MCP 服务器

DingDawg Governance

Fail-closed AI agent governance — approve or block agent actions in real time, score compliance risk, and generate tamper-evident receipts. Free tier: 10 governed actions/day. Upgrade for unlimited + Ed25519-signed audit receipts.

README

DingDawg Governance

Every AI action receipted. Capability-gated. Rollback-ready.

AI Governance-as-a-Service via MCP. Every write, shell command, and state-changing operation your agent makes is validated before it runs and cryptographically receipted after it completes — giving you a tamper-evident audit trail you can query, export, or roll back at any time.

Works with Claude Code, Codex, Cursor, Windsurf, and any MCP-compatible agent.

Install

npm install dingdawg-governance

Quick Start

# Authenticate (free — no credit card)
npx dingdawg-governance auth login

# Start the governance MCP server
DINGDAWG_API_KEY=your_key npx dingdawg-governance

Add to your MCP client config:

{
  "mcpServers": {
    "dingdawg-governance": {
      "command": "npx",
      "args": ["dingdawg-governance"],
      "env": {
        "DINGDAWG_API_KEY": "your_key_here"
      }
    }
  }
}

Get your free API key at app.dingdawg.com/settings/api.

What You Get

Pre-execution validation — Every action checked against your policy before it runs. Blocked actions never touch your filesystem.
Cryptographic receipts — Tamper-evident record for every action with a unique ID, output hash, and public verification URL.
One-command rollback — Undo any file write by referencing its receipt ID. Prior state is captured automatically before every write.
Real-time trust scores — Behavioral pattern tracking across sessions surfaces anomalies before they become incidents.
Compliance reports in seconds — SOC 2 and ISO 27001-aligned audit reports as signed PDF or structured JSON. One API call.

MCP Tools

Tool	What it does
`validate_action`	Pre-execution check. Returns `APPROVED`, `FLAGGED`, or `BLOCKED` with reason code and risk score.
`generate_receipt`	Post-execution cryptographic receipt with tamper-evident output hash.
`capture_rollback_state`	Snapshot current state before destructive or high-risk operations.
`rollback_action`	Restore prior state from a receipt ID.
`query_receipts`	Search receipts by date, agent, action type, or status. Export-ready.
`check_status`	Current tier, daily usage, quota, and active governance alerts.
`generate_audit_report`	On-demand compliance report — SOC 2, ISO 27001, or custom policy framework.