "string",
      "description": "The attestation string exactly as printed on the certificate: \"SHA-256:<hash>@<ISO timestamp>Z\""
    },
    "hmac": {
      "type": "string",
      "description": "The server HMAC signature exactly as printed on the certificate (base64, 44 characters ending with '=')."
    },
    "titolo": {
      "description": "Declared title, exactly as printed (only if the certificate shows it).",
      "type": "string"
    },
    "autore": {
      "description": "Declared author, exactly as printed (only if the certificate shows it).",
      "type": "string"
    },
    "anno": {
      "description": "Declared year/version, exactly as printed (only if the certificate shows it).",
      "type": "string"
    },
    "note": {
      "description": "Declared notes, exactly as printed (only if the certificate shows them).",
      "type": "string"
    }
  },
  "required": [
    "sha256",
    "attestazione",
    "hmac"
  ],
  "$schema": "http://json-schema.org/draft-07/schema#"
}

lookup_certificate

Look up whether a work's SHA-256 fingerprint has an attestation certificate in the public archive, and get its permanent links (public certificate page, PDF download, OpenTimestamps proof, browser verification). Trust model: this information is reachable only by whoever knows the fingerprint.

Parameters1

sha256

string

required

Raw schema

{
  "type": "object",
  "properties": {
    "sha256": {
      "type": "string",
      "description": "SHA-256 fingerprint of the work: 64 hexadecimal characters. Compute the SHA-256 locally if you have code execution (`sha256sum <file>` / `shasum -a 256 <file>` / `certutil -hashfile <file> SHA256`). NEVER send file bytes or base64 through tool arguments: this server never receives files. If you cannot compute a hash locally, point the user to the website (https://attestazione.spaziogenesi.org, full privacy: hashing happens in the browser) or the Telegram bot @SGAttestBot."
    }
  },
  "required": [
    "sha256"
  ],
  "$schema": "http://json-schema.org/draft-07/schema#"
}

authorize

Start the device-flow authorization to attest works in this session (up to 20 attestations, 24h). Returns a link the USER must open in a browser and approve (anti-bot check included). After the user approves, call `complete_authorization`. Not needed if the connection already carries an API key header, or for verification tools.

Parameters

No parameters.

Raw schema

{
  "type": "object",
  "properties": {},
  "$schema": "http://json-schema.org/draft-07/schema#"
}

complete_authorization

Complete the device-flow authorization after the user approved in the browser. Polls the service briefly; if approval hasn't happened yet, just call this tool again.

Parameters

No parameters.

Raw schema

{
  "type": "object",
  "properties": {},
  "$schema": "http://json-schema.org/draft-07/schema#"
}

attest_hash

Attest a work: the service binds the SHA-256 fingerprint to a server-side timestamp and signs it (HMAC). Requires a credential (device flow via `authorize`, or an API key header). Optional declared metadata (title/author/year/notes) are normalized and BOUND by the signature — immutable after issuance, but they remain self-declared (they don't prove authorship). Compute the SHA-256 locally if you have code execution (`sha256sum <file>` / `shasum -a 256 <file>` / `certutil -hashfile <file> SHA256`). NEVER send file bytes or base64 through tool arguments: this server never receives files. If you cannot compute a hash locally, point the user to the website (https://attestazione.spaziogenesi.org, full privacy: hashing happens in the browser) or the Telegram bot @SGAttestBot.

Parameters8

sha256	string	required	SHA-256 fingerprint of the work: 64 hexadecimal characters. Compute the SHA-256 locally if you have code execution (`sha256sum <file>` / `shasum -a 256 <file>` / `certutil -hashfile <file> SHA256`). NEVER send file bytes or base64 through tool arguments: this server never receives files. If you cannot compute a hash locally, point the user to the website (https://attestazione.spaziogenesi.org, full privacy: hashing happens in the browser) or the Telegram bot @SGAttestBot.
name	string	optional	File name (descriptive only, shown on the certificate).
size	integer	optional	File size in bytes (descriptive only).
type	string	optional	MIME type (descriptive only).
titolo	string	optional	Declared title of the work (bound by the signature).
autore	string	optional	Declared author (bound by the signature).
anno	string	optional	Declared year/version (bound by the signature).
note	string	optional	Declared notes (bound by the signature).

