Features

What mcp-beaver ships today. It turns a umbra Guardfile into a guarded MCP server with a matching HTTP tool API, distributed as one runtime image plus a generic Helm chart.

Commands

• serve.md - the generic runtime, grant-to-tool projection.
• lint.md - offline validation, and lint-upstream.
• upstream.md - the guarded passthrough proxy, and the credential it presents to an authenticated upstream.
• ssm.md - the exact-parameter AWS reader.
• s3.md - the asset publisher, and the one write-capable mode.

Guardfile surface

• guardfile-siblings.md - instructions, resources, prompts, server-info.
• guardfile-controls.md - pins, rate limit, cache, withheld verbs, confirmations.
• extraction.md - reading a PDF or feed an upstream returns.
• upstream-pins.md - server-side argument pinning.

Runtime

• transports.md - streamable HTTP, the HTTP tool API, health.
• conformance.md - MCP 2026-07-28.
• request-bounds.md - deadlines and connection guards.
• refusals.md - an undeclared argument is refused, and a credential in a base-url path is never emitted.
• conformance.md - /admin describe and reload.
• logs.md - structured logs and redaction.
• telemetry.md - opt-in OpenTelemetry.

Distribution. - image.md, ci.md, chart.md, chart-values.md.

• DESIGN.md - why it is shaped this way.

See also

• README.md, AGENTS.md, .ward/ward.yaml.