create_control_attestation
Sign a tamper-evident record of one of YOUR OWN controls or policies and the Bidda obligation nodes it maps to. Each obligation is pinned to its current version + integrity hash at signing time, so the record shows what the control was mapped against on that date. This is the design-side evidence ('we operate this control, mapped to these obligations'); run receipts are the operating-side evidence. Requires an active Bidda subscription: pass api_key.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| nodes | Yes | Obligation node_ids the control maps to (max 50). | |
| api_key | No | Optional. Your Bidda subscription key. Prefer sending it as the x-bidda-api-key header (or Authorization: Bearer), which is what the auth settings in your MCP client configure; the header takes precedence over this argument. A free trial counts. | |
| control | Yes | The name of your control or policy. | |
| framework | No | Optional: the framework you are mapping to (e.g. "EU AI Act"). | |
| statement | Yes | What the control does or asserts (plain text). | |
| evidence_ref | No | Optional: a reference/URL/hash to your own evidence (kept by you). | |
| control_owner | No | Optional: the role or team that owns the control. | |
| control_status | No | Optional: implemented | planned | in-progress. | |
| effective_date | No | Optional: YYYY-MM-DD the control took effect. |