← Back to search

io.github.CSOAI-ORG/eudi-wallet-mcp

CSOAI-ORG streamable_http Scanned 17d ago

EUDI Wallet MCP — EU Digital Identity Wallet under eIDAS 2.0 for AI agent authentication via

B
87.9 / 100

Versions

1.0.1latest
first seen Jun 30, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 8

list_credential_types
annotations: none low

List EUDI-supported credential types per the EU Architecture Reference Framework.

prepare_credential_offer
annotations: none low

Build a Verifiable Credential offer for an EUDI Wallet recipient. Args: claims: Dict of claims being attested (e.g. {"role": "compliance-auditor", "valid_until": "2027-01-01"}). recipient_did: W3C DID of the recipient (their EUDI Wallet). credential_type: One of EUDI_CREDENTIAL_TYPES keys. validity_days: VC validity window. issuer_did: Optional override of issuer DID. Returns: {credential_offer, signature, wallet_deeplink}

claims dict issuer_did string recipient_did str validity_days int credential_type str
create_presentation_request
annotations: none low

Build an OID4VP presentation request for an EUDI Wallet. Args: required_claims: List of claim names the verifier needs. purpose: GDPR-required justification for why the data is needed. requester_did: Verifier's DID. selective_disclosure: If True, request only the listed claims (ARF best practice). Returns: {presentation_request, qr_code_payload, expires_at}

purpose str requester_did string required_claims string selective_disclosure bool
verify_presented_credential
annotations: none low

Verify a Verifiable Presentation returned by an EUDI Wallet. Args: vp: Verifiable Presentation envelope. expected_issuer_did: Optional check that the credential was issued by this DID. Returns: {verified, issues, claims_revealed, audit_chain_entry}

vp dict expected_issuer_did string
check_revocation_status
annotations: none low

Check a credential's revocation status via Status List 2021. Args: credential_id: The credential ID. status_list_url: Optional explicit status-list URL. Defaults to MEOK's. Returns: {credential_id, status, checked_at}

credential_id str status_list_url string
generate_selective_disclosure
annotations: none low

Generate a selective-disclosure presentation revealing ONLY the requested attributes. Args: credential: Full Verifiable Credential. requested_attrs: Subset of claim names to reveal. Returns: Minimal VP with only the requested claims.

credential dict requested_attrs string
bridge_to_w3c_vc
annotations: none low

Map an EUDI ARF credential to a W3C VC 2.0 envelope.

eudi_credential dict
bridge_to_oid4vc
annotations: none low

Map a credential offer to OID4VC issuance flow.

credential_offer dict

Permissions 3

network medium
Server uses network capabilities via: urllib
filesystem low
Server uses filesystem capabilities via: open(), os
env_vars low
Server uses env_vars capabilities via: os.environ

Scan Findings 25

low
Tool 'list_credential_types' has no annotations annotation_checker · 100%
low
Tool 'prepare_credential_offer' has no annotations annotation_checker · 100%
low
Tool 'create_presentation_request' has no annotations annotation_checker · 100%
low
Tool 'verify_presented_credential' has no annotations annotation_checker · 100%
low
Tool 'check_revocation_status' has no annotations annotation_checker · 100%
low
Tool 'generate_selective_disclosure' has no annotations annotation_checker · 100%
low
Tool 'bridge_to_w3c_vc' has no annotations annotation_checker · 100%
low
Tool 'bridge_to_oid4vc' has no annotations annotation_checker · 100%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
info
pyproject.toml metadata manifest_parser · 100%
info
Tool: list_credential_types manifest_parser · 90%
info
Tool: prepare_credential_offer manifest_parser · 90%
info
Tool: create_presentation_request manifest_parser · 90%
info
Tool: verify_presented_credential manifest_parser · 90%
info
Tool: check_revocation_status manifest_parser · 90%
info
Tool: generate_selective_disclosure manifest_parser · 90%
info
Tool: bridge_to_w3c_vc manifest_parser · 90%
info
Tool: bridge_to_oid4vc manifest_parser · 90%
info
Required env vars (2) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 80%
low
Permission: filesystem access detected permission_analyzer · 80%
low
Permission: env_vars access detected permission_analyzer · 90%
info
No dependency files found for SBOM generation sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%