$ loading_
Run CVE and supply chain checks for MCP clients and packages.
Copy the install command and let the AI configure it · recommended for beginners
Please install the "io.github.attestd-io/attestd-mcp" MCP server from askskill: Run: claude mcp add 'io-github-attestd-io-attestd-mcp' -- npx -y @attestd/mcp
Developers can use it to check known CVEs and supply chain risks in npm or PyPI packages before adoption, reducing the chance of bringing in risky dependencies.
For teams using MCP clients, this tool adds vulnerability and supply chain checks to help identify potential security issues.
DevOps or security teams can use it to check known security risks in infrastructure as part of routine reviews or pre-release validation.
It performs CVE and supply chain checks for MCP clients, covering infrastructure, PyPI packages, and npm packages.
Based on the provided description, it supports security checks for infrastructure, PyPI packages, and npm packages. For more detailed scope, see the source repository.
The provided materials do not include installation or configuration steps. For prerequisites, runtime details, and authentication requirements, see the source repository.
Scan firmware and verify hardware trust to identify security risks.
Verify and attest SHA-256 fingerprints of digital works remotely.
Search risk-classified MCP servers and verify their trust status.
Query vulnerability intelligence, risk scores, and attack-surface data for security decisions.
Explore and choose MCP clients for different workflows and integration needs.
Add security proxying and compliance-mapped audit trails to MCP runtimes.