1. Conduid
  2. Healthcare
  3. Obstat
MCP server · Healthcare

Obstat

by · github.com/marcinmarzeta/obstat

An auditable decision record for agent tool calls. The clearance is written down before the call runs.

Unclaimed access-controlai-agentsapproval-workflowaudit-logaudit-trailauthorizationcompliancegovernancehuman-in-the-loopllmllm-toolsmcpmodel-context-protocolpythonsecuritytamper-evident
InstallView source
34Low

Scored 27 days ago · breakdown

About Obstat

Obstat is an MCP server published by marcinmarzeta in the Healthcare category: an auditable decision record for agent tool calls. The clearance is written down before the call runs.

Recent commit activity is the strongest signal that reported issues will get attention.

Install

From source
git clone https://github.com/marcinmarzeta/obstat

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about Obstat

Powered by Claude · Grounded in docs

I know everything about Obstat. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

6 checks have not been run yet.

Releases

v0.7.00.7.0 — the human's answer is in the chain · 15 Sep 2026Record schema 8. One theme: make the log answer questions the data already held. The human's decision is in the chain.** `obstat approve` and `obstat deny` now append a durable `approval` record as the database row changes — the approval…
v0.6.10.6.1 — a resolver that raises is a denial, not a crash · 15 Sep 2026Three faults, each found by reading rather than by use. None changes the record schema. A subject resolver that raised escaped unrecorded.** The resource callable has been treated as "whatever it throws is a verdict to record" since 0.5.0.…
v0.6.0v0.6.0 · 7 Aug 2026Full Changelog**: https://github.com/marcinmarzeta/obstat/compare/v0.5.1...v0.6.0
v0.5.1v0.5.1 — a call missing an argument is refused, not authorised · 2 Aug 2026One fix. No record-format change — schema stays 6. `@guard` bound call arguments **partially**, so a call missing a required argument passed the gate: it took an `allow` record and then raised `TypeError` from the tool body. The log…
v0.5.0v0.5.0 — approved_by in the record, no unchecked approval ids, fail-closed resolvers · 2 Aug 2026Three review findings, one theme: the record must not repeat, or depend on, anything a caller or a mutable store asserts. Schema 5 → 6. The allow record that spends an approval carries `approved_by`**, read from the row inside the…
Questions

About Obstat

How do I install Obstat?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is Obstat safe to use with an AI agent?

Its trust score is 34 out of 100 (low). Conduid hasn't run static security checks on this repository yet, so review the source yourself before granting it credentials. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Obstat still maintained?

Yes — the latest release is v0.7.0 (15 Sep 2026), and the last commit was a month ago. The repository has 0 stars.