Packageactivev0.2.1

io.github.attestd-io/attestd-mcp

CVE and supply chain checks for MCP clients. Covers infrastructure, PyPI, and npm packages.

No blockers found

assessed on 1 of 4 dimensions

ProvenanceOrigin linked to a public source repository.Official MCP Registry · as of Jul 7, 2026
Pass
MaintenanceRepository maintenance signals not yet ingested.
Pending
Manifest integrityManifest capture requires running the package (sandbox phase).
Pending
Supply chainPackage vulnerability scan not yet run.
Pending
Behavioral trustNo live endpoint to observe.
Not applicable

npm package · v0.2.1 · stdio

npx -y @attestd/mcp

ATTESTD_API_KEYsecret
Attestd API key (atst_...). Required for check_package_vulnerability and check_batch_vulnerabilities. Get one at https://api.attestd.io/portal
ATTESTD_BASE_URL
Optional API base URL override. Defaults to https://api.attestd.io

Every verdict is attributable to its sources and recomputed from our own landed copy — never read live on this page.