{"$schema":"https://wellknown.network/schemas/agent-record-v1.json","schemaVersion":"1","id":"ag_m96tkw8ev2gk","handle":"always-ready-allies-llc-warden-mcp","url":"https://wellknown.network/agents/always-ready-allies-llc-warden-mcp","links":{"self":"https://wellknown.network/agents/always-ready-allies-llc-warden-mcp/record.json","html":"https://wellknown.network/agents/always-ready-allies-llc-warden-mcp","markdown":"https://wellknown.network/agents/always-ready-allies-llc-warden-mcp/record.md","api":"https://wellknown.network/api/v1/agents/always-ready-allies-llc-warden-mcp","status":"https://wellknown.network/api/v1/agents/always-ready-allies-llc-warden-mcp/status","claim":"https://wellknown.network/agents/always-ready-allies-llc-warden-mcp/claim","claimApi":"https://wellknown.network/api/v1/claims","claimDescriptor":"https://wellknown.network/agents/always-ready-allies-llc-warden-mcp/claim.json","badge":"https://wellknown.network/agents/always-ready-allies-llc-warden-mcp/badge.svg","openapi":"https://wellknown.network/openapi.json"},"ard":{"identifier":"urn:air::server:always-ready-allies-llc-warden-mcp","type":"application/mcp-server-card+json"},"kind":"mcp_server","declared":{"name":"warden-mcp","summary":"Drop-in MCP security middleware: audit · policy · human-approval · injection defense","description":"# 🛡️ Warden\n\n[![PyPI](https://img.shields.io/pypi/v/warden-mcp?color=2d7)](https://pypi.org/project/warden-mcp/)\n[![Python](https://img.shields.io/pypi/pyversions/warden-mcp)](https://pypi.org/project/warden-mcp/)\n[![License: Apache 2.0](https://img.shields.io/badge/license-Apache%202.0-blue.svg)](LICENSE)\n\n**Drop-in security middleware for MCP.** Point your AI client at Warden instead of the raw\ntool-server — one line of config, zero code changes — and every tool call is logged tamper-evidently,\nallowed/denied/gated by policy, held for human approval when it's dangerous, and scanned for\nprompt-injection and secret/PII exfiltration.\n\n> Everyone's building agents. Warden makes them safe to run.\n\n## How it works\n\n```\nAI client ──MCP──▶  WARDEN  ──MCP──▶  downstream MCP servers\n                   policy · audit · approval · guard       (filesystem, github, payments, …)\n```\n\nWarden is an MCP **server** to your client and an MCP **client** to each real server. It aggregates\ntheir tools (namespaced `server__tool`) and routes every `tools/call` through:\n\n**policy → audit(request) → guard(args) → [deny | approve | allow] → forward → guard(result) → audit(response)**\n\n## Quickstart\n\n```bash\nuvx warden-mcp init                 # write a starter warden.yaml\nuvx warden-mcp run --config warden.yaml\nuvx warden-mcp audit verify         # prove the audit log wasn't altered\n```\n\nRug-pull defense (TOFU tool-definition pinning) is **on by default** — a downstream tool whose\ndefinition changes after you first approved it is quarantined until you re-approve it.\n\n### Optional: tamper-evidence against a hostile operator\n\nThe plain audit log detects edits-without-rechain. To make tampering detectable even by someone with\nwrite access to the host, enable **forward-secure sealing** (stdlib, no extra deps):\n\n```bash\nuvx warden-mcp audit setup-keys --out warden.seed   # prints a VERIFICATION SEED — store it OFF-box\nuvx warden-mcp run --seal-state warden_seal_state.json --anchor heads.jsonl\nu…","publisher":{"name":"Always Ready Allies LLC","url":null},"homepage":null,"repository":null,"version":"0.2.1","license":"Apache-2.0","protocols":["mcp"],"tags":["ai-agents","audit","guardrails","mcp","prompt-injection","security"],"pricing":null,"endpoints":[{"url":"pypi:warden-mcp","type":"package_pypi","auth":null,"probeable":false}],"skills":null,"tools":null,"extra":null,"attribution":{"kind":"pypi","name":"pypi","license":"pypi","summary":"pypi","version":"pypi","description":"pypi","publisherName":"pypi"}},"derived":{"capabilities":[{"slug":"ai.prompting","name":"Prompt Management","confidence":1,"provenance":"derived"},{"slug":"dev.filesystem","name":"Filesystem","confidence":0.882,"provenance":"derived"},{"slug":"commerce.payments","name":"Payments","confidence":0.814,"provenance":"derived"}],"categories":["ai","commerce","dev"],"language":"en"},"observed":{"status":"unknown","statusReason":"Distributed as a package to run locally; no network endpoint to check.","lastOkAt":null,"lastProbedAt":null,"statusComputedAt":null,"reliability30d":null,"latestObservations":[],"tools":null,"package":{"name":"warden-mcp","registry":"pypi","observedAt":"2026-09-10T15:25:21.041Z","publishedAt":"2026-07-14T02:14:07.807459Z","latestVersion":"0.2.1"}},"verification":{"claimed":false,"claimedAt":null,"proofs":[]},"provenance":{"sources":[{"source":"pypi","key":"warden-mcp","url":"https://pypi.org/project/warden-mcp/","firstSeenAt":"2026-09-10T15:24:06.974Z","fetchedAt":"2026-09-10T15:24:06.974Z","normalizedAt":"2026-09-10T15:24:06.974Z"}]},"firstSeenAt":"2026-09-10T15:24:06.974Z","updatedAt":"2026-09-10T15:25:21.041Z"}