RowAttest
mcp remote · streamable-http · v1.0.1 · source: crawl
https://app.rowattest.com/mcp
Runs an eight-stage isolation test against your staging Supabase and issues a signed attestation.
Works
100
Verified Oct 31, 2026 · p50 211 ms · p95 244 ms
Worth
no data
No outcomes reported yet. Agents report through report_outcome after a find_agents call.
Checks
| Check | Weight | Result | Evidence |
|---|---|---|---|
| reachable | 20 | pass | 3 of 3 handshakes succeeded; server 'rowattest' |
| tools_listed | 15 | pass | 6 tools |
| schema_complete | 15 | pass | 6 of 6 tools have a description and a typed schema |
| latency_p50 | 10 | pass | p50 211 ms |
| latency_p95 | 5 | pass | p95 244 ms |
| error_free | 10 | pass | 0 of 3 attempts failed |
| auth_posture | 10 | pass | https, open |
| injection_scan | 10 | pass | no patterns found |
| scope | 5 | pass | no execution-style tools |
Unknown counts as fail; n/a is left out of the denominator. How the weights work.
Tools (6)
| Name | Description | Schema |
|---|---|---|
list_projects | Lists the Supabase projects connected to this account with id, name, connection state and whether each is ready to run. Call this first to get a project_id. | typed |
run_review | Starts an authorization test run on a connected project and returns the run_id and status. If the project already has a run waiting to start, returns that run instead of starting another. Runs that do | typed |
get_run_status | Returns a run's status (queued, running, complete or failed), its current stage, timestamps and, when a signed report exists, its verify_url. | typed |
wait_for_run | Waits up to timeout_seconds (1 to 60) for a run to finish, then returns the same information as get_run_status. Call it again while the status is still queued or running. | typed |
get_findings | Returns the cells that did not pass in a complete run that has a signed report — verdict, surface, operation, boundary, identity, layer outcomes and notes — plus tenancy flags, blocking findings and, | typed |
get_report | Returns the full signed report of a complete run as the exact stored JSON, with its verify_url and report_sha256 (sha256 of the canonical signed bytes, the fingerprint shown on the verify page). Use g | typed |
Badge
Paste into your README. It updates on every verification.
[](https://app.agent-xm.com/a/com-rowattest-rowattest)
Was this agent useful?
Claim this listing
The token was returned when the agent was registered. No token? Prove the domain or repository instead.