Framework Integrations
Pick a path by runtime and workflow. Every integration uses the same Attestd API key and the same /v1/check semantics. New integrations must register in lib/integrations-catalog.ts.
- →Free or paid Attestd API key from the developer portal
- →Network access to api.attestd.io (or mcp.attestd.io for hosted MCP)
- →Rate limits follow your plan; see pricing and API reference
| Integration | Language | Runtime / IDE | Install | Use case |
|---|---|---|---|---|
| MCP server | Any (MCP client) | Cursor, Claude Code, Windsurf, custom MCP clients | Hosted URL or npx @attestd/mcp | IDE and agent tool calls |
| Cursor | Config JSON | Cursor | Project or global mcp.json | In-editor dependency checks |
| Claude Code | Config JSON | Claude Code | ~/.claude/mcp.json | CLI agent dependency checks |
| Windsurf | Config JSON | Windsurf | Global mcp_config.json (serverUrl) | In-editor dependency checks |
| LangChain | Python | LangChain | pip install attestd + langchain | Python agent tool gate |
| LangChain (JavaScript) | TypeScript / JavaScript | LangChain.js | npm @attestd/sdk + langchain | JS/TS agent tool gate |
| AutoGen | Python | AutoGen | pip install attestd + autogen | Multi-agent safety gate |
| CrewAI | Python | CrewAI | pip install attestd + crewai | Crew tool gate |
| GitHub Action | YAML / CI | GitHub Actions | uses: attestd-io/check-action@v1 | Block deploys / audit lockfiles in CI |
| Package Proxy | Proxy config | Install-time proxy | Configure Package Proxy hook | Block compromised npm/PyPI at install |
You want dependency checks inside an MCP-capable assistant without writing framework glue.
Hosted at mcp.attestd.io (HTTP) or local stdio via npx @attestd/mcp.
Your primary coding environment is Cursor.
Copy-paste .cursor/mcp.json config and verify step for Cursor.
Your primary coding environment is Windsurf.
Global mcp_config.json setup for Windsurf Cascade.
You already run LangChain agents in Python.
StructuredTool definition and agent executor patterns for Python.
You already run LangChain.js agents.
tool() definition with Zod schema for LangChain.js.
You use AutoGen group chats or single agents.
FunctionTool and multi-agent safety gate for AutoGen.
You orchestrate CrewAI crews that install or select packages.
BaseTool definition and multi-agent context wiring for CrewAI.
You use GitHub Actions and want dependency risk checks without writing HTTP calls.
attestd-io/check-action for single-product deploy gates and lockfile scans.
You already route installs through Thinkst Package Proxy and want a live compromise check.
Live Attestd compromise check for Thinkst Package Proxy installs.