Get Started with Pedigree
Install the MCP server, configure your agent, and start signing commits in under 5 minutes.
Prerequisites
Python 3.11+
Required for pedigree-mcp
uv
Fast Python package manager
Git 2.39+
For attestation refs support
Install uv (if needed)
curl -LsSf https://astral.sh/uv/install.sh | sh1
Clone the repository
git clone https://github.com/om13rajpal/pedigree.git && cd pedigreeThe monorepo contains four packages: pedigree-types, pedigree-mcp, pedigree-web, and pedigree-action.
2
Install the MCP server
Install Python dependencies
cd packages/pedigree-mcp && uv syncVerify installation
uv run python -m pedigree_mcp healthExpected output: {"status": "ok", "version": "0.1.0"}
3
Configure your AI agent
Add pedigree-mcp to your agent's MCP configuration. Works with Bob, Cursor, Windsurf, or any MCP-compatible client.
Bob (IBM)
# .bob/mcp.json
{
"mcpServers": {
"pedigree": {
"command": "uv",
"args": ["run", "--directory", "packages/pedigree-mcp",
"python", "-m", "pedigree_mcp"],
"transport": "stdio"
}
}
}Cursor / Windsurf
// .cursor/mcp.json or .windsurf/mcp.json
{
"mcpServers": {
"pedigree": {
"command": "uv",
"args": ["run", "--directory", "packages/pedigree-mcp",
"python", "-m", "pedigree_mcp"],
"transport": "stdio"
}
}
}4
Generate signing keys
Generate ed25519 keypair (local signing)
uv run python -m pedigree_mcp keygenFor production, use Sigstore keyless signing via OIDC instead. The ed25519 fallback is for local development and air-gapped environments.
5
Verify everything works
Run the full test suite
pnpm install && pnpm test && pnpm verify-schemasTest a manual attestation
echo 'console.log("hello")' > test.js && git add test.js && git commit -m "test: verify pedigree" && uv run python -m pedigree_mcp attest $(git rev-parse HEAD)