How do I install Warden402?

Warden402 is a local plugin. Install it using npm package: warden402-mcp and add the generated configuration snippet to your AI app's MCP config file. Then restart your AI app.

Is Warden402 safe to use?

Warden402 was flagged by MCP Marketplace's security scan, scoring 4.2/10 (high risk). It has 6 high or critical findings to review. Review the security report on this page carefully before installing it.

What credentials does Warden402 need?

Warden402 requires the following credentials or environment variables: WARDEN_API_URL. You can find setup instructions on the server detail page.

What AI apps work with Warden402?

Warden402 uses the Model Context Protocol (MCP) and works with any MCP-compatible AI app, including Claude, ChatGPT / Codex, Gemini, Copilot, Cursor, and more.

Back to Browse

Warden402 MCP Server

by Sukrutkrdg

Developer ToolsUse Caution4.2MCP RegistryLocal

Free

Server data from the Official MCP Registry

Pre-execution safety for AI agents on Base. Guard a token, tx or address: block/review/clear.

About

Pre-execution safety for AI agents on Base. Guard a token, tx or address: block/review/clear.

Security Report

4.2

Use Caution4.2High Risk

Warden is a well-structured security decision engine with proper API token handling (environment variables), reasonable permissions for its purpose (HTTP calls to Bazaar, file access for caching), and sound decision logic. Minor findings relate to code quality and a potential credential handling pattern, but no critical vulnerabilities or exfiltration risks detected. The deterministic verdict model and safe-failure design are security strengths. Supply chain analysis found 10 known vulnerabilities in dependencies (1 critical, 4 high severity). Package verification found 1 issue (1 critical, 0 high severity).

6 files analyzed · 17 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Check that this permission is expected for this type of plugin.

system_time

Check that this permission is expected for this type of plugin.

process_memory

Check that this permission is expected for this type of plugin.

Unverified package source

We couldn't verify that the installable package matches the reviewed source code. Proceed with caution.

What You'll Need

Set these up before or after installing:

Override the Warden API base (default https://warden402.xyz/api).Optional

Environment variable: WARDEN_API_URL

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-sukrutkrdg-warden402-mcp": {
      "env": {
        "WARDEN_API_URL": "your-warden-api-url-here"
      },
      "args": [
        "-y",
        "warden402"
      ],
      "command": "npx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

Warden — `warden402.xyz`

The pre-execution security & trust layer for agents transacting on Base.

Give Warden a token, a pending transaction, or an address → get a single decision: block · review · clear with reasons, a risk score, and a plain-language summary.

Warden uses the x402 Bazaar as its intelligence backend and builds judgment, a provable track record, and (next) a firewall on top.

Why

x402 infrastructure is ahead of demand; the missing layer is trust. The marketplace vertical is crowded (Coinbase Bazaar + dozens of clones), but pre-execution security is wide open. Warden owns that vertical.

What's in here

Path	What
`web/`	The website (warden402.xyz) — landing + live demo + track-record. Runs the guard in-process, so it deploys as a single Vercel project.
`src/`	Standalone Hono Guard API (same logic) — for agents/SDK/MCP and a persistent-ledger host.
`sdk/`	`@warden402/sdk` — client + `enforce`/`assertSafe` gate + LangChain tools.
`mcp/`	`warden402-mcp` — stdio MCP server exposing `guard_token` / `guard_tx` / `guard_address`.
`scripts/`	`smoke.ts` (offline decision tests), `probe.ts` (calibration), `recheck.ts` (outcome re-checker).

The decision contract (immutable spine)

Every endpoint returns a Verdict (src/schema/verdict.ts). Principles:

The LLM never touches the verdict. decision and riskScore come from deterministic rules; the LLM only writes summary. Auditable.
Fails safe. If a Bazaar signal can't be fetched it becomes unknown → degraded:true → the verdict is review at worst, never a false clear.
Every verdict is snapshotted (verdictId + signal evidence) → the track-record moat.

Decision rules

Hard rule: honeypot or sanctions fail → block (regardless of score).
Weighted-average risk ≥ 70 → block; degraded → review.
Any single fail (e.g. liquidity collapse) floors the decision at review (can't be diluted by the average). 2+ warns → review. Else clear.

