M

Marrow AI: Control Layer for AI Agents

ai.getmarrow/marrow · v3.9.109 · MCP server

by ai.getmarrowScan grade: AcceptableOfficial MCP registry · source scanned

Approval gate and audit trail for AI agent actions: policy check first, proof after. Any MCP client.

InstallSourceClaim this MCP server
Follow0
Trust ScoreNot ratedSecurity scan73Components1
Protect this install with HOL Guard

Guard checks the skills and MCP servers a plugin adds on your machine and asks you before a risky action runs. The scores above are free, and no plan changes them.

Is Marrow AI: Control Layer for AI Agents a fit?

From the plugin's manifest and HOL's scan. Anything the plugin does not declare is shown as not declared.

Works with

  • MCP
  • 1 MCP server

Before you install

Sign-in
Not declared
Declared access
Not declared
License
Not declared

Check before relying on it

  • Some security checks did not finish: Cisco MCP scan. See the evidence
  • 6 medium findings from the scan. See the evidence
  • The publisher has not verified ownership on HOL.
  • No license declared in the manifest.

What is Marrow AI: Control Layer for AI Agents?

Marrow AI: Control Layer for AI Agents is a published mcp server plugin for AI coding agents in the MCP ecosystem, developed by ai.getmarrow and distributed through the HOL AI plugin registry. Approval gate and audit trail for AI agent actions: policy check first, proof after. Any MCP client.

Canonical slug
ai.getmarrow/marrow
Version
v3.9.109 · updated Oct 30, 2026

Registry snapshot

Owner verification
Not verified
Scanner
HOL plugin scanner
Security result
Needs review
Digest verified
No

Trust and security

Provenance

Plugin root
.
Source repo
https://github.com/getmarrow/marrow-mcp
Source commit
990aaaa673a3…
Publisher verified
No
Owner verified
Not owner verified

Security posture

See how the Trust Score is computed
Needs review
Security result
73
Security score
0
High findings
Provider
codex-plugin-scanner
Grade
C · Acceptable
Version
3.24.2
codex:marrow / cisco-skill-scanner: skippedcodex:marrow / cisco-mcp-scanner: unavailablecodex:marrow-advisory / cisco-skill-scanner: skippedcodex:marrow-advisory / cisco-mcp-scanner: unavailablecodex:marrow / cisco-skill-scanner: skippedcodex:marrow / cisco-mcp-scanner: unavailablecodex:marrow-advisory / cisco-skill-scanner: skippedcodex:marrow-advisory / cisco-mcp-scanner: unavailablecodex:marrow / cisco-skill-scanner: skippedcodex:marrow / cisco-mcp-scanner: unavailablecodex:marrow-advisory / cisco-skill-scanner: skippedcodex:marrow-advisory / cisco-mcp-scanner: unavailable

[codex:test/fixtures/codex-plugins-0.1.2-draft/codex/marrow] Manifest Validation

28/31

9 checks

[codex:test/fixtures/codex-plugins-0.1.2-draft/codex/marrow] Security

14/20

9 checks

[codex:test/fixtures/codex-plugins-0.1.2-draft/codex/marrow] Operational Security

3/6

5 checks

[codex:test/fixtures/codex-plugins-0.1.2-draft/codex/marrow] Best Practices

3/12

5 checks

[codex:test/fixtures/codex-plugins-0.1.2-draft/codex/marrow] Marketplace

N/A

3 checks · not applicable

[codex:test/fixtures/codex-plugins-0.1.2-draft/codex/marrow] Skill Security

N/A

3 checks · not applicable

[codex:test/fixtures/codex-plugins-0.1.2-draft/codex/marrow] Code Quality

10/10

2 checks

[codex:test/fixtures/codex-plugins-0.1.2-draft/codex/marrow-advisory] Manifest Validation

28/31

9 checks

[codex:test/fixtures/codex-plugins-0.1.2-draft/codex/marrow-advisory] Security

14/20

9 checks

[codex:test/fixtures/codex-plugins-0.1.2-draft/codex/marrow-advisory] Operational Security

