Norma by Quality Clouds MCP server

<!-- mcp-name: ai.qualityclouds/norma -->

Norma MCP Server

Deterministic AI code review, with an audit record. Governance inside the agent loop.

Norma gives your coding agent the rules for your detected stack before it writes, checks each file against them, and records the outcome. The same file and the same rules return the same verdict every time, so what you get back is a record you can show someone rather than an opinion that changes between runs.

• Remote server (Streamable HTTP): https://api.qualityclouds.ai/mcp
• Auth: OAuth. Sign in via browser on first connection. Permanent free tier.
• Works with Cursor, Claude Code, Lovable, Replit and any MCP-compatible client
• Stacks covered: TypeScript, JavaScript, Python, PHP, Node, React, Vite, Supabase, FastAPI, SQLAlchemy, Adobe Magento and more

What it does

Rulesets are stack-specific and activate automatically for the stack the server detects. A single repository scan activates rulesets across six functional areas: Security, Performance, Scalability, Manageability, Maintainability and Architecture. The Supabase ruleset alone covers 12 rules, including no service-role keys outside the server, no hardcoded keys or project URLs, mandatory error checks on every mutation, no client-side JWT decoding, and rate limiting on edge functions.

The server exposes six tools:

Every session produces a structured record of what was checked, fixed and prevented. Your repository's Production-Ready Score and full findings live in your workspace at norma.qualityclouds.com.

How it works

A coding agent connected to Norma follows this sequence:

1. link_repository: first connection in each workspace, before any other call.
2. get_rulesets: at the start of any coding task.
3. getrulesfor_ruleset: for each relevant ruleset ID; never skipped.
4. The agent writes or modifies code, with those rules in context.
5. live_check: after each file is created or modified, before moving on.
6. registerappliedactions: after the task, using the exact rule IDs from step 3.

To work through standing issues instead of writing new code, the agent calls getopenissues and fixes the violations from the repository's last full scan.

Try it in 5 minutes (Claude Code)

1. Add the server:

claude mcp add --scope user --transport http norma https://api.qualityclouds.ai/mcp

1. Check it connected:

claude mcp list

1. On first use, your browser opens to sign in. Free to start, no credit card.
2. Open a session in any repo and ask Claude Code to review a file against your coding standards. It will link the repository, fetch the rules for your stack, and register the results back to your workspace.

Cursor

Add to .cursor/mcp.json:

{
  "mcpServers": {
    "norma": {
      "url": "https://api.qualityclouds.ai/mcp"
    }
  }
}

Shortened. The full README is on GitHub.