Heddle: Trust Enforcement and Audit Logging for Claude Desktop MCP Connections
What Heddle Solves
Heddle addresses a security gap in Claude Desktop's MCP (Model Context Protocol) implementation. While MCP defines how Claude communicates with tool servers, it lacks built-in authentication, audit trails, and access controls like read-only vs. write permissions.
Core Architecture
The tool implements a trust tier system defined in YAML configurations:
- Tier 1 (T1): Read-only configurations that physically cannot make POST requests, even if the backend API would accept them.
- Tier 2 (T2): Allows scoped writes with defined boundaries.
- Tier 3 (T3): Permits cross-service invocation between connected tools.
Every tool call passes through a six-stage pipeline: rate limiting → access mode check → escalation rules → input validation → trust enforcement → HTTP bridge.
Security Features
The security architecture includes:
- Trust tier enforcement based on YAML configurations
- Credential broker for managing service authentication
- Escalation rules for controlled privilege elevation
- Hash-chained audit log for tamper-evident tracking
Development Collaboration
Claude assisted in building several components:
- Initial configuration schema design
- Test suite structure implementation
- Development of starter packs through conversational iteration
- Collaborative design and implementation of the security architecture
Available Starter Packs
Heddle ships with six ready-to-use configurations:
- Prometheus monitoring
- Grafana dashboards
- Ollama local LLM management
- Sonarr media management
- Radarr media management
- Gitea self-hosted Git service
These starter packs can be dropped into Claude Desktop and run immediately without additional configuration.
Technical Details
The tool connects Claude Desktop to multiple services through a single MCP connection. The original implementation mentioned connecting to 9 services: Prometheus, Grafana, Ollama, Gitea, Sonarr, Radarr, RSS feeds, a RAG API, and a GPU VRAM manager.
Heddle is free and open source under the MIT license, available at https://github.com/goweft/heddle.
📖 Read the full source: r/ClaudeAI
👀 See Also
AI Team OS: Self-Driving Organization Layer for Claude Code
AI Team OS is an operating system layer for Claude Code that creates autonomous workflows where the system continues working without waiting for user prompts. It includes 22 specialized agent templates, 40+ MCP tools, and runs entirely within Claude Code subscription without external API costs.
Dynamic Status Bar for Claude Code Shows Live Updates
A developer has improved their Claude Code status bar from static text to dynamic display with real-time updates showing what Claude is working on. The configuration is available as a GitHub gist.
Skills Creator Tool for OpenClaw Helps Developers Package Workflows
A developer created a skill called skills-creator that guides users through creating quality skills for OpenClaw, addressing common pitfalls like vague descriptions and documentation-like instructions. It's available on ClawHub and provides a design-driven approach with description formulas, checklists, and complexity tiers.
Rivet Actors adds SQLite storage: one database per agent, tenant, or document
Rivet Actors now supports SQLite storage where each actor gets its own SQLite database, enabling millions of independent databases for AI agents, multi-tenant SaaS, collaborative documents, or per-user isolation.