Warden is an open-source sandbox runtime for MCP servers. Define explicit filesystem, network, and environment permissions, then run the server inside an enforced sandbox where anything outside the policy is blocked. Warden is designed to make MCP execution safer by default, with a fail-closed approach when the required sandbox cannot be initialized.
