{"name":"ai.marchward/mcp-server","slug":"marchward-mcp-server","title":null,"description":"Runtime authority for AI agents: credential mediation, spend cap, approval gates, audit log.","url":"https://mcp.market/server/marchward-mcp-server","rating":null,"grade":"B","score":77,"certified":false,"status":"active","category":"other","tags":[],"presence":{"score":21,"stars":1,"forks":0,"downloads_week":37,"last_push_at":"2026-07-01T21:43:47.000Z","license":"Apache-2.0"},"uptime":null,"claimed":false,"transport":"npm","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/marchward/marchward","website":null,"version":"0.2.4","remotes":[],"packages":[{"registryType":"npm","identifier":"@marchward/mcp-server","version":"0.2.4","transport":{"type":"stdio"},"environmentVariables":[{"description":"Marchward API base URL","isRequired":true,"default":"https://api.marchward.ai","name":"MARCHWARD_API_URL"},{"description":"Your Marchward API key (mw_...)","isRequired":true,"isSecret":true,"name":"MARCHWARD_API_KEY"}]}],"tools":[{"name":"marchward_authorize","description":"Check whether an action is allowed BEFORE the agent takes it. Call this first for any consequential or irreversible action (deploying, committing, publishing, deleting, moving money, calling an external API). Returns ALLOW, BLOCK, ESCALATE, or ALLOW_WITH_CONDITIONS, and writes a tamper-evident audit record. The agent and policy are resolved from your API key, so you usually only pass toolName.","write_action":false,"price_micros":0,"input_schema":null},{"name":"marchward_bind_policy","description":"Attach a governance policy to an agent. After binding, every authorize and execute call from that agent is evaluated against this policy.","write_action":false,"price_micros":0,"input_schema":null},{"name":"marchward_check_coverage","description":"Find governance gaps for an agent by comparing its declared tools against the tools it has actually called. Returns a coverage percentage and the uncovered tools, so ungoverned actions surface before they cause harm. This is the 'Dependabot for governance'.","write_action":false,"price_micros":0,"input_schema":null},{"name":"marchward_execute","description":"Run an action through Marchward's credential-mediated gateway. Marchward evaluates policy, injects the real downstream credential server-side (the agent never holds it), enforces the cost cap and approval gates, then makes the call and records it. Use this for any call to a service whose credentials Marchward manages (GitHub, Stripe, Notion, etc.).","write_action":true,"price_micros":0,"input_schema":null},{"name":"marchward_get_decisions","description":"Review recent governance decisions (the audit trail). Filter by agent, tool name, or outcome (ALLOW/BLOCK/ESCALATE). Use to verify governance is active or to investigate what an agent actually did.","write_action":false,"price_micros":0,"input_schema":null},{"name":"marchward_list_agents","description":"List the agents registered under your account, with their IDs, status, last-seen time, and bound policy. Use to find an agentId or check what is under governance.","write_action":false,"price_micros":0,"input_schema":null},{"name":"marchward_register_agent","description":"Register a new agent with Marchward so it is governed from its first action. Returns the agent record and its Marchward API key — the only credential the agent should hold. Call this when building or deploying a new agent.","write_action":false,"price_micros":0,"input_schema":null}],"scan":{"score":77,"grade":"B","scanned_at":"2026-09-26T16:35:52.474Z","report":{"scannerVersion":"0.1.9","scannedAt":"2026-09-26T16:35:52.438Z","components":{"code":{"score":25,"max":25,"notes":["11 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":6,"max":15,"notes":["static API keys via environment variables"]},"maintenance":{"score":12,"max":15,"notes":["last push 87 days ago"]},"identity":{"score":7,"max":10,"notes":["registry namespace matches repository owner"]}},"findings":[],"inputs":{"packages":[{"registryType":"npm","identifier":"@marchward/mcp-server","version":"0.2.4","found":true,"hasInstallScripts":false,"dependencyCount":3,"publishedAt":"2026-06-24T18:15:25.966Z","weeklyDownloads":37}],"repo":{"found":true,"owner":"marchward","repo":"marchward","archived":false,"pushedAt":"2026-07-01T21:43:47Z","stars":1,"forks":0,"openIssues":0,"ownerType":"Organization","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/294637280?v=4","ownerCreatedAt":"2026-06-17T21:45:33Z","license":"Apache-2.0"},"icon":{"url":"https://marchward.ai/favicon.svg","source":"site"},"presence":{"stars":1,"forks":0,"downloadsWeek":37,"license":"Apache-2.0","lastPushAt":"2026-07-01T21:43:47.000Z","score":21}}}},"grade_history":[],"reviews":[]}