Back to Browse

Nogra MCP Server

Developer ToolsLow Risk9.7MCP RegistryLocal
Free

Server data from the Official MCP Registry

Verify-before-done trust layer for AI-assisted work. 32 tools, local-first, no credentials.

About

Verify-before-done trust layer for AI-assisted work. 32 tools, local-first, no credentials.

Security Report

9.7
Low Risk9.7Low Risk

Valid MCP server (1 strong, 1 medium validity signals). No known CVEs in dependencies. ⚠️ Package registry links to a different repository than scanned source. Imported from the Official MCP Registry. 1 finding(s) downgraded by scanner intelligence.

11 files analyzed · 1 issue found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

file_system

Check that this permission is expected for this type of plugin.

env_vars

Check that this permission is expected for this type of plugin.

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-nograai-nogra-mcp": {
      "args": [
        "-y",
        "@nograai/mcp"
      ],
      "command": "npx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

Nogra MCP

The MCP server behind Nogra — brief, GO, dispatch, evidence, verify for AI-assisted work. This package is the protocol bridge: 32 public tools for briefs, dispatch transport, run events, registry and redaction, served over MCP stdio against the current workspace's local .nogra/ records.

Install

Usually nothing to install: the Nogra Claude Code plugin starts this server automatically through its bundled launcher (npx first, uvx/pipx as fallbacks). Standalone:

npx -y @nograai/mcp   # npm path — standalone platform binaries, no Python needed
uvx nogra-mcp         # PyPI path — needs uv on PATH

Run it from a workspace folder; it reads and writes that workspace's .nogra/ records.

What it serves

Public mode only: 32 tools covering brief save/validate/promote, dispatch handoffs, transport lifecycle (dispatch, status, events, return), run records, the contract registry and text redaction. Everything stays in local markdown/JSON files the user owns — the server does zero model inference, makes no network calls of its own, and never touches credentials.

Naming

The nogra MCP server name is reserved for the public plugin path. If you develop against a local checkout, register it under a different name (for example nogra-dev) so the two never collide.

Reviews

No reviews yet

Be the first to review this server!