Enterprise DNAEnterprise DNA

MCP Servers

agentward-ai/agentward

Open-source permission control plane for AI agents. Scan, enforce, and audit every tool call.

Our verdict

Not reviewed yet

We have not reviewed agentward-ai/agentward yet

No one at Enterprise DNA has checked this listing against its sources. The description comes from public listings gathered automatically. Any fact below shows where it came from and when it was last checked.

How we review records

From the listing

About agentward-ai/agentward

Agentward is an open-source permission control plane for AI agents. It intercepts every tool call made by an agent, applies permission policies, and logs all calls for audit. Written in Python, it helps developers enforce security rules on agent actions.

Best for

Teams that need to enforce and audit permissions in agentic workflows

Use cases

  • Enforce access control for agent tool calls
  • Audit tool usage in agent workflows
  • Scan agent behavior for policy violations

Notes

18 stars on GitHub. Last updated 2026-04-29.

Pros

  • Open source and self-hostable
  • Provides a clear audit trail of every tool call
  • Lightweight Python implementation

Cons

  • Low GitHub stars (18) suggests early stage or low adoption
  • Limited community support and documentation
  • Tied to Python ecosystem, not language-agnostic

Key facts

What we have checked

Days since the last commit
109
Checked GitHub
GitHub forks
5
Checked GitHub
GitHub stars
19
Checked GitHub
Days to a first reply on issues
26.2
Checked GitHub
Open issues
1
Checked GitHub
Releases in the last 90 days
0
Checked GitHub

Each value shows when we last confirmed it and where it came from. Values we have not confirmed are left out, never guessed.

How to use

How to set it up

As the listing publishes it. We have not run this install.

Install

pip install agentward

Tools exposed

  • payload_fragmentation
  • privilege_escalation
  • circular_chaining
  • exfiltration_sequence
  • tool_name
  • chaining_source
  • chaining_target
  • requires_policy_feature
  • protected_paths
  • path_traversal
  • scope_creep
  • skill_chaining
  • pii_injection
  • boundary_violation
  • prompt_injection

Clients the listing names (not checked here)

Claude Desktop, Claude Code, Cursor, Windsurf, VS Code, ChatGPT

Install

Add agentward-ai/agentward to your client

Not verified yet

No install recipe yet. We write one for Claude Code, Claude Desktop, Cursor, VS Code, Codex and ChatGPT when the server is in the official MCP registry with a package or remote address we can use.

Until then, follow the project's own README, or the setup the listing publishes under How to set it up.

Works with

What agentward-ai/agentward connects to

No confirmed connections yet. A product appears here when the server's registry name, repo, homepage or name ties it to that product, and a client appears when we have an install recipe for it.

Health and security

Is agentward-ai/agentward looked after, and what do its setup files show

Health score

26 out of 100

Does someone look after this repository? It does not say the code is good or safe. Worked out from GitHub signals checked . How it is worked out

PartPointsWhat we saw
Recent activity22.9 of 30Last push 109 days ago
Releases0 of 150 releases in 90 days
Issue replies2.8 of 20First reply in 26.2 days (median)
Maintainer0 of 15Owned by a single user
Official source0 of 20Community server

Sources

Where this comes from

  • GitHubRegistry

    Checked · Days since the last commit, GitHub forks, GitHub stars, Days to a first reply on issues, Open issues, Releases in the last 90 days

A source shows what was published when we checked it. It does not certify security, performance or a working installation. Read our method.

Changelog

What changed

No changes recorded yet. Releases, price changes and deprecations appear here, with their dates, once we track them for this record.

Free 27-page guide

Get the free Developer’s Field Guide

A 27-page field guide to the AI coding workflow with Claude. Claude Code, MCP servers, the prompt patterns that work, and what to delegate. Free.

Enter your work email. We send it straight over, plus a few short notes worth knowing. Unsubscribe any time.

No spam. Unsubscribe any time.