
attested
io.github.PraxsoPublished by GitHub account Praxsov0.1.2Updated Nov 3, 2026
Run tests into a Sigstore-signed receipt; get a redacted failure packet on red. No images posted.
Overview
attested's local MCP server; no sign-in required; STDIO.
No AI overview yet: these facts come from the registry entry and the server itself.
Installation
In SourceWeft
- Open attested in the dashboard and add it to a workspace.
- Enable the server for the chats that should use its tools.
Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.
Other MCP clients
Follow the launch instructions in the repository.
README
@praxso/attested-mcp
MCP server for attested: coding agents run your tests into a signed, verifiable receipt and read a redacted failure packet before they open a pull request.
Tools
attested_run: runs a test command through attested and returns the receipt summary; on red, the failure packet.attested_packet: returns the last failure packet, after checking its shape. A packet that is a symlink or resolves outside the project is refused.attested_status: returnsverified, the verdict from the signed attestation thatgh attestation verifyaccepts under the required check's policy (the attesting run and its ref, from the GitHub API orrun_id/source_ref, and the head commit), andlocalReceipt, the project's own receipt fields, labelled unverified.
The server runs the attested CLI bundled with it. To run a different build, set ATTESTED_BIN in the server's own MCP configuration; a node_modules/.bin/attested in the project is never used. If the bundled CLI cannot be resolved, attested_run fails with an error saying so; it never falls back to another version.
Set up
Claude Code:
Codex, in ~/.codex/config.toml:
Cursor and Copilot configuration, the Claude Code plugin, and the Codex skill are in the repository README: https://github.com/Praxso/attested#agents-mcp-server-and-skills
Requires Node 22 or newer.
License
Apache-2.0
Source: packages/mcp/README.md at commit 5d37095
Tools
0Version history
1- v0.1.2LatestNov 3, 2026
Score
50% of the applicable checks met
How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.
- Reached in the last 30 days25 pts
Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.
- Auth declared10 pts
Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.
- Tools listed15 pts
Answer tools/list without a credential, or ship a package that starts in a sandbox without one.
- DescriptionRequired15 pts
- Logo10 pts
- Documentation15 pts
- License10 pts