Endpoints

Endpoint	What it checks
`GET /guard/token?address=`	honeypot, taxes, liquidity, holder concentration, OFAC
`POST /guard/tx` `{from,to,calldata}`	decodes calldata (unlimited approve / setApprovalForAll), sanctions + contract risk on the counterparty
`GET /guard/address?address=`	sanctions, contract risk, age/activity
`GET /track-record`	public trust stats (decision mix, hit-rate, rugs caught/missed)

(The website exposes the same via /api/guard.)

Run locally

# Single-project site (recommended) — runs guard in-process
cd web && npm install
cp .env.example .env.local   # set BAZAAR_INTERNAL_SECRET
npm run dev                  # http://localhost:3000

# Or the standalone Hono API
npm install
cp .env.example .env         # set BAZAAR_INTERNAL_SECRET
npm run smoke                # offline decision tests
npm run dev                  # http://localhost:8787

Production topology

web/ is the production API + site. Deployed as a single Vercel project (Root Directory = web). It runs the guard/firewall in-process, so the endpoints agents actually call (/api/guard, /api/firewall) are live here. Hot path is edge-friendly: KV store (no fs) + per-IP rate limiting. Persistence turns on when KV_REST_API_URL / KV_REST_API_TOKEN are set.
src/ (Hono API) is an optional Node host — for teams that want a persistent-disk ledger or the x402 payment layer. Not required; not deployed by default. The src/ modules are the canonical logic; a drift-guard test (tests/drift.test.ts) proves the web copy stays identical.
Drift is impossible to ship silently: npm test fails if the two diverge.

Deploy

See DEPLOY.md. TL;DR: new Vercel project, Root Directory = web, set BAZAAR_INTERNAL_SECRET (+ optional KV_REST_API_URL/KV_REST_API_TOKEN for persistent track-record), deploy. Done.

Bazaar internal-auth

Warden calls Bazaar without paying x402 (so our own products don't bill themselves) via the X-Warden-Internal header. Bazaar must have a matching WARDEN_INTERNAL_SECRET. Until set, all signals come back unknown and verdicts stay safely at review.

Roadmap

✅ Guard MVP (/guard/token) + verdict contract
✅ /guard/tx (pre-sign) + /guard/address + track-record + re-checker
✅ SDK / MCP / website
⏳ x402 payment layer (free tier → 402) + MCP Registry / Agentic.Market listing
⏳ Firewall / policy gateway — sits in front of an agent's x402 + onchain calls: spend caps, allow/deny by trust score, anomaly + injection-drain detection, audit log. B2B, Cloudflare Worker edge. The north star.

Reviews

No reviews yet

Be the first to review this server!

More Developer Tools MCP Servers

Fetch

Free

by Modelcontextprotocol · Developer Tools

Web content fetching and conversion for efficient LLM usage

Git

Free

by Modelcontextprotocol · Developer Tools

Read, search, and manipulate Git repositories programmatically

Toleno

Free

by Toleno · Developer Tools

Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.

Warden402 MCP Server

About

Security Report

Findings (17)Action required

Permissions Required

What You'll Need

How to Install

Documentation

Warden — `warden402.xyz`

Why

What's in here

The decision contract (immutable spine)

Decision rules

Endpoints

Run locally

Production topology

Deploy

Bazaar internal-auth

Roadmap

Reviews

No reviews yet

More Developer Tools MCP Servers

Fetch

Git

Toleno

mcp-creator-python

MarkItDown

MCP Marketplace

Warden402 MCP Server

About

Security Report

Findings (17)Action required

Permissions Required

What You'll Need

How to Install

Documentation

Warden — warden402.xyz

Why

What's in here

The decision contract (immutable spine)

Decision rules

Endpoints

Run locally

Production topology

Deploy

Bazaar internal-auth

Roadmap

Reviews

No reviews yet

More Developer Tools MCP Servers

Fetch

Git

Toleno

mcp-creator-python

MarkItDown

MCP Marketplace

Warden — `warden402.xyz`