---
bezeichner: "io.github.attestd-io/attestd-mcp"
art: "mcp_server"
slug: "io-github-attestd-io-attestd-mcp"
paketkoordinate: "npm:@attestd/mcp"
status: "aktiv"
homepage: "https://github.com/attestd-io/attestd-mcp"
erhebungsstand: "2026-10-11T01:17:01.851Z"
namensraum: "io.github.attestd-io"
registerseite: "https://tracevero.com/mcp/io-github-attestd-io-attestd-mcp"
abgerufen_am: "2026-10-11"
zugangsdaten_erforderlich: false
ausfuehrungsort: "lokal"
dateisystem_pfadargument: false
quelloffen_einsehbar: true
einsatzgebiet: "sicherheit"
roh_beschreibung: "CVE checks, supply chain signals, live catalog, and CVE detail for MCP clients (infra, PyPI, npm)."
version: "0.3.1"
roh_umgebungsvariablen: "ATTESTD_API_KEY, ATTESTD_BASE_URL"
roh_geheime_pflichtvariablen: ""
roh_transportarten: "stdio"
roh_pfadargumente: ""
roh_repository_url: "https://github.com/attestd-io/attestd-mcp"
roh_paketquellen: "npm"
roh_geheime_pflichtkopfzeilen: ""
roh_pfad_umgebungsvariablen: ""
roh_remote_adressen: ""
roh_remote_hosts: ""
roh_statusmeldung: ""
roh_veroeffentlicht_am: "2026-09-26"
roh_aktualisiert_am: "2026-09-26"
roh_schemafassung: "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json"
roh_bereitstellungsform: "paket"
roh_repository_quelle: "github"
roh_repository_unterordner: ""
roh_paketbezeichner: "@attestd/mcp"
roh_paketversionen: "0.3.1"
roh_laufzeithinweise: ""
roh_umgebungsformate: "string"
roh_umgebungsbeschreibungen: "ATTESTD_API_KEY=Attestd API key (atst_...). Required for check_package_vulnerability, check_batch_vulnerabilities, get_cve_details, and live list_covered_products. Get one at https://api.attestd.io/portal · ATTESTD_BASE_URL=Optional API base URL override. Defaults to https://api.attestd.io"
roh_symbolformate: ""
roh_verbindungswege: "{\"packages\":[{\"registryType\":\"npm\",\"identifier\":\"@attestd/mcp\",\"version\":\"0.3.1\",\"transport\":\"stdio\",\"environment\":[{\"name\":\"ATTESTD_API_KEY\",\"description\":\"Attestd API key (atst_...). Required for check_package_vulnerability, check_batch_vulnerabilities, get_cve_details, and live list_covered_products. Get one at https://api.attestd.io/portal\",\"format\":\"string\",\"required\":false,\"secret\":true},{\"name\":\"ATTESTD_BASE_URL\",\"description\":\"Optional API base URL override. Defaults to https://api.attestd.io\",\"format\":\"string\",\"required\":false,\"secret\":false}],\"additional_arguments_declared\":false}],\"remotes\":[]}"
---

# io.github.attestd-io/attestd-mcp

## Measured values

| Property | Value | Source | Collected on | Level of trust | Raw declaration |
| --- | --- | --- | --- | --- | --- |
| Required secrets declared | false | MCP-Register | 2026-08-06T13:57:41.838Z | abgeleitet | roh_geheime_pflichtvariablen: ; roh_geheime_pflichtkopfzeilen: |
| Execution location | lokal | MCP-Register | 2026-08-06T13:57:41.838Z | abgeleitet | roh_transportarten: stdio |
| Path argument present | false | MCP-Register | 2026-08-06T13:57:41.838Z | abgeleitet | roh_pfadargumente: ; roh_pfad_umgebungsvariablen: |
| Repository URL listed | true | MCP-Register | 2026-08-06T13:57:41.838Z | abgeleitet | roh_repository_url: https://github.com/attestd-io/attestd-mcp |
| Field of use, derived from the vendor description | sicherheit | MCP-Register | 2026-08-26T16:45:01.514Z | abgeleitet | roh_beschreibung: CVE checks, supply chain signals, live catalog, and CVE detail for MCP clients (infra, PyPI, npm). |
| Description (raw) | CVE checks, supply chain signals, live catalog, and CVE detail for MCP clients (infra, PyPI, npm). | MCP-Register | 2026-09-27T01:17:01.409Z | selbstauskunft |  |
| Declared version | 0.3.1 | MCP-Register | 2026-09-27T01:17:01.409Z | selbstauskunft |  |
| Environment variables (raw) | ATTESTD_API_KEY, ATTESTD_BASE_URL | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft |  |
| Required secret variables (raw) |  | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft |  |
| Transports (raw) | stdio | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft |  |
| Path arguments (raw) |  | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft |  |
| Repository (raw) | https://github.com/attestd-io/attestd-mcp | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft |  |
| Package registries (raw) | npm | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft |  |
| Required secret headers (raw) |  | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Path environment variables (raw) |  | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Remote URLs (raw) |  | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Remote hosts (raw) |  | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Registry status message (raw) |  | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| First listed in the registry (raw) | 2026-09-26 | MCP-Register | 2026-09-27T01:17:01.409Z | selbstauskunft |  |
| Last changed in the registry (raw) | 2026-09-26 | MCP-Register | 2026-09-27T01:17:01.409Z | selbstauskunft |  |
| Schema version of the raw record (raw) | https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Delivery form (raw) | paket | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Repository platform (raw) | github | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Repository subfolder (raw) |  | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Package identifiers (raw) | @attestd/mcp | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Package versions (raw) | 0.3.1 | MCP-Register | 2026-09-27T01:17:01.409Z | selbstauskunft |  |
| Runtime hints (raw) |  | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Environment variable formats (raw) | string | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Environment variable descriptions (raw) | ATTESTD_API_KEY=Attestd API key (atst_...). Required for check_package_vulnerability, check_batch_vulnerabilities, get_cve_details, and live list_covered_products. Get one at https://api.attestd.io/portal · ATTESTD_BASE_URL=Optional API base URL override. Defaults to https://api.attestd.io | MCP-Register | 2026-09-27T01:17:01.409Z | selbstauskunft |  |
| Icon formats (raw) |  | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Connection paths (source structure) | {"packages":[{"registryType":"npm","identifier":"@attestd/mcp","version":"0.3.1","transport":"stdio","environment":[{"name":"ATTESTD_API_KEY","description":"Attestd API key (atst_...). Required for check_package_vulnerability, check_batch_vulnerabilities, get_cve_details, and live list_covered_products. Get one at https://api.attestd.io/portal","format":"string","required":false,"secret":true},{"name":"ATTESTD_BASE_URL","description":"Optional API base URL override. Defaults to https://api.attestd.io","format":"string","required":false,"secret":false}],"additional_arguments_declared":false}],"remotes":[]} | MCP-Register | 2026-09-27T01:17:01.409Z | selbstauskunft |  |

## Links

- Namespace: [[namensraum/io-github-attestd-io|io.github.attestd-io]]

---

- Registry page: <https://tracevero.com/mcp/io-github-attestd-io-attestd-mcp>
- Retrieved on: 2026-10-11