To ensure authenticity and security, the MCP bundle should be signed within our GitHub [release workflow](https://github.com/ProfessionalWiki/MediaWiki-MCP-Server/blob/master/.github/workflows/release.yml). ## To-do - [ ] Create [certificate](https://github.com/modelcontextprotocol/mcpb/blob/27083dcf93c4d1c589af6b539ec746e50d6068e7/CLI.md?plain=1#L155) and private key - [ ] Add [`mcbp sign`](https://github.com/modelcontextprotocol/mcpb/blob/27083dcf93c4d1c589af6b539ec746e50d6068e7/CLI.md?plain=1#L92) step in `release.yml` before creating release - [ ] Add [`mcbp verify`](https://github.com/modelcontextprotocol/mcpb/blob/27083dcf93c4d1c589af6b539ec746e50d6068e7/CLI.md?plain=1#L117) step after the sign step and before creating release
To ensure authenticity and security, the MCP bundle should be signed within our GitHub release workflow.
To-do
mcbp signstep inrelease.ymlbefore creating releasemcbp verifystep after the sign step and before creating release