Home › Security › Mandare

Mandare

Verify an agent fleet's tamper-evident ledger, check budgets, kill a runaway agent. Local-first.

Official TypeScript Local macOSLinux

★ 0 stars Last pushed 2026-10-11 License: AGPL-3.0

View repository →

Connect

Review any command before running it. Package names and URLs come from the server's own registry entry.

Package (npm 0.1.0)

npx -y @mandarelabs/[email protected]

Or add to your MCP client config:

{
  "mcpServers": {
    "mandare": {
      "command": "npx",
      "args": [
        "-y",
        "@mandarelabs/[email protected]"
      ],
      "env": {
        "MANDARE_LEDGER_DB": "<YOUR_VALUE>",
        "MANDARE_MCP_HOME": "<YOUR_VALUE>",
        "MANDARE_WITNESS_URL": "<YOUR_VALUE>",
        "MANDARE_WITNESS_PUBLIC_KEY": "<YOUR_VALUE>",
        "MANDARE_GATEWAY_URL": "<YOUR_VALUE>",
        "MANDARE_MCP_ALLOW_REINSTATE": "<YOUR_VALUE>"
      }
    }
  }
}

MANDARE_LEDGER_DB required — Path to the Mandare ledger database this MCP server verifies and kills against
MANDARE_MCP_HOME — Directory where issued artifacts (mandates, credentials, token grant files) are written (default ~/.mandare/mcp)
MANDARE_WITNESS_URL — Witness server URL — enables truncation/rewrite checks and certificate export
MANDARE_WITNESS_PUBLIC_KEY — The witness's Ed25519 public key (64 hex chars), obtained out-of-band
MANDARE_GATEWAY_URL — Running gateway base URL — enables the gateway health tool
MANDARE_MCP_ALLOW_REINSTATE — Set to 1 to expose the reinstate tool (off by default; kills only close doors)