mcpbeat Sign in

TollWire Evidence MCP Server

local only

TollWire Evidence runs on your own machine — the client starts it, so there is no endpoint to ping. 382 installs a week from npm. Last commit 7 Nov 2026.

Tamper-evident evidence log of agent changes, scans and approvals, mapped to ISO 27001/NIS2.

Installs per day peak 335 · avg 12
a month agotoday
382
Installs / week
npm · @tollwire/evidence-mcp
0
Stars
0 open issues
7 Nov 2026
Last commit
from GitHub
PolyForm-Noncommercial-1.0.0
License
TypeScript

What the code does

We read the source, 1 h ago · rules 995398eba69f

Evidence

Things with no honest explanation: a promise that contradicts the code, code that runs at install time while hiding what it does, data leaving the machine.

Capabilities

What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.

Touches key and credential files guardrail-plugin/policy/default.json:152
      "reason": "Reading credential stores in the home directory (.ssh, .aws, .gnupg, .kube, .azure, .netrc, .npmrc, .pypirc, .config/gh, .config/gcloud) is not allowed (audit F-01)."

Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.

We found things in this code

Code changes quietly between releases, and nobody reads the diff of a dependency. We do, on every release — watch TollWire Evidence and you get told the day something new turns up.

Three servers free · no card

Connect this server

This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.

run in your terminal
claude mcp add evidence-mcp -- npx -y @tollwire/evidence-mcp
~/Library/Application Support/Claude/claude_desktop_config.json
{
  "mcpServers": {
    "evidence-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@tollwire/evidence-mcp"
      ]
    }
  }
}
~/.codex/config.toml
[mcp_servers.evidence-mcp]
command = "npx"
args = ["-y", "@tollwire/evidence-mcp"]
.cursor/mcp.json
{
  "mcpServers": {
    "evidence-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@tollwire/evidence-mcp"
      ]
    }
  }
}
.vscode/mcp.json
{
  "servers": {
    "evidence-mcp": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "@tollwire/evidence-mcp"
      ]
    }
  }
}

Alternatives to TollWire Evidence

same job, measured the same way
Quill
by manumarri-sudo

Pre-execution gate for AI-agent tool calls. Touch ID approval. Tamper-evident audit log.

101 installs/wk local only
Evidence Log
by riskrouter

Tamper-evident evidence log: signed heads, proofs, and recording salted digests of your records.

8 tools answering
Infraveil Agent Guard
by infraveilhq

Gate an AI agent's destructive actions behind human approval, with a tamper-evident log.

2 installs/wk local only
Lore Context
by lore-context

Governed AI-agent memory, Evidence Ledger traces, evals, and portable context tools.

34 installs/wk local only
Vouchwell
by vouchwell

Read, verify and export a tamper-evident log of what an AI agent did. Read-only.

59 installs/wk local only
Agentalog — Agent Auto Log
by agentalog

Agent Auto Log: MCP servers, skills and plugins, with an automatic log of every change.

49 tools answering
Competiflow
by nyku

Competitor monitoring for AI agents: track rival pricing, docs and changelog changes with evidence.

99 installs/wk local only
AI Agents Pitstop
by ai-agents-pitstop

Human approvals, autonomy limits and a chained audit log for the AI agents of service firms.

answering

TollWire Evidence — questions

Answers built from our own checks of this server.

Why is there no uptime for TollWire Evidence?
TollWire Evidence runs on your own machine over stdio — there is no network address to reach, so uptime cannot be measured for it by anyone. What can be measured is adoption: the npm package @tollwire/evidence-mcp was installed 382 times last week.
How do I connect TollWire Evidence?
Copy the ready config from this page. We generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each in the form that client actually reads. It runs locally, so the command pulls @tollwire/evidence-mcp straight from npm; nothing to host, nothing to sign up for.
How many people use TollWire Evidence?
The npm package @tollwire/evidence-mcp was installed 382 times in the last week. We show installs rather than GitHub stars on purpose: a star is a bookmark, an install is someone actually running it.
Is TollWire Evidence open source?
No, and the distinction matters: its licence is declared as PolyForm-Noncommercial-1.0.0. That makes it source-available — you can read the code, but the terms are the author's own, not one of the recognised open-source licences. Read them before you build on it.