ProofFlow MCP server
io.github.Hyperion-GPU/proofflow·v0.1.2·49 starsAudit infrastructure for AI coding agents with evidence-backed review and policy gates.
49 stars17 downloads/wk
Reviews
Write oneNobody has reviewed ProofFlow yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
ProofFlow tools (2)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
proofflow_list_actionsList all actions for a given ProofFlow Case.
proofflow_list_casesList all ProofFlow Cases with their status, kind, and timestamps.
Public scan report
scanner v0.1.9 · 2026-09-27 · same rubric, same numbers if you re-run it
- Code scan7 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitystatic API keys via environment variables6/15
- Maintenancelast push 51 days ago12/15
- Maintainer identityregistry namespace matches repository owner6/10
How ProofFlow compares
Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 75/100
- higher than 45% of 48,255 servers
- Tools
- 2
- the typical server has 7
- Tools that change things
- 0%
- typical: 0%. Fewer write tools means less an agent can break
- GitHub stars
- 49
- more than 94% of 28,688 servers
- Downloads a week
- 17
- more than 5% of 12,191 servers with a package
What its tools let an agent do: 2 read
Install ProofFlow in Claude Code, Cursor or VS Code
claude mcp add proofflow -- uvx proofflow-mcp
What the publisher says
From the ProofFlow repository's README, as published. We do not edit it. Read it on GitHub
ProofFlow
English | 简体中文
Agent Work Ledger for AI coding.
Vibe coding is fast. Blind trust is not enough.
ProofFlow makes AI-generated work reviewable, traceable, and reversible by recording the full chain from work contract to proof packet: contract first, record the algorithm decision, declare the cost budget, snapshot the code state, bind claims to evidence, evaluate done criteria, then export an auditable packet.
Latest release: v0.1.8 - Agent Work Ledger for AI coding
▶ Watch the 72s demo: From AI agent claims to verifiable Proof Packets
Demo asset (deferred): The end-to-end dogfood Demo_Asset GIF and the
VSCode_Channel inline audit / Approve Gate screenshots for the v0.1.x
dogfood-and-channel-polish milestone are deferred to the next dogfood cycle
(no capturable VS Code window in this milestone). Tracked in
PLANS.md#vscode-channel-screenshots-deferred-from-v0-1-x-dogfood.
📦 Example Proof Packets: code review · issue triage · agent work ledger · ledger dogfood
Maintainer workflow: docs/maintainerevidenceworkflow.md
Agent Work Ledger guide: docs/agentworkledger.md
Ledger Risk Hints: docs/ledgerriskhints.md
5-minute MCP quickstart: docs/ledgerquickstartmcp.md
Ledger PR comment template: docs/examples/prcommentagentworkledger.md
AgentGuard semantic rules: docs/agentguardsemanticrules.md
Agent Work Ledger
ProofFlow is not only a PR review helper. It is a local-first ledger for AI coding work. A Ledger Case captures the workflow before, during, and after an agent changes code:
forbidden actions, required tests, done criteria, evidence requirements, algorithm requirements, and cost budget.
- Work Contract - record the objective, repo path, allowed scope,
alternatives, invariants, and forbidden approaches before implementation.
- Algorithm Decision - record the selected approach, rationale,
before expensive work begins.
- Cost Budget - declare token, API, GPU, CPU, runtime, or iteration limits
diff hash so reviewers know exactly what code state was examined.
- Snapshot - capture the git diff, changed files, HEAD SHA, base ref, and
or other artifacts as searchable evidence.
- Evidence - store command output, test output, diffs, notes, screenshots,
trusted.
- Claim - require every agent claim to bind to evidence before it is
cost budget, scope boundaries, missing evidence, unaccepted risks, and non-blocking Risk Hints for suspicious routes.
- Evaluation - deterministically check required tests, algorithm decision,
timeline, snapshots, claims, evidence, evaluation, decisions, and remaining risks into markdown.
- Proof Packet - export the contract, algorithm decision, cost budget,
Main chain: Work Contract -> Algorithm Decision -> Cost Budget -> Snapshot -> Evidence -> Claim -> Evaluation -> Proof Packet. This keeps the core product invariant sharp: no Case, no workflow; no Evidence, no trusted Claim; no done criteria evaluation, no quiet success.
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
ProofFlow: common questions
- Is ProofFlow MCP server safe?
- Mostly: it is graded B (75/100). Read the ProofFlow safety report
- How do I install ProofFlow?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does ProofFlow need an API key?
- Yes. The registry entry asks for
PROOFFLOW_API_KEY. - Is ProofFlow maintained?
- The last commit was 88 days ago (2026-08-08). The latest release is v0.1.2.
- What can I use instead of ProofFlow?
- Servers from other publishers that do the same job: SSH — policy-gated remote access MCP server, llmwiki MCP server and QVeris MCP server. Compare all ProofFlow alternatives.
- How does ProofFlow compare with other MCP servers?
- safety score 75/100 (higher than 45% of 48,255 servers); tools 2 (the typical server has 7); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.
Alternatives to ProofFlow
Same job from other publishers: the closest match first, then the best rated.
- SSH — policy-gated remote accessPolicy-gated, audited SSH for Linux and Windows hosts: roles, approvals, and an audit log.not reviewedEstablishedB
- llmwikiCompile documents into a cited knowledge wiki. Retrieve evidence, query, and review via local MCP.not reviewedEstablishedA
QVerisProfessional data and tools for AI: find services, review scope, call them, and audit usage.not reviewedEstablishedA