Attestd Mcp

Overview

Attestd Mcp is a security-focused Model Context Protocol server that runs CVE and supply chain checks for MCP clients. It covers infrastructure, PyPI, and npm packages, letting AI assistants query security vulnerabilities and package integrity as callable tools without switching between apps.

The server runs locally via the npm package @attestd/mcp, which communicates over stdio on your machine. Installation is simple: npx -y @attestd/mcp. It requires an API key for authentication. The latest release is v0.2.1, published under the MIT license with source code available at attestd-io/attestd-mcp on GitHub.

Attestd Mcp belongs in the Security category on mcp.site and works with any MCP client including Claude Desktop, Claude Code, Cursor, VS Code, Windsurf, and Zed. If you maintain this server for attestd-io, claim this listing to verify ownership and keep details current.

Installation

// claude_desktop_config.json
{
  "mcpServers": {
    "attestd_mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@attestd/mcp"
      ]
    }
  }
}