Back to Browse

Governance MCP Server

Developer ToolsUse Caution4.8MCP RegistryLocal
Free

Server data from the Official MCP Registry

AI governance evidence for EU AI Act, ISO 42001, SOC 2, and NIST AI RMF.

About

AI governance evidence for EU AI Act, ISO 42001, SOC 2, and NIST AI RMF.

Security Report

4.8
Use Caution4.8High Risk

This MCP server for AI governance compliance is well-structured with proper authentication, secure credential handling, and appropriate permission scoping. API key is correctly required and managed via environment variables. No malicious patterns, code injection vulnerabilities, or exfiltration detected. Minor code quality findings (broad error handling, some missing input validation edge cases) do not significantly impact security posture. Supply chain analysis found 4 known vulnerabilities in dependencies (2 critical, 2 high severity). Package verification found 1 issue.

7 files analyzed · 11 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

env_vars

Check that this permission is expected for this type of plugin.

HTTP Network Access

Connects to external APIs or services over the internet.

What You'll Need

Set these up before or after installing:

Your Mima API key (mima_ext_...)Required

Environment variable: MIMA_API_KEY

Your Mima workspace ID (ws-...)Optional

Environment variable: MIMA_WORKSPACE_ID

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "works-mima-governance-mcp": {
      "env": {
        "MIMA_API_KEY": "your-mima-api-key-here",
        "MIMA_WORKSPACE_ID": "your-mima-workspace-id-here"
      },
      "args": [
        "-y",
        "@mima-ai/governance-mcp"
      ],
      "command": "npx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

@mima-ai/governance-mcp

governance-mcp MCP server MCP Badge

MCP server for AI governance — push compliance evidence to Mima from any agent, any stack, 4 lines of config.

One tool call maps to EU AI Act, ISO 42001, SOC 2, and NIST AI RMF simultaneously. Your readiness score updates automatically.

Install

npx @mima-ai/governance-mcp@0.1.13

Or add to your MCP config (always pin the version):

{
  "mcpServers": {
    "mima-governance": {
      "command": "npx",
      "args": ["-y", "@mima-ai/governance-mcp@0.1.13"],
      "env": {
        "MIMA_API_KEY": "mima_ext_...",
        "MIMA_WORKSPACE_ID": "ws-..."
      }
    }
  }
}

10 tools

ToolWhat it does
get_postureOverall readiness score + per-framework breakdown
list_systemsAll AI systems — registered vs unregistered
list_evidenceEvidence records filtered by system and time
dry_run_attestPreview which controls an attestation would earn
attestWrite a GRC evidence record
register_systemRegister an AI system under EU AI Act Art. 9
acknowledge_policyRecord a policy acknowledgment
derive_controlsRecommended evidence types for a system description
check_gatesGate pass/fail status with exit codes
suggest_gatesPrioritised gate recommendations

Usage — Claude Code

Add to ~/.claude/settings.json:

{
  "mcpServers": {
    "mima-governance": {
      "command": "npx",
      "args": ["-y", "@mima-ai/governance-mcp"],
      "env": {
        "MIMA_API_KEY": "mima_ext_...",
        "MIMA_WORKSPACE_ID": "ws-..."
      }
    }
  }
}

Then ask Claude: "Check our compliance posture" or "Register this AI system and suggest which controls we need."

Usage — Cursor / Windsurf

Add to .cursor/mcp.json or .windsurf/mcp.json in your project root:

{
  "mcpServers": {
    "mima-governance": {
      "command": "npx",
      "args": ["-y", "@mima-ai/governance-mcp"],
      "env": {
        "MIMA_API_KEY": "mima_ext_...",
        "MIMA_WORKSPACE_ID": "ws-..."
      }
    }
  }
}

Dry-run support

All write tools support dry-run — preview what controls you'd earn before committing:

dry_run_attest({ record_type: "ai_risk_assessment", system_name: "loan-scorer" })
// → { mapped_controls: ["EUAIA_ART9", "ISO42001_6_1", "NIST_AIRF_MAP_1"] }

Four frameworks, one call

FrameworkWhat it covers
EU AI ActArt. 9–15 risk management, oversight, accuracy obligations
ISO 42001AI management system controls — A.6.x risk, A.9.x performance
SOC 2CC3.x–CC8.x risk, change, and incident management
NIST AI RMFGOVERN, MAP, MEASURE, MANAGE functions

Get an API key

mima.works → sign up → copy your key from the dashboard.

Python SDK

For app-code attestation (decorators, batch pushes, pre-approval gates):

pip install mima-governance

Docs

docs.mima.works

Reviews

No reviews yet

Be the first to review this server!

Governance MCP Server - AI governance evidence for EU AI Act, ISO 42001, SOC 2, and | MCP Marketplace