Dingdawg Governance MCP server
Universal governance layer for AI agents. MCP-native, fail-closed, audit proofs and rollback.
1 stars86 downloads/wk
Reviews
Write oneNobody has reviewed Dingdawg Governance yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Dingdawg Governance tools (4)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
audit_trailGet the governance audit trail. Returns governance receipts from local storage or cloud API. Free to use.
compliance_checkQuick compliance check against common AI governance frameworks. Free tier: 10 checks per day. Evaluates against EU AI Act, Colorado AI Act — Revised (SB26-189 / ADMT, eff. Jan 1 2027), NIST AI RMF, and ISO 42001.
get_verified_badgeReturns the 'Powered by DingDawg Verified' badge payload for a governed action receipt. Creators can opt-in to emit this badge in agent output — every governed action receipt includes a verifiable badge URL, turning governed agents into DingDawg marketing channels. Pass the receipt_id returned by govern_action.
govern_actionGovern any AI agent action. Performs capability check + policy evaluation + generates a governance receipt. Returns a receipt proving the action was governed. When API key is set, uses cloud API with local fallback.
Public scan report
scanner v0.1.9 · 2026-09-27 · same rubric, same numbers if you re-run it
- Code scan8 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitystatic API keys via environment variables6/15
- Maintenancelast push 74 days ago12/15
- Maintainer identityregistry namespace matches repository owner7/10
How Dingdawg Governance compares
Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 77/100
- higher than 50% of 48,255 servers
- Tools
- 4
- the typical server has 7
- Tools that change things
- 0%
- typical: 0%. Fewer write tools means less an agent can break
- GitHub stars
- 1
- more than 65% of 28,688 servers
- Downloads a week
- 86
- more than 59% of 12,191 servers with a package
What its tools let an agent do: 4 read
Install Dingdawg Governance in Claude Code, Cursor or VS Code
Runs npx -y dingdawg-governance on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add dingdawg-governance -- npx -y dingdawg-governance
What the publisher says
From the Dingdawg Governance repository's README, as published. We do not edit it. Read it on GitHub
DingDawg Governance
Every AI action receipted. Capability-gated. Rollback-ready.
AI Governance-as-a-Service via MCP. Every write, shell command, and state-changing operation your agent makes is validated before it runs and cryptographically receipted after it completes — giving you a tamper-evident audit trail you can query, export, or roll back at any time.
Works with Claude Code, Codex, Cursor, Windsurf, and any MCP-compatible agent.
Install
npm install dingdawg-governanceQuick Start
# Authenticate (free — no credit card)
npx dingdawg-governance auth login
# Start the governance MCP server
DINGDAWG_API_KEY=your_key npx dingdawg-governanceAdd to your MCP client config:
{
"mcpServers": {
"dingdawg-governance": {
"command": "npx",
"args": ["dingdawg-governance"],
"env": {
"DINGDAWG_API_KEY": "your_key_here"
}
}
}
}Get your free API key at app.dingdawg.com/settings/api.
What You Get
- Pre-execution validation — Every action checked against your policy before it runs. Blocked actions never touch your filesystem.
- Cryptographic receipts — Tamper-evident record for every action with a unique ID, output hash, and public verification URL.
- One-command rollback — Undo any file write by referencing its receipt ID. Prior state is captured automatically before every write.
- Real-time trust scores — Behavioral pattern tracking across sessions surfaces anomalies before they become incidents.
- Compliance reports in seconds — SOC 2 and ISO 27001-aligned audit reports as signed PDF or structured JSON. One API call.
MCP Tools
Plans
No credit card to start. Full pricing: dingdawg.com/governance#pricing
Documentation
Full docs at dingdawg.com/governance/docs
- Getting started
- MCP tool reference
- Policy configuration
- Audit report formats
- Enterprise SSO and team management
Contributing
Issues and pull requests welcome. See CONTRIBUTING.md.
github.com/dingdawg/governance-mcp
Built by DingDawg — Trust layer for the agentic internet.
Nothing above is checked by us. What we check is on the safety report.
Dingdawg Governance: common questions
- Is Dingdawg Governance MCP server safe?
- Mostly: it is graded B (77/100). Read the Dingdawg Governance safety report
- How do I install Dingdawg Governance?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Dingdawg Governance need an API key?
- Yes. The registry entry asks for
DINGDAWG_API_KEY. - Is Dingdawg Governance maintained?
- The last commit was 112 days ago (2026-07-15). The latest release is v2.1.6.
- What can I use instead of Dingdawg Governance?
- Servers from other publishers that do the same job: Bernstein MCP server.
- How does Dingdawg Governance compare with other MCP servers?
- safety score 77/100 (higher than 50% of 48,255 servers); tools 4 (the typical server has 7); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.
Alternatives to Dingdawg Governance
Same job from other publishers: the closest match first, then the best rated.
- BernsteinThe open-source governance layer for AI agents. Byte-identical run receipts, 40+ adapters, air-gap.not reviewedWidely usedC