★ 0 stars
TypeScript
💻 Code/Dev Tools
Updated 1d ago
Layer-2 supply-chain hardening for MCP servers — Ed25519-signed tool manifests, runtime spawn-attestation, default-deny argument sanitizer. Defends against marketplace-poisoning + CVE-2025-69256 + CVE-2025-61591.
View on GitHub →
Quick Install
Copy the config for your editor. Some servers may need additional setup — check the README.
Add to claude_desktop_config.json:
{
"mcpServers": {
"mcp-server-attestati": {
"command": "npx",
"args": [
"-y",
"studiomeyer-io/mcp-server-attestation"
]
}
}
}
Run in terminal:
claude mcp add mcp-server-attestati npx -y studiomeyer-io/mcp-server-attestation
Add to .cursor/mcp.json:
{
"mcpServers": {
"mcp-server-attestati": {
"command": "npx",
"args": [
"-y",
"studiomeyer-io/mcp-server-attestation"
]
}
}
}
Topics
attestationclicve-2025-61591cve-2025-69256ed25519manifestmcpmcp-servermodel-context-protocolsecuritysigningsigstoresupply-chain-securitytypescript