What is the RowAttest remote MCP server?
The RowAttest remote MCP server is a hosted Model Context Protocol endpoint at https://app.rowattest.com/mcp, so AI assistants can connect to it without installing or running anything locally.
RowAttest MCP Server
@RowAttest
Basic information
About RowAttest MCP Server
Run an eight-stage isolation test against a staging Supabase environment and receive a signed attestation.
Connection details
https://app.rowattest.com/mcpSetup
claude mcp add rowattest --transport http https://app.rowattest.com/mcp --header "Authorization: Bearer YOUR_API_KEY"RowAttest MCP Server tools
6Lists the Supabase projects connected to this account with id, name, connection state and whether each is ready to run. Call this first to get a project_id.
Starts an authorization test run on a connected project and returns the run_id and status. If the project already has a run waiting to start, returns that run instead of starting another. Runs that do not fail count against the monthly allowance.
Returns a run's status (queued, running, complete or failed), its current stage, timestamps and, when a signed report exists, its verify_url.
Waits up to timeout_seconds (1 to 60) for a run to finish, then returns the same information as get_run_status. Call it again while the status is still queued or running.
Returns the cells that did not pass in a complete run that has a signed report — verdict, surface, operation, boundary, identity, layer outcomes and notes — plus tenancy flags, blocking findings and, when the report includes catalog hygiene checks, the hygiene block (the checks run, each finding's check, severity, object, detail and hint, and any check not run). For a complete run with no signed report, while one can still be bought on the run page, it returns the run's unverified result instead: the verdict, surface, operation and principal of each cell that did not pass, the run page's finding lines, the counts, the coverage lines, the access model summary and the same hygiene block. The list of cells is empty when every tested cell passed. Cell results contain no fix suggestions: the engine records only what it observed. Hygiene findings are catalog observations, never verdicts; each carries the engine's one-line hint for the project owner's review.
Returns the full signed report of a complete run as the exact stored JSON, with its verify_url and report_sha256 (sha256 of the canonical signed bytes, the fingerprint shown on the verify page). Use get_findings for the compact view.
Overview
What is RowAttest?
Run an eight-stage isolation test against a staging Supabase environment and receive a signed attestation.
How to use RowAttest?
Add https://app.rowattest.com/mcp as a remote HTTP server in an MCP-compatible client. Obtain your own API key from the service and configure it as documented.
Key features of RowAttest
list_projects— Lists the Supabase projects connected to this account with id, name, connection state and whether each is readrun_review— Starts an authorization test run on a connected project and returns the run_id and status. If the project alreget_run_status— Returns a run's status (queued, running, complete or failed), its current stage, timestamps and, when a signedwait_for_run— Waits up to timeout_seconds (1 to 60) for a run to finish, then returns the same information as get_run_status
Connection details
- Transport: Remote Streamable HTTP
- Authentication: API key
Documentation
Frequently asked questions
How do I connect to the RowAttest MCP server?
Add the endpoint https://app.rowattest.com/mcp to any MCP-compatible client such as Claude Code, Cursor, or VS Code. The setup snippets on this page configure each client in one step.
Does the RowAttest MCP server require authentication?
Yes. RowAttest requires an API key — check the official documentation for how to obtain one, then include it in your client's configuration.
Which transport does the RowAttest MCP server use?
RowAttest exposes a streamable-http endpoint, the transport used by remote MCP servers and supported by all major MCP clients.
More remote MCP servers
A
Aayat AI
Pay-per-use data and tools for AI agents: crypto token safety and rug checks, web search with cited answers, page-to-Markdown, up-to-date library docs, package safety, company research and UK/EU open data. 160 tools, 20
AWS Marketplace
Discover, evaluate, and buy solutions for the cloud
AI Video MCP by AITuber
AI Video MCP by AITuber is a hosted MCP server that lets AI agents create and publish video. You connect it once, then ask your agent for a video in plain language. It writes the script, picks a voice, generates the visu
A
AIS Gateway
CVE prioritization using exploitation signals, plus agent heartbeat monitoring and state capsules. Some tools use API-key or x402 access.
ARVX
Email for long-term client relationships: ARVX reads each person first and remembers every pair.
Comments