Korext: AI Code Governance MCP server
online · 100% uptimeio.github.Korext/governance·v3.0.1·4 starsGovernance copilot for AI-assisted coding. 72 packs, 532 rules, proof bundles.
4 stars46 downloads/wk
Reviews
Write oneNobody has reviewed Korext: AI Code Governance yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Korext: AI Code Governance tools (5)
write = sends, deletes, buys or postscheck_codeFreeCheck a code snippet against one or more policy packs. Returns violations with severity, governance context (CWE, MITRE, regulatory), and line numbers.
generate_proofFreeScan code against policy packs and generate a cryptographically signed proof bundle. Returns the bundle ID, decision (PASS/BLOCK), violation count, and verification URL.
get_directivesFreeGet enriched policy directives and living standards for one or more policy packs. Returns rules with governance context (CWE, MITRE, regulatory references) for inference time enforcement.
get_proofFreeRetrieve an existing proof bundle by ID. Returns the decision, violations, packs, and verification status.
list_packsFreeList available policy packs with industry and region tags.
Public scan report
scanner v0.1.9 · 2026-09-27 · same rubric, same numbers if you re-run it
- Code scan2 source files scanned13/25
- Live reliabilityremote reachable in 419ms20/20
- Tool poisoning5 tool descriptions checked15/15
- Auth qualityAPI key sent as a header8/15
- Maintenancelast push 163 days ago8/15
- Maintainer identityregistry namespace matches repository owner7/10
Findings (1)
- highShell command built from a string (injection risk)
exec.shell-concatbin/korext.js: …== 'win32' ? 'start' : 'xdg-open'); exec(`${cmd} "${url}"`); }); // ─── POLICY COMMANDS ─…
How Korext: AI Code Governance compares
Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 71/100
- higher than 36% of 48,255 servers
- Tools
- 5
- the typical server has 7
- Tools that change things
- 0%
- typical: 0%. Fewer write tools means less an agent can break
- Uptime
- 100%
- of our recent checks; the typical remote server answers 100%
- Response time
- 442 ms
- faster than 33% of 30,031 servers
- GitHub stars
- 4
- more than 82% of 28,688 servers
- Downloads a week
- 46
- more than 38% of 12,191 servers with a package
What its tools let an agent do: 4 read · 1 create
Install Korext: AI Code Governance in Claude Code, Cursor or VS Code
claude mcp add --transport http governance https://app.korext.com/api/mcp
What the publisher says
From the Korext: AI Code Governance repository's README, as published. We do not edit it. Read it on GitHub
KOREXT Enforce Action
Enforce compliance policies on AI generated code in your GitHub workflows.
72 policy packs. 532 rules. 13 languages. Violations appear as GitHub Code Scanning annotations on pull requests.
Quick Start
Add this to .github/workflows/korext.yml:
name: Korext Enforcement
on: [push, pull_request]
permissions:
contents: read
security-events: write
jobs:
enforce:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- uses: Korext/enforce-action@v3
with:
api-token: ${{ secrets.KOREXT_API_TOKEN }}Korext scans your code on every push and PR using the default web policy pack.
How It Works
- Install: The action installs the Korext CLI
- Scan: Runs korext enforce against your codebase with the selected policy pack
- Report: Generates a SARIF file and uploads it to GitHub Code Scanning
- Gate: Fails the workflow if critical or high severity violations are found
Violations appear as annotations directly on the PR diff, powered by GitHub Code Scanning.
Inputs
Outputs
Examples
Multiple Policy Packs
- uses: Korext/enforce-action@v3
with:
pack: web,pci-dss-v1,owasp-v1
api-token: ${{ secrets.KOREXT_API_TOKEN }}EU Data Sovereignty
- uses: Korext/enforce-action@v3
with:
pack: gdpr-v1
region: eu
api-token: ${{ secrets.KOREXT_API_TOKEN }}Scan Specific Directory
- uses: Korext/enforce-action@v3
with:
directory: src/
pack: hipaa-v1
api-token: ${{ secrets.KOREXT_API_TOKEN }}Warn Only (do not fail)
- uses: Korext/enforce-action@v3
with:
pack: web
fail-on-violations: 'false'Authentication
For full access to all policy packs and signed proof bundles, create an API token in your KOREXT dashboard and add it as a GitHub secret:
- Go to app.korext.com > Settings > API Tokens
- Create a new token
- Add it as KOREXTAPITOKEN in your repo's Settings > Secrets and variables > Actions
Without a token, the action runs in anonymous mode (20 requests per hour, limited packs).
Links
- Website
- Dashboard
- Documentation
- CLI on npm
- VS Code Extension
License
Proprietary. See Terms of Service.
Nothing above is checked by us. What we check is on the safety report.
Korext: AI Code Governance: common questions
- Is Korext: AI Code Governance MCP server safe?
- Mostly: it is graded B (71/100). Read the Korext: AI Code Governance safety report
- How do I install Korext: AI Code Governance?
- It runs remotely at app.korext.com. Add it to Claude Code, Cursor, VS Code or Claude Desktop with the snippets above, or call it through the mcp.market gateway without installing anything.
- Does Korext: AI Code Governance need an API key?
- Yes. The registry entry asks for
Authorization. - Is Korext: AI Code Governance maintained?
- The last commit was 201 days ago (2026-04-17). The latest release is v3.0.1.
- Is Korext: AI Code Governance up?
- 100% of our last 28 checks got an answer. We check remote servers about four times a day.
- How does Korext: AI Code Governance compare with other MCP servers?
- safety score 71/100 (higher than 36% of 48,255 servers); tools 5 (the typical server has 7); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.