mcpField
A
attested

attested

Local
github.comDeveloper Tools0Updated 6d ago
RepositoryVisit website

About attested

attested is an MCP server for coding agents that runs tests and returns a Sigstore-signed receipt. When tests fail, it provides a redacted failure packet for review before a pull request.

Key features

  1. 01Run tests through attested CLI
  2. 02Return signed test receipts
  3. 03Provide redacted failure packets
  4. 04Check attestation verdicts

Use cases

  1. 01Run tests before opening a pull request
  2. 02Review redacted details after a test failure
  3. 03Verify a signed test attestation

MCP support

The MCP server exposes tools to run tests, retrieve and validate the latest failure packet, and check attestation status. It runs its bundled attested CLI unless ATTESTED_BIN is configured.

Configuration

Local server config is the same for every client. Copy it into your client’s MCP config file.

mcp.json · Universal config
{
  "mcpServers": {
    "praxso-attested": {
      "command": "npx",
      "args": [
        "-y",
        "@praxso/attested-mcp"
      ]
    }
  }
}
Run commandnpx -y @praxso/attested-mcp

Local servers need a runtime on your machine (e.g. Node.js 18+). Config file locations differ by client; see your client’s docs.

Packages
npm@praxso/attested-mcp0.1.2

Tools

3

Saved tool list · updated 1w ago

ParameterTypeRequiredDescription
cwdstringNoProject directory to run in (default: the server working directory).
commandstringYesTest command, run with sh -c, e.g. "pnpm exec playwright test". It must write a CTRF report to attested/ctrf.json.
target_urlstringNoOptional deployment URL; its /healthz must report the expected sha or the run stops before tests.
allow_dirtybooleanNoAllow uncommitted changes (default true for local iteration; the receipt records dirty: true).
expected_shastringNoOptional commit sha HEAD must equal.

Details

From the project README

@praxso/attested-mcp

MCP server for attested: coding agents run your tests into a signed, verifiable receipt and read a redacted failure packet before they open a pull request.

Tools

  • attested_run: runs a test command through attested and returns the receipt summary; on red, the failure packet.
  • attested_packet: returns the last failure packet, after checking its shape. A packet that is a symlink or resolves outside the project is refused.
  • attested_status: returns verified, the verdict from the signed attestation that gh attestation verify accepts under the required check's policy (the attesting run and its ref, from the GitHub API or run_id/source_ref, and the head commit), and localReceipt, the project's own receipt fields, labelled unverified.

The server runs the attested CLI bundled with it. To run a different build, set ATTESTED_BIN in the server's own MCP configuration; a node_modules/.bin/attested in the project is never used. If the bundled CLI cannot be resolved, attested_run fails with an error saying so; it never falls back to another version.

Set up

Claude Code:

claude mcp add attested -- npx -y @praxso/[email protected]

Codex, in ~/.codex/config.toml:

[mcp_servers.attested]
command = "npx"
args = ["-y", "@praxso/[email protected]"]

Cursor and Copilot configuration, the Claude Code plugin, and the Codex skill are in the repository README: https://github.com/Praxso/attested#agents-mcp-server-and-skills

Requires Node 22 or newer.

License

Apache-2.0

Comments

Markdown supported

New to MCP?

From what the protocol is to installing your first server, these answers cover most first questions.

An open protocol that defines how AI applications connect to external tools and data in a uniform way. Clients talk to the model; MCP servers provide tools, resources and prompt templates. They exchange standard messages, so one server can be reused by many clients.