Testing and observability for multi-agent delegation, MCP tools, permissions, sandboxed actions, prompts, and workflow replay.
An open-source testing and observability framework for multi-agent delegation, tool execution, MCP workflows, permissions, sandboxed actions, prompts, and runtime behavior.
Status: Experimental — v0.1.0 release candidate. Suitable for local development, evaluation, and policy testing; not production-hardened infrastructure.
Most model evaluation stops at input → model → output. Multi-agent systems add behavior that a final answer cannot explain:
- Which agent delegated a task, to whom, and why? - What context, permissions, tools, MCP servers, and budget did the child receive? - Did an agent attempt privilege escalation, repeat work, or enter a loop? - Was the delegation efficient, and was the child result actually integrated? - Can the run be inspected, compared, or replayed without repeating side effects?
MAWL makes those decisions explicit, policy-controlled, and traceable. Prompts are versioned assets; delegation is a first-class runtime event; deterministic rules evaluate behavior independently from optional model judges.
Area What is implemented ------------------------ ------------------------------------------------------------------------------------------------------------------------------------------ Agent runtime Typed model actions, task limits, cancellation, retries, and deterministic mock execution Delegation Parent/child task graph, target and capability checks, depth/fan-out limits, loop detection, and result integration events Tool execution Registry-based invocation with schema validation, allowlists, permissions, policy, optional approval, redaction
From the project README.
Add the radar badge to your README — it shows your project was picked up by MCP Radar and links to this page:
[](https://mcp.liqiwa.com/s/christiangrey922--multi-agent-workflow-lab.html)
Security control plane for AI agents — identity and delegation, capability policy, data-flow taint and a live audit trail, enforced over MCP. Guards a real Claude Code end to end.
agent-chaperone/agent-chaperoneScreens an AI agent's tool calls before they run and tool results before the agent reads them. An MCP proxy plus a hooks adapter for a client's built-in tools.
sgateway/s-gwLocal credential control for AI coding agents.
scrollDynasty/multi-agent-browser-mcpMulti-agent browser MCP runtime for isolated, persistent, parallel Playwright sessions. Run multiple AI agents without shared tabs or browser state.
VirajMishra1/bouncerIntent firewall for AI agents — NVIDIA Nemotron checks every tool call against the user's goal and blocks prompt-injection hijacks before they run.
HUA503/mcprismFast single-binary security scanner for MCP (Model Context Protocol) servers — config audit, live capability enumeration, tool-poisoning detection & risk grading. Zero deps, fully offline — trivy for
The top new MCP servers of the week, every Monday. No spam, unsubscribe anytime.