MCP.Market

MANDATE Credential Broker MCP server

online · 93% uptime
by projetnanocorp·io.github.projetnanocorp/mandate·v0.1.0
No reviews yet

MCP server for mandates, delegation, policy-gated execution, credential grants, and audit.

B76/100grade B
Write a reviewRun it
What users say
No reviews yet
Be the first
Safety scan
B76/100

full report

Adoption
New

0 stars

Reviews

Write one

Nobody has reviewed MANDATE Credential Broker yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

MANDATE Credential Broker tools (11, 3 write)

write = sends, deletes, buys or posts
  • broker.introspect-grantFree

    Validates a grant token seal, reports active/revoked/expired state, and records introspection to the ledger.

  • broker.register-credentialFree

    Registers an opaque vault handle/reference only; plaintext secret fields are rejected and never ledgered.

  • broker.request-accessFree

    Asks the canonical Policy Engine for an ALLOW decision before issuing a short-lived HMAC-sealed grant bound to credential, mandate, agent, scope, and expiry.

  • broker.revoke-grantFree

    Revokes a broker grant by id and records the revocation to the ledger.

  • broker.useFree

    Redeems a sealed grant for the bound acting agent and executes the bound action through the Gateway and Policy Engine; does not expose plaintext secrets.

  • mandate.authorize-actionwrite actionFree

    Submits an action through the Gateway and canonical Policy Engine; returns ALLOW, DENY, or REQUIRE_APPROVAL with ledger proof.

  • mandate.delegatewrite actionFree

    Creates a child mandate only when it is a no-escalation subset of the parent mandate.

  • mandate.discoverFree

    Returns this self-describing tool manifest.

  • mandate.mintwrite actionFree

    Creates an active human-granted mandate for an agent and records it to the hash-chained ledger.

  • mandate.revokeFree

    Revokes a mandate subtree and records the revocation to the hash-chained ledger.

  • mandate.verify-proofFree

    Records a proof payload hash and appends proof evidence to the hash-chained ledger.

Public scan report

scanner v0.1.10 · 2026-10-16 · same rubric, same numbers if you re-run it

1 high
  • –Code scanremote-only server, no package to scann/a
  • Live reliabilityremote reachable in 1600ms20/20
  • Tool poisoning11 tool descriptions checked15/15
  • Auth qualityopen endpoint exposes 3 write-action tools with no auth3/15
  • Maintenancelast push 41 days ago12/15
  • Maintainer identityregistry namespace matches repository owner7/10

Findings (1)

  • highWrite-action tools reachable without authenticationauth.open-write
Overall 76/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How MANDATE Credential Broker compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
76/100
higher than 48% of 48,243 servers
Tools
11
the typical server has 7
Tools that change things
27%
typical: 0%. Fewer write tools means less an agent can break
Uptime
93%
of our recent checks; the typical remote server answers 100%
Response time
643 ms
faster than 24% of 30,027 servers

What its tools let an agent do: 5 read · 1 create · 3 change · 2 delete

Install MANDATE Credential Broker in Claude Code, Cursor or VS Code

claude mcp add --transport http mandate https://mandate.nanocorp.app/mcp
Add to Cursor

MANDATE Credential Broker: common questions

Is MANDATE Credential Broker MCP server safe?
Mostly: it is graded B (76/100). Read the MANDATE Credential Broker safety report
How do I install MANDATE Credential Broker?
It runs remotely at mandate.nanocorp.app. Add it to Claude Code, Cursor, VS Code or Claude Desktop with the snippets above, or call it through the mcp.market gateway without installing anything.
Does MANDATE Credential Broker need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is MANDATE Credential Broker maintained?
The last commit was 61 days ago (2026-09-05). The latest release is v0.1.0.
Is MANDATE Credential Broker up?
93% of our last 28 checks got an answer. We check remote servers about four times a day.
What can I use instead of MANDATE Credential Broker?
Servers from other publishers that do the same job: SSH — policy-gated remote access MCP server.
How does MANDATE Credential Broker compare with other MCP servers?
safety score 76/100 (higher than 48% of 48,243 servers); tools 11 (the typical server has 7); tools that change things 27% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to MANDATE Credential Broker

Same job from other publishers: the closest match first, then the best rated.