fix(rest/python): verify request signatures per RFC 9421 instead of accepting everything#122

Open

vishkaty wants to merge 7 commits into

Universal-Commerce-Protocol:mainfrom

vishkaty:feat/rfc9421-signatures

Commits on Jul 15, 2026

feat(python/server): add RFC 9421 signature module with RFC test vectors

katyalai
authored and
vishkaty
committed
fix(python/server): verify request signatures instead of accepting everything

katyalai
authored and
vishkaty
committed
feat(python/client): sign happy-path requests with an ephemeral key

katyalai
authored and
vishkaty
committed
docs(python): document request-signature verification and demo flags

katyalai
authored and
vishkaty
committed
test(python/server): self-review hardening + full coverage for the verifier
vishkaty
committed
feat(python/server): align key discovery with merged ucp#566
vishkaty
committed

Commits on Jul 17, 2026

feat(python/server): verify signatures on the MCP transport route too
katyalai
committed