This does one job in one step, which is its strength: an attestation either verifies against the signature or it does not, and nothing about that answer depends on a network call or an account. If what you need is to become compliant, or to produce an attestation, this is the wrong end of the pipeline — it is the piece that reads one.
A verifier for compliance attestations issued by MEOK AI Labs, covering DORA, NIS2, CRA, the EU AI Act, CSRD, AI-BOM and Gods Eye. A signed certificate goes in on standard input and a verdict comes back. Signatures are HMAC-SHA256.
A VALID or INVALID verdict on a signed MEOK attestation, for any of the frameworks it covers. It is zero-dependency by design and speaks stdio, so it can sit in an automated check as easily as in a chat client. What it does not do is issue attestations or assess whether an organisation is compliant — it only answers whether the certificate in front of it is authentic.
Python, and no account or key for verification itself. The PyPI package is `meok-attestation-verify` (1.0.3): install with `pip install meok_attestation_verify` and run the `meok-attestation-verify` command over stdio, or launch it directly with `uvx meok-attestation-verify`. A Smithery one-line install is also documented.
One command — pip install meok_attestation_verify