MANDATE Credential Broker MCP server
MCP server for mandates, delegation, policy-gated execution, credential grants, and audit.
0 stars
Reviews
Write oneNobody has reviewed MANDATE Credential Broker yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
MANDATE Credential Broker tools (11, 3 write)
write = sends, deletes, buys or postsbroker.introspect-grantFreeValidates a grant token seal, reports active/revoked/expired state, and records introspection to the ledger.
broker.register-credentialFreeRegisters an opaque vault handle/reference only; plaintext secret fields are rejected and never ledgered.
broker.request-accessFreeAsks the canonical Policy Engine for an ALLOW decision before issuing a short-lived HMAC-sealed grant bound to credential, mandate, agent, scope, and expiry.
broker.revoke-grantFreeRevokes a broker grant by id and records the revocation to the ledger.
broker.useFreeRedeems a sealed grant for the bound acting agent and executes the bound action through the Gateway and Policy Engine; does not expose plaintext secrets.
mandate.authorize-actionwrite actionFreeSubmits an action through the Gateway and canonical Policy Engine; returns ALLOW, DENY, or REQUIRE_APPROVAL with ledger proof.
mandate.delegatewrite actionFreeCreates a child mandate only when it is a no-escalation subset of the parent mandate.
mandate.discoverFreeReturns this self-describing tool manifest.
mandate.mintwrite actionFreeCreates an active human-granted mandate for an agent and records it to the hash-chained ledger.
mandate.revokeFreeRevokes a mandate subtree and records the revocation to the hash-chained ledger.
mandate.verify-proofFreeRecords a proof payload hash and appends proof evidence to the hash-chained ledger.
Public scan report
scanner v0.1.9 · 2026-09-20 · same rubric, same numbers if you re-run it
- –Code scanremote-only server, no package to scann/a
- Live reliabilityremote reachable in 1291ms20/20
- Tool poisoning11 tool descriptions checked15/15
- Auth qualityopen endpoint exposes 3 write-action tools with no auth3/15
- Maintenancelast push 15 days ago15/15
- Maintainer identityregistry namespace matches repository owner7/10
Findings (1)
- highWrite-action tools reachable without authentication
auth.open-write
Install directly
claude mcp add --transport http mandate https://mandate.nanocorp.app/mcp
MANDATE Credential Broker: common questions
- Is MANDATE Credential Broker MCP server safe?
- Mostly: it is graded B (80/100). Read the MANDATE Credential Broker safety report
- How do I install MANDATE Credential Broker?
- It runs remotely at mandate.nanocorp.app. Add it to Claude Code, Claude Desktop or Cursor with the snippets above, or call it through the mcp.market gateway without installing anything.
- Does MANDATE Credential Broker need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is MANDATE Credential Broker maintained?
- The last commit was 16 days ago (2026-09-05). The latest release is v0.1.0.
- Is MANDATE Credential Broker up?
- 100% of our last 5 checks got an answer. We check remote servers about four times a day.
- What can I use instead of MANDATE Credential Broker?
- Servers from other publishers that do the same job: SSH — policy-gated remote access MCP server.
Alternatives to MANDATE Credential Broker
Same job from other publishers: the closest match first, then the best rated.
- SSH — policy-gated remote accessPolicy-gated, audited SSH for Linux and Windows hosts: roles, approvals, and an audit log.not reviewedEstablishedB