mcp-warden

mcp-warden is a local-first credential broker for the Model Context Protocol (MCP). It allows AI coding agents (Claude Code, Cursor, Codex, etc.) to call HTTP APIs, SSH, and databases through scoped presets, with secrets stored in the OS keychain and never exposed to the agent's context. It enforces method/path allow-listing, approval controls, and prompt-injection defenses, and supports a Claude Code plugin for seamless integration.