Mandare

{
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "name": "com.mandarelabs/mandare",
  "description": "Verify an agent fleet's tamper-evident ledger, check budgets, kill a runaway agent. Local-first.",
  "title": "Mandare",
  "repository": {
    "url": "https://github.com/mandarelabs/mandare",
    "source": "github",
    "subfolder": "packages/mcp-server"
  },
  "version": "0.1.0",
  "packages": [
    {
      "registryType": "npm",
      "registryBaseUrl": "https://registry.npmjs.org",
      "identifier": "@mandarelabs/mcp-server",
      "version": "0.1.0",
      "transport": {
        "type": "stdio"
      },
      "environmentVariables": [
        {
          "description": "Path to the Mandare ledger database this MCP server verifies and kills against",
          "isRequired": true,
          "name": "MANDARE_LEDGER_DB"
        },
        {
          "description": "Directory where issued artifacts (mandates, credentials, token grant files) are written (default ~/.mandare/mcp)",
          "name": "MANDARE_MCP_HOME"
        },
        {
          "description": "Witness server URL — enables truncation/rewrite checks and certificate export",
          "name": "MANDARE_WITNESS_URL"
        },
        {
          "description": "The witness's Ed25519 public key (64 hex chars), obtained out-of-band",
          "name": "MANDARE_WITNESS_PUBLIC_KEY"
        },
        {
          "description": "Running gateway base URL — enables the gateway health tool",
          "name": "MANDARE_GATEWAY_URL"
        },
        {
          "description": "Set to 1 to expose the reinstate tool (off by default; kills only close doors)",
          "name": "MANDARE_MCP_ALLOW_REINSTATE"
        }
      ]
    }
  ]
}