Kenwea Public MCP ServerBLOCK
Kenwea protocol AI marketplace
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
This repository contains the public MCP transport adapter for Kenwea marketplace agents.
Repository: github.com/kenwea-protocol/kenwea
It accepts MCP JSON-RPC requests over HTTP, authenticates the caller through the Platform API, manages short-lived MCP sessions in Redis, enforces a narrow public tool allowlist, and forwards business operations to the Platform API.
Client libraries
You usually don't need to run this server yourself — it's already live at https://mcp.kenwea.com/mcp/v1. To connect an agent, use one of the thin clients in clients/:
clients/npm—@kenwea/mcp, a zero-dependency
stdio ↔ HTTP bridge for any MCP client that spawns a command (Claude Desktop, etc.), plus init and doctor helpers.
clients/python—kenwea-mcp, a stdlib-only Python
client with LangChain and CrewAI usage guides.
clients/registry— the MCP registryserver.json
manifest for mcp.kenwea.com.
Any MCP-compatible framework can also point straight at the endpoint over Streamable HTTP — see clients/python/README.md.
This package is intentionally not a full platform runtime. It does not contain:
- private governance code
- operator or admin web flows
- payment provider credentials
- database migrations
- direct PostgreSQL access
- ledger, escrow, or dispute decision logic
Scope
The adapter owns:
- MCP HTTP transport
- protocol version checks
- origin filtering
- tool allowlisting
- parameter validation for selected tools
- transient MCP session issuance and lookup
- idempotency record storage
- operator policy gates for selected agent actions
- forwarding to the Platform API
The adapter does not own:
- product search logic
- purchase finalization
- install execution
- wallet balances
- payout logic
- sandbox verdicts
- dispute decisions
- operator claim flows
- payment
f43bd26e3f70OBSERVED · 2026-10-11Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.
claude mcp add mcp -- npx -y @kenwea/[email protected]
Trust audit
BLOCKgrade D · trust 69/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | FAIL |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- declared (1 observation(s))
- Network
- declared (5 observation(s))
- Shell
- none-observed
- Dependencies
- pinned
- Secrets in source
- found
Findings (9)
verify = false;
KENWEA_API_BASE_URL=http://127.0.0.1:8080
apiBase := valueOr(os.Getenv("KENWEA_API_BASE_URL"), "http://127.0.0.1:8080")DATABASE_URL="postgres://kenwea:[email protected]:5439/kenwea_test?sslmode=disable" \
: !!pkg.shasum && pkg.shasum === createHash("sha1").update(bytes).digest("hex");raw, err := os.ReadFile("../../README.md")http://127.0.0.1:8083/mcp/v1
- Platform API base URL: `http://127.0.0.1:8080`
Gates applied: no_behavioural_pass.
f43bd26e3f70full audit observations/trust-audit/mcp-server/kenwea-protocol__kenwea.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-11 | f43bd26e3f70 | BLOCK | D | 69 | first audit |
Questions
What is the @kenwea/mcp MCP server?
Kenwea protocol AI marketplace
Is @kenwea/mcp safe to connect to an agent?
No — not without reading the findings first. The audit graded it D (69/100) and found 1 critical or high issue in the source. Each one is listed on this page with the file and line it is on.
What credentials does @kenwea/mcp need?
No credential environment variables were found in its source, so it appears to need none.
How does @kenwea/mcp run?
It speaks stdio and streamable-http, so it runs as a local process your client starts. It is published on npm as @kenwea/mcp at 0.3.0.
How current is this page?
The grade is for one exact copy of the source (f43bd26e3f70), read on 2026-10-11. The repository is watched and re-audited when it changes.