Allows coding agents to run tests into Sigstore-signed receipts and retrieve redacted failure packets for verifiable test results.
別名 Praxso/attested, @praxso/attested-mcp
- スター
- 0
- ツール
- 3
- ダウンロード数（30日間）
- —
- 最新バージョン
- 0.1.2
- 最終コミット
- 2026年11月3日
- ライセンス
- Apache-2.0
attested MCPとは
attestedはMCPサーバーです。 Allows coding agents to run tests into Sigstore-signed receipts and retrieve redacted failure packets for verifiable test results. 3個のツールを提供しており、attested_run, attested_packet, attested_statusなどがあります。
プロジェクトのREADMEから生成された概要
attested MCP server について
Coding agents that need to prove their test results through verifiable evidence can use this server to generate Sigstore-signed receipts. By running test commands through the attested_run tool, an agent receives a receipt summary or a redacted failure packet if the tests fail. This process ensures that the results are not just reported by the agent but are backed by a signed attestation that complies with GitHub attestation verification policies.
Developers set this up locally using Node 22 or newer via npx for clients like Claude Code or Codex. The server includes a bundled attested CLI, though users can specify a different binary by configuring the ATTESTED_BIN environment variable. It provides specific tools like attested_packet to retrieve the most recent failure packet and attested_status to check if a receipt is verified against a required check policy or remains unverified as a local receipt. This setup prevents agents from submitting pull requests without verifiable proof of passing tests.
できること
- 1Verify test results with signed receiptsAn AI agent can execute a test command and receive a signed receipt to prove the tests passed.
- 2Debug failed tests with redacted packetsWhen a test fails, the agent can retrieve a redacted failure packet to understand the error without exposing sensitive data.
- 3Check attestation verification statusA developer can use the server to confirm if a test run matches the required GitHub attestation policy.
プロジェクトの README から作成されています。すべてのユースケースは、その引用と照らし合わせて確認されています。
attested MCPのインストール方法
フォーマット検証日 2026年11月10日Claude Codeにattested MCPをインストール
$ claude mcp add attested -- npx -y @praxso/attested-mcpCursorにattested MCPをインストール
~/.cursor/mcp.json
{
"mcpServers": {
"attested": {
"command": "npx",
"args": [
"-y",
"@praxso/attested-mcp"
]
}
}
}VS Codeにattested MCPをインストール
.vscode/mcp.json
{
"servers": {
"attested": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@praxso/attested-mcp"
]
}
}
}Claude Desktopにattested MCPをインストール
claude_desktop_config.json
{
"mcpServers": {
"attested": {
"command": "npx",
"args": [
"-y",
"@praxso/attested-mcp"
]
}
}
}Codexにattested MCPをインストール
~/.codex/config.toml
[mcp_servers.attested] command = "npx" args = ["-y", "@praxso/attested-mcp"]
Gemini CLIにattested MCPをインストール
~/.gemini/settings.json
{
"mcpServers": {
"attested": {
"command": "npx",
"args": [
"-y",
"@praxso/attested-mcp"
]
}
}
}attested MCPツール 3
READMEから検出attested_runattested_packetattested_status
| attested_run | — | |
| attested_packet | — | |
| attested_status | — |
自動チェック
実行日 2026年11月14日詳細レポート →自動チェックに合格しました。これはセキュリティ監査ではありません。コードを読み、サーバーに必要最小限のアクセス権を与えてください。 チェックの仕組み
- ソースリポジトリがリンクされており、アクセス可能praxso/attested is public and reachablegithub.com/praxso/attested ↗合格
- パッケージがこのリポジトリをソースとして示している@praxso/attested-mcp names praxso/attested as sourcenpmjs.com/package/@praxso/attested-mcp ↗合格
- ビルドの来歴（Sigstore 証明）Sigstore attestation for @praxso/attested-mcpnpmjs.com/package/@praxso/attested-mcp/v/0.1.2#provenance ↗合格
- オープンソースライセンス (OSI)Apache-2.0spdx.org/licenses/Apache-2.0.html ↗合格
- 過去1年以内にコミットまたはリリースありLast commit or release 2026-11-03github.com/praxso/attested ↗合格
- OpenSSF Scorecard未チェック
- パッケージ名が有名なパッケージに酷似していないNo popular package one edit away from @praxso/attested-mcp合格
- パッケージと依存関係に重大なアドバイザリがない2 resolved dependencies checked; no critical advisoryosv.dev ↗合格
- モデルへの隠れた指示がない3 tool descriptions and the README read; no override phrases, credential paths or hidden characters合格
- 破壊的なツールがラベル付けされているNo tool named like delete, drop or exec合格
- リモート endpoint が MCP ハンドシェイクに応答する未チェック
README
GitHubで見る@praxso/attested-mcp
MCP server for attested: coding agents run your tests into a signed, verifiable receipt and read a redacted failure packet before they open a pull request.
Tools
attested_run: runs a test command through attested and returns the receipt summary; on red, the failure packet.attested_packet: returns the last failure packet, after checking its shape. A packet that is a symlink or resolves outside the project is refused.attested_status: returnsverified, the verdict from the signed attestation thatgh attestation verifyaccepts under the required check's policy (the attesting run and its ref, from the GitHub API orrun_id/source_ref, and the head commit), andlocalReceipt, the project's own receipt fields, labelled unverified.
The server runs the attested CLI bundled with it. To run a different build, set ATTESTED_BIN in the server's own MCP configuration; a node_modules/.bin/attested in the project is never used. If the bundled CLI cannot be resolved, attested_run fails with an error saying so; it never falls back to another version.
Set up
Claude Code:
claude mcp add attested -- npx -y @praxso/attested-mcp@0.1.2
Codex, in ~/.codex/config.toml:
[mcp_servers.attested]
command = "npx"
args = ["-y", "@praxso/attested-mcp@0.1.2"]
Cursor and Copilot configuration, the Claude Code plugin, and the Codex skill are in the repository README: https://github.com/Praxso/attested#agents-mcp-server-and-skills
Requires Node 22 or newer.
License
Apache-2.0
attested MCPのよくある質問
attested MCPをClaude Codeに追加するには
ターミナルでclaude mcp add attested -- npx -y @praxso/attested-mcpを実行します。すべてのプロジェクトで利用するには--scope userを追加します。
attested MCPをCursorに追加するには
~/.cursor/mcp.jsonを開き、上記のインストールセクションに示すCursor設定を使ってmcpServersの下にサーバーを追加します。
attested MCPが提供するツールは
3個のツールを提供しており、attested_run, attested_packet, attested_statusなどがあります。
How can I use a different version of the attested CLI?
You can set the ATTESTED_BIN environment variable in the MCP server's configuration to run a different build.
What happens if the bundled CLI cannot be found?
The attested_run tool will fail with an error message; it will not attempt to fall back to any other version.
Does the server use the local node_modules version of attested?
No, the server specifically avoids using a node_modules/.bin/attested located in the project.