Warden is featured on Product Hunt
Vote for us
Cross-agent support
One boundary. Many MCP hosts.
Local command wrapping works independently of the model vendor. Configuration adapters reduce setup friction; each host still needs a real workflow check.
8
named client adapters
stdio
portable local execution
Codex Linux
app-server workflow tested
| Client | Config | Scope | Evidence | Setup |
|---|---|---|---|---|
| Cline CLI / extension | JSON | user / explicit | Adapter fixtures; live host unverifiedOfficial config reference ↗ | Set up → |
| Legacy Cascade | JSON | explicit | Adapter fixtures; live host unverifiedOfficial config reference ↗ | Set up → |
| Claude Desktop | JSON | user | Adapter fixtures; live host unverifiedOfficial config reference ↗ | Set up → |
| Claude Code | JSON | project / user | Adapter fixtures; live host unverifiedOfficial config reference ↗ | Set up → |
| Cursor | JSON | project / user | Adapter fixtures; live host unverifiedOfficial config reference ↗ | Set up → |
| Codex | TOML | project / user | Linux app-server 0.159.2: npm + stdio testedOfficial config reference ↗ | Set up → |
| VS Code / Copilot | JSONC | project | Adapter fixtures; live host unverifiedOfficial config reference ↗ | Set up → |
| Gemini CLI | JSON | project / user | Adapter fixtures; live host unverifiedOfficial config reference ↗ | Set up → |
| Other MCP host | JSON | explicit | Adapter fixtures; live host unverifiedOfficial config reference ↗ | Set up → |
The Codex check used the official filesystem server in an isolated configuration: discovery, allowed reads, denied writes and denied reads outside the policy. It made no model turn. Desktop UI and other native platforms still need their own workflow checks.
Custom agents & SDKs
Use a stdio connection that launches Warden with a policy, followed by the original command and argument array. In-process servers need a separate process to use this boundary.
Generic setup →Remote & hosted agents
The development gateway exposes authenticated Streamable HTTP for its supported 2025-11-25 subset. Public hosting requires a reachable HTTPS endpoint. Remote providers' machines are not sandboxed.
Build a gateway connection →