Server data from the Official MCP Registry
Firmware Attestation MCP — hardware trust layer for sovereign AI. Scan firmware, check
Firmware Attestation MCP — hardware trust layer for sovereign AI. Scan firmware, check
This firmware attestation MCP has reasonable design goals but exhibits several security and code quality issues that warrant caution. The server executes system commands to collect evidence, stores a weak default signing key in environment variables, and includes undisclosed monetization code that could affect availability. Missing input validation, broad exception handling, and lack of privilege escalation guards for sensitive operations present real risks for users. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.
5 files analyzed · 14 issues found
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
This plugin requests these system permissions. Most are normal for its category.
Add this to your MCP configuration file:
{
"mcpServers": {
"io-github-csoai-org-firmware-attestation-mcp": {
"args": [
"firmware-attestation-mcp"
],
"command": "uvx"
}
}
}Be the first to review this server!
by Modelcontextprotocol · Developer Tools
Read, search, and manipulate Git repositories programmatically
by Modelcontextprotocol · Developer Tools
Web content fetching and conversion for efficient LLM usage
by Toleno · Developer Tools
Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.