rush

Overview Schema Source Related Servers Discussions Admin

rush_attest_generate

Generate build attestations for code artifacts to verify provenance, enforce trusted builders and signers, and control allowed actions.

Instructions

Deprecated alias for rush_attest

Input Schema

TableJSON Schema

Name	Required	Default
`path`	Yes
`verify`	No
`allow_slow`	No
`builder_id`	No	https://rush-cli.org/builder/v1
`allow_build`	No
`output_path`	No
`allow_browser`	No
`allow_network`	No
`artifact_path`	No
`trusted_roots`	No
`allow_download`	No
`allowed_signers`	No
`allowed_builders`	No
`allow_cache_write`	No
`allow_artifact_write`	No

Output Schema

TableJSON Schema

Name	Required	Description	Default
`raw`	No
`tool`	No
`engine`	No
`status`	No
`metrics`	No
`summary`	No
`findings`	No
`metadata`	No
`artifacts`	No
`duration_ms`	No
`review_kind`	No
`engine_version`	No
`review_provider`	No

Schema Changelog

Changes observed during successful MCP inspections.

Changed33 schema fields changedv0.2.2Sep 15, 2026

addedInput schema / properties / allow_artifact_write

Added value: +{
+  "default": false,
+  "title": "Allow Artifact Write",
+  "type": "boolean"
+}

addedInput schema / properties / allow_browser

Added value: +{
+  "default": false,
+  "title": "Allow Browser",
+  "type": "boolean"
+}

addedInput schema / properties / allow_build

Added value: +{
+  "default": false,
+  "title": "Allow Build",
+  "type": "boolean"
+}

addedInput schema / properties / allow_cache_write

Added value: +{
+  "default": false,
+  "title": "Allow Cache Write",
+  "type": "boolean"
+}

addedInput schema / properties / allow_download

Added value: +{
+  "default": false,
+  "title": "Allow Download",
+  "type": "boolean"
+}

addedInput schema / properties / allow_network

Added value: +{
+  "default": false,
+  "title": "Allow Network",
+  "type": "boolean"
+}

addedInput schema / properties / allow_slow

Added value: +{
+  "default": false,
+  "title": "Allow Slow",
+  "type": "boolean"
+}

addedInput schema / properties / allowed_builders

Added value: +{
+  "default": [],
+  "items": {
+    "type": "string"
+  },
+  "title": "Allowed Builders",
+  "type": "array"
+}

addedInput schema / properties / allowed_signers

Added value: +{
+  "default": [],
+  "items": {
+    "type": "string"
+  },
+  "title": "Allowed Signers",
+  "type": "array"
+}

addedInput schema / properties / builder_id

Added value: +{
+  "default": "https://rush-cli.org/builder/v1",
+  "title": "Builder Id",
+  "type": "string"
+}

addedInput schema / properties / output_path

Added value: +{
+  "default": "",
+  "title": "Output Path",
+  "type": "string"
+}

addedInput schema / properties / path

Added value: +{
+  "format": "path",
+  "title": "Path",
+  "type": "string"
+}

addedInput schema / properties / trusted_roots

Added value: +{
+  "default": [],
+  "items": {
+    "type": "string"
+  },
+  "title": "Trusted Roots",
+  "type": "array"
+}

addedInput schema / properties / verify

Added value: +{
+  "default": "",
+  "title": "Verify",
+  "type": "string"
+}

addedInput schema / required
```
Added value: +[
+  "path"
+]
```

changedInput schema / title

Previous value: -"mcp_rush_attest_generateArguments"New value: +"__call__Arguments"

addedOutput schema / $defs

Added value: +{
+  "Finding": {
+    "description": "One issue from any engine. total=False because not all engines\npopulate every field (e.g. heuristics may lack `rule`).",
+    "properties": {
+      "column": {
+        "title": "Column",
+        "type": "integer"
+      },
+      "evidence": {
+        "anyOf": [
+          {
+            "additionalProperties": true,
+            "type": "object"
+          },
+          {
+            "type": "string"
+          },
+          {
+            "type": "null"
+          }
+        ],
+        "title": "Evidence"
+      },
+      "fingerprint": {
+        "title": "Fingerprint",
+        "type": "string"
+      },
+      "fix": {
+        "anyOf": [
+          {
+            "additionalProperties": true,
+            "type": "object"
+          },
+          {
+            "type": "null"
+          }
+        ],
+        "title": "Fix"
+      },
+      "freshness": {
+        "anyOf": [
+          {
+            "type": "string"
+          },
+          {
+            "type": "null"
+          }
+        ],
+        "title": "Freshness"
+      },
+      "line": {
+        "title": "Line",
+        "type": "integer"
+      },
+      "message": {
+        "title": "Message",
+        "type": "string"
+      },
+      "patch": {
+        "anyOf": [
+          {
+            "type": "string"
+          },
+          {
+            "type": "null"
+          }
+        ],
+        "title": "Patch"
+      },
+      "path": {
+        "title": "Path",
+        "type": "string"
+      },
+      "provenance": {
+        "anyOf": [
+          {
+            "type": "string"
+          },
+          {
+            "type": "null"
+          }
+        ],
+        "title": "Provenance"
+      },
+      "remediation": {
+        "anyOf": [
+          {
+            "additionalProperties": true,
+            "type": "object"
+          },
+          {
+            "type": "string"
+          },
+          {
+            "type": "null"
+          }
+        ],
+        "title": "Remediation"
+      },
+      "rule": {
+        "title": "Rule",
+        "type": "string"
+      },
+      "rule_id": {
+        "title": "Rule Id",
+        "type": "string"
+      },
+      "severity": {
+        "enum": [
+          "info",
+          "warn",
+          "error"
+        ],
+        "title": "Severity",
+        "type": "string"
+      },
+      "suggested_fix": {
+        "anyOf": [
+          {
+            "type": "string"
+          },
+          {
+            "type": "null"
+          }
+        ],
+        "title": "Suggested Fix"
+      }
+    },
+    "title": "Finding",
+    "type": "object"
+  }
+}