Raw schema

{
  "type": "object",
  "properties": {
    "sha256": {
      "type": "string",
      "description": "SHA-256 fingerprint of the work: 64 hexadecimal characters. Compute the SHA-256 locally if you have code execution (`sha256sum <file>` / `shasum -a 256 <file>` / `certutil -hashfile <file> SHA256`). NEVER send file bytes or base64 through tool arguments: this server never receives files. If you cannot compute a hash locally, point the user to the website (https://attestazione.spaziogenesi.org, full privacy: hashing happens in the browser) or the Telegram bot @SGAttestBot."
    },
    "name": {
      "description": "File name (descriptive only, shown on the certificate).",
      "type": "string"
    },
    "size": {
      "description": "File size in bytes (descriptive only).",
      "type": "integer",
      "exclusiveMinimum": 0,
      "maximum": 9007199254740991
    },
    "type": {
      "description": "MIME type (descriptive only).",
      "type": "string"
    },
    "titolo": {
      "description": "Declared title of the work (bound by the signature).",
      "type": "string"
    },
    "autore": {
      "description": "Declared author (bound by the signature).",
      "type": "string"
    },
    "anno": {
      "description": "Declared year/version (bound by the signature).",
      "type": "string"
    },
    "note": {
      "description": "Declared notes (bound by the signature).",
      "type": "string"
    }
  },
  "required": [
    "sha256"
  ],
  "$schema": "http://json-schema.org/draft-07/schema#"
}

create_certificate_pdf

Generate and archive the certificate PDF for a fingerprint attested in this session with `attest_hash`. The PDF is cryptographically signed, anchored in Bitcoin (OpenTimestamps) and archived server-side; this tool returns the permanent links (the PDF itself is downloadable from its URL — it is never inlined here).

Parameters1

sha256

string

required

Raw schema

{
  "type": "object",
  "properties": {
    "sha256": {
      "type": "string",
      "description": "SHA-256 fingerprint of the work: 64 hexadecimal characters. Compute the SHA-256 locally if you have code execution (`sha256sum <file>` / `shasum -a 256 <file>` / `certutil -hashfile <file> SHA256`). NEVER send file bytes or base64 through tool arguments: this server never receives files. If you cannot compute a hash locally, point the user to the website (https://attestazione.spaziogenesi.org, full privacy: hashing happens in the browser) or the Telegram bot @SGAttestBot."
    }
  },
  "required": [
    "sha256"
  ],
  "$schema": "http://json-schema.org/draft-07/schema#"
}

README.md3 KBView on GitHub

attest-mcp-remote

Listed on the official MCP Registry as io.github.SPAZIO-GENESI/attest-mcp-remote.

Remote MCP server (Streamable HTTP) for the Spazio Genesi digital-work attestation service. Zero install: add the URL as a connector in your MCP client and start verifying and attesting.

No file ever transits — by design. MCP has no reliable client→server file channel, and this service doesn't want one: every tool works on the SHA-256 fingerprint of the work. Agents with code execution compute it locally (sha256sum <file>), so the file never leaves the machine it lives on — not even through this server. For local-file tooling use the stdio package @spazio-genesi/attest-mcp; for humans, the website (in-browser hashing, full privacy) or the Telegram bot @SGAttestBot.

Status

In production. Live at https://attest-mcp-remote.it-e3f.workers.dev/mcp. All 8 tools implemented, tested, and validated end-to-end against production, including a real zero-install run from claude.ai (connector by URL, human Turnstile approval, certificate PDF issued and archived).

Tools

Tool	Auth	What it does
`service_status`	none	Health of worker / archive / signer / Bitcoin anchor
`check_anchor`	none	OpenTimestamps proof lookup for a fingerprint
`verify_attestation`	none	Verify the server HMAC signature of an attestation
`lookup_certificate`	none	Archive lookup + permanent links for a fingerprint
`authorize`	starts device flow	User approves once in the browser (anti-bot check)
`complete_authorization`	device flow	Claims the 24h session token (kept in session state, never echoed)
`attest_hash`	session token or API key header	Bind a fingerprint to a signed server timestamp
`create_certificate_pdf`	session-scoped	Generate + archive the certificate PDF, returns permanent links

Credentials: either the zero-config device flow above, or an Authorization: Bearer sg_k_… header on the connection (e.g. Claude Code: claude mcp add --transport http attest <url> --header "Authorization: Bearer sg_k_…"). Self-service keys: https://imgauth.spaziogenesi.org/developer/keys

Develop

bash

npm install
npm run dev            # wrangler dev (default port 8787)
node test/smoke.mjs http://127.0.0.1:8787

test/smoke.mjs drives the Streamable HTTP transport end-to-end (initialize → tools/list → tools/call) against real, public production data (read-only). test/smoke-auth.mjs covers the credentialed flow and is a local-only harness: it needs an isolated imgauth wrangler dev (own --persist-to state, SIGNER_URL emptied) because the user-approval step is simulated by writing the local D1 directly — see the header comment in the file.

License

Install

Tools (8)

service_statuscheck_anchorverify_attestationlookup_certificateauthorizecomplete_authorizationattest_hashcreate_certificate_pdf

Remote endpoint

Streamable HTTP

Hosted server - connect over the network, no local install.

url

https://attest-mcp-remote.it-e3f.workers.dev/mcp

Add to VS Code Add to Cursor

claude_desktop_config.json

json

{
  "mcpServers": {
    "attest-mcp-remote": {
      "command": "npx",
      "args": [
        "-y",
        "mcp-remote",
        "https://attest-mcp-remote.it-e3f.workers.dev/mcp"
      ]
    }
  }
}

Desktop config is stdio-only; this bridges via mcp-remote. Native remote: Settings > Connectors.