Attestd Mcp

io.github.attestd-io由 GitHub 帳號 attestd-io 發布v0.3.1更新於 Oct 24, 2026

CVE checks, supply chain signals, live catalog, and CVE detail for MCP clients (infra, PyPI, npm).

已驗證STDIO僅桌面開發者工具安全與監控

概覽

AI 產生的概覽

Attestd MCP 伺服器，讓助理檢查相依套件版本是否有可利用的 CVE 與供應鏈入侵，並查詢 CVE 詳細資料。

可以做什麼
  • 檢查單一產品與版本的 CVE 風險、EPSS、KEV 與修補建議
  • 一次批次稽核最多 100 個套件，適合 lockfile 與清單審查
  • 查詢單一 CVE 的 CVSS、EPSS、KEV 狀態與受影響產品
  • 列出已涵蓋的基礎設施產品與受監控的 PyPI/npm 套件
  • 查看目前金鑰的剩餘呼叫額度與超額情況
適用情境
適合在助理審查相依套件、lockfile 或清單時，判斷某個版本是否有可利用的 CVE 或已確認的供應鏈入侵；也適合在漏洞排查時取得結構化的 CVE 背景資訊。
執行需求
透過 npx 以 stdio 在本機執行，需要 Node.js 18 以上版本。檢查、CVE 詳細資料、用量工具以及即時產品清單需要 ATTESTD_API_KEY 中的 Attestd API 金鑰；沒有金鑰時只會回傳內建的靜態產品清單。可用 ATTESTD_BASE_URL 覆寫 API 位址。
安裝前請注意
API 金鑰屬於機密，透過 ATTESTD_API_KEY 傳入並送往 Attestd API。每個檢查項目都算一次計費呼叫，批次超出每月額度會在計費前回傳 429；get_usage 會顯示超額呼叫與預估超額費用。所檢查的套件名稱與版本會傳送給第三方服務。超出涵蓋範圍代表風險未知，而非安全。

安裝

在 SourceWeft 中

  1. 開啟 儀表板中的 Attestd Mcp，將其新增到工作區。
  2. 為需要使用其工具的對話啟用該服務。

Desktop only，透過 STDIO。 STDIO 服務會啟動本機處理程序，因此需要 SourceWeft 桌面主機。

其他 MCP 客戶端

參照 儲存庫 中的啟動說明。

README

@attestd/mcp

[npm version] [smithery badge]

Attestd checks whether a dependency version has exploitable CVEs or a confirmed supply-chain compromise. One API call returns a structured risk response.

Official Model Context Protocol (MCP) server for Attestd. Exposes CVE risk and supply-chain checks as tools for Claude Code, Claude Desktop, and any MCP-compatible client.

Get a free API key · Full docs

  • stdio transport: run via npx -y @attestd/mcp with no global install.
  • check_package_vulnerability: wraps GET /v1/check using @attestd/sdk.
  • check_batch_vulnerabilities: checks up to 100 packages in one call. Use for lockfile and manifest audits.
  • list_covered_products: returns Attestd-covered products. With an API key, returns live data from GET /v1/products. Without a key, returns the static bundled infrastructure list.
  • get_cve_details: returns CVSS, EPSS, KEV status, and affected products for a single CVE id.
  • get_usage: returns remaining quota for the authenticated key (GET /v1/usage).

Prerequisites

  • Node.js 18+
  • An Attestd API key from the portal. Required for check_package_vulnerability, check_batch_vulnerabilities, get_cve_details, get_usage, and live list_covered_products.

Claude Code / MCP config

Add to ~/.claude/mcp.json or project .mcp.json:

json
{  "mcpServers": {    "attestd": {      "command": "npx",      "args": ["-y", "@attestd/mcp"],      "env": {        "ATTESTD_API_KEY": "your-api-key-here"      }    }  }}

Optional: override the API base URL (e.g. dev):

json
"env": {  "ATTESTD_API_KEY": "your-api-key-here",  "ATTESTD_BASE_URL": "https://dev.api.attestd.io"}

Tools

check_package_vulnerability

ArgumentTypeDescription
productstringProduct slug (nginx, postgresql, litellm, …)
versionstringExact version (1.20.0)

Returns JSON with:

