Get Started with Pedigree

Install the MCP server, configure your agent, and start signing commits in under 5 minutes.

Prerequisites

Python 3.11+

Required for pedigree-mcp

uv

Fast Python package manager

Git 2.39+

For attestation refs support

Install uv (if needed)
curl -LsSf https://astral.sh/uv/install.sh | sh
1

Clone the repository

git clone https://github.com/om13rajpal/pedigree.git && cd pedigree

The monorepo contains four packages: pedigree-types, pedigree-mcp, pedigree-web, and pedigree-action.

2

Install the MCP server

Install Python dependencies
cd packages/pedigree-mcp && uv sync
Verify installation
uv run python -m pedigree_mcp health

Expected output: {"status": "ok", "version": "0.1.0"}

3

Configure your AI agent

Add pedigree-mcp to your agent's MCP configuration. Works with Bob, Cursor, Windsurf, or any MCP-compatible client.

Bob (IBM)

# .bob/mcp.json
{
  "mcpServers": {
    "pedigree": {
      "command": "uv",
      "args": ["run", "--directory", "packages/pedigree-mcp",
               "python", "-m", "pedigree_mcp"],
      "transport": "stdio"
    }
  }
}

Cursor / Windsurf

// .cursor/mcp.json or .windsurf/mcp.json
{
  "mcpServers": {
    "pedigree": {
      "command": "uv",
      "args": ["run", "--directory", "packages/pedigree-mcp",
               "python", "-m", "pedigree_mcp"],
      "transport": "stdio"
    }
  }
}
4

Generate signing keys

Generate ed25519 keypair (local signing)
uv run python -m pedigree_mcp keygen

For production, use Sigstore keyless signing via OIDC instead. The ed25519 fallback is for local development and air-gapped environments.

5

Verify everything works

Run the full test suite
pnpm install && pnpm test && pnpm verify-schemas
Test a manual attestation
echo 'console.log("hello")' > test.js && git add test.js && git commit -m "test: verify pedigree" && uv run python -m pedigree_mcp attest $(git rev-parse HEAD)

What's next?