3/6

5 checks

[codex:test/fixtures/codex-plugins-0.1.2-draft/codex/marrow-advisory] Best Practices

3/12

5 checks

[codex:test/fixtures/codex-plugins-0.1.2-draft/codex/marrow-advisory] Marketplace

N/A

3 checks · not applicable

[codex:test/fixtures/codex-plugins-0.1.2-draft/codex/marrow-advisory] Skill Security

N/A

3 checks · not applicable

[codex:test/fixtures/codex-plugins-0.1.2-draft/codex/marrow-advisory] Code Quality

10/10

2 checks

[codex:test/fixtures/codex-plugins-0.1.3/codex/marrow] Manifest Validation

28/31

9 checks

[codex:test/fixtures/codex-plugins-0.1.3/codex/marrow] Security

14/20

9 checks

[codex:test/fixtures/codex-plugins-0.1.3/codex/marrow] Operational Security

3/6

5 checks

[codex:test/fixtures/codex-plugins-0.1.3/codex/marrow] Best Practices

3/12

5 checks

[codex:test/fixtures/codex-plugins-0.1.3/codex/marrow] Marketplace

N/A

3 checks · not applicable

[codex:test/fixtures/codex-plugins-0.1.3/codex/marrow] Skill Security

N/A

3 checks · not applicable

[codex:test/fixtures/codex-plugins-0.1.3/codex/marrow] Code Quality

10/10

2 checks

[codex:test/fixtures/codex-plugins-0.1.3/codex/marrow-advisory] Manifest Validation

28/31

9 checks

[codex:test/fixtures/codex-plugins-0.1.3/codex/marrow-advisory] Security

14/20

9 checks

[codex:test/fixtures/codex-plugins-0.1.3/codex/marrow-advisory] Operational Security

3/6

5 checks

[codex:test/fixtures/codex-plugins-0.1.3/codex/marrow-advisory] Best Practices

3/12

5 checks

[codex:test/fixtures/codex-plugins-0.1.3/codex/marrow-advisory] Marketplace

N/A

3 checks · not applicable

[codex:test/fixtures/codex-plugins-0.1.3/codex/marrow-advisory] Skill Security

N/A

3 checks · not applicable

[codex:test/fixtures/codex-plugins-0.1.3/codex/marrow-advisory] Code Quality

10/10

2 checks

[codex:test/fixtures/codex-plugins-b446393/codex/marrow] Manifest Validation

28/31

9 checks

[codex:test/fixtures/codex-plugins-b446393/codex/marrow] Security

14/20

9 checks

[codex:test/fixtures/codex-plugins-b446393/codex/marrow] Operational Security

3/6

5 checks

[codex:test/fixtures/codex-plugins-b446393/codex/marrow] Best Practices

3/12

5 checks

[codex:test/fixtures/codex-plugins-b446393/codex/marrow] Marketplace

N/A

3 checks · not applicable

[codex:test/fixtures/codex-plugins-b446393/codex/marrow] Skill Security

N/A

3 checks · not applicable

[codex:test/fixtures/codex-plugins-b446393/codex/marrow] Code Quality

10/10

2 checks

[codex:test/fixtures/codex-plugins-b446393/codex/marrow-advisory] Manifest Validation

28/31

9 checks

[codex:test/fixtures/codex-plugins-b446393/codex/marrow-advisory] Security

14/20

9 checks

[codex:test/fixtures/codex-plugins-b446393/codex/marrow-advisory] Operational Security

3/6

5 checks

[codex:test/fixtures/codex-plugins-b446393/codex/marrow-advisory] Best Practices

3/12

5 checks

[codex:test/fixtures/codex-plugins-b446393/codex/marrow-advisory] Marketplace

N/A

3 checks · not applicable

[codex:test/fixtures/codex-plugins-b446393/codex/marrow-advisory] Skill Security

N/A

3 checks · not applicable

[codex:test/fixtures/codex-plugins-b446393/codex/marrow-advisory] Code Quality

10/10

2 checks

Published advisories

None matched in OSV, checked . This covers published advisories only, not problems nobody has reported.

