Mandat launches authorization, delegation and audit layer for AI agent tool calls, MCP first
Mandat is an open-source (Apache-2.0) tool that adds authorization, delegation and audit to AI agent actions, starting with MCP. Each tool call is checked against a policy on its arguments, such as allowing refunds up to €50, requiring human approval for €50–500 and denying anything above €500, while agents receive short-lived single-task tokens carrying the human to agent to sub-agent chain and every call leaves a tamper-evident audit record exportable to a SIEM. It also ships a scanner for authentication and supply-chain mistakes in MCP servers and client configs, and installs via npm or pip with TypeScript and Python libraries for the official MCP SDK.