Governance MCP server

by mima.works·works.mima/governance-mcp·v0.1.13

No reviews yet

AI governance evidence for EU AI Act, ISO 42001, SOC 2, and NIST AI RMF.

B75/100grade B

Write a review Install

What users say

No reviews yet

Be the first

Safety scan

B75/100

full report

Adoption

New

0 stars36 downloads/wk

Reviews

Write one

Nobody has reviewed Governance yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Governance tools (10, 1 write)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

acknowledge_policy
Record that a team member has read and understood an AI governance policy.
attest
Record a compliance evidence event in the Mima governance ledger, mapped to
check_gates
Check the status of all configured governance gates for this workspace.
derive_controls
Returns your current governance coverage gaps relative to the described action.
dry_run_attestwrite action
Preview which compliance controls a proposed evidence record would earn — without writing
get_posture
Get the current AI governance posture for this workspace. Returns per-framework
list_evidence
List evidence records from the governance ledger, optionally filtered by system and time.
list_systems
List all AI systems in this workspace with their registration status and evidence coverage.
register_system
Register an AI system in the Mima governance ledger. Creates an Art. 9 risk assessment
suggest_gates
Analyse the current governance posture and gate configuration, then return

Public scan report

scanner v0.1.9 · 2026-09-26 · same rubric, same numbers if you re-run it

no findings

Code scan27 source files scanned25/25
–Live reliabilityno gateway calls yet and no remote to proben/a
–Tool poisoningtools not inspected (local package is not executed); not countedn/a
Auth qualitystatic API keys via environment variables6/15
Maintenancelast push 83 days ago12/15
Maintainer identitynamespace and repository owner differ; website matches verified namespace6/10

Overall 75/100. Components that don't apply are left out of the denominator. Any critical finding is an F.Rubric Appeal a finding JSON

How Governance compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score: 75/100; higher than 45% of 48,255 servers
Tools: 10; the typical server has 7
Tools that change things: 10%; typical: 0%. Fewer write tools means less an agent can break
Downloads a week: 36; more than 26% of 12,191 servers with a package

What its tools let an agent do: 8 read · 1 create · 1 change

Install Governance in Claude Code, Cursor or VS Code

Runs npx -y @mima-ai/governance-mcp on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add governance-mcp -- npx -y @mima-ai/governance-mcp

Add to Cursor

What the publisher says

From the Governance repository's README, as published. We do not edit it. Read it on GitHub

@mima-ai/governance-mcp

MCP server for AI governance — push compliance evidence to Mima from any agent, any stack, 4 lines of config.

One tool call maps to EU AI Act, ISO 42001, SOC 2, and NIST AI RMF simultaneously. Your readiness score updates automatically.

Install

npx @mima-ai/governance-mcp@0.1.13

Or add to your MCP config (always pin the version):

{
  "mcpServers": {
    "mima-governance": {
      "command": "npx",
      "args": ["-y", "@mima-ai/governance-mcp@0.1.13"],
      "env": {
        "MIMA_API_KEY": "mima_ext_...",
        "MIMA_WORKSPACE_ID": "ws-..."
      }
    }
  }
}

10 tools

Usage — Claude Code

Add to ~/.claude/settings.json:

{
  "mcpServers": {
    "mima-governance": {
      "command": "npx",
      "args": ["-y", "@mima-ai/governance-mcp"],
      "env": {
        "MIMA_API_KEY": "mima_ext_...",
        "MIMA_WORKSPACE_ID": "ws-..."
      }
    }
  }
}

Then ask Claude: "Check our compliance posture" or "Register this AI system and suggest which controls we need."

Usage — Cursor / Windsurf

Add to .cursor/mcp.json or .windsurf/mcp.json in your project root:

{
  "mcpServers": {
    "mima-governance": {
      "command": "npx",
      "args": ["-y", "@mima-ai/governance-mcp"],
      "env": {
        "MIMA_API_KEY": "mima_ext_...",
        "MIMA_WORKSPACE_ID": "ws-..."
      }
    }
  }
}

Dry-run support

All write tools support dry-run — preview what controls you'd earn before committing:

dry_run_attest({ record_type: "ai_risk_assessment", system_name: "loan-scorer" })
// → { mapped_controls: ["EUAIA_ART9", "ISO42001_6_1", "NIST_AIRF_MAP_1"] }

Four frameworks, one call

Get an API key

mima.works → sign up → copy your key from the dashboard.

Python SDK

For app-code attestation (decorators, batch pushes, pre-approval gates):

pip install mima-governance

Docs

docs.mima.works

Nothing above is checked by us. What we check is on the safety report.

Governance: common questions

Is Governance MCP server safe?: Mostly: it is graded B (75/100). Read the Governance safety report
How do I install Governance?: It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Governance need an API key?: Yes. The registry entry asks for MIMA_API_KEY.
Is Governance maintained?: The last commit was 122 days ago (2026-07-05). The latest release is v0.1.13.
How does Governance compare with other MCP servers?: safety score 75/100 (higher than 45% of 48,255 servers); tools 10 (the typical server has 7); tools that change things 10% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.