About gov
gov is an MCP server published by git+hamr0 in the AI category: mCP Governance System - Permission control and audit logging for Model Context Protocol servers. It has been installed 0 times through Conduid.
Install
Install
npx mcp-govClaude Code
claude mcp add mcp-gov -- npx -y mcp-govnpx
npx -y mcp-govThis server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.
Ask AI
✦
Ask AI about gov
Powered by Claude · Grounded in docs
I know everything about gov. Ask me about installation, configuration, usage, or troubleshooting.
Security checks
- ·README presentNot checked yet.
- ·License declaredNot checked yet.
- ·Tests presentNot checked yet.
- ·Dependencies pinnedNot checked yet.
- ·No dynamic code executionNot checked yet.
- !Scoped permissionsDoesn't declare a permission scope. Assume it can do anything its process can.
README
███╗ ███╗ ██████╗ ██████╗ ██████╗ ██████╗ ██╗ ██╗
████╗ ████║ ██╔════╝ ██╔══██╗ ██╔════╝ ██╔═══██╗██║ ██║
██╔████╔██║ ██║ ██████╔╝ ██║ ███╗██║ ██║██║ ██║
██║╚██╔╝██║ ██║ ██╔═══╝ ██║ ██║██║ ██║╚██╗ ██╔╝
██║ ╚═╝ ██║ ╚██████╗ ██║ ╚██████╔╝╚██████╔╝ ╚████╔╝
╚═╝ ╚═╝ ╚═════╝ ╚═╝ ╚═════╝ ╚═════╝ ╚═══╝
MCP Governance System
Permission control and audit logging for Model Context Protocol (MCP) servers.
What is MCP-GOV?
MCP-GOV adds a security layer between your AI assistant (Claude, etc.) and MCP tool servers. It:
- Controls permissions - Block dangerous operations like delete, execute, admin
- Logs everything - Audit trail of all tool calls with timestamps
- Works transparently - No changes needed to your MCP servers
Install
# Using npm
npm install -g mcp-gov
# Or run directly with npx
npx mcp-gov
Usage
mcp-gov
███╗ ███╗ ██████╗ ██████╗ ██████╗ ██████╗ ██╗ ██╗
████╗ ████║ ██╔════╝ ██╔══██╗ ██╔════╝ ██╔═══██╗██║ ██║
██╔████╔██║ ██║ ██████╔╝ ██║ ███╗██║ ██║██║ ██║
██║╚██╔╝██║ ██║ ██╔═══╝ ██║ ██║██║ ██║╚██╗ ██╔╝
██║ ╚═╝ ██║ ╚██████╗ ██║ ╚██████╔╝╚██████╔╝ ╚████╔╝
╚═╝ ╚═╝ ╚═════╝ ╚═╝ ╚═════╝ ╚═════╝ ╚═══╝
v1.3.0
Select action:
1) Wrap MCP servers
2) Unwrap MCP servers
3) View audit logs
4) Edit rules
5) Exit
Enter choice [1-5]:
How It Works
┌─────────────────────────────────────────────────────────────┐
│ WITHOUT MCP-GOV │
├─────────────────────────────────────────────────────────────┤
│ │
│ Claude ──────────────────────────────► MCP Server │
│ (all operations allowed) (filesystem, │
│ github, etc.) │
│ │
└─────────────────────────────────────────────────────────────┘
┌─────────────────────────────────────────────────────────────┐
│ WITH MCP-GOV │
├─────────────────────────────────────────────────────────────┤
│ │
│ Claude ────► mcp-gov-proxy ────► MCP Server │
│ │ │
│ ├── Check rules.json │
│ │ ├── read: ✅ allow │
│ │ ├── write: ✅ allow │
│ │ ├── delete: ❌ deny │
│ │ └── admin: ❌ deny │
│ │ │
│ └── Log to audit.log │
│ │
└─────────────────────────────────────────────────────────────┘
Workflow
1. Install npm install -g mcp-gov
│
▼
2. Run mcp-gov
│
▼
3. Select 1) Wrap MCP servers
│
▼
4. Enter path ~/.claude.json
│
▼
5. Done! ✓ Servers wrapped
✓ Rules generated at ~/.mcp-gov/rules.json
✓ Audit logs at ~/.mcp-gov/logs/
Default Rules
Rules are auto-generated at ~/.mcp-gov/rules.json:
| Operation | Default | Examples |
|---|---|---|
| read | ✅ Allow | get, list, search, fetch |
| write | ✅ Allow | create, update, add, save |
| delete | ❌ Deny | delete, remove, drop, purge |
| execute | ❌ Deny | run, exec, invoke, trigger |
| admin | ❌ Deny | admin, configure, grant |
Files
| Path | Description |
|---|---|
~/.mcp-gov/rules.json |
Governance rules |
~/.mcp-gov/logs/*.log |
Audit logs by service |
Rules Format
{
"rules": [
{
"service": "github",
"operations": ["delete"],
"permission": "deny",
"reason": "Block destructive operations"
},
{
"service": "github",
"operations": ["read", "write"],
"permission": "allow"
}
]
}
Audit Log Format
[AUDIT] 2026-01-24T10:30:45.123Z | DENIED | tool=delete_repo | service=github | operation=delete | project=/home/user/myproject
CLI Commands
The interactive menu is recommended, but you can also use commands directly:
# Wrap servers
mcp-gov-wrap --config ~/.claude.json
# Unwrap servers
mcp-gov-unwrap --config ~/.claude.json
# Low-level proxy (used internally)
mcp-gov-proxy --service github --target "npx server" --rules ~/.mcp-gov/rules.json
License
Apache-2.0 — see LICENSE.
README mirrored from the source repository 3 months ago. The original is authoritative.