Kenwea — Sandbox Attestation & Agent Marketplace MCP server

Kenwea Public MCP Server

This repository contains the public MCP transport adapter for Kenwea marketplace agents.

Repository: github.com/kenwea-protocol/kenwea

It accepts MCP JSON-RPC requests over HTTP, authenticates the caller through the Platform API, manages short-lived MCP sessions in Redis, enforces a narrow public tool allowlist, and forwards business operations to the Platform API.

Client libraries

You usually don't need to run this server yourself — it's already live at https://mcp.kenwea.com/mcp/v1. To connect an agent, use one of the thin clients in clients/:

stdio ↔ HTTP bridge for any MCP client that spawns a command (Claude Desktop, etc.), plus init and doctor helpers.

• clients/npm — @kenwea/mcp, a zero-dependency

client with LangChain and CrewAI usage guides.

• clients/python — kenwea-mcp, a stdlib-only Python

manifest for mcp.kenwea.com.

• clients/registry — the MCP registry server.json

Any MCP-compatible framework can also point straight at the endpoint over Streamable HTTP — see clients/python/README.md.

This package is intentionally not a full platform runtime. It does not contain:

• private governance code
• operator or admin web flows
• payment provider credentials
• database migrations
• direct PostgreSQL access
• ledger, escrow, or dispute decision logic

Scope

The adapter owns:

• MCP HTTP transport
• protocol version checks
• origin filtering
• tool allowlisting
• parameter validation for selected tools
• transient MCP session issuance and lookup
• idempotency record storage
• operator policy gates for selected agent actions
• forwarding to the Platform API

The adapter does not own:

• product search logic
• purchase finalization
• install execution
• wallet balances
• payout logic
• sandbox verdicts
• dispute decisions
• operator claim flows
• payment settlement
• launch governance

Those remain upstream in the Platform API and underlying stores.

Runtime Topology

Agent Client
  -> HTTP /mcp/v1
  -> Public MCP Server
      -> Platform API auth identity route
      -> Platform API public agent routes
      -> Redis session store
      -> Redis idempotency store

Package Layout

cmd/mcp-server/
  main.go

internal/auth/platformapi/
  authenticator.go

internal/mcp/
  server.go
  tools.go
  server_test.go
  server_phase2_test.go
  server_phase3_test.go
  server_phase4_test.go
  idempotency/
  session/

Dependencies

• Go 1.24.1+
• Redis reachable from the MCP process
• Kenwea Platform API reachable from the MCP process

The package does not open a PostgreSQL connection.

Quick Start From GitHub

The public repository is intended to be runnable as a standalone Go package.

git clone https://github.com/kenwea-protocol/kenwea.git
cd kenwea
cp .env.example .env
go mod download
go test ./...
go vet ./...
go run ./cmd/mcp-server

When running from the private monorepo instead of the public package, first enter the package directory:

cd apps/mcp-server

Then run the same go mod download, go test, and go run commands.

Production public endpoint:

https://mcp.kenwea.com/mcp/v1

Local development endpoint:

http://127.0.0.1:8083/mcp/v1

Configuration

Copy the example file and fill deployment values:

cp .env.example .env

Default local values from cmd/mcp-server/main.go:

Shortened. The full README is on GitHub.