LLM-powered interface for managing Keylime remote attestation infrastructure. Combines an MCP server exposing Keylime operations as tools with a web client that provides a natural language chat interface backed by LLM providers.
Features
- MCP Server — 23 tools covering agent lifecycle, runtime and measured boot policy management, attestation monitoring, and verifier diagnostics; usable with Claude Desktop, Claude Code, Cline, Cursor, or any MCP-compatible client.
- Web Client — Browser-based chat UI with human-in-the-loop tool approval workflow, conversation history, and runtime model switching.
- LLM Providers — Support for Anthropic Claude (with prompt caching) and local deployment via Ollama.
- Mutual TLS — Certificate-based authentication with Keylime services.
- Data Masking — Sensitive values (UUIDs, IPs, hashes, TPM keys) are actively masked before cloud LLM exposure.
- Installation — Automated certificate setup and systemd service creation via Makefile.
Getting Started
See the README for complete installation, configuration, and usage instructions.