Skip to main content
Glama

hub

by ai.spelunking
OverviewDiscussions(1)Admin

Check an attestation

verify_attestation
Read-onlyIdempotent

Verify that an attestation from attest was issued by this site and has not been altered: checks the EdDSA signature against the published key and returns the decoded payload with its issue time. Use it when an agent hands you an attestation and you have no JWS library at hand; otherwise verify offline against /.well-known/attestation-keys.json and skip the call. It does not judge the reasoning inside the payload. An altered or foreign token returns an error rather than a false valid. Read-only and idempotent: nothing is stored, no key needed.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
attestationYesthe compact JWS exactly as attest returned it: three base64url segments separated by dots

Output Schema

TableJSON Schema
NameRequiredDescriptionDefault
payloadYesthe decoded attestation payload (same shape as attest returns)
issued_atNoISO-8601 time
issued_byNoissuer site URL
signatureYesonly ever "valid" here; failures are returned as errors
what_this_meansNoplain-language reading of the result

Schema Changelog

Changes observed during successful MCP inspections.

  1. Changed3 schema fields changed
    • changedInput schema / properties / attestation / description
      Previous value: -"the compact JWS"New value: +"the compact JWS exactly as attest returned it: three base64url segments separated by dots"
    • addedInput schema / properties / attestation / pattern
      Added value: +"^[A-Za-z0-9_-]+\\.[A-Za-z0-9_-]+\\.[A-Za-z0-9_-]+$"
    • changedOutput schema / (root)
      Previous value: -nullNew value: +{
+  "additionalProperties": true,
+  "properties": {
+    "issued_at": {
+      "description": "ISO-8601 time",
+      "type": "string"
+    },
+    "issued_by": {
+      "description": "issuer site URL",
+      "type": "string"
+    },
+    "payload": {
+      "additionalProperties": true,
+      "description": "the decoded attestation payload (same shape as attest returns)",
+      "type": "object"
+    },
+    "signature": {
+      "description": "only ever \"valid\" here; failures are returned as errors",
+      "enum": [
+        "valid"
+      ],
+      "type": "string"
+    },
+    "what_this_means": {
+      "description": "plain-language reading of the result",
+      "type": "string"
+    }
+  },
+  "required": [
+    "signature",
+    "payload"
+  ],
+  "type": "object"
+}
  2. First observed

TDQS

Score is being calculated.

All hub toolsInspect
Try in Browser
One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources