Skip to content
Agentmart
Submit a tool

Covenant Guard

Hard spend cap, OS sandbox, and signed receipts for unattended coding agents like Claude Code.

Connector by opencovenant.org · Domain verified by the MCP Registry

IndexedApache-2.0Local (stdio)★ 8
Write a review

Install

Works with Claude Desktop. Read the repository before you give any tool access to your data.

Download the bundle

MCP bundle (.mcpb): open it with Claude Desktop.

Get the weekly diff

The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.

We use your email only for this newsletter. Privacy

About

Hard spend cap, OS sandbox, and signed receipts for unattended coding agents like Claude Code.

Reviews

Write a review

No reviews yet. Installed it? Reviews come from verified installers only. How reviews work

Permissions

What this server can do and what it asks for, from its tool list, install config and code. Checked Oct 25, 2026.

Tools
18 read · 4 write · 1 delete · 2 not yet classified
Secrets
None asked for
Install scripts
None found
Runs as
Downloaded binary

Tools by what they do 25

Read from the source code; the running server may list different tools.

Read 18 · Look things up without changing anything.

  • convert_time
  • covenant_agent_passport
  • covenant_payment_history
  • covenant_verify
  • get_current_time
  • mizuki_bounties
  • mizuki_bounty
  • mizuki_capabilities
  • mizuki_capability_handoff
  • mizuki_job_status
  • mizuki_payment_status
  • mizuki_quote
Show 6 more tools
  • mizuki_repositories
  • mizuki_repository_issues
  • mizuki_repository_readiness
  • mizuki_status
  • mizuki_treasury
  • read_file

Write 4 · Create, change, send or run things.

  • edit_file
  • mizuki_preflight
  • mizuki_submit
  • write_file

Delete 1 · Delete, drop, revoke or wipe things.

  • bash

Not yet classified 2 · We could not tell from the name and description.

  • mizuki_assess_repository
  • name

Network hosts it talks to 60

  • acedata.cloud · found in code
  • agent.robinhood.com · found in code
  • api.anthropic.com · found in code
  • api.binance.com · found in code
  • api.deepseek.com · found in code
  • api.devnet.solana.com · found in code
  • api.exchange.coinbase.com · found in code
  • api.github.com · found in code
  • api.mainnet-beta.solana.com · found in code
  • api.openai.com · found in code
  • api.render.com · found in code
  • api.rh.lighter.xyz · found in code
  • api.robinhood.com · found in code
  • api.usepod.ai · found in code
  • api.xona-agent.com · found in code
  • api.zauth.inc · found in code
  • challenges.cloudflare.com · found in code
  • clawpump.tech · found in code
  • cloudflare.com · found in code
  • compute-api.opencovenant.org · found in code
  • compute-inference.opencovenant.org · found in code
  • covenant.dev · found in code
  • devnet-eu.magicblock.app · found in code
  • devnet-tee.magicblock.app · found in code
  • dl-cdn.alpinelinux.org · found in code
  • docs.opencovenant.org · found in code
  • doi.org · found in code
  • e2b.dev · found in code
  • eips.ethereum.org · found in code
  • explorer.oobeprotocol.ai · found in code
Show 30 more hosts
  • explorer.solana.com · found in code
  • facilitator.invalid · found in code
  • facilitator.opencovenant.org · found in code
  • facilitator.payai.network · found in code
  • fonts.google.com · found in code
  • github.com · found in install command, code
  • lite-api.jup.ag · found in code
  • mainnet-tee.magicblock.app · found in code
  • mcp.opencovenant.org · found in code
  • metaplex.com · found in code
  • mizuki.invalid · found in code
  • mizuki.opencovenant.org · found in code
  • mpp.hyreagent.fun · found in code
  • opencovenant.org · found in code
  • payai.network · found in code
  • pccs.phala.network · found in code
  • pump.fun · found in code
  • raw.githubusercontent.com · found in code
  • release-assets.githubusercontent.com · found in code
  • rest.invalid · found in code
  • robinhoodchain.blockscout.com · found in code
  • router.magicblock.app · found in code
  • rpc.mainnet.chain.robinhood.com · found in code
  • sandbox.opencovenant.org · found in code
  • solana-rpc.publicnode.com · found in code
  • solscan.io · found in code
  • staging.synapse.test · found in code
  • storage.googleapis.com · found in code
  • x402-seller.opencovenant.org · found in code
  • x402.org · found in code

Files it touches

  • /home/agent
  • /home/op/receipts/working.jsonl.bak
  • /home/u
  • /home/u/.covenant
  • /opt/covenant/sap-worker.js
  • /opt/homebrew/bin/llama-server
  • /tmp/cov-deploy-rpc
  • /tmp/cov-test/explicit.json
  • /tmp/covenant-agent-bundle
  • /tmp/covenant-agent-package
  • /tmp/covenant-langchain-accepted-lmglpy2z/node_modules/@covenant/compute-x402-client
  • /tmp/covenant-real
  • /tmp/covenant-state
  • /tmp/covenant/peers/operator.token
  • /tmp/covenant/sock
  • /tmp/key
  • /tmp/missing-agent/agent.toml
  • /tmp/mizuki-cache
  • /tmp/mizuki-home
  • /tmp/mizuki-workspace
  • /tmp/none.json
  • /tmp/nope
  • /tmp/pkg
  • /tmp/settlement.backfill-rollback-001.jsonl
  • /tmp/sock
  • /tmp/x
  • /Users/op/cov
  • /Users/operator/covenant
  • /usr/local/some-path-not-in-stderr
  • /var/covenant
  • /var/covenant/peers/operator.token
  • /var/covenant/sock
  • /var/data
  • /var/lib/covenant
  • /var/lib/covenant/explicit-stats.json
  • Your home directory (~)
  • ~/.config/covenant
  • ~/.config/solana/id.json
  • ~/.covenant/secrets.toml
  • ~/.ollama/models/blobs/sha256-a3de86cd1c132c822487ededd47a324c50491393e6565cd14bafa40d0b8e686f

