Agent Warden
Sign inInstall free
Documentation menu

Connect any MCP client

Agent Warden is a streamable HTTP MCP server at your site's REST API:

  • Endpoint: https://example.com/wp-json/agentwarden/mcp, or https://example.com/?rest_route=/agentwarden/mcp without pretty permalinks.
  • Authentication: Authorization: Bearer <YOUR_TOKEN> on every request.

A generic client configuration:

json
{
  "name": "agentwarden",
  "transport": "http",
  "url": "https://example.com/wp-json/agentwarden/mcp",
  "headers": { "Authorization": "Bearer <YOUR_TOKEN>" }
}

What the client sees#

  • Tools: tools/list returns only the abilities the agent's policy allows or holds. Denied abilities are not listed.
  • Refusals: a denied call returns an error that names the rule, so the agent can explain it.
  • Holds: a held call returns a pending result with an approval ID. The agentwarden/check-approval tool returns the status: pending, approved, denied, expired, failed, or not_found. Pass wait_seconds to wait for a decision. An approved action has already run, and its outcome is in result.

A token only works on the MCP endpoint if MCP is ticked under Client types when the agent is created. All three client types are ticked by default.