# Firmware Attestation Mcp

> Firmware Attestation MCP — hardware trust layer for sovereign AI. Scan firmware, check

- **Type:** MCP server
- **Install:** `agentstack add mcp-csoai-org-firmware-attestation-mcp`
- **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior
- **Seller:** [CSOAI-ORG](https://agentstack.voostack.com/s/csoai-org)
- **Installs:** 0
- **Category:** [Integrations](https://agentstack.voostack.com/c/integrations)
- **Latest version:** 1.0.0
- **License:** MIT
- **Upstream author:** [CSOAI-ORG](https://github.com/CSOAI-ORG)
- **Source:** https://github.com/CSOAI-ORG/firmware-attestation-mcp

## Install

```sh
agentstack add mcp-csoai-org-firmware-attestation-mcp
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

[](https://proofof.ai/scorecard/firmware-attestation-mcp.html)

# Firmware Attestation MCP

**Hardware trust layer for sovereign AI.** Persistence implants live *below* the OS (BIOS/UEFI, SMM, network boot ROMs, HDD HPA) and survive OS reinstalls and disk wipes. This MCP attests a host's firmware trust state and **gates inference on a verified result**.

## Tools
| Tool | What |
|---|---|
| `scan_firmware` | read-only host evidence (Secure Boot, TPM, SIP, BIOS, HPA) |
| `check_ant_signatures` | match to NSA-ANT-class persistence preconditions + defenses |
| `attest_firmware` | HMAC-signed attestation, verifiable at `proofof.ai/api/verify` |
| `gate_inference` | ALLOW/BLOCK AI on this host (strict by default) |
| `list_threat_model` | the attack surface this defends against |

## Honest by design
Reports **indicators** (preconditions implants rely on), never "clean". A `BLOCK` means "lacks confirmed trust anchors," not "hacked." Harden per the listed defenses, then re-gate.

```
pip install firmware-attestation-mcp
```
© CSOAI LTD (trading as MEOK AI Labs) · MIT

## Configuration

Add to your `claude_desktop_config.json` (Claude Desktop) or your MCP client config:

```json
{
  "mcpServers": {
    "firmware-attestation-mcp": {
      "command": "uvx",
      "args": ["firmware-attestation-mcp"]
    }
  }
}
```

Or: `pip install firmware-attestation-mcp` then run the `firmware-attestation-mcp` command (stdio transport).

## Examples

Once configured, ask your assistant, for example:
- "Use `scan_firmware` to …"
- "Use `check_ant_signatures` to …"
- "Use `attest_firmware` to …"

---

### Part of the MEOK constellation

This MCP is one node in a connected ecosystem built by **MEOK AI LABS** around a single
sovereign AI core — governed agents with a hash-chained audit trail, mapped to the CSOAI
compliance charter.

- 🌐 The whole map: ****
- 🛡️ AI governance & certification: **** · ****
- ✅ Verify any signed report: ****

## Source & license

This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [CSOAI-ORG](https://github.com/CSOAI-ORG)
- **Source:** [CSOAI-ORG/firmware-attestation-mcp](https://github.com/CSOAI-ORG/firmware-attestation-mcp)
- **License:** MIT

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v1.0.0 — what this tool can access:

- **Network access:** no
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** no
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **1.0.0** — security scan: passed — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/mcp-csoai-org-firmware-attestation-mcp
- Seller: https://agentstack.voostack.com/s/csoai-org
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.