Server data from the Official MCP Registry
Scan agent payment endpoints (x402, AP2, L402, MPP, 402) for a trust grade A-F before paying.
Scan agent payment endpoints (x402, AP2, L402, MPP, 402) for a trust grade A-F before paying.
Remote endpoints: streamable-http: https://attestagent.org/api/mcp
Valid MCP server (2 strong, 3 medium validity signals). No known CVEs in dependencies. Package registry verified. Imported from the Official MCP Registry.
1 tool verified · Open access · 1 issue found
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
This plugin requests these system permissions. Most are normal for its category.
Set these up before or after installing:
Environment variable: ATTEST_BASE_URL
Available as Local & Remote
This plugin can run on your machine or connect to a hosted endpoint. during install.
From the project's GitHub README.
Trust scanning for agent payments — right inside your AI agent.
attest-mcp is a Model Context Protocol server that lets any MCP-compatible agent (Claude, Cursor, Windsurf, VS Code, and more) scan an agent payment endpoint and get back a letter grade A–F with a clear safety verdict before authorizing a single cent.
It covers the agentic payment protocols in use today: x402, MPP, AP2, L402, and HTTP 402.
Powered by Attest. The scoring engine runs entirely on Attest's servers — this package is a thin client that relays requests, so installing it never exposes any proprietary grading logic.
Autonomous agents are starting to pay for things on their own. A single malicious or misconfigured endpoint can drain funds through impersonation, a blocklisted payout wallet, bait-and-switch pricing, or a broken payment handshake. attest-mcp gives your agent a fast, deterministic safety check it can run as a step in its payment loop.
| Tool | What it does |
|---|---|
attest_scan | Runs a full scan on a payment endpoint URL and returns a grade (A–F), a composite score (0–100), a verdict, danger flags, price, and a link to the full report. Call this before paying an unfamiliar endpoint. |
attest_grade | Fast lookup of the most recent grade for a host that has already been scanned. Good for a quick pre-check. |
No API key required.
Run it directly with npx (no install needed):
npx attest-mcp
The server speaks MCP over stdio, so you normally don't run it by hand — you point your MCP client at it using one of the configs below.
Edit claude_desktop_config.json (Settings → Developer → Edit Config):
{
"mcpServers": {
"attest": {
"command": "npx",
"args": ["-y", "attest-mcp"]
}
}
}
Add to ~/.cursor/mcp.json (or Settings → MCP → Add new server):
{
"mcpServers": {
"attest": {
"command": "npx",
"args": ["-y", "attest-mcp"]
}
}
}
Add to ~/.codeium/windsurf/mcp_config.json:
{
"mcpServers": {
"attest": {
"command": "npx",
"args": ["-y", "attest-mcp"]
}
}
}
Add to .vscode/mcp.json in your workspace:
{
"servers": {
"attest": {
"command": "npx",
"args": ["-y", "attest-mcp"]
}
}
}
Use the command npx -y attest-mcp with the stdio transport.
Prefer not to install anything? Attest also runs a hosted MCP server you can connect to over Streamable HTTP:
https://attestagent.org/api/mcp
Point any remote-MCP-capable client at that URL.
Once connected, just ask your agent in natural language:
"Before you pay, scan
https://api.example.com/paid-resourcewith Attest."
The agent calls attest_scan and gets back something like:
{
"host": "api.example.com",
"grade": "A",
"composite": 95,
"danger": false,
"verdict": "Valid endpoint, established host.",
"priceHuman": "0.01 USDC",
"reportUrl": "https://attestagent.org/r/abc-123"
}
| Environment variable | Default | Description |
|---|---|---|
ATTEST_BASE_URL | https://attestagent.org | Override the Attest API base URL. Only needed for self-hosting or testing. |
Issues and pull requests are welcome — see CONTRIBUTING.md.
MIT © Attest
Be the first to review this server!
by Modelcontextprotocol · Developer Tools
Read, search, and manipulate Git repositories programmatically
by Modelcontextprotocol · Developer Tools
Web content fetching and conversion for efficient LLM usage
by Toleno · Developer Tools
Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.