mcp-gov 1.3.0 → 1.3.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +10 -1
- package/README.md +69 -24
- package/bin/mcp-gov.js +6 -6
- package/package.json +1 -1
package/CHANGELOG.md
CHANGED
|
@@ -2,10 +2,19 @@
|
|
|
2
2
|
|
|
3
3
|
All notable changes to mcp-gov will be documented in this file.
|
|
4
4
|
|
|
5
|
+
## [1.3.1] - 2026-01-24
|
|
6
|
+
|
|
7
|
+
### Changed
|
|
8
|
+
- Improved README with "What is MCP-GOV?" section
|
|
9
|
+
- Added visual flow diagrams (with/without MCP-GOV)
|
|
10
|
+
- Added workflow steps diagram
|
|
11
|
+
- Fixed ASCII logo alignment
|
|
12
|
+
- Centered logo in README
|
|
13
|
+
|
|
5
14
|
## [1.3.0] - 2026-01-24
|
|
6
15
|
|
|
7
16
|
### Changed
|
|
8
|
-
- Cleaned up README - reduced from 1200+ lines to ~
|
|
17
|
+
- Cleaned up README - reduced from 1200+ lines to ~170 lines
|
|
9
18
|
- Focus on interactive CLI usage
|
|
10
19
|
- Added npm and npx install options
|
|
11
20
|
|
package/README.md
CHANGED
|
@@ -1,18 +1,28 @@
|
|
|
1
|
-
<
|
|
2
|
-
|
|
3
|
-
|
|
4
|
-
|
|
5
|
-
|
|
6
|
-
|
|
7
|
-
██║
|
|
8
|
-
╚═╝
|
|
9
|
-
|
|
10
|
-
|
|
1
|
+
<div align="center">
|
|
2
|
+
|
|
3
|
+
```
|
|
4
|
+
███╗ ███╗ ██████╗ ██████╗ ██████╗ ██████╗ ██╗ ██╗
|
|
5
|
+
████╗ ████║ ██╔════╝ ██╔══██╗ ██╔════╝ ██╔═══██╗██║ ██║
|
|
6
|
+
██╔████╔██║ ██║ ██████╔╝ ██║ ███╗██║ ██║██║ ██║
|
|
7
|
+
██║╚██╔╝██║ ██║ ██╔═══╝ ██║ ██║██║ ██║╚██╗ ██╔╝
|
|
8
|
+
██║ ╚═╝ ██║ ╚██████╗ ██║ ╚██████╔╝╚██████╔╝ ╚████╔╝
|
|
9
|
+
╚═╝ ╚═╝ ╚═════╝ ╚═╝ ╚═════╝ ╚═════╝ ╚═══╝
|
|
10
|
+
```
|
|
11
11
|
|
|
12
12
|
# MCP Governance System
|
|
13
13
|
|
|
14
|
+
</div>
|
|
15
|
+
|
|
14
16
|
Permission control and audit logging for Model Context Protocol (MCP) servers.
|
|
15
17
|
|
|
18
|
+
## What is MCP-GOV?
|
|
19
|
+
|
|
20
|
+
MCP-GOV adds a security layer between your AI assistant (Claude, etc.) and MCP tool servers. It:
|
|
21
|
+
|
|
22
|
+
- **Controls permissions** - Block dangerous operations like delete, execute, admin
|
|
23
|
+
- **Logs everything** - Audit trail of all tool calls with timestamps
|
|
24
|
+
- **Works transparently** - No changes needed to your MCP servers
|
|
25
|
+
|
|
16
26
|
## Install
|
|
17
27
|
|
|
18
28
|
```bash
|
|
@@ -30,13 +40,13 @@ mcp-gov
|
|
|
30
40
|
```
|
|
31
41
|
|
|
32
42
|
```
|
|
33
|
-
███╗ ███╗
|
|
34
|
-
████╗
|
|
35
|
-
|
|
36
|
-
|
|
37
|
-
██║ ╚═╝
|
|
38
|
-
╚═╝ ╚═╝
|
|
39
|
-
|
|
43
|
+
███╗ ███╗ ██████╗ ██████╗ ██████╗ ██████╗ ██╗ ██╗
|
|
44
|
+
████╗ ████║ ██╔════╝ ██╔══██╗ ██╔════╝ ██╔═══██╗██║ ██║
|
|
45
|
+
██╔████╔██║ ██║ ██████╔╝ ██║ ███╗██║ ██║██║ ██║
|
|
46
|
+
██║╚██╔╝██║ ██║ ██╔═══╝ ██║ ██║██║ ██║╚██╗ ██╔╝
|
|
47
|
