Marlow is a small local HTTP service that lets an LLM read and write a fixed set of private repositories — and nothing else. Every request is validated, every repository is checked against a closed allow-list, and the token is held only in memory.