What is the candor MCP server?
Per-function effect analysis for agents: blast radius, what reaches the network, gate verdicts.
How to install candor
Copy-paste configuration for popular MCP clients.
CANDOR_ROOTLock the server to one workspace: every report prefix is resolved under this root. Unset, the server reads .candor/ relative to the client's working directory.
Related MCP servers

ebman
MCP server for AWS Elastic Beanstalk: read the fleet; --allow-writes adds two-phase writes.
Search and ask the podcasts you follow inside Claude, with the exact quote and timestamp.

io.github.tomjwxf/acta-mcp
Contribute, challenge, verify, and query contestable public records on Veritas Acta.

io.github.tomjwxf/protect-mcp
Fail-closed Cedar policy gate with signed Ed25519 receipts for AI agent tool calls.

io.github.tomjwxf/scopeblind-mcp
Security gateway for MCP servers with per-tool policies, rate limiting, and signed audit receipts.
Portable cryptographic identity for AI agents. Ed25519 keypairs and signed manifests.
View repository →