+
██║ ╚═╝ ██║ ╚██████╗ ██║ ╚██████╔╝╚██████╔╝ ╚████╔╝
|
|
48
|
+
╚═╝ ╚═╝ ╚═════╝ ╚═╝ ╚═════╝ ╚═════╝ ╚═══╝
|
|
49
|
+
v1.3.0
|
|
40
50
|
|
|
41
51
|
Select action:
|
|
42
52
|
1) Wrap MCP servers
|
|
@@ -50,17 +60,52 @@ Enter choice [1-5]:
|
|
|
50
60
|
|
|
51
61
|
## How It Works
|
|
52
62
|
|
|
53
|
-
**Before wrapping:**
|
|
54
63
|
```
|
|
55
|
-
|
|
64
|
+
┌─────────────────────────────────────────────────────────────┐
|
|
65
|
+
│ WITHOUT MCP-GOV │
|
|
66
|
+
├─────────────────────────────────────────────────────────────┤
|
|
67
|
+
│ │
|
|
68
|
+
│ Claude ──────────────────────────────► MCP Server │
|
|
69
|
+
│ (all operations allowed) (filesystem, │
|
|
70
|
+
│ github, etc.) │
|
|
71
|
+
│ │
|
|
72
|
+
└─────────────────────────────────────────────────────────────┘
|
|
73
|
+
|
|
74
|
+
┌─────────────────────────────────────────────────────────────┐
|
|
75
|
+
│ WITH MCP-GOV │
|
|
76
|
+
├─────────────────────────────────────────────────────────────┤
|
|
77
|
+
│ │
|
|
78
|
+
│ Claude ────► mcp-gov-proxy ────► MCP Server │
|
|
79
|
+
│ │ │
|
|
80
|
+
│ ├── Check rules.json │
|
|
81
|
+
│ │ ├── read: ✅ allow │
|
|
82
|
+
│ │ ├── write: ✅ allow │
|
|
83
|
+
│ │ ├── delete: ❌ deny │
|
|
84
|
+
│ │ └── admin: ❌ deny │
|
|
85
|
+
│ │ │
|
|
86
|
+
│ └── Log to audit.log │
|
|
87
|
+
│ │
|
|
88
|
+
└─────────────────────────────────────────────────────────────┘
|
|
56
89
|
```
|
|
57
90
|
|
|
58
|
-
|
|
91
|
+
## Workflow
|
|
92
|
+
|
|
59
93
|
```
|
|
60
|
-
|
|
61
|
-
|
|
62
|
-
|
|
63
|
-
|
|
94
|
+
1. Install npm install -g mcp-gov
|
|
95
|
+
│
|
|
96
|
+
▼
|
|
97
|
+
2. Run mcp-gov
|
|
98
|
+
│
|
|
99
|
+
▼
|
|
100
|
+
3. Select 1) Wrap MCP servers
|
|
101
|
+
│
|
|
102
|
+
▼
|
|
103
|
+
4. Enter path ~/.claude.json
|
|
104
|
+
│
|
|
105
|
+
▼
|
|
106
|
+
5. Done! ✓ Servers wrapped
|
|
107
|
+
✓ Rules generated at ~/.mcp-gov/rules.json
|
|
108
|
+
✓ Audit logs at ~/.mcp-gov/logs/
|
|
64
109
|
```
|
|
65
110
|
|
|
66
111
|
## Default Rules
|
package/bin/mcp-gov.js
CHANGED
|
@@ -34,12 +34,12 @@ function ask(question) {
|
|
|
34
34
|
}
|
|
35
35
|
|
|
36
36
|
const logo = `
|
|
37
|
-
███╗ ███╗
|
|
38
|
-
████╗
|
|
39
|
-
|
|
40
|
-
|
|
41
|
-
██║ ╚═╝
|
|
42
|
-
╚═╝ ╚═╝
|
|
37
|
+
███╗ ███╗ ██████╗ ██████╗ ██████╗ ██████╗ ██╗ ██╗
|
|
38
|
+
████╗ ████║ ██╔════╝ ██╔══██╗ ██╔════╝ ██╔═══██╗██║ ██║
|
|
39
|
+
██╔████╔██║ ██║ ██████╔╝ ██║ ███╗██║ ██║██║ ██║
|
|
40
|
+
██║╚██╔╝██║ ██║ ██╔═══╝ ██║ ██║██║ ██║╚██╗ ██╔╝
|
|
41
|
+
██║ ╚═╝ ██║ ╚██████╗ ██║ ╚██████╔╝╚██████╔╝ ╚████╔╝
|
|
42
|
+
╚═╝ ╚═╝ ╚═════╝ ╚═╝ ╚═════╝ ╚═════╝ ╚═══╝
|
|
43
43
|
`;
|
|
44
44
|
|
|
45
45
|
async function main() {
|