Grantor MCP server

by chaingrantor.com·com.chaingrantor/grantor-mcp·v0.2.0

Wrap any MCP server with enforced, bounded, revocable permissions — grant, narrow, check, revoke.

C68/100grade C

What users say

No reviews yet

Safety scan

C68/100

Adoption

New

65 downloads/wk

Reviews

Nobody has reviewed Grantor yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

check
Authorize ONE action for a child: real on-chain verification (root key, revocation epoch, tenant billing) + capability match + local use budget. Returns {allow:true, remaining_uses} or {allow:false, code, reason}. Gate every sub-agent action on this.
delegate
Narrow an existing child's capability onward to a new child (fewer tools, fewer uses, shorter expiry). Widening is refused at signing AND cryptographically at verify.
delete_everythingwrite action
Delete all the things (toy — deletes nothing, anywhere).
grant
Give a sub-agent a BOUNDED capability: named tools only, a use budget, an expiry. Returns a child_id the broker holds. This is what to use instead of handing a sub-agent your credentials.
revoke
Revoke a child's authority. With your own tenant + admin key this is a real on-chain bumpEpoch; in the sandbox it revokes at the broker (which holds the key and is the check-point).
search
Search the toy corpus (harmless).
status
Broker + tenant status: mode, live on-chain tenant standing, principal registration, child/use counters.

scanner v0.1.10 · 2026-10-29 · same rubric, same numbers if you re-run it

1 low

Code scan24 source files scanned25/25
–Live reliabilityno gateway calls yet and no remote to proben/a
–Tool poisoningtools not inspected (local package is not executed); not countedn/a
Auth qualitylocal package, no credentials required12/15
Maintenanceno repository listed3/15
Maintainer identityverified namespace with website, no repo4/10

Overall 68/100. Components that don't apply are left out of the denominator. Any critical finding is an F.Rubric Appeal a finding JSON

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score: 68/100; higher than 30% of 48,243 servers
Tools: 7; the typical server has 7
Tools that change things: 14%; typical: 0%. Fewer write tools means less an agent can break
Downloads a week: 65; more than 50% of 12,306 servers with a package

What its tools let an agent do: 5 read · 2 delete

Runs npx -y @grantor/mcp on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add grantor-mcp -- npx -y @grantor/mcp

Is Grantor MCP server safe?: With care: it is graded C, so read the findings first (68/100). Read the Grantor safety report
How do I install Grantor?: It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Grantor need an API key?: Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Grantor maintained?: The latest release is v0.2.0.
How does Grantor compare with other MCP servers?: safety score 68/100 (higher than 30% of 48,243 servers); tools 7 (the typical server has 7); tools that change things 14% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.