Marchward runs on your own machine — the client starts it, so there is no endpoint to ping. 77 installs a week from npm. Last commit 2 Jul 2026.
Runtime authority for AI agents: credential mediation, spend cap, approval gates, audit log.
What the code does
We read the source, 4 d ago · rules 995398eba69f
Found in continuous integration, deployment or infrastructure files, or in a neighbouring package of the same monorepo. None of this is installed when you add the server: it describes how the project is built and released. We list it because a leaked key in a build pipeline is still a real problem, but it is not something this server does on your machine.
this.upstream = spawn(this.config.command, this.config.args, {
Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.
Nothing serious here today
Today is the operative word: we check Marchward every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.
Connect this server
This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.
claude mcp add mcp-server -e 'MARCHWARD_API_URL=<MARCHWARD_API_URL>' -e 'MARCHWARD_API_KEY=<MARCHWARD_API_KEY>' -- npx -y @marchward/mcp-server{
"mcpServers": {
"mcp-server": {
"command": "npx",
"args": [
"-y",
"@marchward/mcp-server"
],
"env": {
"MARCHWARD_API_KEY": "<MARCHWARD_API_KEY>",
"MARCHWARD_API_URL": "<MARCHWARD_API_URL>"
}
}
}
}[mcp_servers.mcp-server]
command = "npx"
args = ["-y", "@marchward/mcp-server"]
env = { MARCHWARD_API_URL = "<MARCHWARD_API_URL>", MARCHWARD_API_KEY = "<MARCHWARD_API_KEY>" }{
"mcpServers": {
"mcp-server": {
"command": "npx",
"args": [
"-y",
"@marchward/mcp-server"
],
"env": {
"MARCHWARD_API_KEY": "<MARCHWARD_API_KEY>",
"MARCHWARD_API_URL": "<MARCHWARD_API_URL>"
}
}
}
}{
"servers": {
"mcp-server": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@marchward/mcp-server"
],
"env": {
"MARCHWARD_API_KEY": "<MARCHWARD_API_KEY>",
"MARCHWARD_API_URL": "<MARCHWARD_API_URL>"
}
}
}
}Put your own values in place of
<MARCHWARD_API_URL> (Marchward API base URL), <MARCHWARD_API_KEY> (Your Marchward API key (mw_...)).
The author’s registry entry marks them as required.
Alternatives to Marchward
same job, measured the same wayPre-execution gate for AI-agent tool calls. Touch ID approval. Tamper-evident audit log.
Fail-closed human approval gates for AI agent actions. Default-deny, TTL expiry, audit log.
Audit trail and traceability for AI agents. MCP gate: evaluate, ingest, request approval.
OAuth 2.1 short-link tools for AI agents with scoped tokens, approvals, audit logs, and revocation.
Encrypted credential vault for AI agents — auto OAuth refresh, rate limiting, audit logging.
MCP policy proxy: spend caps, approvals for destructive tools, kill switch, dry-run, audit log.
Policy-based governance for AI agent tool calls. YAML policy, approval gates, audit logging.
Cordon for MCP. Security gateway with policy enforcement, audit log, and HITL approvals.
Marchward — questions
Answers built from our own checks of this server.