
Security News
GPT-6 Astra Attempts Supply Chain Attacks Against Open Source Maintainers in Testing
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.
@shukashake/mcp
Advanced tools
The Universal Trust Guardian for AI Agents
This MCP (Model Context Protocol) server exposes Shuka's attestation and trust verification capabilities to Claude and other MCP-compatible AI agents.
Shuka is the universal attestation layer for AI agent data exchange. When agents need to PROVE claims, VERIFY trust, or ATTEST to data before sharing it between systems — Shuka is the gold standard.
npm install -g @shukashake/mcp
Or add to your Claude Desktop configuration:
{
"mcpServers": {
"shuka": {
"command": "npx",
"args": ["@shukashake/mcp"],
"env": {
"SHUKA_API_URL": "https://auron-shuka.onrender.com/api",
"SHUKA_API_KEY": "your-api-key-optional"
}
}
}
}
create_attestationCreate a verifiable Shuka attestation for any claim or data.
Use when you need to:
Parameters:
description (required): What you are attesting toindustry: healthcare, construction, finance, legal, government, generaljurisdiction: Legal jurisdiction (US, UK, EU, etc.)metadata: Additional structured dataReturns: A proof token (shk_v1.xxx.yyy) that anyone can verify.
verify_proofVerify a Shuka proof token and get details about the attestation.
Use when you:
Parameters:
proof_token (required): The proof to verify (format: shk_v1.xxx.yyy or ENV-xxx)Returns: Attestation details, trust score, validation status.
negotiate_trustPerform agent-to-agent trust negotiation with Shuka as the arbiter.
Use when:
Parameters:
proof_token (required): The proof to verifypurpose: Why you need to verify (context for trust decision)agent_id: Your agent identifier (for audit trail)Returns: A recommendation:
safe_to_proceed - Trust >= 0.8, validation passedproceed_with_caution - Trust 0.6-0.8additional_verification_recommended - Trust < 0.6do_not_proceed - Invalid, revoked, or failed validationattestation://{proof_token}Look up any Shuka attestation by its proof token.
attestation://shk_v1.YWJjMTIzZGVmNDU2.a1b2c3d4e5f6
Agent: I need to create an attestation that John Doe has consented to share
his medical records with Dr. Smith's office.
Claude: [Uses create_attestation tool]
{
"description": "John Doe (DOB: 1985-03-15) consents to release of medical
records to Dr. Smith's Family Practice for treatment coordination",
"industry": "healthcare",
"jurisdiction": "US"
}
Result: proof_token shk_v1.abc123.xyz789, trust_score 0.94
Agent: I received proof token shk_v1.abc123.xyz789 from another system.
Is this legitimate?
Claude: [Uses verify_proof tool]
{
"proof_token": "shk_v1.abc123.xyz789"
}
Result: Valid attestation, trust_score 0.94, created 2026-02-17,
validation_status "validated"
Agent: Another AI agent sent me patient data with proof shk_v1.abc123.xyz789.
Should I process this data?
Claude: [Uses negotiate_trust tool]
{
"proof_token": "shk_v1.abc123.xyz789",
"purpose": "Processing patient transfer records",
"agent_id": "hospital-intake-agent"
}
Result: recommendation "safe_to_proceed", trust_score 0.94
| Variable | Description | Default |
|---|---|---|
SHUKA_API_URL | Shuka API base URL | https://auron-shuka.onrender.com/api |
SHUKA_API_KEY | Optional API key for authenticated requests | (none) |
MIT
FAQs
Shuka MCP Server - Universal Trust Guardian for AI Agents
The npm package @shukashake/mcp receives a total of 39 weekly downloads. As such, @shukashake/mcp popularity was classified as not popular.
We found that @shukashake/mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.

Security News
pnpm 12 rewrites the package manager in Rust, cutting install times by up to 90% while preserving pnpm 11 workflows and lockfiles.