OSV is matched against the exact package versions this listing names.

Findings

mediumbest-practicesSKILLS_DIR_MISSING

The manifest declares "./skills/" as the skills directory, but it does not exist.

Create the skills directory or correct the manifest path.

mediumbest-practicesSKILLS_DIR_MISSING

The manifest declares "./skills/" as the skills directory, but it does not exist.

Create the skills directory or correct the manifest path.

mediumbest-practicesSKILLS_DIR_MISSING

The manifest declares "./skills/" as the skills directory, but it does not exist.

Create the skills directory or correct the manifest path.

mediumbest-practicesSKILLS_DIR_MISSING

The manifest declares "./skills/" as the skills directory, but it does not exist.

Create the skills directory or correct the manifest path.

mediumbest-practicesSKILLS_DIR_MISSING

The manifest declares "./skills/" as the skills directory, but it does not exist.

Create the skills directory or correct the manifest path.

mediumbest-practicesSKILLS_DIR_MISSING

The manifest declares "./skills/" as the skills directory, but it does not exist.

Create the skills directory or correct the manifest path.

lowsecuritySECURITY_MD_MISSING

Plugins should publish a SECURITY.md file for responsible disclosure and support guidance.

Add a SECURITY.md file with reporting guidance and supported versions.

lowsecurityLICENSE_MISSING

Plugins should ship a LICENSE file so consumers can review usage rights.

Add a LICENSE file that matches the manifest license metadata.

lowoperational-securityDEPENDABOT_MISSING

Automation or dependency surfaces exist, but .github/dependabot.yml is missing.

Add Dependabot updates for GitHub Actions and dependency manifests.

lowbest-practicesREADME_MISSING

Plugins should document installation, usage, and security expectations in README.md.

Add a README.md that explains setup, usage, and operational constraints.

lowsecuritySECURITY_MD_MISSING

Plugins should publish a SECURITY.md file for responsible disclosure and support guidance.

Add a SECURITY.md file with reporting guidance and supported versions.

lowsecurityLICENSE_MISSING

Plugins should ship a LICENSE file so consumers can review usage rights.

Add a LICENSE file that matches the manifest license metadata.

lowoperational-securityDEPENDABOT_MISSING

Automation or dependency surfaces exist, but .github/dependabot.yml is missing.

Add Dependabot updates for GitHub Actions and dependency manifests.

lowbest-practicesREADME_MISSING

Plugins should document installation, usage, and security expectations in README.md.

Add a README.md that explains setup, usage, and operational constraints.

lowsecuritySECURITY_MD_MISSING

Plugins should publish a SECURITY.md file for responsible disclosure and support guidance.

Add a SECURITY.md file with reporting guidance and supported versions.

lowsecurityLICENSE_MISSING

Plugins should ship a LICENSE file so consumers can review usage rights.

Add a LICENSE file that matches the manifest license metadata.

lowoperational-securityDEPENDABOT_MISSING

Automation or dependency surfaces exist, but .github/dependabot.yml is missing.

Add Dependabot updates for GitHub Actions and dependency manifests.

lowbest-practicesREADME_MISSING

Plugins should document installation, usage, and security expectations in README.md.

Add a README.md that explains setup, usage, and operational constraints.

lowsecuritySECURITY_MD_MISSING

Plugins should publish a SECURITY.md file for responsible disclosure and support guidance.

Add a SECURITY.md file with reporting guidance and supported versions.

lowsecurityLICENSE_MISSING

Plugins should ship a LICENSE file so consumers can review usage rights.

Add a LICENSE file that matches the manifest license metadata.

lowoperational-securityDEPENDABOT_MISSING

Automation or dependency surfaces exist, but .github/dependabot.yml is missing.

Add Dependabot updates for GitHub Actions and dependency manifests.

lowbest-practicesREADME_MISSING

Plugins should document installation, usage, and security expectations in README.md.

Add a README.md that explains setup, usage, and operational constraints.

lowsecuritySECURITY_MD_MISSING

Plugins should publish a SECURITY.md file for responsible disclosure and support guidance.

