attesta CLI is installed automatically with the Python package. It provides subcommands for project initialization, audit log inspection, trust management, and MCP server proxying.
Installation
Command Tree
| Command | Description |
|---|---|
attesta init | Create attesta.yaml in current directory |
attesta init --force | Overwrite existing config |
| attesta audit | |
attesta audit verify | Verify hash-chain integrity |
attesta audit stats | Print approval statistics |
attesta audit rubber-stamps | List suspiciously fast approvals |
| attesta trust | |
attesta trust show <agent_id> | Show trust profile for an agent |
attesta trust list | List all agents and trust scores |
attesta trust revoke <agent_id> | Revoke trust for an agent |
| attesta mcp | |
attesta mcp wrap -- <command> | Wrap MCP server with Attesta proxy |
attesta version | Print the attesta version |
Default Paths
All data files are stored in a.attesta/ directory within your project:
| File | Default Path | Description |
|---|---|---|
| Audit log | .attesta/audit.jsonl | SHA-256 hash-chained JSONL audit trail |
| Trust store | .attesta/trust.json | Per-agent trust profiles and history |
| Config | attesta.yaml | Project-level configuration |
Global Help
Every command and subcommand supports--help:
Quick Examples
Next Steps
attesta init
Generate an attesta.yaml config file
attesta audit
Inspect and verify the audit trail
attesta trust
Manage agent trust profiles
attesta mcp wrap
Proxy MCP servers with approval