Skip to content
Agentmart
Submit a tool

writ

Commit-time policy checks for AI agent writes (ALLOW/DENY/STEP_UP) with a tamper-evident audit log.

Connector by AvenueDAdmin · GitHub account verified by the MCP Registry

IndexedMITLocal (stdio)★ 2
Write a review

Install

Works with Claude Code, Codex, VS Code, Cursor, Windsurf, Claude Desktop. Read the repository before you give any tool access to your data.

npx agentmarket install connector/avenuedadmin-writ

Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.

Get the weekly diff

The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.

We use your email only for this newsletter. Privacy

About

Commit-time policy checks for AI agent writes (ALLOW/DENY/STEP_UP) with a tamper-evident audit log.

Reviews

Write a review

No reviews yet. Installed it? Reviews come from verified installers only. How reviews work

Permissions

What this server can do and what it asks for, from its tool list, install config and code. Checked Oct 25, 2026.

Tools
5 read · 1 write · 1 delete · 1 not yet classified
Secrets
2 (API keys, tokens or passwords)
Install scripts
None found
Runs as
Python package

Tools by what they do 8

Read from the source code; the running server may list different tools.

Read 5 · Look things up without changing anything.

  • writ_check
  • writ_policy
  • writ_receipts
  • writ_sandbox
  • writ_verify_token

Write 1 · Create, change, send or run things.

  • writ_grant

Delete 1 · Delete, drop, revoke or wipe things.

  • writ_revoke

Not yet classified 1 · We could not tell from the name and description.

  • writ_reinstate

Secrets and settings it asks for

Secrets: values you paste in that let it act as you.

  • WRIT_API_KEY
  • WRIT_SPONSOR_TOKEN

Other settings (environment variables or headers).

  • WRIT_BASE_URL

Network hosts it talks to 1

  • api.withwrit.com · found in code

Tools (8)

Read from the source code; the running server may differ. Descriptions are the server’s own words; hidden characters are shown as [U+…].

  • writ_check

    Ask Writ whether an action may proceed. CALL THIS BEFORE any consequential write. A consequential write is anything hard to undo: sending money or messages, changing access or identity records, deleting data, calling an external API that acts in the world. Args: sponsor_id: The human sponsor accountable for this action (e.g. a user id or email). agent_id: The agent or workflow performing the action. verb: What is being done (e.g. "verify_human", "send_payment"). target: What it acts on (e.g. "benefit-case-123"). purpose: Why, in plain words. Be specific — t…

  • writ_grant

    SPONSOR ONLY. Mint a one-time grant approving a specific action. Use this when writ_check returned STEP_UP and the human sponsor approves. The grant is single-use: the next writ_check consumes it and returns ALLOW. The grant is scoped to your tenant. Requires WRIT_SPONSOR_TOKEN.

  • writ_policy

    Read the tenant's verb policy: which verbs allow, deny, require a grant, or step up.

  • writ_receipts

    List recent decision receipts (audit trail). Newest first.

  • writ_reinstate

    SPONSOR ONLY. Undo writ_revoke: the principal is evaluated by policy again. Scoped to your tenant. Requires WRIT_SPONSOR_TOKEN.

  • writ_revoke

    SPONSOR ONLY. Kill switch: immediately deny all future checks for this principal. Revocation overrides live grants and tenant policy. Use when a principal is compromised, misbehaving, or its task is done. Scoped to your tenant. Requires WRIT_SPONSOR_TOKEN.

  • writ_sandbox

    Get a free 90-second sandbox grant for a demo write. No API key needed. Issues a live grant for verb "demo_write" on a target starting with "demo-", then runs writ_check so you get back an ALLOW decision plus auth token to practice the verify-before-write flow end to end.

  • writ_verify_token

    Verify a Writ auth token against the write you are about to execute. Call this IMMEDIATELY before executing an ALLOWed write, with the exact verb/target/purpose you intend. If valid is false — expired, tampered, or bound to a different purpose — do NOT execute the write; call writ_check again. This is the commit-time enforcement: the check authorizes, the token proves the authorization still matches what you are actually doing.

Signals

Stars
2
Forks
0
Open issues
4
Weekly downloads
52
Last commit (this folder)
Oct 3, 2026 (27 days ago)
Last release
Oct 5, 2026 (25 days ago)
Last package publish
Oct 1, 2026 (28 days ago)

From GitHub (fetched Oct 24, 2026) and the package registry.

Details

Registry name
io.github.AvenueDAdmin/writ
Version
0.1.2
Auth
API key
Packages
pypi writ-mcp
License
MIT
Repository
github.com/AvenueDAdmin/pywrit
Website
withwrit.com
First seen
Oct 24, 2026
Last checked
Oct 25, 2026
Source
Official MCP Registrygithub-graphql

Same server elsewhere

Copies of this server published by others; search shows only one of them.

Cite this page

writ MCP server. Agent Mart. https://agentmart.dev/connectors/avenuedadmin-writ (last updated 2026-10-25)