Testing and observability for multi-agent delegation, MCP tools, permissions, sandboxed actions, prompts, and workflow replay.
An open-source testing and observability framework for multi-agent delegation, tool execution, MCP workflows, permissions, sandboxed actions, prompts, and runtime behavior.
Status: Experimental — v0.1.0 release candidate. Suitable for local development, evaluation, and policy testing; not production-hardened infrastructure.
Most model evaluation stops at input → model → output. Multi-agent systems add behavior that a final answer cannot explain:
- Which agent delegated a task, to whom, and why? - What context, permissions, tools, MCP servers, and budget did the child receive? - Did an agent attempt privilege escalation, repeat work, or enter a loop? - Was the delegation efficient, and was the child result actually integrated? - Can the run be inspected, compared, or replayed without repeating side effects?
MAWL makes those decisions explicit, policy-controlled, and traceable. Prompts are versioned assets; delegation is a first-class runtime event; deterministic rules evaluate behavior independently from optional model judges.
Area What is implemented ------------------------ ------------------------------------------------------------------------------------------------------------------------------------------ Agent runtime Typed model actions, task limits, cancellation, retries, and deterministic mock execution Delegation Parent/child task graph, target and capability checks, depth/fan-out limits, loop detection, and result integration events Tool execution Registry-based invocation with schema validation, allowlists, permissions, policy, optional approval, redaction
From the project README.
Add the radar badge to your README — it shows your project was picked up by MCP Radar and links to this page:
[](https://mcp.liqiwa.com/s/christiangrey922--multi-agent-workflow-lab.html)
Security control plane for AI agents — identity and delegation, capability policy, data-flow taint and a live audit trail, enforced over MCP. Guards a real Claude Code end to end.
sgateway/s-gwLocal credential control for AI coding agents.
scrollDynasty/multi-agent-browser-mcpMulti-agent browser MCP runtime for isolated, persistent, parallel Playwright sessions. Run multiple AI agents without shared tabs or browser state.
LilithGames/a2waveTurn the agent CLIs you already use into shared services your whole team can call. Natural-language-driven agent orchestration for Claude Code, Cursor Agent, and OpenAI Codex.
Gowthaman90/mcp-bastionReliability + security proxy for the Model Context Protocol (MCP): self-healing connections, runtime tool-security (rug-pull/poisoning detection), and a compliance-mapped audit trail.
luckeyfaraday/frontier-orchestratorMulti-agent orchestration for Claude Code: MCP server + skill that keeps Claude as lead engineer while delegating backend work to OpenAI Codex and frontend/design work to Kimi
The top new MCP servers of the week, every Monday. No spam, unsubscribe anytime.