Add a SECURITY.md file with reporting guidance and supported versions.

lowsecurityLICENSE_MISSING

Plugins should ship a LICENSE file so consumers can review usage rights.

Add a LICENSE file that matches the manifest license metadata.

lowoperational-securityDEPENDABOT_MISSING

Automation or dependency surfaces exist, but .github/dependabot.yml is missing.

Add Dependabot updates for GitHub Actions and dependency manifests.

Install guidance

Install in MCP

Connect the bundled MCP server shipped in the repository .mcp.json file.

MCP docs
  1. 1

    Clone the repository

    shell
  2. 2

    Register the server in your MCP client

    Claude Code reads a project .mcp.json file and asks you to approve its servers when you open the folder. Other clients keep their own MCP configuration, so copy the server entry from .mcp.json into that client. If this repository configures its server differently, follow the MCP setup the publisher documents.

  3. 3

    Verify the server

    Check the MCP server list in your client. The server declared in .mcp.json should report as connected. In Claude Code, run /mcp to see it.

Did setup work in MCP?

No setup reports for MCP yet. Self-reported by signed-in visitors. Copying a command is not counted, and most installs are never reported.

Attested installs: Fewer than 10 attested installs of this plugin in week 2026-W43, so no number is shown. Counted from opt-in HOL Guard install reports, once per machine and runtime, and never mixed with the answers above. How install reports work.

Loading reviews

Plugin manifest

{
  "source": "official-mcp-registry",
  "evidenceState": "scanned_source",
  "registryName": "ai.getmarrow/marrow",
  "publishedAt": "2026-10-30T03:15:57.328113Z",
  "packages": [
    {
      "registryType": "npm",
      "identifier": "@getmarrow/mcp",
      "version": "3.9.109",
      "transport": "stdio",
      "requiredEnvironment": [
        "MARROW_API_KEY"
      ]
    }
  ],
  "remotes": [],
  "sourceScannedAt": "2026-10-31T00:32:44.686Z",
  "sourceScanCommit": "990aaaa673a3d117599a33a8972dedc1398e240e"
}

File inventory

File inventory is unavailable for this plugin right now.

Marrow AI: Control Layer for AI Agents — Frequently asked questions

What is Marrow AI: Control Layer for AI Agents?
Marrow AI: Control Layer for AI Agents is an AI plugin in the HOL registry. Approval gate and audit trail for AI agent actions: policy check first, proof after. Any MCP client.
How do I install Marrow AI: Control Layer for AI Agents?
Install Marrow AI: Control Layer for AI Agents in your harness: MCP — git clone https://github.com/getmarrow/marrow-mcp. Full step-by-step guidance is on the HOL plugin page.
How do I install Marrow AI: Control Layer for AI Agents in MCP?
To install Marrow AI: Control Layer for AI Agents in MCP, start with git clone https://github.com/getmarrow/marrow-mcp. The complete step-by-step install guide for MCP is on the HOL plugin page.
Who publishes Marrow AI: Control Layer for AI Agents?
Marrow AI: Control Layer for AI Agents is published by ai.getmarrow and listed on HOL.

Directory acceptance

Listed in 0 of 5 directory lists

Read from the list each directory publishes on GitHub. Being listed means the directory accepted the plugin; it is not a HOL security rating.

Lists last read . HOL re-reads them every day.

Submitting it? Check it against each directory's rules

Install signal

HOL cannot see every install. These are separate signals from different sources, so they are not added together. Counts under each floor show as <N.

Install commands issued here
<5
HOL Guard install commands issued from this listing, last 28 days.
Opt-in install reports
<10
Machines that reported installing it through HOL Guard in week 2026-W43. Reporting is opt-in, so most installs are not counted.
HOL Guard workspaces
<5
Workspaces that approved it or include it in an approved-plugin feed, as of today.

Related plugins

Ordered by Trust Score. Listings cannot pay for these positions. Check each one fits your task before switching from Marrow AI: Control Layer for AI Agents.

Alternatives in MCP server

See all MCP server plugins