RowAttest

Connect Remote server

claude mcp add --transport http rowattest https://app.rowattest.com/mcp --header "Authorization: Bearer <YOUR_API_KEY>"

{
  "mcpServers": {
    "rowattest": {
      "url": "https://app.rowattest.com/mcp",
      "headers": {
        "Authorization": "Bearer <YOUR_API_KEY>"
      }
    }
  }
}

{
  "servers": {
    "rowattest": {
      "type": "http",
      "url": "https://app.rowattest.com/mcp",
      "headers": {
        "Authorization": "Bearer <YOUR_API_KEY>"
      }
    }
  }
}

Settings > Connectors > Add custom connector
URL: https://app.rowattest.com/mcp

Replace the values in angle brackets with your own. Keys stay on your machine; we never see them.

Tools 7 found in our last check

• list_projects

  Lists the Supabase projects connected to this account with id, name, connection state and whether each is ready to run. Call this first to get a project_id.

• run_review

  Starts an authorization test run on a connected project and returns the run_id and status. If the project already has a run waiting to start, returns that run instead of starting another. Runs that do not fail count against the monthly allowance.

• get_run_status

  Returns a run's status (queued, running, complete or failed), its current stage, timestamps and, when a signed report exists, its verify_url.

• wait_for_run

  Waits up to timeout_seconds (1 to 60) for a run to finish, then returns the same information as get_run_status. Call it again while the status is still queued or running.

• get_findings

  Returns the cells that did not pass in a complete run that has a signed report — verdict, surface, operation, boundary, identity, layer outcomes and notes — plus tenancy flags, blocking findings and, when the report includes catalog hygiene checks, the hygiene block (the checks…

• get_report

  Returns the full signed report of a complete run as the exact stored JSON, with its verify_url and report_sha256 (sha256 of the canonical signed bytes, the fingerprint shown on the verify page). Use get_findings for the compact view.

• verify_attestation

  Checks a RowAttest attestation published by a site or MCP server. Give it the origin (for example https://example.com); it fetches /.well-known/rowattest.json there, follows the first entry to the signed summary, verifies the signature offline against RowAttest's public key list…

Headers

Details

More databases servers See all

• VibeScale

  Pre-launch checks for AI-built apps: leaked keys, Supabase RLS gaps, browser-exposed env vars.

• Imf Mcp Server

  Query IMF SDMX 3.0 macroeconomic dataflows — WEO, BOP, CPI, exchange rates, 190 countries.

• Apex DB

  Vehicle specifications, emissions, and powertrain data with source provenance.

• TrialBase DB

  Clinical trials across multiple registries with identifiers and source links.

• PatchLabs

  Security checks for AI-built apps (Lovable, Supabase, Bolt): RLS, headers, monitoring, fixes.

• Tidy Byte Tools API

  Remote MCP for JSON repair, hashing, formatting, IDs, dates, units, and other small tools.