Server data from the Official MCP Registry
Local stdio MCP. Hero verify_decision (DQL spend / Sentinel exit). execute true only on ALLOW.
About
Local stdio MCP. Hero verify_decision (DQL spend / Sentinel exit). execute true only on ALLOW.
Security Report
This is a well-structured MCP server for decision verification with appropriate authentication, fail-closed safety defaults, and proper credential handling. Authentication is required for all sensitive operations (DQL and Sentinel keys), credentials are read from environment variables only (not hardcoded), and the code includes defensive fail-closed behavior. Minor code quality findings around exception handling and logging do not materially impact security posture. Package verification found 1 issue.
5 files analyzed · 6 issues found
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
Permissions Required
This plugin requests these system permissions. Most are normal for its category.
What You'll Need
Set these up before or after installing:
Environment variable: DQL_API_KEY
Environment variable: SENTINEL_API_KEY
Environment variable: THOUGHTPROOF_API_KEY
How to Install
Add this to your MCP configuration file:
{
"mcpServers": {
"io-github-thoughtproof-thoughtproof-mcp": {
"env": {
"DQL_API_KEY": "your-dql-api-key-here",
"SENTINEL_API_KEY": "your-sentinel-api-key-here",
"THOUGHTPROOF_API_KEY": "your-thoughtproof-api-key-here"
},
"args": [
"-y",
"thoughtproof-mcp"
],
"command": "npx"
}
}
}Documentation
View on GitHubFrom the project's GitHub README.
thoughtproof-mcp
thoughtproof-mcp — local stdio. Hero tool verify_decision (DQL spend / Sentinel irreversible exit). execute is true only on ALLOW.
MCP server for ThoughtProof — pre-execution decision verification for AI agents.
Hero tool: verify_decision. It routes inside the tool to DQL (spend / checkout) or Sentinel (irreversible exit) and returns a fail-closed execute flag. execute is true only on a native ALLOW.
This package is a local stdio MCP server (Node 18+) for Desktop / CLI hosts such as Cursor, Claude Desktop, Windsurf, and Cline. It is not a remote HTTP MCP server. It is not a Grok Web/Mobile custom connector.
Get keys at https://app.thoughtproof.ai/pricing.
Unpublished work is documented in UNRELEASED.md.
Quick Start
{
"mcpServers": {
"thoughtproof": {
"command": "npx",
"args": ["-y", "thoughtproof-mcp@0.3.1"],
"env": {
"DQL_API_KEY": "dqlk_your_key_here"
}
}
}
}
Install with npx -y thoughtproof-mcp@0.3.1. Works with Claude Desktop, Cursor, Windsurf, Cline, and other local stdio MCP clients.
Tools
verify_decision (hero)
Pre-execution gate for a proposed action. Routing is inside the tool — not an agent quiz.
| Parameter | Type | Default | Description |
|---|---|---|---|
mandate | string | (required) | User's stated goal / instruction |
proposed_action | string | (required) | What the agent is about to do |
reasoning | string | (required) | The agent's own plan / reasoning |
context | string | (optional) | Extra evidence |
mode | dql / sentinel / auto | auto | Explicit surface, or auto-route |
Auto-route: spend / checkout / booking / purchase / payment / cart / Stripe / price / budget / cap → DQL. High-blast irreversible exit without that language (publish, delete, deploy, send-to-prod, memory write) → Sentinel. Unsure → DQL. Explicit mode wins. RV / PLV are not on this path.
Camera mandate: do not put the overshoot in proposed_action or reasoning (for example, do not write “price is above the cap”). The verifier has to find the mismatch.
Envelope (always this shape):
{
"verdict": "ALLOW",
"execute": true,
"objections": [],
"receipt_id": "dql_…",
"surface": "dql",
"axes": [],
"recommendation": "execute"
}
execute is true only on ALLOW. REVIEW, UNCERTAIN, BLOCK, timeouts, HTTP 402/4xx/5xx, and missing keys return execute: false. Fail-closed is soft at the protocol layer — the tool does not hard-stop the host. Replan is a new call (new receipt).
verify_claim
Verify any claim or AI-generated reasoning via RV (POST /v1/check). Unchanged.
| Parameter | Type | Default | Description |
|---|---|---|---|
claim | string | (required) | The text to verify |
stakeLevel | low / medium / high / critical | medium | Risk level — higher stakes trigger deeper verification |
domain | financial / medical / legal / code / general | general | Domain context for specialized verification |
speed | fast / standard / deep | standard | Verification depth |
check_agent_score
Look up an agent's composite trust score on the ERC-8004 registry.
| Parameter | Type | Description |
|---|---|---|
agentId | string | Agent ID to look up |
domain | string | Optional domain filter |
verify_trade
Optional pre-execution gate for trading agents (Sentinel → RV). Not the default verify_decision path. See VERIFY_TRADE.md.
Configuration
| Environment Variable | Default | Description |
|---|---|---|
DQL_API_KEY | (none) | DQL key (dqlk_…) for the default verify_decision path. Alias: THOUGHTPROOF_DQL_KEY |
SENTINEL_API_KEY | (none) | Optional. Required only when mode=sentinel or auto-route picks Sentinel. Fallback: THOUGHTPROOF_API_KEY as X-Sentinel-Key |
DQL_SANDBOX | (off) | Set to 1 to send sandbox: true on DQL calls (local/dev only) |
THOUGHTPROOF_API_KEY | (none) | Operator key for verify_claim / verify_trade / Sentinel fallback |
THOUGHTPROOF_BASE_URL | https://api.thoughtproof.ai | RV API base URL (verify_claim) |
A missing Sentinel key returns execute: false with “Sentinel key not configured” — it does not silently call DQL.
Development
git clone https://github.com/ThoughtProof/thoughtproof-mcp.git
cd thoughtproof-mcp
npm install
npm run build
npm test
npm run dev # Run with tsx (hot reload)
npm run inspect # Test with MCP Inspector
For local MCP clients, point command at node and args at dist/index.js after npm run build.
Related
- ThoughtProof — Decision verification for AI agents
- pot-cli — CLI for reasoning verification
- ERC-8004 — Autonomous Agent Registry
License
MIT — ThoughtProof
Reviews
No reviews yet
Be the first to review this server!
More Developer Tools MCP Servers
Fetch
Freeby Modelcontextprotocol · Developer Tools
Web content fetching and conversion for efficient LLM usage
Toleno
Freeby Toleno · Developer Tools
Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.
mcp-creator-python
Freeby mcp-marketplace · Developer Tools
Create, build, and publish Python MCP servers to PyPI — conversationally.
MarkItDown
Freeby Microsoft · Content & Media
Convert files (PDF, Word, Excel, images, audio) to Markdown for LLM consumption
MCP Marketplace
Freeby mcp-marketplace · Developer Tools
Search and install MCP servers from inside your AI client.
FinAgent
Freeby mcp-marketplace · Finance
Free stock data and market news for any MCP-compatible AI assistant.