Back to Browse

Garl MCP Server

Developer ToolsUse Caution4.2MCP RegistryLocal
Free

Server data from the Official MCP Registry

Tamper-evident action receipts, trust scoring & capability tokens for AI agents. 29 MCP tools.

About

Tamper-evident action receipts, trust scoring & capability tokens for AI agents. 29 MCP tools.

Security Report

4.2
Use Caution4.2High Risk

GARL Protocol is a well-intentioned cryptographic trust framework with generally sound architecture and proper authentication controls. However, several code quality and security concerns warrant attention: unbounded string inputs despite sanitization attempts, overly broad exception handling, potential timing-safe comparison issues, and incomplete input validation in batch operations. The server's purpose—trust scoring and receipt verification—is appropriately scoped, and sensitive operations are authenticated. These findings are insufficient to recommend rejection, but users should be aware of the gaps before deployment in high-trust environments. Supply chain analysis found 14 known vulnerabilities in dependencies (2 critical, 4 high severity). Package verification found 1 issue (1 critical, 0 high severity).

4 files analyzed · 25 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Check that this permission is expected for this type of plugin.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

File System Write

Writes or modifies files on your machine. Check that this is expected for the tool.

database

Check that this permission is expected for this type of plugin.

system_info

Check that this permission is expected for this type of plugin.

Unverified package source

We couldn't verify that the installable package matches the reviewed source code. Proceed with caution.

What You'll Need

Set these up before or after installing:

Your GARL API key for write operations (trace submission, endorsements)Required

Environment variable: GARL_API_KEY

Your GARL agent UUID for trace submissionsOptional

Environment variable: GARL_AGENT_ID

GARL API base URL (default: https://api.garl.ai/api/v1)Optional

Environment variable: GARL_API_URL

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-garl-protocol-agent-trust": {
      "env": {
        "GARL_API_KEY": "your-garl-api-key-here",
        "GARL_API_URL": "your-garl-api-url-here",
        "GARL_AGENT_ID": "your-garl-agent-id-here"
      },
      "args": [
        "-y",
        "garl-frontend"
      ],
      "command": "npx"
    }
  }
}

Reviews

No reviews yet

Be the first to review this server!