tenuo MCP Server
tenuo-ai/tenuo
[](https://agentrank-ai.com/tool/tenuo-ai--tenuo/?utm_source=badge&utm_medium=readme&utm_campaign=agentrank_badge) Task-scoped authorization for AI agents. Cryptographic warrants constrain tools and arguments, prevent privilege escalation at every delegation hop, and produce signed evidence of what was allowed or denied.
claude mcp add agentrank -- npx -y agentrank-mcp-server Overview
tenuo-ai/tenuo is a Rust tool licensed under Apache-2.0. Task-scoped authorization for AI agents. Cryptographic warrants constrain tools and arguments, prevent privilege escalation at every delegation hop, and produce signed evidence of what was allowed or denied. Topics: ai-agents, capabilities, cryptography, langchain, langgraph, llm, rust, security, a2a, agents, mcp, authorization, prompt-injection, access-control, agent-security, delegation, proof-of-possession, temporal, python, typescript.
Ranked #2137 out of 24846 indexed tools.
In the top 9% of all indexed tools.
Has 12 contributors.
Ecosystem
Score Breakdown
103 stars → growing community
Last commit 29d ago → recently updated
227/410 issues closed → decent issue management
12 contributors → active community
No dependents → no downstream usage
Weights: Freshness 20% · Issue Health 20% · Dependents 22% · Stars 10% · Contributors 8% · How we score →
How to Improve
Matched Queries
From the README
<p align="center"> </p> <p align="center"> <strong>Task-scoped authorization for AI agents.</strong> </p> <p align="center"> <a href="https://github.com/tenuo-ai/tenuo/actions/workflows/ci.yml"></a> <a href="https://crates.io/crates/tenuo"></a> <a href="https://pypi.org/project/tenuo/"></a> <a href="https://hub.docker.com/r/tenuo/authorizer"></a> <a href="https://tenuo.ai"></a> <a href="LICENSE"></a> <a href="https://deepwiki.com/tenuo-ai/tenuo"></a> </p> Tenuo gives each task only the authority it needs. That authority travels with the work, can only shrink when handed off, and is checked where the action runs. It works alongside your existing identity and policy systems. A **warrant** is a signed grant of which tools an agent can call, under what constraints, and for how long. It works like a prepaid card for one task. Sensitive actions can also require a [signed human approval](./docs/approvals.md). Deploy in-process, in a sidecar, or at a gateway. > **StatusRead full README on GitHub →
Get the weekly AgentRank digest
Top movers, new tools, ecosystem insights — straight to your inbox.