Attest Mcp
Wrap or harden MCP servers so every tool call must present a scoped Attest token verified against your Attest server before execution.
Overview
Attest MCP is a Ship-phase MCP middleware that enforces scoped credential verification on every MCP tool call via your Attest server.
What is this MCP server?
- Middleware-style credential enforcement on MCP tool invocations
- Scoped token verification on every tool call, not just session start
- npm package @attest-dev/mcp (v0.1.0) with stdio transport
- Configured via ATTEST_BASE_URL pointing at your Attest server
- TypeScript SDK subfolder in attest-dev monorepo on GitHub
- Package version 0.1.0
- Environment variable ATTEST_BASE_URL required
- npm identifier @attest-dev/mcp
Community signal: 1 GitHub stars.
What problem does it solve?
Custom MCP tools often trust the host session once, leaving no per-tool scoped proof when an agent chains risky operations.
Who is it for?
Builders operating several MCP servers with sensitive integrations who already run or can deploy Attest for token issuance and verification.
Skip if: Hobby prototypes with only read-only public APIs and no identity layer, or teams unwilling to run Attest infrastructure.
What do I get? / Deliverables
Tool calls fail closed without valid scoped Attest tokens, narrowing what a compromised or over-eager agent can execute.
- Per-tool-call token verification gate
- Reduced unauthorized MCP tool execution surface
Recommended MCP Servers
Journey fit
How it compares
MCP security middleware with per-call token checks, not a general secrets vault or static API-key store.
Common Questions / FAQ
Who is Attest MCP for?
Developers shipping MCP-based agent stacks who need scoped, verifiable credentials on each tool invocation rather than ambient session trust.
When should I use Attest MCP?
Use it before exposing MCP tools to production data, shared workspaces, or multi-tenant setups where tool blast radius must be bounded per action.
How do I add Attest MCP to my agent?
Deploy or connect to an Attest server, set ATTEST_BASE_URL, install @attest-dev/mcp from npm, wire the middleware per Attest docs in your MCP server pipeline, then register the secured server in your agent host.