com.rowattest/rowattest

up checked 2026-11-11T07:37:54.055Z

Unclaimed · Unverified

Publisher-provided title

RowAttest

Publisher-provided description

Runs an eight-stage isolation test against your staging Supabase and issues a signed attestation.

Summary by lookupd

Runs an isolation test on a staging database project and returns findings and a signed attestation report with verification.

Install

Claude Code, remote (streamable-http)

claude mcp add --transport http rowattest https://app.rowattest.com/mcp

Codex, remote (streamable-http)

codex mcp add rowattest --url https://app.rowattest.com/mcp

Cursor, remote (streamable-http) → .cursor/mcp.json

{
  "mcpServers": {
    "rowattest": {
      "url": "https://app.rowattest.com/mcp"
    }
  }
}

Other clients: docs. Or tell your agent: Set up lookupd for me: read https://lookupd.com/agent.md and follow it.

Publisher-provided text

list_projects Lists the Supabase projects connected to this account with id, name, connection state and whether each is ready to run. Call this first to get a project_id.
run_review Starts an authorization test run on a connected project and returns the run_id and status. If the project already has a run waiting to start, returns that run i
get_run_status Returns a run's status (queued, running, complete or failed), its current stage, timestamps and, when a signed report exists, its verify_url.
wait_for_run Waits up to timeout_seconds (1 to 60) for a run to finish, then returns the same information as get_run_status. Call it again while the status is still queued o
get_findings Returns the cells that did not pass in a complete run that has a signed report — verdict, surface, operation, boundary, identity, layer outcomes and notes — plu
get_report Returns the full signed report of a complete run as the exact stored JSON, with its verify_url and report_sha256 (sha256 of the canonical signed bytes, the fing
verify_attestation Checks a RowAttest attestation published by a site or MCP server. Give it the origin (for example https://example.com); it fetches /.well-known/rowattest.json t

Shows this live status and links here; updates hourly.

[![lookupd status](https://lookupd.com/badge/com.rowattest/rowattest.svg)](https://lookupd.com/servers/com.rowattest/rowattest)