Governance Platform MCP server
Pre-execution governance for AI agents. Deterministic PASS/FAIL/REVIEW verdicts, replayable proof.
Little public usage data yet
Reviews
Write oneNobody has reviewed Governance Platform yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Governance Platform tools (37, 8 write)
write = sends, deletes, buys or postsaccount_statusFreeThis account's plan, key usage, Blueprint counts, and the deployed platform build fingerprint (version, build, deployed).
analyze_anomalyFreeExplain whether a record fits the usual pattern for records like it, and which fields stand out. No Blueprint required.
approve_ruleFreePromote a rule discovered by discover_patterns into Blueprint-ready form.
authorize_executionFreeGo/no-go for a real-world action (payment, filing, API write): runs full validation, then the Blueprint's execution gate. authorized=true only on PASS; REVIEW means do not proceed automatically. Different from validate: validate asks is this data correct, authorize_execution asks should this action happen.
check_blueprint_healthFreeStatic pre-deploy analysis of a Blueprint's rule set. Returns a health verdict - healthy, acceptable, fragile, rigid, split, brittle_islands, or unsatisfiable - with advice, including joint conflicts pairwise checks miss.
check_driftFreeCheck whether recent submissions still match the established pattern for this Blueprint. Returns a stability verdict and observation count.
check_realizationFreeStructural realization analysis of a payload against the Blueprint's reference configuration (requires a 'realization' block; otherwise status=skipped). Diagnostics-tier tool; prefer validate or analyze_anomaly for standard checks.
compare_semantic_equivalenceFreeCompare two payloads under the dual-hash design: content_hash is content_hash normalizes field order and numeric formatting. Semantic comparison preserves field roles; renaming requires an explicit bijection. With supplied rules, scalar types and whitespace remain significant. Structural similarity alone does not establish decision equivalence.
counterfactualwrite actionFreeRun the same data under two rule sets and compare which future states remain valid - what-if analysis for rule changes.
create_blueprintwrite actionFreeCreate a Blueprint - the governance contract validation runs against. A Blueprint defines what correct means for your data: fields, the math that must hold between them, and acceptable ranges. Start from load_rule_pack or discover_patterns if you have no rules yet; invoke the blueprint_guide prompt for the full rule/constraint reference. Returns the new Blueprint's API key.
create_chainwrite actionFreeCreate a multi-agent sequential chain: stages validate in order against one Blueprint, repairs propagate forward, TTL bounds the run. Siblings: submit_chain_stage advances the chain; handoff_audit verifies a transition between stages. Returns chain_id.
decompose_failureFreeSplit the error between original and corrected values into direct rule violations, boundary violations, and systemic structural error, with per-field contributions. Use with a known-correct version to diff against; use analyze_anomaly when you only have the suspicious payload. Diagnostics-tier tool.
delete_api_keywrite actionFreePermanently delete one of the caller's API keys. DESTRUCTIVE — agents using the deleted key will receive auth errors immediately. The Blueprint a key was tied to (if any) is NOT affected; only the credential is revoked. To delete a Blueprint and all its keys, use delete_blueprint. The target key can be specified two ways: - As the full key string (gai_...). - As a key_id (SHA-256 hash from list_api_keys).
delete_blueprintwrite actionFreePermanently delete a Blueprint and revoke its API keys. Irreversible; requires confirm=true. Account-level keys are unaffected.
discover_patternsFreeLearn candidate validation rules and structural document types from a batch of your records, deterministically - no Blueprint required. Promote results with approve_rule. Source data is not stored.
forecastFreeDeterministic forward reasoning: from the current data state, generate and rank the valid next states reachable under the Blueprint's rules.
geometric_confidenceFreeSummarize an already-computed state_vector into a confidence level (high/medium/low) with a recommendation. Post-hoc digest - use analyze_anomaly or check_drift for fresh analysis of raw data.
get_execution_tracewrite actionFreeRun validation and return the per-node execution trace (node names, deterministic flags, timing) plus the verdict and determinism hash. Use validate for normal operation; this is for debugging and audit preparation.
get_inference_traceFreeRetrieve the durable audit trail for a governed generation: every recorded decision and its reasons.
govern_inferenceFreeQuality-govern an in-progress AI generation step BEFORE its output is used (complements validate, which checks finished documents). Returns an action - STOP, CONTINUE, REPAIR_REGION, REUSE_MOTIF, REVIEW, ESCALATE - with a plain-language explanation. Structural scores do not establish task correctness. Check safe_to_finalize and acceptance coverage. Persistence success is reported; read traces in the same Blueprint namespace.
