HN Showcase
Back to browse
GitHub Repository

Per-request cryptographic user attestation for MCP servers

2 starsPython

MCP-identity – Per-request cryptographic attestation for MCP servers

by mustafabagdatli·May 6, 2026·4 points·0 comments
Visit ProjectView on HN

AI Analysis

●●SolidBig BrainShip It

Per-request cryptographic signing fixes MCP's OAuth non-repudiation blind spot.

Strengths
  • •Middleware design means zero changes to existing MCP handler logic.
  • •Nonce store protocol prevents replay attacks in distributed deployments.
  • •Permissive mode allows gradual rollout without breaking existing clients.
Weaknesses
  • •Python-only implementation excludes Node.js MCP servers from using this library.
  • •Client-side key management UX is left entirely to the developer.
Category
Security
Target Audience

Backend developers building MCP servers for enterprise or high-stakes actions

Similar To

AWS SigV4 · OAuth 2.1

Similar Projects

Security●●●Banger

verifiable API and MCP calls

Signed receipts for AI agent actions solve an accountability problem that didn't exist before MCP.

Zero to OneBig Brain
jithinraj
311mo ago