Tools (25)

Read from the source code; the running server may differ. Descriptions are the server’s own words; hidden characters are shown as [U+…].

  • bash

    Run a shell command in the workspace and return stdout, stderr, and exit code.

  • convert_time

    Convert time between timezones

  • covenant_agent_passportAgent identity and validation recordsread-only

    Partial identity facts for an MPL Core agent asset plus Covenant validation envelopes whose AppData write authority and payload fields pass record-authenticity checks. This endpoint does not fully decode the MIP-014 registry account or verify committed evidence. On-chain URIs are returned as untrusted data and are never fetched.

  • covenant_payment_historyObserved PayAI-sponsored transfer historyread-only

    Coverage-limited inbound USDC transfers found in recent transactions sponsored by the PayAI fee payer. Reports missing transactions explicitly. Fee sponsorship alone does not prove an x402 request, settlement receipt, completed job, or reputation.

  • covenant_verifyVerify attestation signatureread-only

    Verify the integrity of a covenant.attest.v1 envelope. A valid signature proves authorship by the carried signer, not that the signer is trusted. Supply expected_signer from an independent trust source when authorship matters.

  • edit_file

    Replace an exact, unique substring in an existing file. Fails if old_string is missing or appears more than once.

  • get_current_time

    Get current time in a specific timezones

  • mizuki_assess_repository

    Report whether a public GitHub repository qualifies for Mizuki maintenance and which command Mizuki would run to validate a change. Not a quote, and reserves nothing. Worth calling before quoting.

  • mizuki_bounties

    List public maintenance bounties created after eligible jobs receive a full refund.

  • mizuki_bounty

    Inspect one maintenance bounty, its claim requirements, separate AI review, maintainer approval, and funded SOL escrow status.

  • mizuki_capabilities

    Inspect proposed capability changes and the evidence required before a change can reach production.

  • mizuki_capability_handoff

    Read a hashed record of the failures, benchmark, and approvals required before a capability change can reach production.

  • mizuki_job_status

    Read delivery, pull request, validation, and refund state for a Mizuki maintenance job.

  • mizuki_payment_status

    Safely check whether an exact quote and idempotency key already reserved a job. This read never requests a wallet signature or submits payment. Requires a jobs:read MIZUKI_API_TOKEN.

  • mizuki_preflight

    Run repository, authorization, scope, and maintainer readiness checks for one issue without creating a quote or payment. Requires a repositories:read MIZUKI_API_TOKEN.

Show 10 more tools
  • mizuki_quote

    Get a fixed-price quote and x402 payment requirements for a public GitHub issue. With MIZUKI_API_TOKEN, the repository must already be connected and the quote is linked for payment recovery.

  • mizuki_repositories

    List repositories linked to the authenticated maintainer and their current readiness. Requires a repositories:read MIZUKI_API_TOKEN.

  • mizuki_repository_issues

    List bounded maintenance candidates for a linked repository after authenticated maintainer checks. Requires a repositories:read MIZUKI_API_TOKEN.

  • mizuki_repository_readiness

    Read current readiness for one repository already linked to the authenticated maintainer. Never bypasses maintainer or GitHub App checks.

  • mizuki_status

    Read delivery, PR, validation, or refund status for a Mizuki job.

  • mizuki_submit

    Submit a quoted job with a wallet-created x402 PAYMENT-SIGNATURE.

  • mizuki_treasury

    Inspect the refund reserve wallet status and planning estimates derived from service records. Planning estimates do not prove custody or grant spending authority.

  • name

    description

  • read_file

    Read a UTF-8 file from the workspace.

  • write_file

    Create or overwrite a UTF-8 file in the workspace.

Signals

Stars
8
Forks
6
Open issues
9
Last commit
Oct 22, 2026 (6 days ago)
Last release
Oct 21, 2026 (7 days ago)

From GitHub (fetched Oct 24, 2026).

Details

Registry name
org.opencovenant/guard
Version
0.1.1
Auth
No auth
Packages
mcpb https://github.com/open-covenant/covenant/releases/download/covguard-v0.1.1/covenant-guard.mcpb
License
Apache-2.0
Repository
github.com/open-covenant/covenant
Website
opencovenant.org/guard
First seen
Oct 24, 2026
Last checked
Oct 24, 2026
Source
Official MCP Registrygithub-graphql

More from opencovenant.org

Cite this page

Covenant Guard MCP server. Agent Mart. https://agentmart.dev/connectors/opencovenant-org-guard (last updated 2026-10-24)