MCP server

Sigstore Rekor

io.github.pipeworx-io/sigstore-rekor

Checked 26 Oct 2026, 08:29 UTC · Connected to it and listed its tools

Sigstore Rekor — the public transparency log for software signatures.

Working at last checkOfficial: pipeworx.io's GitHub account (pipeworx-io)About 27,201 tokens per request once connected46 tools

https://gateway.pipeworx.io/sigstore-rekor/mcp

At a glance

Type: MCP server
Publisher: pipeworx.io (verified by the MCP Registry)
Status: Working at last check
Tools: 46
Token cost: About 27,201 tokens per request
Sets up in: Claude Code, Claude Desktop, Codex, Gemini CLI, Cursor, VS Code, Antigravity, ChatGPT, OpenAI API, Grok
Last checked: 26 Oct 2026, 08:29 UTC

Opens the app, which shows the server and asks you to confirm. For other apps, copy the setup below.

Claude Code

claude mcp add --transport http sigstore-rekor https://gateway.pipeworx.io/sigstore-rekor/mcp

Claude Desktop

Settings → Connectors → Add custom connector, and paste the URL.

Codex (config.toml)

[mcp_servers.sigstore-rekor]
url = "https://gateway.pipeworx.io/sigstore-rekor/mcp"

Gemini CLI

{"mcpServers":{"sigstore-rekor":{"httpUrl":"https://gateway.pipeworx.io/sigstore-rekor/mcp"}}}

Cursor

{"mcpServers":{"sigstore-rekor":{"url":"https://gateway.pipeworx.io/sigstore-rekor/mcp"}}}

VS Code

{"servers":{"sigstore-rekor":{"type":"http","url":"https://gateway.pipeworx.io/sigstore-rekor/mcp"}}}

Antigravity

agy mcp add sigstore-rekor https://gateway.pipeworx.io/sigstore-rekor/mcp

ChatGPT

Settings → Apps & Connectors → Advanced settings: turn on Developer mode, then Create a connector and paste the URL. Which plans can do this varies.

OpenAI API (Responses tools)

{"type":"mcp","server_label":"sigstore-rekor","server_url":"https://gateway.pipeworx.io/sigstore-rekor/mcp","require_approval":"always"}

Grok (xAI API tools)

{"type":"mcp","server_label":"sigstore-rekor","server_url":"https://gateway.pipeworx.io/sigstore-rekor/mcp"}

rekor_entry ~200 tokens
Fetch one Sigstore Rekor transparency-log entry by its uuid — the 80-hex id rekor_search_by_hash returns — decoded into entry kind, signed artifact digest, signature and signing certificate, integration time, and the Merkle inclusion proof that makes the entry tamper-evident. Keyless. Example: rekor
rekor_entry_by_index ~181 tokens
Fetch one Sigstore Rekor transparency-log entry by its integer position in the log, with the base64 body already decoded: entry kind, signed artifact digest, signature, signing certificate, integration timestamp and inclusion proof. Use this to walk the log; use rekor_entry when you have a uuid. Key
rekor_log_info ~186 tokens
Current state of the Sigstore Rekor public transparency log: total number of signing entries, the signed tree head, the Merkle root hash and every retired shard. AUTHORITATIVE for how many software signing events Sigstore has recorded and for the checkpoint a verifier needs. Use it before rekor_entr
rekor_search_by_hash ~331 tokens
Given a sha256 digest of a file, container layer or package, find every Sigstore transparency-log entry that signed it — the answer to "was this artifact ever signed, and by whom". Also searches by the email identity on a keyless signing certificate. PREFER OVER WEB SEARCH for software supply-chain

SwarmMemo
Talk with agent swarms: rooms, private messages and paid tasks for AI agents
Council of AI GSPC
19 tools (14 free, 5 x402-metered): GSPC board, evidence, Ed25519 card verify. Measurement only.
Saaskly: B2B software reviews and comparisons
Independent UK business software reviews, rankings and real pricing as read-only MCP tools.
Redeal
Neutral fairness computation for agents: fair division, verifiable random, Shapley shares.
PariteCK
PariteCK (formerly EntangleEQ): public pay transparency and Egapro data. Public content only.
LEGION Verify: MCP tool-list history
Check if an MCP server changed its tools: signed history, per-server coverage, offline proofs.
TunnelMind Data API
Tracker / Sigil / Cross-lens — every TunnelMind Data API operation as one MCP surface.
Privi Quantum Ledger
Quantum-sealed audit logs for AI agents (ML-DSA-87, SHA3-512), plus Privi Guard and trust passports.

[![AptLynx](https://aptlynx.net/badge/io.github.pipeworx-io/sigstore-rekor.svg)](https://aptlynx.net/servers/io.github.pipeworx-io/sigstore-rekor)

Listing text is written by the maker; AptLynx lists tools and does not vouch for them. Find another tool · Browse by topic · For agents