MCP.Market

ProofFlow MCP server

by Hyperion-GPU·io.github.Hyperion-GPU/proofflow·v0.1.2·49 stars

Audit infrastructure for AI coding agents with evidence-backed review and policy gates.

B75/100grade B
What users say
No reviews yet
Be the first
Safety scan
B75/100

full report

Adoption
Growing

49 stars17 downloads/wk

Reviews

Write one

Nobody has reviewed ProofFlow yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

ProofFlow tools (2)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • proofflow_list_actions

    List all actions for a given ProofFlow Case.

  • proofflow_list_cases

    List all ProofFlow Cases with their status, kind, and timestamps.

Public scan report

scanner v0.1.9 · 2026-09-27 · same rubric, same numbers if you re-run it

no findings
  • Code scan7 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitystatic API keys via environment variables6/15
  • Maintenancelast push 51 days ago12/15
  • Maintainer identityregistry namespace matches repository owner6/10
Overall 75/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How ProofFlow compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
75/100
higher than 45% of 48,255 servers
Tools
2
the typical server has 7
Tools that change things
0%
typical: 0%. Fewer write tools means less an agent can break
GitHub stars
49
more than 94% of 28,688 servers
Downloads a week
17
more than 5% of 12,191 servers with a package

What its tools let an agent do: 2 read

Install ProofFlow in Claude Code, Cursor or VS Code

claude mcp add proofflow -- uvx proofflow-mcp
Add to Cursor

What the publisher says

From the ProofFlow repository's README, as published. We do not edit it. Read it on GitHub

ProofFlow

English | 简体中文

Agent Work Ledger for AI coding.

Vibe coding is fast. Blind trust is not enough.

ProofFlow makes AI-generated work reviewable, traceable, and reversible by recording the full chain from work contract to proof packet: contract first, record the algorithm decision, declare the cost budget, snapshot the code state, bind claims to evidence, evaluate done criteria, then export an auditable packet.

Latest release: v0.1.8 - Agent Work Ledger for AI coding

▶ Watch the 72s demo: From AI agent claims to verifiable Proof Packets

Demo asset (deferred): The end-to-end dogfood Demo_Asset GIF and the

VSCode_Channel inline audit / Approve Gate screenshots for the v0.1.x

dogfood-and-channel-polish milestone are deferred to the next dogfood cycle

(no capturable VS Code window in this milestone). Tracked in

PLANS.md#vscode-channel-screenshots-deferred-from-v0-1-x-dogfood.

📦 Example Proof Packets: code review · issue triage · agent work ledger · ledger dogfood

Maintainer workflow: docs/maintainerevidenceworkflow.md

Agent Work Ledger guide: docs/agentworkledger.md

Ledger Risk Hints: docs/ledgerriskhints.md

5-minute MCP quickstart: docs/ledgerquickstartmcp.md

Ledger PR comment template: docs/examples/prcommentagentworkledger.md

AgentGuard semantic rules: docs/agentguardsemanticrules.md

Agent Work Ledger

ProofFlow is not only a PR review helper. It is a local-first ledger for AI coding work. A Ledger Case captures the workflow before, during, and after an agent changes code:

forbidden actions, required tests, done criteria, evidence requirements, algorithm requirements, and cost budget.

  1. Work Contract - record the objective, repo path, allowed scope,

alternatives, invariants, and forbidden approaches before implementation.

  1. Algorithm Decision - record the selected approach, rationale,

before expensive work begins.

  1. Cost Budget - declare token, API, GPU, CPU, runtime, or iteration limits

diff hash so reviewers know exactly what code state was examined.

  1. Snapshot - capture the git diff, changed files, HEAD SHA, base ref, and

or other artifacts as searchable evidence.

  1. Evidence - store command output, test output, diffs, notes, screenshots,

trusted.

  1. Claim - require every agent claim to bind to evidence before it is

cost budget, scope boundaries, missing evidence, unaccepted risks, and non-blocking Risk Hints for suspicious routes.

  1. Evaluation - deterministically check required tests, algorithm decision,

timeline, snapshots, claims, evidence, evaluation, decisions, and remaining risks into markdown.

  1. Proof Packet - export the contract, algorithm decision, cost budget,

Main chain: Work Contract -> Algorithm Decision -> Cost Budget -> Snapshot -> Evidence -> Claim -> Evaluation -> Proof Packet. This keeps the core product invariant sharp: no Case, no workflow; no Evidence, no trusted Claim; no done criteria evaluation, no quiet success.

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

ProofFlow: common questions

Is ProofFlow MCP server safe?
Mostly: it is graded B (75/100). Read the ProofFlow safety report
How do I install ProofFlow?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does ProofFlow need an API key?
Yes. The registry entry asks for PROOFFLOW_API_KEY.
Is ProofFlow maintained?
The last commit was 88 days ago (2026-08-08). The latest release is v0.1.2.
What can I use instead of ProofFlow?
Servers from other publishers that do the same job: SSH — policy-gated remote access MCP server, llmwiki MCP server and QVeris MCP server. Compare all ProofFlow alternatives.
How does ProofFlow compare with other MCP servers?
safety score 75/100 (higher than 45% of 48,255 servers); tools 2 (the typical server has 7); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to ProofFlow

Same job from other publishers: the closest match first, then the best rated.

All ProofFlow alternatives →
  • SSH — policy-gated remote access
    Policy-gated, audited SSH for Linux and Windows hosts: roles, approvals, and an audit log.
    B
  • llmwiki
    Compile documents into a cited knowledge wiki. Retrieve evidence, query, and review via local MCP.
    A
  • QVeris
    Professional data and tools for AI: find services, review scope, call them, and audit usage.
    A