Allows coding agents to run tests into Sigstore-signed receipts and retrieve redacted failure packets for verifiable test results.
Aussi connu sous Praxso/attested, @praxso/attested-mcp
- Étoiles
- 0
- Outils
- 3
- Téléchargements, 30 jours
- —
- Dernière version
- 0.1.2
- Dernier commit
- 3 nov. 2026
- Licence
- Apache-2.0
Qu'est-ce que attested MCP ?
attested est un serveur MCP. Allows coding agents to run tests into Sigstore-signed receipts and retrieve redacted failure packets for verifiable test results. Il expose 3 outils, comme attested_run, attested_packet, attested_status.
Résumé généré à partir du README du projet
À propos du MCP server attested
Coding agents that need to prove their test results through verifiable evidence can use this server to generate Sigstore-signed receipts. By running test commands through the attested_run tool, an agent receives a receipt summary or a redacted failure packet if the tests fail. This process ensures that the results are not just reported by the agent but are backed by a signed attestation that complies with GitHub attestation verification policies.
Developers set this up locally using Node 22 or newer via npx for clients like Claude Code or Codex. The server includes a bundled attested CLI, though users can specify a different binary by configuring the ATTESTED_BIN environment variable. It provides specific tools like attested_packet to retrieve the most recent failure packet and attested_status to check if a receipt is verified against a required check policy or remains unverified as a local receipt. This setup prevents agents from submitting pull requests without verifiable proof of passing tests.
Ce que vous pouvez faire avec
- 1Verify test results with signed receiptsAn AI agent can execute a test command and receive a signed receipt to prove the tests passed.
- 2Debug failed tests with redacted packetsWhen a test fails, the agent can retrieve a redacted failure packet to understand the error without exposing sensitive data.
- 3Check attestation verification statusA developer can use the server to confirm if a test run matches the required GitHub attestation policy.
Extrait du README du projet. Chaque cas d'utilisation est vérifié par rapport à une citation du document.
Comment installer attested MCP
Formats vérifiés le 10 nov. 2026Ajouter à CursorAjouter à GooseInstaller attested MCP dans Claude Code
$ claude mcp add attested -- npx -y @praxso/attested-mcpInstaller attested MCP dans Cursor
~/.cursor/mcp.json
{
"mcpServers": {
"attested": {
"command": "npx",
"args": [
"-y",
"@praxso/attested-mcp"
]
}
}
}Installer attested MCP dans VS Code
.vscode/mcp.json
{
"servers": {
"attested": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@praxso/attested-mcp"
]
}
}
}Installer attested MCP dans VS Code CLI
$ code --add-mcp '{"name":"attested","type":"stdio","command":"npx","args":["-y","@praxso/attested-mcp"]}'Installer attested MCP dans Claude Desktop
claude_desktop_config.json
{
"mcpServers": {
"attested": {
"command": "npx",
"args": [
"-y",
"@praxso/attested-mcp"
]
}
}
}Installer attested MCP dans Codex
$ codex mcp add attested -- npx -y @praxso/attested-mcpInstaller attested MCP dans Codex config.toml
~/.codex/config.toml
[mcp_servers.attested] command = "npx" args = ["-y", "@praxso/attested-mcp"]
Installer attested MCP dans Gemini CLI
$ gemini mcp add -s user attested npx -- -y @praxso/attested-mcpInstaller attested MCP dans Gemini settings.json
~/.gemini/settings.json
{
"mcpServers": {
"attested": {
"command": "npx",
"args": [
"-y",
"@praxso/attested-mcp"
]
}
}
}Outils MCP attested 3
Détectés depuis le READMEattested_runattested_packetattested_status
| attested_run | — | |
| attested_packet | — | |
| attested_status | — |
Vérifications automatisées
Exécuté le 14 nov. 2026Rapport complet →A passé nos vérifications automatisées. Il ne s'agit pas d'un audit de sécurité : lisez le code et donnez au serveur l'accès le plus restreint dont il a besoin. Fonctionnement des vérifications
- Dépôt source lié et accessiblepraxso/attested is public and reachablegithub.com/praxso/attested ↗Réussi
- Le nom du package correspond au dépôt source@praxso/attested-mcp names praxso/attested as sourcenpmjs.com/package/@praxso/attested-mcp ↗Réussi
- Provenance du build (attestation Sigstore)Sigstore attestation for @praxso/attested-mcpnpmjs.com/package/@praxso/attested-mcp/v/0.1.2#provenance ↗Réussi
- Licence open source (OSI)Apache-2.0spdx.org/licenses/Apache-2.0.html ↗Réussi
- Commit ou version publiée au cours de l'année écouléeLast commit or release 2026-11-03github.com/praxso/attested ↗Réussi
- OpenSSF ScorecardNon vérifié
- Nom du package non proche d'un package populaireNo popular package one edit away from @praxso/attested-mcpRéussi
- Aucun avis critique dans le package ou ses dépendances2 resolved dependencies checked; no critical advisoryosv.dev ↗Réussi
- Aucune instruction cachée destinée au modèle3 tool descriptions and the README read; no override phrases, credential paths or hidden charactersRéussi
- Les outils destructifs sont étiquetésNo tool named like delete, drop or execRéussi
- Le point de terminaison distant répond à la poignée de main MCPNon vérifié
README
Voir sur GitHub@praxso/attested-mcp
MCP server for attested: coding agents run your tests into a signed, verifiable receipt and read a redacted failure packet before they open a pull request.
Tools
attested_run: runs a test command through attested and returns the receipt summary; on red, the failure packet.attested_packet: returns the last failure packet, after checking its shape. A packet that is a symlink or resolves outside the project is refused.attested_status: returnsverified, the verdict from the signed attestation thatgh attestation verifyaccepts under the required check's policy (the attesting run and its ref, from the GitHub API orrun_id/source_ref, and the head commit), andlocalReceipt, the project's own receipt fields, labelled unverified.
The server runs the attested CLI bundled with it. To run a different build, set ATTESTED_BIN in the server's own MCP configuration; a node_modules/.bin/attested in the project is never used. If the bundled CLI cannot be resolved, attested_run fails with an error saying so; it never falls back to another version.
Set up
Claude Code:
claude mcp add attested -- npx -y @praxso/attested-mcp@0.1.2
Codex, in ~/.codex/config.toml:
[mcp_servers.attested]
command = "npx"
args = ["-y", "@praxso/attested-mcp@0.1.2"]
Cursor and Copilot configuration, the Claude Code plugin, and the Codex skill are in the repository README: https://github.com/Praxso/attested#agents-mcp-server-and-skills
Requires Node 22 or newer.
License
Apache-2.0
Questions sur attested MCP
Comment ajouter attested MCP à Claude Code ?
Exécutez claude mcp add attested -- npx -y @praxso/attested-mcp dans votre terminal. Ajoutez --scope user pour le rendre disponible dans tous les projets.
Comment ajouter attested MCP à Cursor ?
Ouvrez ~/.cursor/mcp.json et ajoutez le serveur sous mcpServers, avec la configuration Cursor indiquée dans la section d'installation ci-dessus.
Quels outils attested MCP fournit-il ?
Il expose 3 outils, dont attested_run, attested_packet, attested_status.
How can I use a different version of the attested CLI?
You can set the ATTESTED_BIN environment variable in the MCP server's configuration to run a different build.
What happens if the bundled CLI cannot be found?
The attested_run tool will fail with an error message; it will not attempt to fall back to any other version.
Does the server use the local node_modules version of attested?
No, the server specifically avoids using a node_modules/.bin/attested located in the project.