Server data from the Official MCP Registry
Universal governance layer for AI agents. MCP-native, fail-closed, audit proofs and rollback.
About
Universal governance layer for AI agents. MCP-native, fail-closed, audit proofs and rollback.
Security Report
This MCP server is a thin client that delegates governance logic to a remote API (governance.dingdawg.com). The architecture is sound with proper input validation via Zod schemas and no malicious patterns detected. However, several code quality and security concerns exist: the preToolCall hook lacks comprehensive error handling and input sanitization for the hook payload, API credentials are expected via environment variables without explicit validation, and there is potential for timing attacks in offline policy decisions. The server's security posture depends heavily on the remote governance API's implementation, which is not auditable here. Appropriate for developer-facing tooling with the identified mitigations applied. Supply chain analysis found 2 known vulnerabilities in dependencies (0 critical, 2 high severity). Package verification found 1 issue (1 critical, 0 high severity).
7 files analyzed · 12 issues found
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
Permissions Required
This plugin requests these system permissions. Most are normal for its category.
Unverified package source
We couldn't verify that the installable package matches the reviewed source code. Proceed with caution.
What You'll Need
Set these up before or after installing:
Environment variable: DINGDAWG_API_KEY
How to Install
Add this to your MCP configuration file:
{
"mcpServers": {
"io-github-dingdawg-dingdawg-governance": {
"env": {
"DINGDAWG_API_KEY": "your-dingdawg-api-key-here"
},
"args": [
"-y",
"dingdawg-governance-mcp"
],
"command": "npx"
}
}
}Documentation
View on GitHubFrom the project's GitHub README.
DingDawg Governance
Every AI action receipted. Capability-gated. Rollback-ready.
AI Governance-as-a-Service via MCP. Every write, shell command, and state-changing operation your agent makes is validated before it runs and cryptographically receipted after it completes — giving you a tamper-evident audit trail you can query, export, or roll back at any time.
Works with Claude Code, Codex, Cursor, Windsurf, and any MCP-compatible agent.
Install
npm install dingdawg-governance
Quick Start
# Authenticate (free — no credit card)
npx dingdawg-governance auth login
# Start the governance MCP server
DINGDAWG_API_KEY=your_key npx dingdawg-governance
Add to your MCP client config:
{
"mcpServers": {
"dingdawg-governance": {
"command": "npx",
"args": ["dingdawg-governance"],
"env": {
"DINGDAWG_API_KEY": "your_key_here"
}
}
}
}
Get your free API key at app.dingdawg.com/settings/api.
What You Get
- Pre-execution validation — Every action checked against your policy before it runs. Blocked actions never touch your filesystem.
- Cryptographic receipts — Tamper-evident record for every action with a unique ID, output hash, and public verification URL.
- One-command rollback — Undo any file write by referencing its receipt ID. Prior state is captured automatically before every write.
- Real-time trust scores — Behavioral pattern tracking across sessions surfaces anomalies before they become incidents.
- Compliance reports in seconds — SOC 2 and ISO 27001-aligned audit reports as signed PDF or structured JSON. One API call.
MCP Tools
| Tool | What it does |
|---|---|
validate_action | Pre-execution check. Returns APPROVED, FLAGGED, or BLOCKED with reason code and risk score. |
generate_receipt | Post-execution cryptographic receipt with tamper-evident output hash. |
capture_rollback_state | Snapshot current state before destructive or high-risk operations. |
rollback_action | Restore prior state from a receipt ID. |
query_receipts | Search receipts by date, agent, action type, or status. Export-ready. |
check_status | Current tier, daily usage, quota, and active governance alerts. |
generate_audit_report | On-demand compliance report — SOC 2, ISO 27001, or custom policy framework. |
Plans
| Plan | Governed actions/day | Rollback window | Audit reports |
|---|---|---|---|
| Free | 200 | — | — |
| Pro — $29/mo | 10,000 | 30 days | Unlimited |
| Business — $149/mo | Unlimited | 90 days | Compliance PDF |
No credit card to start. Full pricing: dingdawg.com/governance#pricing
Documentation
Full docs at dingdawg.com/governance/docs
- Getting started
- MCP tool reference
- Policy configuration
- Audit report formats
- Enterprise SSO and team management
Contributing
Issues and pull requests welcome. See CONTRIBUTING.md.
github.com/dingdawg/governance-mcp
Built by DingDawg — Trust layer for the agentic internet.
Reviews
No reviews yet
Be the first to review this server!
More Developer Tools MCP Servers
Fetch
Freeby Modelcontextprotocol · Developer Tools
Web content fetching and conversion for efficient LLM usage
Git
Freeby Modelcontextprotocol · Developer Tools
Read, search, and manipulate Git repositories programmatically
Toleno
Freeby Toleno · Developer Tools
Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.
mcp-creator-python
Freeby mcp-marketplace · Developer Tools
Create, build, and publish Python MCP servers to PyPI — conversationally.
MarkItDown
Freeby Microsoft · Content & Media
Convert files (PDF, Word, Excel, images, audio) to Markdown for LLM consumption
MCP Marketplace
Freeby mcp-marketplace · Developer Tools
Search and install MCP servers from inside your AI client.