"OpenSSL" matching MCP servers:

Enables agents to cryptographically verify JWT HMAC-SHA256 signatures, validate claims and enforce expiration, and perform Merkle inclusion proofs, Schnorr zero-knowledge identification, and nonce replay protection. Runs as a zero-dependency stdio MCP server so clients like Claude Desktop, Cursor, and Windsurf can attest execution state without OpenSSL or external libraries.