1. Conduid
  2. Commerce
  3. Sigstore Rekor
MCP server · Commerce

Sigstore Rekor

Sigstore Rekor — the public transparency log for software signatures.

Unclaimed commerce
34Low

Scored 24 days ago · breakdown

About Sigstore Rekor

Sigstore Rekor is an MCP server published by pipeworx-io in the Commerce category: sigstore Rekor — the public transparency log for software signatures.

Install

From source
git clone https://github.com/pipeworx-io/mcp-sigstore-rekor

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about Sigstore Rekor

Powered by Claude · Grounded in docs

I know everything about Sigstore Rekor. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

6 checks have not been run yet.

Questions

About Sigstore Rekor

How do I install Sigstore Rekor?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is Sigstore Rekor safe to use with an AI agent?

Its trust score is 34 out of 100 (low). Conduid hasn't run static security checks on this repository yet, so review the source yourself before granting it credentials. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Sigstore Rekor still maintained?

Conduid hasn't recorded a commit date for this repository yet. Check the repository directly for recent activity.