FieldMeaning
outsideCoveragetrue if the product is not covered. Unknown risk, not safe.
riskStatecritical | high | elevated | low | none | null when outside coverage
riskFactorsRisk factor vocabulary driving riskState
maxEpssHighest EPSS probability across matching CVEs
activelyExploitedCISA KEV signal
remoteExploitabletrue if any matching CVE is remotely exploitable
authenticationRequiredtrue only when all matching CVEs require authentication
patchAvailable / fixedVersionPatch guidance
confidenceSynthesis confidence 0.0–1.0
cveIdsCVE IDs contributing to the risk assessment
typosquatPackage name integrity: detected, resembles, confidence, ecosystem (SDK 0.5 runtime; extra fields are omitted)
messageExplanation when outsideCoverage is true
supplyChainCompromised / supplyChainDescriptionPyPI/npm supply-chain signal

On invalid/missing API key or rate limit, returns isError: true with a JSON error string.

check_batch_vulnerabilities

ArgumentTypeDescription
itemsarrayArray of { product, version } objects. Maximum 100 per call. Each item costs one API call.

Quota is checked upfront. If the batch would exceed your monthly quota, a 429 is returned before any calls are billed.

Returns JSON with count and results. Supported items include the same fields as check_package_vulnerability minus typosquat. Outside-coverage items return only product, version, outsideCoverage: true, and riskState: null.

list_covered_products

No arguments. With an API key, returns live JSON from GET /v1/products:

FieldMeaning
source"live" when fetched from the API
totalCombined count of CVE products and supply chain packages
cveProductsCVE infrastructure slugs with display names
supplyChainPackagesMonitored PyPI/npm packages

Without an API key, returns the static bundled list:

FieldMeaning
source"static"
countNumber of bundled infrastructure products
productsArray of { slug, display } entries

get_cve_details

ArgumentTypeDescription
cve_idstringCVE identifier, e.g. CVE-2021-44228

Returns JSON with:

FieldMeaning
foundtrue when the CVE is in Attestd's database; false on 404 (not an error)
cveIdCVE identifier
descriptionNVD description text
cvssScore / cvssVectorCVSS base score and vector
activelyExploitedCISA KEV signal
remoteExploitableRemotely exploitable
authenticationRequiredAuthentication required for exploitation
affectedProductsAttestd product slugs affected by this CVE
epssScore / epssPercentileEPSS probability and percentile
sourcePublishedAt / lastCheckedAtISO timestamps

When the CVE is not found, returns { "found": false, "cveId": "..." } without isError. On invalid/missing API key or rate limit, returns isError: true with a JSON error string.

get_usage

No arguments. Requires an API key. Returns JSON from GET /v1/usage:

FieldMeaning
tierAccount plan tier
keyCallsThisMonthCalls billed to this key in the current period
accountCallsThisMonthCalls billed across all keys on the account
includedCallsMonthly included call cap
billingPeriodStart / billingPeriodEndISO timestamps
overageCalls / estimatedOverageUsdOverage vs the included cap

On invalid/missing API key or rate limit, returns isError: true with a JSON error string.

Verify locally

bash
npm run buildecho '{"jsonrpc":"2.0","id":1,"method":"tools/list","params":{}}' | node dist/index.js

License

MIT. See LICENSE.

來源：README.md，提交 e21fe18

工具

0
SourceWeft 尚未在沙箱中啟動過該軟體包，因此其工具未知。

版本歷史

2
  1. v0.3.1最新Sep 26, 2026
  2. v0.2.1Sep 16, 2026

評分

已滿足適用檢查項的 50%

該評分衡量此收錄條目的完整程度，依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價，也不表示伺服器安全或目前可用：可連通性是帶日期的檢查結果，評分也不包含安裝量或使用者評價。

  • 近 30 天內可連通25 分

    請保持端點能夠回應 MCP 握手；SourceWeft 每 30 天探測一次。

  • 已宣告認證方式10 分

    請在註冊中心條目中宣告憑證請求標頭，或保持端點能夠回應探測，以便判定其認證方式。

  • 已列出工具15 分

    請讓伺服器在無憑證時回應 tools/list，或發布可在沙箱中無憑證啟動的軟體包。

  • 描述必需15 分
  • 圖示10 分
  • 文件15 分
  • 授權條款10 分