Attestari MCP Server

by attestari Your server? Claim it

answering

Attestari is answering right now. Last checked 8 min ago. 1 074 installs a week from pypi.

Attestari's verdict on an npm or PyPI package version, asked before an agent installs it.

Installs per day peak 728 · avg 35

a month agotoday

Uptime history 6 days of history · worst day 99%

6 days agonow

100.0%

Uptime 24h

92 of 92 checks

—

Tools

hidden behind auth

605 ms

Response time

average over 24h

1 074

Installs / week

npm and PyPI

Attestari missed 2 checks this week

Everything else answered, so this is steady rather than shaky. We check every 15 minutes, which is how a one-off gets told apart from the start of a pattern, and how you hear about the next one within the hour instead of from your users.

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 8 min ago.

Claude Code Claude Desktop Codex Cursor VS Code

run in your terminal

claude mcp add attestari --transport http https://mcp.attestari.ai/mcp

~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "attestari": {
      "url": "https://mcp.attestari.ai/mcp"
    }
  }
}

~/.codex/config.toml

[mcp_servers.attestari]
url = "https://mcp.attestari.ai/mcp"

.cursor/mcp.json

{
  "mcpServers": {
    "attestari": {
      "url": "https://mcp.attestari.ai/mcp"
    }
  }
}

.vscode/mcp.json

{
  "mcpServers": {
    "attestari": {
      "url": "https://mcp.attestari.ai/mcp"
    }
  }
}

This one needs environment variables set before it will start: ATTESTARI_API_KEY (An Attestari API key (att_live_...), Developer tier and above). The author declared them in the registry entry; get the values from the project itself.

This endpoint answered with an authorization challenge. The server is running, and it signs you in through your browser: there is no API key to paste.

Endpoints

URL	Transport	State	Latency	Checked
https://mcp.attestari.ai/mcp	streamable-http	sign-in	1054 ms	8 min ago

Alternatives to Attestari

same job, measured the same way

Pkgtruth

by hxckya

Catches hallucinated and slopsquatted npm and PyPI packages before an agent installs them.

64 installs/wk local only

Presend dependency checks

by presendapp

Check an npm/PyPI package before an AI agent installs it: 5 focused supply-chain tools.

5 tools answering

pkg-oracle — Dependency Trust Oracle

by julian-martin89

Blocks typosquatted or hallucinated npm/PyPI packages before an AI agent installs them.

1 tools answering

Presend MCP Server

by presendapp

Before an AI agent installs an npm/PyPI package: typosquat, vulnerability and existence checks.

40 tools answering

HALLUX

by blvkware

Check that a package, module or DOI exists before an agent installs, imports or cites it.

4 tools answering

lurq

by jadenryu

Verify npm packages before your AI agent installs them: hallucinations, advisories, API drift.

16 tools answering

Attester Oracle

by maminihds

Verify PyPI and npm packages, symbols, and version diffs against real artifacts. Free, no account.

4 tools answering

PackageGuard

by dankaten

x402-gated safety checker for npm/PyPI packages before you npm install / pip install.

1 tools answering

Attestari — questions

Answers built from our own checks of this server.

Why is there no tool list for Attestari?

The server answered our handshake with an authorization challenge, so it is running — but it will not describe its tools to an anonymous client. To see them you need to connect with your own credentials. We record it as alive, not as broken: 100.0% of checks in the last 24 hours got a reply.

Is Attestari working right now?

We send a real MCP handshake every 15 minutes. Over the last 24 hours 92 of 92 checks got a reply (100.0%), average response time 605 ms. The bar chart above shows every period we have measured.

How do I connect Attestari?

Copy the ready config from this page — we generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each with the file path that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address. You sign in through your browser once and the client keeps the session: no key to copy, and it refuses anonymous clients.

How do you sign in to Attestari?

No API key is involved. Attestari answers our knock with an OAuth challenge, so you authorise it once in your browser and the client keeps the session. That is also why we see no tool list: it will not describe itself to an anonymous client, and that is the server working as intended, not a fault.

How fast is Attestari?

It answers our handshake in 605 ms on average, which is faster than 19% of all working MCP servers we measure. That is on the slow side — worth knowing if the tool sits inside an interactive loop. The comparison comes from our own checks across the whole registry, every 15 minutes.

How many people use Attestari?

The pypi package attestari-mcp was installed 1 074 times in the last week. We show installs rather than GitHub stars on purpose: a star is a bookmark, an install is someone actually running it.