Warrant

Warrant is a local, transparent MCP proxy with a browser admin console. It connects an MCP client to configured downstream MCP servers, mirrors their capabilities, forwards requests unchanged, and exposes live operational events over a localhost dashboard.

This first vertical intentionally does not implement Cedar, authorization verdicts, SQLite, signing, intent capture, or policy editing. The proxy is an observation and routing seam for those capabilities to be added later.

Requirements

• Node.js 20.19+ or 22.12+
• npm

Development

npm install
npm run dev

The development server starts the admin API on http://127.0.0.1:8787 and the Vite UI on http://127.0.0.1:5173. The MCP client-facing transport uses stdio when Warrant is started with npm start or the built executable.

All logs use stderr in stdio mode. stdout is reserved for MCP JSON-RPC traffic.

Commands

npm run typecheck
npm test
npm run build
npm start

Configuration

Warrant reads warrant.yaml from the current working directory:

server:
  host: 127.0.0.1
  adminPort: 8787

downstream:
  - name: demo
    transport: stdio
    command: node
    args:
      - ./fixtures/demo-server.mjs

The initial implementation supports downstream stdio servers and a client-facing stdio transport. Streamable HTTP support is deliberately a follow-up milestone.

OpenCode integration

Build Warrant first, then add this entry to the repository's opencode.jsonc or to the applicable OpenCode configuration:

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "warrant": {
      "type": "local",
      "command": ["node", "dist/server.js"],
      "cwd": "apps/warrant",
      "enabled": true,
    },
  },
}

OpenCode resolves cwd relative to the workspace. The command therefore finds apps/warrant/warrant.yaml and starts the built proxy at apps/warrant/dist/server.js. OpenCode prefixes tools with the MCP server name; the proxy additionally prefixes downstream tools with their configured server name to avoid collisions.

After OpenCode connects, use the admin console to verify downstream servers, mirrored tools, request events, failures, and latency.

Admin API

The local admin server exposes:

• GET /health
• GET /api/status
• GET /api/servers
• GET /api/tools
• GET /api/events
• GET /api/events/stream (SSE)

The server binds to loopback only. It is not intended for remote access or multi-user use.