Sidclaw Governance MCP server
io.github.VladUZH/sidclaw-governance-mcp·v0.1.13·14 starsGovernance proxy for MCP servers — policy evaluation, human approval, audit trails.
14 stars26 downloads/wk
Reviews
Write oneNobody has reviewed Sidclaw Governance yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Sidclaw Governance tools (1)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
governance_proxySidClaw MCP Governance Proxy \u2014 wraps any upstream MCP server with policy evaluation, human-in-the-loop approval, and tamper-evident audit trails. Configure SIDCLAW_API_KEY, SIDCLAW_AGENT_ID, and SIDCLAW_UPSTREAM_CMD to connect to your upstream server. See https://docs.sidclaw.com/docs/integrations/mcp for setup instructions.
Public scan report
scanner v0.1.9 · 2026-09-24 · same rubric, same numbers if you re-run it
- Code scan58 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitystatic API keys via environment variables6/15
- Maintenancelast push 3 days ago15/15
- Maintainer identitynamespace and repository owner differ4/10
How Sidclaw Governance compares
Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 77/100
- higher than 50% of 48,255 servers
- Tools
- 1
- the typical server has 7
- Tools that change things
- 0%
- typical: 0%. Fewer write tools means less an agent can break
- GitHub stars
- 14
- more than 90% of 28,688 servers
- Downloads a week
- 26
- more than 13% of 12,191 servers with a package
What its tools let an agent do: 1 read
Install Sidclaw Governance in Claude Code, Cursor or VS Code
Runs npx -y @sidclaw/sdk on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add sidclaw-governance-mcp -- npx -y @sidclaw/sdk
What the publisher says
From the Sidclaw Governance repository's README, as published. We do not edit it. Read it on GitHub
SidClaw
Approve, deny, and audit AI agent tool calls.
Works with MCP, LangChain, OpenAI Agents, Claude Agent SDK, and 15+ more.
Website · Documentation · Live Demo · SDK on npm · SDK on PyPI
Your agents call tools without oversight. SidClaw intercepts every tool call, checks it against your policies, and holds risky actions for human review before they execute.
Try it locally (10 seconds, no signup)
npx sidclaw-demoOpens a local governance dashboard at http://localhost:3030 with four pre-loaded scenarios (Claude Code rm -rf, fintech trade, DevOps scale-to-zero, clinical lab order). No signup, no Docker, no API key — just the approval card UX running in your browser.
See it in action
Agent wants to send an email → policy flags it → reviewer sees full context → approves or denies → trace recorded.
Works With Your Stack
SidClaw integrates with 18+ frameworks and platforms — including OpenClaw (329K+ users), LangChain, OpenAI, MCP, Claude Agent SDK, Google ADK, NemoClaw, Copilot Studio, GitHub Copilot, and more. Add governance in one line of code. See all integrations →
See It In Action
Customer Support Agent (Financial Services)
An AI agent wants to send a customer email. Policy flags it for review. The reviewer sees full context — who, what, why — and approves with one click. Every step is traced.
Infrastructure Automation (DevOps)
An AI agent wants to scale production services. High-risk deployments require human approval. Read-only monitoring is allowed instantly.
Clinical Decision Support (Healthcare)
An AI assistant recommends lab orders. The physician reviews the clinical context and approves. Medication prescribing is blocked by policy — only physicians can prescribe.
How It Works
Agent wants to act → SidClaw evaluates → Policy decides → Human approves (if needed) → Action executes → Trace recordedFour primitives govern every agent action:
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
Sidclaw Governance: common questions
- Is Sidclaw Governance MCP server safe?
- Mostly: it is graded B (77/100). Read the Sidclaw Governance safety report
- How do I install Sidclaw Governance?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Sidclaw Governance need an API key?
- Yes. The registry entry asks for
SIDCLAW_API_KEY. - Is Sidclaw Governance maintained?
- The last commit was 44 days ago (2026-09-21). The latest release is v0.1.13.
- What can I use instead of Sidclaw Governance?
- Servers from other publishers that do the same job: SSH — policy-gated remote access MCP server, SSH Manager MCP server and Tradememory Protocol MCP server. Compare all Sidclaw Governance alternatives.
- How does Sidclaw Governance compare with other MCP servers?
- safety score 77/100 (higher than 50% of 48,255 servers); tools 1 (the typical server has 7); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.
Alternatives to Sidclaw Governance
Same job from other publishers: the closest match first, then the best rated.
- SSH — policy-gated remote accessPolicy-gated, audited SSH for Linux and Windows hosts: roles, approvals, and an audit log.not reviewedEstablishedB
- SSH ManagerSSH for AI agents: commands, files, backups and health, with approval, a vault and an audit trailnot reviewedEstablishedA
- Tradememory ProtocolTamper-evident decision audit trail and outcome-weighted memory for AI trading agents.not reviewedEstablishedB