Mandare MCP
An open-source control and accountability layer for AI agent fleets that provides signed identities, spending limits, and a tamper-evident ledger. It allows operators to verify agent actions, enforce budgets, and execute kill switches for runaway agents, ensuring local-first, non-custodial security.
Package and access
Local package with source-attributed installation metadata. Koskamo does not execute packages during review.
What you can do with it
- Verify an agent fleet's tamper-evident ledger
- Check and enforce agent spending budgets
- Kill a runaway agent via offline switch
- Manage signed agent identities and mandates
Source and maintenance
- Maintenance checked
Packages and installation
Source-provided package data. Koskamo has not executed or live-probed this package.
@mandarelabs/mcp-server 0.1.0
{
"version": "0.1.0",
"transport": "stdio",
"identifier": "@mandarelabs/mcp-server",
"registryType": "npm",
"registryBaseUrl": "https://registry.npmjs.org",
"environmentVariables": [
{
"name": "MANDARE_LEDGER_DB",
"isRequired": true,
"description": "Path to the Mandare ledger database this MCP server verifies and kills against"
},
{
"name": "MANDARE_MCP_HOME",
"description": "Directory where issued artifacts (mandates, credentials, token grant files) are written (default ~/.mandare/mcp)"
},
{
"name": "MANDARE_WITNESS_URL",
"description": "Witness server URL — enables truncation/rewrite checks and certificate export"
},
{
"name": "MANDARE_WITNESS_PUBLIC_KEY",
"description": "The witness's Ed25519 public key (64 hex chars), obtained out-of-band"
},
{
"name": "MANDARE_GATEWAY_URL",
"description": "Running gateway base URL — enables the gateway health tool"
},
{
"name": "MANDARE_MCP_ALLOW_REINSTATE",
"description": "Set to 1 to expose the reinstate tool (off by default; kills only close doors)"
}
]
}Tools
Reported by the attributed source; not independently observed by Koskamo.
Connect from your client
Each snippet configures the same source-provided package; replace placeholders before use.
Cursor
{
"mcpServers": {
"mandare-mcp": {
"command": "npx",
"args": [
"-y",
"@mandarelabs/mcp-server@0.1.0"
],
"env": {
"MANDARE_LEDGER_DB": "<YOUR_MANDARE_LEDGER_DB>",
"MANDARE_MCP_HOME": "<YOUR_MANDARE_MCP_HOME>",
"MANDARE_WITNESS_URL": "<YOUR_MANDARE_WITNESS_URL>",
"MANDARE_WITNESS_PUBLIC_KEY": "<YOUR_MANDARE_WITNESS_PUBLIC_KEY>",
"MANDARE_GATEWAY_URL": "<YOUR_MANDARE_GATEWAY_URL>",
"MANDARE_MCP_ALLOW_REINSTATE": "<YOUR_MANDARE_MCP_ALLOW_REINSTATE>"
}
}
}
}Cline
{
"mcpServers": {
"mandare-mcp": {
"command": "npx",
"args": [
"-y",
"@mandarelabs/mcp-server@0.1.0"
],
"env": {
"MANDARE_LEDGER_DB": "<YOUR_MANDARE_LEDGER_DB>",
"MANDARE_MCP_HOME": "<YOUR_MANDARE_MCP_HOME>",
"MANDARE_WITNESS_URL": "<YOUR_MANDARE_WITNESS_URL>",
"MANDARE_WITNESS_PUBLIC_KEY": "<YOUR_MANDARE_WITNESS_PUBLIC_KEY>",
"MANDARE_GATEWAY_URL": "<YOUR_MANDARE_GATEWAY_URL>",
"MANDARE_MCP_ALLOW_REINSTATE": "<YOUR_MANDARE_MCP_ALLOW_REINSTATE>"
}
}
}
}VS Code
{
"servers": {
"mandare-mcp": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@mandarelabs/mcp-server@0.1.0"
],
"env": {
"MANDARE_LEDGER_DB": "<YOUR_MANDARE_LEDGER_DB>",
"MANDARE_MCP_HOME": "<YOUR_MANDARE_MCP_HOME>",
"MANDARE_WITNESS_URL": "<YOUR_MANDARE_WITNESS_URL>",
"MANDARE_WITNESS_PUBLIC_KEY": "<YOUR_MANDARE_WITNESS_PUBLIC_KEY>",
"MANDARE_GATEWAY_URL": "<YOUR_MANDARE_GATEWAY_URL>",
"MANDARE_MCP_ALLOW_REINSTATE": "<YOUR_MANDARE_MCP_ALLOW_REINSTATE>"
}
}
}
}Claude Desktop
{
"mcpServers": {
"mandare-mcp": {
"command": "npx",
"args": [
"-y",
"@mandarelabs/mcp-server@0.1.0"
],
"env": {
"MANDARE_LEDGER_DB": "<YOUR_MANDARE_LEDGER_DB>",
"MANDARE_MCP_HOME": "<YOUR_MANDARE_MCP_HOME>",
"MANDARE_WITNESS_URL": "<YOUR_MANDARE_WITNESS_URL>",
"MANDARE_WITNESS_PUBLIC_KEY": "<YOUR_MANDARE_WITNESS_PUBLIC_KEY>",
"MANDARE_GATEWAY_URL": "<YOUR_MANDARE_GATEWAY_URL>",
"MANDARE_MCP_ALLOW_REINSTATE": "<YOUR_MANDARE_MCP_ALLOW_REINSTATE>"
}
}
}
}Let your agent find its tools
Find servers like Mandare MCP from your agent. Add Koskamo once to search the index for endpoints, access requirements, and client setup. Public discovery needs no key.