Allows coding agents to run tests into Sigstore-signed receipts and retrieve redacted failure packets for verifiable test results.
Также известен как Praxso/attested, @praxso/attested-mcp
- Звёзды
- 0
- Инструменты
- 3
- Загрузки, 30 дней
- —
- Последняя версия
- 0.1.2
- Последний коммит
- 3 нояб. 2026 г.
- Лицензия
- Apache-2.0
Что такое attested MCP?
attested — это MCP server. Allows coding agents to run tests into Sigstore-signed receipts and retrieve redacted failure packets for verifiable test results. Он предоставляет 3 инструмента, например attested_run, attested_packet, attested_status.
Сводка сгенерирована из README проекта
О attested MCP server
Coding agents that need to prove their test results through verifiable evidence can use this server to generate Sigstore-signed receipts. By running test commands through the attested_run tool, an agent receives a receipt summary or a redacted failure packet if the tests fail. This process ensures that the results are not just reported by the agent but are backed by a signed attestation that complies with GitHub attestation verification policies.
Developers set this up locally using Node 22 or newer via npx for clients like Claude Code or Codex. The server includes a bundled attested CLI, though users can specify a different binary by configuring the ATTESTED_BIN environment variable. It provides specific tools like attested_packet to retrieve the most recent failure packet and attested_status to check if a receipt is verified against a required check policy or remains unverified as a local receipt. This setup prevents agents from submitting pull requests without verifiable proof of passing tests.
Что вы можете с ним делать
- 1Verify test results with signed receiptsAn AI agent can execute a test command and receive a signed receipt to prove the tests passed.
- 2Debug failed tests with redacted packetsWhen a test fails, the agent can retrieve a redacted failure packet to understand the error without exposing sensitive data.
- 3Check attestation verification statusA developer can use the server to confirm if a test run matches the required GitHub attestation policy.
Взято из README проекта. Каждый вариант использования проверен на соответствие цитате из него.
Как установить attested MCP
Форматы проверены 10 ноя 2026Установка attested MCP в Claude Code
$ claude mcp add attested -- npx -y @praxso/attested-mcpУстановка attested MCP в Cursor
~/.cursor/mcp.json
{
"mcpServers": {
"attested": {
"command": "npx",
"args": [
"-y",
"@praxso/attested-mcp"
]
}
}
}Установка attested MCP в VS Code
.vscode/mcp.json
{
"servers": {
"attested": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@praxso/attested-mcp"
]
}
}
}Установка attested MCP в Claude Desktop
claude_desktop_config.json
{
"mcpServers": {
"attested": {
"command": "npx",
"args": [
"-y",
"@praxso/attested-mcp"
]
}
}
}Установка attested MCP в Codex
~/.codex/config.toml
[mcp_servers.attested] command = "npx" args = ["-y", "@praxso/attested-mcp"]
Установка attested MCP в Gemini CLI
~/.gemini/settings.json
{
"mcpServers": {
"attested": {
"command": "npx",
"args": [
"-y",
"@praxso/attested-mcp"
]
}
}
}Инструменты attested MCP 3
Определено из READMEattested_runattested_packetattested_status
| attested_run | — | |
| attested_packet | — | |
| attested_status | — |
Автоматические проверки
Запущено 14 нояб. 2026 г.Полный отчёт →Прошло наши автоматизированные проверки. Это не аудит безопасности: изучите код и предоставьте серверу минимально необходимый доступ. Как работают проверки
- Связанный и доступный исходный репозиторийpraxso/attested is public and reachablegithub.com/praxso/attested ↗Пройдено
- Пакет указывает этот репозиторий как источник@praxso/attested-mcp names praxso/attested as sourcenpmjs.com/package/@praxso/attested-mcp ↗Пройдено
- Происхождение сборки (аттестация Sigstore)Sigstore attestation for @praxso/attested-mcpnpmjs.com/package/@praxso/attested-mcp/v/0.1.2#provenance ↗Пройдено
- Open source лицензия (OSI)Apache-2.0spdx.org/licenses/Apache-2.0.html ↗Пройдено
- Коммит или релиз за последний годLast commit or release 2026-11-03github.com/praxso/attested ↗Пройдено
- OpenSSF ScorecardНе проверялось
- Имя пакета не похоже на популярный пакетNo popular package one edit away from @praxso/attested-mcpПройдено
- Нет критических уязвимостей в пакете и зависимостях2 resolved dependencies checked; no critical advisoryosv.dev ↗Пройдено
- Нет скрытых инструкций для модели3 tool descriptions and the README read; no override phrases, credential paths or hidden charactersПройдено
- Деструктивные инструменты помеченыNo tool named like delete, drop or execПройдено
- Удалённый endpoint отвечает на MCP handshakeНе проверялось
README
Открыть на GitHub@praxso/attested-mcp
MCP server for attested: coding agents run your tests into a signed, verifiable receipt and read a redacted failure packet before they open a pull request.
Tools
attested_run: runs a test command through attested and returns the receipt summary; on red, the failure packet.attested_packet: returns the last failure packet, after checking its shape. A packet that is a symlink or resolves outside the project is refused.attested_status: returnsverified, the verdict from the signed attestation thatgh attestation verifyaccepts under the required check's policy (the attesting run and its ref, from the GitHub API orrun_id/source_ref, and the head commit), andlocalReceipt, the project's own receipt fields, labelled unverified.
The server runs the attested CLI bundled with it. To run a different build, set ATTESTED_BIN in the server's own MCP configuration; a node_modules/.bin/attested in the project is never used. If the bundled CLI cannot be resolved, attested_run fails with an error saying so; it never falls back to another version.
Set up
Claude Code:
claude mcp add attested -- npx -y @praxso/attested-mcp@0.1.2
Codex, in ~/.codex/config.toml:
[mcp_servers.attested]
command = "npx"
args = ["-y", "@praxso/attested-mcp@0.1.2"]
Cursor and Copilot configuration, the Claude Code plugin, and the Codex skill are in the repository README: https://github.com/Praxso/attested#agents-mcp-server-and-skills
Requires Node 22 or newer.
License
Apache-2.0
Вопросы о attested MCP
Как добавить attested MCP в Claude Code?
Выполните claude mcp add attested -- npx -y @praxso/attested-mcp в терминале. Добавьте --scope user, чтобы сервер был доступен во всех проектах.
Как добавить attested MCP в Cursor?
Откройте ~/.cursor/mcp.json и добавьте сервер в mcpServers, используя конфигурацию Cursor из раздела установки выше.
Какие инструменты предоставляет attested MCP?
Он предоставляет 3 инструмента, включая attested_run, attested_packet, attested_status.
How can I use a different version of the attested CLI?
You can set the ATTESTED_BIN environment variable in the MCP server's configuration to run a different build.
What happens if the bundled CLI cannot be found?
The attested_run tool will fail with an error message; it will not attempt to fall back to any other version.
Does the server use the local node_modules version of attested?
No, the server specifically avoids using a node_modules/.bin/attested located in the project.