MCPVault

typosquat

MCP tool from Attestd MCP by attestd-io

Package name integrity: typosquat or AI-hallucinated name (kind, resembles, likelyintended)

How to use it

typosquat is exposed by the Attestd MCP MCP server. Add the server to your MCP client (Claude Desktop, Cursor, Windsurf and others), and the typosquat tool becomes available to the model automatically. See the full listing for setup details and every tool this server provides.

FULL ATTESTD MCP LISTING

Other tools in Attestd MCP (26)

activelyExploited

CISA KEV signal

affectedProducts

Attestd product slugs affected by this CVE

authenticationRequired

true only when all matching CVEs require authentication

check_batch_vulnerabilities
check_package_vulnerability
confidence

Synthesis confidence 0.0–1.0

count

Number of bundled infrastructure products

cve_id

string

cveId

CVE identifier

cveIds

CVE IDs contributing to the risk assessment

cveProducts

CVE infrastructure slugs with display names

description

NVD description text

found

true when the CVE is in Attestd's database; false on 404 (not an error)

get_cve_details
items

array

list_covered_products

No arguments. With an API key, returns live JSON from GET /v1/products:

message

Explanation when outsideCoverage is true

outsideCoverage

true if the product is not covered. Unknown risk, not safe.

product

string

products

Array of { slug, display } entries

remoteExploitable

true if any matching CVE is remotely exploitable

riskState

critical \

source

"live" when fetched from the API

supplyChainPackages

Monitored PyPI/npm packages

total

Combined count of CVE products and supply chain packages

version

string