Mandat – Authorization, delegation and audit for AI agent actions

Mandat is an MCP-first tool that checks a policy on every AI agent tool call (e.g., refunds ≤ €50 allowed, €50–500 require a human, > €500 denied), issues short-lived single-task tokens carrying the human → agent → sub-agent chain, and records each call in a tamper-evident audit log exportable to a SIEM. It also ships a scanner for authentication and supply-chain mistakes in MCP servers and client configs, and is installable via npm or pip with an Apache-2.0 license.