handoff_auditFreeAudit a handoff between two chain stages: a context capsule of verified facts from the prior stage, and (if proposed_data is given) a compatibility verdict that catches fields mutated in transit. Siblings: create_chain, submit_chain_stage.
list_api_keysFreeList this account's API keys (masked) with their Blueprint bindings.
list_blueprintsFreeList the Blueprints on this account with field/rule/constraint counts and mode. Use the returned workflow_name as 'blueprint' in validate.
load_rule_packFreeLoad a prebuilt Blueprint template (invoices, timecards, legal, POs, claims). Call without pack_id to list packs; then create_blueprint to save a customized copy.
profile_blueprint_robustnessFreeSweep the Blueprint's numeric constraint bounds and report verdict stability: the stable band, the scales where the verdict first flips, and advice. Use before deploying bound changes.
recent_inference_decisionsFreeRecent generation-governance decisions in this owner's Blueprint version.
reject_ruleFreeReject a discovered candidate rule so it will not be promoted into a Blueprint. Pair with approve_rule after discover_patterns.
repairFreeOne-shot repair: return corrected values that would make failing data valid under the Blueprint. Use repair_path to see the steps instead.
repair_pathFreeFind the shortest sequence of field changes taking invalid data to a valid state, as an ordered path of intermediate states. Different from repair (one-shot nearest fix): use repair_path to explain or audit the fix, or compare alternative repairs.
rotate_api_keyFreeReplace an API key with a fresh one. The old key stops working immediately; the new key inherits its bindings.
structural_typesFreeRetrieve the document categories a discover_patterns session identified (counts, distinguishing fields, domain hints). Read-only; returns status=no_session if discovery has not run for this namespace.
submit_chain_stagewrite actionFreeSubmit data for the chain's current stage; the platform validates it and advances the chain if it passes. Response includes next-stage info and accumulated repairs.
update_blueprintwrite actionFreeUpdate an existing Blueprint in place. Only passed fields change; pass [] to clear a list. workflow_name cannot be renamed and existing API keys keep working. Different from create_blueprint: modifies an existing Blueprint, mints no new key.
validateFreeValidate structured data against a Blueprint's rules BEFORE the result is used. Returns PASS, FAIL, or REVIEW with plain-language findings, repair suggestions, a determinism hash, and a re-verifiable certificate. Same input + same rules = same verdict, every time.
validate_repairFreeValidate structured data against a Blueprint and, when it fails, include repair suggestions (corrected values with the rule each fix is based on) in the same call. Same verdicts as validate: PASS, FAIL, or REVIEW, with reasons and proof.
verify_certificateFreeIndependently re-verify a validation certificate. Integrity mode checks the hash chain; full mode (certificate + original data) recomputes every attested rule from scratch - trust nothing, recheck everything.
verify_replayFreeCheck replay commitment integrity and compare recorded execution components. Version 4 includes reference context and the final result/status. A match compares commitments; this tool does not rerun the workflow or reconstruct historical reference populations, and does not prove factual correctness.
Public scan report
scanner v0.1.9 · 2026-09-24 · same rubric, same numbers if you re-run it
- –Code scanremote-only server, no package to scann/a
- Live reliabilityremote reachable in 871ms20/20
- Tool poisoning37 tool descriptions checked15/15
- Auth qualityopen endpoint exposes 8 write-action tools with no auth3/15
- Maintenanceno repository listed3/15
- Maintainer identityno repository or website to verify2/10
Findings (2)
- highWrite-action tools reachable without authentication
auth.open-write - lowNo source repository listed
maint.no-repo
Install directly
claude mcp add --transport http governance-platform https://app.geodesiclabs.ai/mcp
Governance Platform: common questions
- Is Governance Platform MCP server safe?
- With care: it is graded C, so read the findings first (57/100). Read the Governance Platform safety report
- How do I install Governance Platform?
- It runs remotely at app.geodesiclabs.ai. Add it to Claude Code, Claude Desktop or Cursor with the snippets above, or call it through the mcp.market gateway without installing anything.
- Does Governance Platform need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is Governance Platform maintained?
- The latest release is v1.2.0.
- Is Governance Platform up?
- 100% of our last 28 checks got an answer. We check remote servers about four times a day.