OpenChainGraph Suite · ART-147 · wave 27

MCP Server Identity Attestation Validator

Validate a new-spec MCP server identity document: subject, issuer, serverInfo, well-known path (/.well-known/mcp-server-identity), and attestation reference. Zero network.

New MCP SpecServer IdentityRFC 9728Zero PIIW3C VC §13.11
🔒 All inputs are processed locally in your browser. No data is transmitted. Do not enter real personal data — use synthetic or anonymised inputs only.
Scope
Root node of the mcp-server-governance-conformance chain (art-147→148→149). Validates a new-spec MCP server identity document: subject/issuer claims, serverInfo, well-known path /.well-known/mcp-server-identity, and attestation reference.
Presets
Identity Document Inputs
Signature Verification
Result
Execution Hash & §4 Artifact
SHA-256 execution hash (JCS canonical — RFC 8785):

      

        
        
        
        
        
      

    

  


  
  

    

  







  

    
Ask your agent

    
  

  
Copy this paragraph into Claude, OpenClaw, or any MCP-aware agent to run this exact tool, with this sample, and verify the artifact.

  
Run the AINumbers MCP tool `validate_mcp_server_identity`. Task: Validate a new-spec MCP server identity document: subject, issuer, serverInfo, well-known path, and attestation reference.
Call it with arguments: {"policy_parameters":{"identity":{"subject":"did:web:example.com","issuer":"did:web:registry.mcp.io","serverInfo":{"name":"ExampleMCPServer","version":"1.2.0"},"attestation":{"ref":"https://registry.mcp.io/attestations/abc123"}},"well_known_path":"/.well-known/mcp-server-identity","signature_valid":true}}
Verify before trusting: call `verify_execution_hash` on mcp.ainumbers.co (https://mcp.ainumbers.co/mcp) with the parameter `claimed_hash` set to the returned `execution_hash`, passing the full artifact the run returned (the object containing `policy_parameters` + `output_payload` + `execution_hash`; equivalently `policy_parameters` + `output_payload` with `claimed_hash`), not the bare hash string.
Return the ledger link https://ledger.ainumbers.co/ so a human can re-verify without contacting us.
PII rule: All inputs are processed locally in your browser. No data is transmitted. Do not enter real personal data — use synthetic or anonymised inputs only.
Open the tool with the sample prefilled: https://ainumbers.co/chaingraph/art-147-mcp-server-identity-attestation-validator.html#p=v1.H4sIAAAAAAAA_wEcAeP-eyJpZGVudGl0eSI6eyJzdWJqZWN0IjoiZGlkOndlYjpleGFtcGxlLmNvbSIsImlzc3VlciI6ImRpZDp3ZWI6cmVnaXN0cnkubWNwLmlvIiwic2VydmVySW5mbyI6eyJuYW1lIjoiRXhhbXBsZU1DUFNlcnZlciIsInZlcnNpb24iOiIxLjIuMCJ9LCJhdHRlc3RhdGlvbiI6eyJyZWYiOiJodHRwczovL3JlZ2lzdHJ5Lm1jcC5pby9hdHRlc3RhdGlvbnMvYWJjMTIzIn19LCJ3ZWxsX2tub3duX3BhdGgiOiIvLndlbGwta25vd24vbWNwLXNlcnZlci1pZGVudGl0eSIsInNpZ25hdHVyZV92YWxpZCI6dHJ1ZX3itBCvHAEAAA