Give your coding assistant or AI agent deterministic CVE and supply-chain signals for any dependency, before it gets added, deployed, or acted on. Returns structured boolean fields (riskState, activelyExploited, supplyChainCompromised) your assistant can state directly or your agent can branch on, no CVSS interpretation, no guessing. Covers 350+ infrastructure products and 256k+ PyPI/npm packages for supply-chain integrity.
Not monetized yet
Turn Attestd MCP’s tool calls into revenue: one disclosed sponsored slot, 70% revenue share, fail-open by design.
Install Attestd MCP
For anyone using Attestd MCP — no Lulu account neededclaude mcp add --transport http attestd-mcp https://attestdmcp--attestd.run.tools
9 field-tested tactics as a designed playbook plus skills your coding agent can run. Free.
Get the Kit →FAQ
Run: claude mcp add --transport http attestd-mcp https://attestdmcp--attestd.run.tools
Yes — it’s a remote MCP server, so no local install is needed.
ChatGPT: Settings → Connectors → Advanced → Developer mode → Add connector, then paste https://attestdmcp--attestd.run.tools.
Claude.ai: Settings → Connectors → Add custom connector, then paste the same URL.
Unrated out of 100, computed from cross-registry traction signals (installs, stars, registry presence) — never influenced by sponsorship.
Similar servers
Works well together