Record an agent's decisions with reasons anyone can re-execute offline โ verify recomputes them.
Connect Runs on your machine
claude mcp add warrant -e WARRANT_STORE=<WARRANT_STORE> -e WARRANT_KEY=<WARRANT_KEY> -e WARRANT_ACTOR=<WARRANT_ACTOR> -- uvx warrant-verify==0.9.0
{
"mcpServers": {
"warrant": {
"command": "uvx",
"args": [
"warrant-verify==0.9.0"
],
"env": {
"WARRANT_STORE": "<WARRANT_STORE>",
"WARRANT_KEY": "<WARRANT_KEY>",
"WARRANT_ACTOR": "<WARRANT_ACTOR>"
}
}
}
}
{
"mcpServers": {
"warrant": {
"command": "uvx",
"args": [
"warrant-verify==0.9.0"
],
"env": {
"WARRANT_STORE": "<WARRANT_STORE>",
"WARRANT_KEY": "<WARRANT_KEY>",
"WARRANT_ACTOR": "<WARRANT_ACTOR>"
}
}
}
}
{
"servers": {
"warrant": {
"type": "stdio",
"command": "uvx",
"args": [
"warrant-verify==0.9.0"
],
"env": {
"WARRANT_STORE": "<WARRANT_STORE>",
"WARRANT_KEY": "<WARRANT_KEY>",
"WARRANT_ACTOR": "<WARRANT_ACTOR>"
}
}
}
}
Replace the values in angle brackets with your own. Keys stay on your machine; we never see them.
Tools
This server runs locally, so its tools are listed by your MCP client once it starts.
Environment variables
| Name | Description |
|---|---|
WARRANT_STOREOptional | Absolute path to the warrant store this server files into and verifies. Defaults to .warrants relative to the server process's working directory, which an MCP host does not guarantee. |
WARRANT_KEYOptional, secret | Ed25519 signing key. If unset, one is generated next to the store on the first filing and the result says so; any process that can read it can sign as this actor. |
WARRANT_ACTOROptional | Actor id written into filed warrants. Defaults to mcp-client@<hostname>. |
Details
| Package | [email protected] (PYPI, stdio) |
| First published | 1 Aug 2026 |
| Last updated | 1 Aug 2026 |
| Registry name | io.github.s0fractal/warrant |
More ai and media servers See all
Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.
