MELRA
Local MCP runtime for policy-governed, verified agent actions with durable receipts.
- 01Stars
- 10
- 02Version
- 0.3.0-alpha.14
- 03License
- Apache-2.0
- 04Review
- Passed
- Language
- TypeScript
- Last commit
- 48m ago
- Forks
- 4
- Open issues
- 5
- Registry update
- Oct 16, 2026
Connect
npm$claude mcp add melra \ -- npx -y @melra/[email protected]
Environment variables
Nothing to configure — it works as is.
Security review
Review passedReviewed 34m ago.
- metadata
- scanned
- packages
- 1 checked
No findings.
Tools
This server runs on your machine, so its tool list is not fetched before install — the README below describes what it offers.
MELRA CLI
Everything in one command, with nothing installed beforehand:
npx @melra/cli@alpha setup
setup writes a safe local policy, produces an MCP client configuration, and
runs every readiness check (Node, workspace, SQLite, browser, computer-use
adapter, policy, MCP clients). In a terminal it asks which detected client to
set up and offers to write MELRA into that client's own config file;
--client <name> --write does the same without asking, and piped or with
--json it prints JSON. It exits non-zero if a check fails and never
overwrites an existing policy.
To keep a resolved copy on the machine instead of resolving on every run:
npm install --global @melra/cli@alpha
melra setup
Either way the generated configuration names a command your client can actually
spawn: run through npx and it launches the server through npx at the exact
version that wrote the config, since an npx install leaves no melra on your
PATH.
Individual steps are still available: melra doctor checks readiness and writes
nothing, melra init writes the policy and config without checking. melra serve speaks stdio, --http loopback HTTP with the console, and --socket <path> a mode-0600 Unix socket; melra tasks, watch, and status show what
MELRA is doing without a server. Run melra help for the full command list.
melra conformance checks a running endpoint rather than a build — its own
stdio server by default, or --url for a loopback HTTP one — and reports the
level it earned: L1 typed effects, L2 governed effects, L3 verified effects.
The report says what the level does not prove as plainly as what it does.
The CLI starts with a local policy that allows reads outright and gates every
mutation: a consequential operation requires declared evidence and an exact,
task-scoped approval before it runs: a phrase echoed back in developer mode, or
an operator's melra approve <task-id> in enforced mode, where the agent is
given no phrase and one it sends is refused.
Requires Node.js 22 or newer. Full documentation: github.com/XAGI-Lab/melra
From the server's repository — third-party content, read it before running anything it suggests.
More in Public data
Cedulon
io.github.dogrucanemek-alt
Policy-gated agent spend with signed receipts and rail-extract audit
apiempresas
io.github.abasmartinc
Spanish company data: CIF lookup, BORME filings, directors, KYB checks and risk profile.
mcp-expert-witness-directory
com.mambabuilt
Expert witness and medico-legal directory records for the US and Australia, one row per person.
mcp-legal-entity-resolver
com.mambabuilt
Resolve a company domain to its registered legal entity, company number, LEI and VAT number.
mcp
io.github.atlasprzetargow
Polish public tenders (BZP, TED): 1M+ notices, buyer and contractor profiles, CPV, stats, glossary.
Data Aggregator
io.github.musharna
Find & fetch research datasets across 20 archives, omics registries, and literature sources.
Listing from the official MCP Registry · repository facts from GitHub, 37m ago.