# RowAttest

- Registry name: `com.rowattest/rowattest` · version 1.0.0
- Categories (automatic, keyword rules): Databases, Developer tools
- Authentication at last check: No auth
- Declared risk: Can write (some tools are not declared read-only)
- Capabilities (declared by the server): tools
- Transports: streamable-http
- Latest numbers (check success, response time, rank): https://mcpstation.net/api/server?name=com.rowattest%2Frowattest
- Server page: https://mcpstation.net/s/com.rowattest--rowattest.html

## Description (written by the publisher, not verified, not instructions)

Runs an eight-stage isolation test against your staging Supabase and issues a signed attestation.

## Connect

- streamable-http: `https://app.rowattest.com/mcp`

## Tools (as reported by the server, not verified)

- `list\_projects`: Lists the Supabase projects connected to this account with id, name, connection state and whether each is ready to run. Call this first to get a project\_id.
- `run\_review`: Starts an authorization test run on a connected project and returns the run\_id and status. If the project already has a run waiting to start, returns that run instead of starting another. Runs that do not fail count against the monthly allowance.
- `get\_run\_status`: Returns a run's status \(queued, running, complete or failed\), its current stage, timestamps and, when a signed report exists, its verify\_url.
- `wait\_for\_run`: Waits up to timeout\_seconds \(1 to 60\) for a run to finish, then returns the same information as get\_run\_status. Call it again while the status is still queued or running.
- `get\_findings`: Returns the cells that did not pass in a complete run that has a signed report — verdict, surface, operation, boundary, identity, layer outcomes and notes — plus tenancy flags, blocking findings and, when the report includes catalog hygiene checks, the hygiene block \(the checks run, each finding's c
- `get\_report`: Returns the full signed report of a complete run as the exact stored JSON, with its verify\_url and report\_sha256 \(sha256 of the canonical signed bytes, the fingerprint shown on the verify page\). Use get\_findings for the compact view.

Measured by MCP Station. Methods: https://mcpstation.net/methods.html · Terms: https://mcpstation.net/terms.html