Open source / WebMCP governance

Moirae Console

A human- and agent-facing demonstration of governed WebMCP capability use.

Last reviewed 2 September 2026

Completed hackathon reference implementation

Built and submitted for The WebMCP Challenge. The wider Fates governance system is not represented as production-complete.

What is Moirae Console?

Moirae Console is the human- and agent-facing demonstration of governed WebMCP capability use. WebMCP exposes and discovers what the web surface can do; it does not decide whether an action is authorised.

How are the boundaries separated?

The Fates determines authority. Ananke returns ALLOW, REQUIRES_APPROVAL or DENY. Execution remains separate from capability discovery and authorization.

What does human approval do?

Sensitive actions can reach REQUIRES_APPROVAL and wait for an independent human approval transition before the fixed effect is executed. A restricted caller can be denied and not executed.

What does complete mean here?

The bounded hackathon implementation is complete and publicly submitted. This is a reference implementation with documented limitations, not a claim that the wider production-grade Fates system is complete.

The boundary in one view

WebMCPExposes and discovers capability
The Fates / AnankeDetermines authority and outcome
Moirae hostPerforms the bounded effect
Discovery is not authorization.

Moirae Console makes that distinction visible to a human without presenting the demonstration as a universal security guarantee.

Public bounded evidence

The submitted reference path.

  • Moirae Console test suite186 tests reported in the public entry
  • Ananke test suite266 tests reported in the public entry
  • Runtime Contracts test suite407 tests reported in the public entry
  • Independent adversarial reviewPASS WITH LIMITATIONS; no HIGH or CRITICAL blocking defect found

Hackathon

The WebMCP Challenge

Submitted: 1 September 2026

Source and evidence

Inspect the reviewed path.

Related projects

Ananke

Governed action authority and outcomes.

FAQ

Does WebMCP grant an agent permission?

No. WebMCP can expose what a web surface can do; Moirae Console demonstrates why authority must still be evaluated before disclosure or action.

Is Moirae Console a production control plane?

No. It is a completed, bounded hackathon reference implementation with explicit limitations. The wider Fates governance system is not claimed as production-complete by this page.