Sigstore Rekor MCP Server

Environment

This server does not declare environment variables.

Tools show up when the registry metadata or the repository README lists them. GitHub enrichment fills this in when a token is configured.

About

FAQ

What is Sigstore Rekor?

Sigstore Rekor — the public transparency log for software signatures.

How do I install Sigstore Rekor?

Pick a client above and copy the generated config. Cursor and VS Code also have a deep link when the server can run locally or remotely.

Is Sigstore Rekor official?

No. Registry-listed is not the same as vendor-official. Read the methodology for the difference.

How is the trust score calculated?

This listing scores 35 (Limited). The formula is published on the methodology page.

Reviews

0 published · no average

Sign in to review this server.