CVE checks, supply chain signals, live catalog, and CVE detail for MCP clients (infra, PyPI, npm).
Connect Runs on your machine
claude mcp add attestd-mcp -e ATTESTD_API_KEY=<ATTESTD_API_KEY> -e ATTESTD_BASE_URL=<ATTESTD_BASE_URL> -- npx -y @attestd/[email protected]
{
"mcpServers": {
"attestd-mcp": {
"command": "npx",
"args": [
"-y",
"@attestd/[email protected]"
],
"env": {
"ATTESTD_API_KEY": "<ATTESTD_API_KEY>",
"ATTESTD_BASE_URL": "<ATTESTD_BASE_URL>"
}
}
}
}
{
"mcpServers": {
"attestd-mcp": {
"command": "npx",
"args": [
"-y",
"@attestd/[email protected]"
],
"env": {
"ATTESTD_API_KEY": "<ATTESTD_API_KEY>",
"ATTESTD_BASE_URL": "<ATTESTD_BASE_URL>"
}
}
}
}
{
"servers": {
"attestd-mcp": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@attestd/[email protected]"
],
"env": {
"ATTESTD_API_KEY": "<ATTESTD_API_KEY>",
"ATTESTD_BASE_URL": "<ATTESTD_BASE_URL>"
}
}
}
}
Replace the values in angle brackets with your own. Keys stay on your machine; we never see them.
Tools
This server runs locally, so its tools are listed by your MCP client once it starts.
Environment variables
| Name | Description |
|---|---|
ATTESTD_API_KEYOptional, secret | Attestd API key (atst_...). Required for check_package_vulnerability, check_batch_vulnerabilities, get_cve_details, and live list_covered_products. Get one at https://api.attestd.io/portal |
ATTESTD_BASE_URLOptional | Optional API base URL override. Defaults to https://api.attestd.io |
Details
| Package | @attestd/[email protected] (NPM, stdio) |
| First published | 26 Sep 2026 |
| Last updated | 26 Sep 2026 |
| Registry name | io.github.attestd-io/attestd-mcp |
More developer tools servers See all
Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.
