Attest

Attest MCP Server

Trust scanning for agent payments — right inside your AI agent.

attest-mcp is a Model Context Protocol server that lets any MCP-compatible agent (Claude, Cursor, Windsurf, VS Code, and more) scan an agent payment endpoint and get back a letter grade A–F with a clear safety verdict before authorizing a single cent.

It covers the agentic payment protocols in use today: x402, MPP, AP2, L402, and HTTP 402.

Powered by Attest. The scoring engine runs entirely on Attest's servers — this package is a thin client that relays requests, so installing it never exposes any proprietary grading logic.

Why

Autonomous agents are starting to pay for things on their own. A single malicious or misconfigured endpoint can drain funds through impersonation, a blocklisted payout wallet, bait-and-switch pricing, or a broken payment handshake. attest-mcp gives your agent a fast, deterministic safety check it can run as a step in its payment loop.

Tools

Requirements

• Node.js 18 or newer
• Any MCP-compatible client

No API key required.

Quick start

Run it directly with npx (no install needed):

npx attest-mcp

The server speaks MCP over stdio, so you normally don't run it by hand — you point your MCP client at it using one of the configs below.

Client setup

Claude Desktop

Edit claude_desktop_config.json (Settings → Developer → Edit Config):

{

"mcpServers": { "attest": { "command": "npx", "args": ["-y", "attest-mcp"] } } }

Cursor

Add to ~/.cursor/mcp.json (or Settings → MCP → Add new server):

{

"mcpServers": { "attest": { "command": "npx", "args": ["-y", "attest-mcp"] } } }

Windsurf

Add to ~/.codeium/windsurf/mcp_config.json:

{

"mcpServers": { "attest": { "command": "npx", "args": ["-y", "attest-mcp"] } } }

VS Code

Add to .vscode/mcp.json in your workspace:

{

"servers": { "attest": { "command": "npx", "args": ["-y", "attest-mcp"] } } }

Any other MCP client

Use the command npx -y attest-mcp with the stdio transport.

Remote server (no install)

Prefer not to install anything? Attest also runs a hosted MCP server you can connect to over Streamable HTTP:

https://attestagent.org/api/mcp

Point any remote-MCP-capable client at that URL.

Usage example

Once connected, just ask your agent in natural language:

"Before you pay, scan https://api.example.com/paid-resource with Attest."

The agent calls attest_scan and gets back something like:

{

"host": "api.example.com", "grade": "A", "composite": 95, "danger": false, "verdict": "Valid endpoint, established host.", "priceHuman": "0.01 USDC", "reportUrl": "https://attestagent.org/r/abc-123" }

Configuration

Security & privacy

• No secrets, no accounts, no API keys. The server holds no credentials.
• No proprietary logic ships here. Grading happens server-side; this package only relays requests and formats responses.
• Inputs are validated before any request is made.
• Outbound only. The server makes HTTPS requests to the Attest API and speaks MCP over stdio — it opens no inbound ports.
• Scanned URLs and results are logged to Attest's public directory. Do not scan endpoints whose URL or response contains private or sensitive information. See attestagent.org/legal.

Links

• Website: attestagent.org
• Developer docs: attestagent.org/developers
• Methodology: attestagent.org/methodology
• X / Twitter: @Attestagent

Contributing

Issues and pull requests are welcome — see CONTRIBUTING.md.

License

MIT © Attest