Runeward MCP server
io.github.Runewardd/runeward·v0.1.4·1 starsGoverned execution cells for AI agents: Docker/K8s sandboxes with policy, audit, and approvals.
1 stars
Reviews
Write oneNobody has reviewed Runeward yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Runeward tools
No tool declarations could be read from the package source. They show once the server is installed.
Public scan report
scanner v0.1.9 · 2026-09-26 · same rubric, same numbers if you re-run it
- –Code scanpackage could not be scannedn/a
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 3 days ago15/15
- Maintainer identityregistry namespace matches repository owner7/10
How Runeward compares
Against every graded Developer tools MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 85/100
- higher than 70% of 1,119 Developer tools servers
- GitHub stars
- 1
- more than 50% of 855 Developer tools servers
Install Runeward in Claude Code, Cursor or VS Code
claude mcp add runeward -- docker run -i --rm ghcr.io/runewardd/runeward:v0.1.4
What the publisher says
From the Runeward repository's README, as published. We do not edit it. Read it on GitHub
The open-source governance harness for AI agents.
Put enforceable policy, human approvals, isolated execution, budgets, and signed evidence around any AI agent. Runeward works with an existing agent or multi-agent framework rather than requiring a new model or orchestration stack.
Prove it in one command
Prerequisites: a running Docker/Podman engine and the runeward binary.
runeward quickstartThe command creates .runeward/quickstart.toml, checks the policy, runtime, image, and state path, runs an allowed command, proves a destructive command is denied before execution, and verifies the signed audit trail. It never overwrites an existing policy unless --force is passed.
doctor and dashboard readiness also resolve required secret sources. A Charter that references an unset env:// value is not presented as launch-ready.
runeward doctor quickstart # explain setup problems safely
runeward --config-dir .runeward serve # dashboard + governed REST API
runeward evidence export quickstart -o run.json
runeward evidence verify run.json # independent policy/audit verificationWhat Runeward adds
Every governed action follows one path:
agent request → policy → human approval when required → limits → sandbox → signed audit eventNaming
Documentation and UI use familiar terms first. Existing API paths and file fields retain the original themed names for compatibility.
See the full naming and writing convention.
Install
Choose the package that matches how you use Runeward:
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
Runeward: common questions
- Is Runeward MCP server safe?
- Yes, by our scan: it is graded A (85/100). Read the Runeward safety report
- How do I install Runeward?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Runeward need an API key?
- No secret keys are declared. It reads 2 settings from the environment.
- Is Runeward maintained?
- The last commit was 42 days ago (2026-09-23). The latest release is v0.1.4.
- What can I use instead of Runeward?
- Servers from other publishers that do the same job: Ocm MCP server, Homebutler MCP server and maintenant MCP server.
- How does Runeward compare with other Developer tools MCP servers?
- safety score 85/100 (higher than 70% of 1,119 Developer tools servers); github stars 1 (more than 50% of 855 Developer tools servers). Full comparison.
Alternatives to Runeward
Same job from other publishers: the closest match first, then the best rated.
- OcmGuardrailed fleet ops for AI agents: multi-cluster Kubernetes via OCM with policy, approval, audit.not reviewedGrowingB
- HomebutlerTells an agent what changed on a server since it last looked - status, Docker, backups, Proxmox.not reviewedEstablishedC
- maintenantDocker monitoring for AI agents: logs, history, alerts. Can ack alerts; never touches containers.not reviewedEstablishedC
- cloud-auditAWS security scanner with attack chain detection, IAM privilege escalation, and fixesnot reviewedEstablishedA
- Komodo MCP ServerMCP server for Komodo - manage Docker containers, servers, stacks, and deployments via AInot reviewedEstablishedB