addedOutput schema / properties / artifacts

Added value: +{
+  "anyOf": [
+    {
+      "items": {
+        "type": "string"
+      },
+      "type": "array"
+    },
+    {
+      "type": "null"
+    }
+  ],
+  "default": null,
+  "title": "Artifacts"
+}

addedOutput schema / properties / duration_ms

Added value: +{
+  "default": null,
+  "title": "Duration Ms",
+  "type": "integer"
+}

addedOutput schema / properties / engine

Added value: +{
+  "anyOf": [
+    {
+      "type": "string"
+    },
+    {
+      "type": "null"
+    }
+  ],
+  "default": null,
+  "title": "Engine"
+}

addedOutput schema / properties / engine_version

Added value: +{
+  "anyOf": [
+    {
+      "type": "string"
+    },
+    {
+      "type": "null"
+    }
+  ],
+  "default": null,
+  "title": "Engine Version"
+}

addedOutput schema / properties / findings

Added value: +{
+  "default": null,
+  "items": {
+    "$ref": "#/$defs/Finding"
+  },
+  "title": "Findings",
+  "type": "array"
+}

addedOutput schema / properties / metadata

Added value: +{
+  "anyOf": [
+    {
+      "additionalProperties": true,
+      "type": "object"
+    },
+    {
+      "type": "null"
+    }
+  ],
+  "default": null,
+  "title": "Metadata"
+}

addedOutput schema / properties / metrics

Added value: +{
+  "anyOf": [
+    {
+      "additionalProperties": {
+        "anyOf": [
+          {
+            "type": "integer"
+          },
+          {
+            "type": "number"
+          },
+          {
+            "type": "string"
+          },
+          {
+            "type": "null"
+          }
+        ]
+      },
+      "type": "object"
+    },
+    {
+      "type": "null"
+    }
+  ],
+  "default": null,
+  "title": "Metrics"
+}

addedOutput schema / properties / raw

Added value: +{
+  "anyOf": [
+    {},
+    {
+      "type": "null"
+    }
+  ],
+  "default": null,
+  "title": "Raw"
+}

removedOutput schema / properties / result

Removed value: -{
-  "title": "Result",
-  "type": "string"
-}

addedOutput schema / properties / review_kind

Added value: +{
+  "anyOf": [
+    {
+      "enum": [
+        "heuristic",
+        "llm"
+      ],
+      "type": "string"
+    },
+    {
+      "type": "null"
+    }
+  ],
+  "default": null,
+  "title": "Review Kind"
+}

addedOutput schema / properties / review_provider

Added value: +{
+  "anyOf": [
+    {
+      "type": "string"
+    },
+    {
+      "type": "null"
+    }
+  ],
+  "default": null,
+  "title": "Review Provider"
+}

addedOutput schema / properties / status

Added value: +{
+  "default": null,
+  "enum": [
+    "ok",
+    "warn",
+    "fail",
+    "error",
+    "skipped"
+  ],
+  "title": "Status",
+  "type": "string"
+}

addedOutput schema / properties / summary

Added value: +{
+  "default": null,
+  "title": "Summary",
+  "type": "string"
+}

addedOutput schema / properties / tool

Added value: +{
+  "default": null,
+  "title": "Tool",
+  "type": "string"
+}

removedOutput schema / required
```
Removed value: -[
-  "result"
-]
```

changedOutput schema / title

Previous value: -"mcp_rush_attest_generateOutput"New value: +"ToolResult"

First observedv0.3.0Aug 30, 2026

TDQS

B3.1/5.0

Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the full behavioral burden. It only discloses deprecation status and equivalence to rush_attest; it does not describe side effects, permissions, rate limits, or any concrete execution behavior.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single compact sentence with no filler, front-loading the deprecation status and the alias target. For a deprecated alias, this is an appropriately concise and clear structure.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The redirect information is sufficient for a deprecated stub, but the tool has 15 parameters, no annotations, and zero schema descriptions. If an agent ever needed to invoke this alias directly, it would lack almost all context about parameter behavior and tool side effects.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters1/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0% and there are 15 parameters, yet the description provides no semantic information about any of them. The agent gets no help understanding path, verify, allow_* flags, or other settings from the description.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose3/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly identifies the tool as a deprecated alias for rush_attest, which distinguishes it from siblings, but it never states what rush_attest actually does. The agent can infer the tool's behavior only indirectly from the sibling name, leaving the purpose vague.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description explicitly labels the tool as deprecated and names rush_attest as the canonical tool. This gives clear when-not-to-use guidance and a direct alternative, which is exactly what an agent needs to route away from a deprecated alias.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Deploy Server