Model Ledger MCP server
io.github.block/model-ledger·v0.7.13·14 starsModel inventory and governance: trace deployed models and their dependencies as an append-only log
14 stars39 downloads/wk
Reviews
Write oneNobody has reviewed Model Ledger yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Model Ledger tools (8, 1 write)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
changelogView cross-model event history with time range filtering.
discoverImport models from external sources into the ledger.
investigateDeep-dive into a single model — history, metadata, dependencies.
list_tagsReturn all tags attached to a model.
querySearch and filter the model inventory.
recordRegister a new model or record an event on an existing model.
tagwrite actionCreate or move a named tag to the latest snapshot of a model.
traceTraverse a model's dependency graph.
Public scan report
scanner v0.1.9 · 2026-09-25 · same rubric, same numbers if you re-run it
- Code scan78 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 8 days ago15/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year9/10
How Model Ledger compares
Against every graded AI and agents MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 94/100
- higher than 96% of 4,460 AI and agents servers
- Tools
- 8
- the typical AI and agents server has 6
- Tools that change things
- 13%
- typical: 0%. Fewer write tools means less an agent can break
- GitHub stars
- 14
- more than 86% of 2,711 AI and agents servers
- Downloads a week
- 39
- more than 31% of 1,538 AI and agents servers with a package
What its tools let an agent do: 7 read · 1 change
Install Model Ledger in Claude Code, Cursor or VS Code
claude mcp add model-ledger -- uvx model-ledger
What the publisher says
From the Model Ledger repository's README, as published. We do not edit it. Read it on GitHub
model-ledger
git for models — know what models you have deployed, where they run, what they depend on, and what changed.
📖 Documentation · Quickstart · Concepts · Governance
model-ledger is a model inventory for any organization with deployed models. It discovers models, heuristic rules, and ETL across your platforms, maps the dependency graph automatically, and records every change as an immutable event. Unlike registries tied to a single platform (MLflow, SageMaker, W&B), it spans all of them — as one connected graph — and it's built to be driven by AI agents through a native MCP server.
Benchmarked at production scale: full inventory reconstruction over a ledger of 28.8k models and 212k events runs in under a second (CHANGELOG, v0.7.4).
Install
pip install model-ledgerThe graph builds itself
Every model is a DataNode with typed input and output ports. When an output port name matches an input port name, connect() creates the dependency edge — no hand-wiring.
from model_ledger import Ledger, DataNode
ledger = Ledger()
ledger.add([
DataNode("segmentation", platform="etl", outputs=["customer_segments"]),
DataNode("fraud_scorer", platform="ml", inputs=["customer_segments"], outputs=["risk_scores"]),
DataNode("fraud_alerts", platform="alerting", inputs=["risk_scores"]),
])
ledger.connect()
ledger.trace("fraud_alerts")
# ['segmentation', 'fraud_scorer', 'fraud_alerts']Every mutation is recorded as an immutable Snapshot — an append-only event log that gives you full history and point-in-time reconstruction, because nothing is overwritten.
Talk to your inventory
The MCP server is a first-class surface — point Claude (or any MCP agent) at it:
pip install "model-ledger[mcp]"
claude mcp add model-ledger -- model-ledger mcp --demoYou: if we deprecate customer_features, what breaks?
Claude: 3 models consume it directly, 2 more transitively.
Documentation
Everything lives at block.github.io/model-ledger — and it can't drift, because the API reference is generated from source and every example runs in CI:
- Quickstart — install to your first dependency trace in 60 seconds
- Concepts — DataNode, Snapshot, and Composite, in three ideas
- Agents (MCP) — the eight-tool agent surface, with a worked transcript
- Connectors — discover from SQL, REST, GitHub, or your own platform
- Backends — in-memory, SQLite, JSON, Snowflake, or remote HTTP
- Governance — how the primitives map to SR 11‑7/SR 26‑2, the EU AI Act, and NIST AI RMF
- API reference — generated from the source
Architecture
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
Model Ledger: common questions
- Is Model Ledger MCP server safe?
- Yes, by our scan: it is graded A (94/100). Read the Model Ledger safety report
- How do I install Model Ledger?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Model Ledger need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is Model Ledger maintained?
- The last commit was 48 days ago (2026-09-17). The latest release is v0.7.13.
- What can I use instead of Model Ledger?
- Servers from other publishers that do the same job: three.ws Provenance MCP server, Superlog MCP server and Attestix MCP server.
- How does Model Ledger compare with other AI and agents MCP servers?
- safety score 94/100 (higher than 96% of 4,460 AI and agents servers); tools 8 (the typical AI and agents server has 6); tools that change things 13% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.
Alternatives to Model Ledger
Same job from other publishers: the closest match first, then the best rated.
- three.ws ProvenanceAppend-only, signed, on-chain-verifiable agent action log — record and audit what agents did.not reviewedEstablishedB
- SuperlogOpen-source agent that observes and fixes your application. Query logs, traces, metrics, incidents.not reviewedEstablishedA
- AttestixAI agent identity, signed credentials, delegated authority and governance evidence.not reviewedEstablishedA