RowAttest
Runs an eight-stage isolation test against your staging Supabase and issues a signed attestation.
Connector by rowattest.comOfficial · Domain verified by the MCP Registry
Install
Works with Claude Code, VS Code, Cursor, Windsurf. Read the repository before you give any tool access to your data.
npx agentmarket install connector/rowattest-com-rowattest
Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.
Remote endpoint
https://app.rowattest.com/mcpRemote (HTTP)
Get the weekly diff
The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.
About
Reviews
Write a reviewNo reviews yet. Installed it? Reviews come from verified installers only. How reviews work
Permissions
What this server can do and what it asks for, from its tool list and install config. Checked Oct 25, 2026.
- Tools
- 5 read · 1 write · 0 delete
- Secrets
- None asked for
- Install scripts
- Nothing to install (hosted)
- Runs as
- Hosted (remote endpoint)
Tools by what they do 6
From the running server's own tool list (tools/list) on Oct 25, 2026.
Read 5 · Look things up without changing anything.
get_findingsget_reportget_run_statuslist_projectswait_for_run
Write 1 · Create, change, send or run things.
run_review
Secrets and settings it asks for
Other settings (environment variables or headers).
Authorization
Network hosts it talks to 1
app.rowattest.com· found in remote endpoint, install command
Tools (6)
As the server listed them on Oct 25, 2026. Descriptions are the server’s own words; hidden characters are shown as [U+…].
get_findingsread-onlyReturns the cells that did not pass in a complete run that has a signed report — verdict, surface, operation, boundary, identity, layer outcomes and notes — plus tenancy flags, blocking findings and, when the report includes catalog hygiene checks, the hygiene block (the checks run, each finding's check, severity, object, detail and hint, and any check not run). For a complete run with no signed report, while one can still be bought on the run page, it returns the run's unverified result instead: the verdict, surface, operation and principal of each cell that did not pass, the run page's findi…
get_reportread-onlyReturns the full signed report of a complete run as the exact stored JSON, with its verify_url and report_sha256 (sha256 of the canonical signed bytes, the fingerprint shown on the verify page). Use get_findings for the compact view.
get_run_statusread-onlyReturns a run's status (queued, running, complete or failed), its current stage, timestamps and, when a signed report exists, its verify_url.
list_projectsread-onlyLists the Supabase projects connected to this account with id, name, connection state and whether each is ready to run. Call this first to get a project_id.
run_reviewStarts an authorization test run on a connected project and returns the run_id and status. If the project already has a run waiting to start, returns that run instead of starting another. Runs that do not fail count against the monthly allowance.
wait_for_runread-onlyWaits up to timeout_seconds (1 to 60) for a run to finish, then returns the same information as get_run_status. Call it again while the status is still queued or running.
Signals
- Last release
- Oct 10, 2026 (19 days ago)
Details
- Registry name
com.rowattest/rowattest- Version
- 1.0.0
- Auth
- Bearer token
- License
- License unknown
- Website
- rowattest.com
- First seen
- Oct 24, 2026
- Last checked
- Oct 24, 2026
- Source
- Official MCP Registry
Cite this page
RowAttest MCP server. Agent Mart. https://agentmart.dev/connectors/rowattest-com-rowattest (last updated 2026-10-24)