Sigstore Rekor MCP Server: Install & Setup

Install Sigstore Rekor in Claude Code

Remote URL

Claude Code

claude mcp add --transport http sigstore-rekor https://gateway.pipeworx.io/sigstore-rekor/mcp

mcp.json (Claude Desktop, Cursor, VS Code, Windsurf)

{
  "mcpServers": {
    "sigstore-rekor": {
      "url": "https://gateway.pipeworx.io/sigstore-rekor/mcp"
    }
  }
}

npm

Claude Code

claude mcp add sigstore-rekor -- npx -y @pipeworx/mcp-sigstore-rekor

mcp.json (Claude Desktop, Cursor, VS Code, Windsurf)

{
  "mcpServers": {
    "sigstore-rekor": {
      "command": "npx",
      "args": [
        "-y",
        "@pipeworx/mcp-sigstore-rekor"
      ]
    }
  }
}

Frequently asked questions

What does the Sigstore Rekor MCP server do?

Sigstore Rekor — the public transparency log for software signatures.

Is the Sigstore Rekor MCP server free?

Yes, most likely. Open source and no paid account or API key is mentioned in the listing. Check the provider for current pricing.

Does Sigstore Rekor run locally or remotely?

Local + Remote. Can run locally or be used as a hosted remote server.

How do I add Sigstore Rekor to Claude Code?

Run: claude mcp add --transport http sigstore-rekor https://gateway.pipeworx.io/sigstore-rekor/mcp

More monitoring & observability MCP servers

View all

Netdata

81k

netdata/netdata

Discovery, exploration, reporting and root cause analysis over Netdata metrics, logs, systems, containers, processes and network connections.

Local + RemoteAccount needed

openstatus

9.2k

openstatusHQ/openstatus

Manage monitors, status pages, incidents and maintenances in your openstatus workspace.

RemoteAccount needed

OneUptime

7.8k

OneUptime/oneuptime

Manage incidents, alerts, monitors, status pages, on-call and telemetry in OneUptime.

RemoteAccount needed

Grafana

3.6k

grafana/mcp-grafana

Search dashboards, investigate incidents and query datasources in your Grafana instance.

Local + RemoteAccount neededPython

Superlog

1.5k

superloglabs/superlog

Open-source agent that observes and fixes your application. Query logs, traces, metrics, incidents.

RemoteFree

Log10x

113k

log-10x/log10x-mcp

Rank log patterns by volume and cost, then compact (Splunk, self-managed Elasticsearch), tier down or offload the excess over each cap. Runs locally; no log data reaches log10x.

LocalAccount neededTypeScript