Log inSubmit server
Melra logo

Melra

Local MCP runtime that policy-gates agent tool calls, requests approvals, verifies evidence, and records recoverable execution receipts.

InstallRepositoryWebsite
Full README Compare alternatives Embed widget Claim this listing

Install Melra

Pick your client, then add it in one click or paste the config.

STDIONode.js
~/Library/Application Support/Claude/claude_desktop_config.json
claude_desktop_config.json
{
  "mcpServers": {
    "melra": {
      "command": "npx",
      "args": [
        "-y",
        "@melra/cli@alpha"
      ],
      "env": {
        "MELRA_WORKSPACE": "YOUR_VALUE_HERE"
      }
    }
  }
}

Settings → Developer → Edit Config, merge this into mcpServers, then fully quit and reopen Claude Desktop.

Values are written into the snippet above so you can paste it as is. They never leave your browser.

Install not yet sandbox-tested— we haven't run this command through our automated sandbox yet. Not a red flag; we're working through the catalog.

Overview

melra governs local agent tool calls routed through it, checking each request against policy before dispatch. It can pause for scoped approval, verify declared evidence, and retain a redacted receipt from execution through outcome. Mutating actions are dispatched at most once per task, while uncertain results wait for reconciliation instead of automatic replay. Reach for melra when an MCP client needs a local workspace boundary and explicit control over tool authorization and recovery.

Use cases

  • Gate agent file and command operations with a local policy
  • Require approval for sensitive tool calls
  • Verify evidence and retain redacted execution receipts
  • Park uncertain mutations for later reconciliation

Key features

  • Policy-gated tool execution
  • Scoped approval requests
  • Workspace boundaries for files and commands
  • Declared-evidence verification
  • Redacted durable receipts
  • At-most-once mutation dispatch

Security & health

What it can reach and how reliably it runs — from our own checks, not the maintainer’s claims.

ActiveLast checked 3d ago

Recent health check succeeded.

Supply-chain signal

No high-severity advisories surfaced by our automated scan.

Critical 0High 0Medium 0Low 0

Scanned 7d ago via OSV.dev · @melra/cli@alpha (npm)

Adoption & maintenance

Factual signals from GitHub, npm, and our automated checks — not a rating.

GitHub stars12Stargazers on the source repository.
npm downloads765Package downloads in the last 30 days.
Last commit3d agoMost recent push to the default branch.
Directory activity1 viewsConfig copies, upvotes, and views on AllMCPs.

How Melra works

What melra does

melra is a local execution runtime for MCP tool calls made by agents. It sits between an agent application and the tools that application uses, applying policy before a call runs. The runtime can require approval for calls that need it, verify declared evidence after execution, and record a redacted receipt covering the request and its outcome.

Its execution model is designed for tasks where repeating an external mutation could be unsafe. For each task, melra dispatches mutations no more than once. If the result is uncertain, it places the operation into a reconciliation state rather than replaying it automatically. The provider still determines whether an external effect is exactly once. Calls made through other tools do not pass through melra and are outside its control.

How it works

The agent decides which action to request; melra governs whether and how that action is executed. Each routed call is evaluated against the active policy. Depending on that policy, execution can proceed, require an approval, or be held. Afterward, melra checks the evidence declared for the call and links the result to a redacted receipt.

A workspace provides the boundary for file and command operations. The setup wizard uses the directory from which it is run unless another location is selected. It also creates a local policy and can add melra to an MCP client's existing configuration while preserving the rest of that configuration and creating a backup.

Setup and configuration

Node.js 22.13 or newer, or Node.js 23.4 or newer, is required for the normal installation. From the workspace where the agent should operate, run:

Terminal
npx @melra/cli@alpha setup

The wizard displays the selected workspace, asks which detected agent application should use melra, and writes the server configuration into that application's configuration file. A noninteractive Cursor setup is available with setup --client cursor --write; setup --client codex prints the configuration instead of writing it. The CLI can also be installed globally with npm.

Docker users can run the published image's doctor command without installing Node.js. Other installation paths include a prebuilt release, building from source with pnpm, and an experimental single executable. After configuration, restart the agent application and approve the project server if the client asks. melra launch claude-code can start Claude Code with melra as its only tool source for changes.

Set MELRA_WORKSPACE to choose a workspace explicitly. The setup flow asks before selecting a home directory, a directory containing the workspace, or the filesystem root. It writes the local policy to ~/.melra/policy.json.

Tools and capabilities

  • Evaluate tool calls against a local policy.
  • Request scoped approval before permitted operations run.
  • Restrict file and command activity to a chosen workspace boundary.
  • Verify declared evidence for executed calls.
  • Record redacted receipts from calls to outcomes.
  • Avoid replaying uncertain mutations and hold them for reconciliation.

Limitations and notes

melra is alpha software, so its APIs may change before version 1.0. The project recommends using an isolated workspace, keeping domain and command allowlists narrow, and reviewing every approval. Its guarantees cover calls routed through melra only; actions performed through other tools remain outside its control. At-most-once dispatch by melra does not guarantee exactly-once effects from an external provider. Supported platforms include macOS, Linux, and Windows, with Python 3.11 through 3.14 also listed for the project environment.

Read the full README View source on GitHub

Reviews

No reviews yet — be the first to share how it worked for you.

Frequently Asked Questions about Melra

melra is an MCP server that connects agent applications to governed local tool execution. Its main capabilities include policy checks, scoped approval requests, declared-evidence verification, redacted execution receipts, and recovery handling for uncertain mutations. It is intended for calls routed through melra, not actions performed through unrelated tools.

Run `npx @melra/cli@alpha setup` from the agent's workspace. The wizard creates a local policy, detects supported agent applications, and can write melra into the selected client's configuration. You can also use Docker, install the CLI globally, download a release, or build from source.

Yes, melra works with Cursor. Use `npx @melra/cli@alpha setup --client cursor --write` to configure it without the interactive client-selection step, then restart Cursor and approve the server if prompted.

Set `MELRA_WORKSPACE` to select the workspace explicitly. Otherwise, run setup from the project directory the agent should use; melra treats that directory as the boundary for file and command operations and asks before selecting a broader location.

No, melra does not guarantee exactly-once effects from external providers. It dispatches mutations at most once per task and parks uncertain outcomes for reconciliation instead of replaying them, but the provider controls the final external effect.

Related MCP servers

All in Coding Agents All alternatives
Add a badge to your READMEShow it’s listed — live SVG, Markdown or HTML.

AllMCPs Directory Badge

Full Badge Customizer

Showcase your server listing on GitHub or your project documentation. Embed this dynamic SVG badge to highlight official listing status and live engagement.

Badge Style:
Live Dynamic SVG PreviewMelra AllMCPs Directory Badge
Markdown (GitHub README)
[![AllMCPs](https://allmcps.com/api/badge/melra?style=directory)](https://allmcps.com/mcp/melra)
HTML Embed
<a href="https://allmcps.com/mcp/melra"><img src="https://allmcps.com/api/badge/melra?style=directory" alt="Melra on AllMCPs" /></a>