attestari-mcp

Attestari's verdict on an npm or PyPI package version, over the Model Context Protocol. The answer is the Attestari lookup API's: the grade, the decision, the confirmed findings by reason code and place, and the methodology version and document hash the decision cites. "Not examined" is its own answer and is never a sign that a package is safe.

Every lookup needs an Attestari API key (the Developer tier and above, https://attestari.ai/pricing#line-2) and is counted as one lookup, as through the API. What is sent is the ecosystem, the package name and the version, and nothing else.

Run it locally

ATTESTARI_API_KEY=att_live_... uvx attestari-mcp

It speaks MCP over standard input and output and opens no port. In an MCP client's configuration:

{
  "mcpServers": {
    "attestari": {
      "command": "uvx",
      "args": ["attestari-mcp"],
      "env": { "ATTESTARI_API_KEY": "att_live_..." }
    }
  }
}

ATTESTARI_API_URL changes the lookup API's address (default https://api.attestari.ai).

Tools

• lookup_package: one package (ecosystem: npm or pypi; name; version, or none for the latest version examined).
• lookup_packages: up to 20 packages at once, each counted as one lookup.

Both only read. Each answer says its outcome: graded, not_gradeable (examined, no opinion given), not_a_server (out of scope), not_examined, under_re_examination, refused (the key, the plan or a limit) or unavailable.

What the answer carries from a package

Its name, its version, and the file paths of its findings and capabilities with their line numbers. No excerpt of a package's code or text is passed on: text written by a package's publisher never reaches the agent through this server.

Licence

MIT.