{"name":"io.studiomeyer/server-attestation","slug":"studiomeyer-server-attestation","title":"MCP Server Attestation","description":"Ed25519-signed MCP tool manifests + spawn attestation. Layer-2 supply-chain hardening.","url":"https://mcp.market/server/studiomeyer-server-attestation","rating":null,"grade":"A","score":86,"certified":false,"status":"active","category":"other","tags":[],"presence":{"score":26,"stars":0,"forks":0,"downloads_week":127,"last_push_at":"2026-11-01T21:17:01.000Z","license":"MIT"},"uptime":null,"claimed":false,"transport":"npm","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/studiomeyer-io/mcp-server-attestation","website":null,"version":"0.2.0","remotes":[],"packages":[{"registryType":"npm","identifier":"mcp-attest-demo","version":"0.2.0","transport":{"type":"stdio"}}],"tools":[{"name":"attest_generate_manifest_template","description":"Generate an unsigned manifest template for a server name and tool list. Caller fills in arg rules and signs.","write_action":false,"price_micros":0,"input_schema":null},{"name":"attest_inspect_spawn","description":"Pre-flight a spawn request against an in-memory signed manifest object. Returns allowed + matchedRule + blockedReasons[].","write_action":false,"price_micros":0,"input_schema":null},{"name":"attest_keygen","description":"Generate a fresh Ed25519 keypair and write public + private hex files plus return the sha256 fingerprint.","write_action":false,"price_micros":0,"input_schema":null},{"name":"attest_sign_manifest","description":"Sign a manifest file with an Ed25519 private key. Writes signed-manifest JSON to outputPath. The manifest's publicKeyFingerprint must already match the signing key.","write_action":false,"price_micros":0,"input_schema":null},{"name":"attest_verify_manifest","description":"Verify a signed MCP manifest file against an embedded or supplied public key. Returns valid + signer + toolCount + errors[].","write_action":false,"price_micros":0,"input_schema":null}],"scan":{"score":86,"grade":"A","scanned_at":"2026-11-02T21:55:08.325Z","report":{"scannerVersion":"0.1.10","scannedAt":"2026-11-02T21:55:08.257Z","components":{"code":{"score":25,"max":25,"notes":["7 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":12,"max":15,"notes":["local package, no credentials required"]},"maintenance":{"score":15,"max":15,"notes":["last push 1 days ago"]},"identity":{"score":4,"max":10,"notes":["namespace and repository owner differ"]}},"findings":[],"inputs":{"packages":[{"registryType":"npm","identifier":"mcp-attest-demo","version":"0.2.0","found":true,"license":"MIT","hasInstallScripts":false,"dependencyCount":3,"publishedAt":"2026-06-21T16:49:30.593Z","repositoryUrl":"git+https://github.com/studiomeyer-io/mcp-server-attestation.git","weeklyDownloads":127}],"repo":{"found":true,"owner":"studiomeyer-io","repo":"mcp-server-attestation","archived":false,"pushedAt":"2026-11-01T21:17:01Z","stars":0,"forks":0,"openIssues":0,"ownerType":"Organization","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/267274902?v=4","ownerCreatedAt":"2026-03-11T08:17:53Z","license":"MIT"},"icon":{"url":"https://studiomeyer.io/favicon-512.png","source":"registry","width":512,"height":512},"presence":{"stars":0,"forks":0,"downloadsWeek":127,"license":"MIT","lastPushAt":"2026-11-01T21:17:01.000Z","score":26}}}},"grade_history":[],"reviews":[]}