MCP.Market

Model Ledger MCP server

by block·io.github.block/model-ledger·v0.7.13·14 stars

Model inventory and governance: trace deployed models and their dependencies as an append-only log

A94/100grade A
What users say
No reviews yet
Be the first
Safety scan
A94/100

full report

Adoption
Growing

14 stars39 downloads/wk

Reviews

Write one

Nobody has reviewed Model Ledger yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Model Ledger tools (8, 1 write)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • changelog

    View cross-model event history with time range filtering.

  • discover

    Import models from external sources into the ledger.

  • investigate

    Deep-dive into a single model — history, metadata, dependencies.

  • list_tags

    Return all tags attached to a model.

  • query

    Search and filter the model inventory.

  • record

    Register a new model or record an event on an existing model.

  • tagwrite action

    Create or move a named tag to the latest snapshot of a model.

  • trace

    Traverse a model's dependency graph.

Public scan report

scanner v0.1.9 · 2026-09-25 · same rubric, same numbers if you re-run it

no findings
  • Code scan78 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 8 days ago15/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year9/10
Overall 94/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Model Ledger compares

Against every graded AI and agents MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
94/100
higher than 96% of 4,460 AI and agents servers
Tools
8
the typical AI and agents server has 6
Tools that change things
13%
typical: 0%. Fewer write tools means less an agent can break
GitHub stars
14
more than 86% of 2,711 AI and agents servers
Downloads a week
39
more than 31% of 1,538 AI and agents servers with a package

What its tools let an agent do: 7 read · 1 change

Install Model Ledger in Claude Code, Cursor or VS Code

claude mcp add model-ledger -- uvx model-ledger
Add to Cursor

What the publisher says

From the Model Ledger repository's README, as published. We do not edit it. Read it on GitHub

model-ledger

git for models — know what models you have deployed, where they run, what they depend on, and what changed.

📖 Documentation · Quickstart · Concepts · Governance

model-ledger is a model inventory for any organization with deployed models. It discovers models, heuristic rules, and ETL across your platforms, maps the dependency graph automatically, and records every change as an immutable event. Unlike registries tied to a single platform (MLflow, SageMaker, W&B), it spans all of them — as one connected graph — and it's built to be driven by AI agents through a native MCP server.

Benchmarked at production scale: full inventory reconstruction over a ledger of 28.8k models and 212k events runs in under a second (CHANGELOG, v0.7.4).

Install

pip install model-ledger

The graph builds itself

Every model is a DataNode with typed input and output ports. When an output port name matches an input port name, connect() creates the dependency edge — no hand-wiring.

from model_ledger import Ledger, DataNode

ledger = Ledger()

ledger.add([
    DataNode("segmentation", platform="etl",      outputs=["customer_segments"]),
    DataNode("fraud_scorer", platform="ml",       inputs=["customer_segments"], outputs=["risk_scores"]),
    DataNode("fraud_alerts", platform="alerting", inputs=["risk_scores"]),
])
ledger.connect()

ledger.trace("fraud_alerts")
# ['segmentation', 'fraud_scorer', 'fraud_alerts']

Every mutation is recorded as an immutable Snapshot — an append-only event log that gives you full history and point-in-time reconstruction, because nothing is overwritten.

Talk to your inventory

The MCP server is a first-class surface — point Claude (or any MCP agent) at it:

pip install "model-ledger[mcp]"
claude mcp add model-ledger -- model-ledger mcp --demo

You: if we deprecate customer_features, what breaks?

Claude: 3 models consume it directly, 2 more transitively.

Documentation

Everything lives at block.github.io/model-ledger — and it can't drift, because the API reference is generated from source and every example runs in CI:

  • Quickstart — install to your first dependency trace in 60 seconds
  • Concepts — DataNode, Snapshot, and Composite, in three ideas
  • Agents (MCP) — the eight-tool agent surface, with a worked transcript
  • Connectors — discover from SQL, REST, GitHub, or your own platform
  • Backends — in-memory, SQLite, JSON, Snowflake, or remote HTTP
  • Governance — how the primitives map to SR 11‑7/SR 26‑2, the EU AI Act, and NIST AI RMF
  • API reference — generated from the source

Architecture

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Model Ledger: common questions

Is Model Ledger MCP server safe?
Yes, by our scan: it is graded A (94/100). Read the Model Ledger safety report
How do I install Model Ledger?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Model Ledger need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Model Ledger maintained?
The last commit was 48 days ago (2026-09-17). The latest release is v0.7.13.
What can I use instead of Model Ledger?
Servers from other publishers that do the same job: three.ws Provenance MCP server, Superlog MCP server and Attestix MCP server.
How does Model Ledger compare with other AI and agents MCP servers?
safety score 94/100 (higher than 96% of 4,460 AI and agents servers); tools 8 (the typical AI and agents server has 6); tools that change things 13% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to Model Ledger

Same job from other publishers: the closest match first, then the best rated.

  • three.ws Provenance
    Append-only, signed, on-chain-verifiable agent action log — record and audit what agents did.
    B
  • Superlog
    Open-source agent that observes and fixes your application. Query logs, traces, metrics, incidents.
    A
  • Attestix
    AI agent identity, signed credentials, delegated authority and governance evidence.
    A