odgs-mcp-server 0.1.0__tar.gz
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- odgs_mcp_server-0.1.0/.gitignore +44 -0
- odgs_mcp_server-0.1.0/LICENSE +19 -0
- odgs_mcp_server-0.1.0/PARTNERS.md +93 -0
- odgs_mcp_server-0.1.0/PKG-INFO +251 -0
- odgs_mcp_server-0.1.0/README.md +203 -0
- odgs_mcp_server-0.1.0/e2e_test.py +53 -0
- odgs_mcp_server-0.1.0/pyproject.toml +81 -0
- odgs_mcp_server-0.1.0/src/odgs_mcp_server/__init__.py +11 -0
- odgs_mcp_server-0.1.0/src/odgs_mcp_server/auth/__init__.py +159 -0
- odgs_mcp_server-0.1.0/src/odgs_mcp_server/config.py +55 -0
- odgs_mcp_server-0.1.0/src/odgs_mcp_server/main.py +534 -0
- odgs_mcp_server-0.1.0/src/odgs_mcp_server/resources/__init__.py +1 -0
- odgs_mcp_server-0.1.0/src/odgs_mcp_server/tools/__init__.py +1 -0
- odgs_mcp_server-0.1.0/src/odgs_mcp_server/tools/_notice.py +49 -0
- odgs_mcp_server-0.1.0/src/odgs_mcp_server/tools/compile.py +71 -0
- odgs_mcp_server-0.1.0/src/odgs_mcp_server/tools/conflicts.py +64 -0
- odgs_mcp_server-0.1.0/src/odgs_mcp_server/tools/discover.py +66 -0
- odgs_mcp_server-0.1.0/src/odgs_mcp_server/tools/drift.py +67 -0
- odgs_mcp_server-0.1.0/src/odgs_mcp_server/tools/flint.py +64 -0
- odgs_mcp_server-0.1.0/src/odgs_mcp_server/tools/narrate.py +72 -0
- odgs_mcp_server-0.1.0/src/odgs_mcp_server/tools/packs.py +186 -0
- odgs_mcp_server-0.1.0/src/odgs_mcp_server/tools/score.py +208 -0
- odgs_mcp_server-0.1.0/src/odgs_mcp_server/tools/validate.py +148 -0
- odgs_mcp_server-0.1.0/tests/conftest.py +117 -0
- odgs_mcp_server-0.1.0/tests/test_auth.py +115 -0
- odgs_mcp_server-0.1.0/tests/test_config.py +39 -0
- odgs_mcp_server-0.1.0/tests/test_tools.py +84 -0
|
@@ -0,0 +1,44 @@
|
|
|
1
|
+
# Byte-compiled / optimized / DLL files
|
|
2
|
+
__pycache__/
|
|
3
|
+
*.py[cod]
|
|
4
|
+
*$py.class
|
|
5
|
+
|
|
6
|
+
# Distribution / packaging
|
|
7
|
+
build/
|
|
8
|
+
dist/
|
|
9
|
+
*.egg-info/
|
|
10
|
+
*.egg
|
|
11
|
+
|
|
12
|
+
# Virtual environments
|
|
13
|
+
.venv/
|
|
14
|
+
venv/
|
|
15
|
+
env/
|
|
16
|
+
|
|
17
|
+
# IDE
|
|
18
|
+
.vscode/
|
|
19
|
+
.idea/
|
|
20
|
+
*.swp
|
|
21
|
+
*.swo
|
|
22
|
+
*~
|
|
23
|
+
|
|
24
|
+
# OS
|
|
25
|
+
.DS_Store
|
|
26
|
+
Thumbs.db
|
|
27
|
+
|
|
28
|
+
# ODGS runtime
|
|
29
|
+
audit_logs/
|
|
30
|
+
sovereign_audit.log
|
|
31
|
+
*.log
|
|
32
|
+
|
|
33
|
+
# Environment
|
|
34
|
+
.env
|
|
35
|
+
.env.local
|
|
36
|
+
|
|
37
|
+
# Cache
|
|
38
|
+
.odgs/
|
|
39
|
+
.tier_cache.json
|
|
40
|
+
|
|
41
|
+
# Test
|
|
42
|
+
.pytest_cache/
|
|
43
|
+
htmlcov/
|
|
44
|
+
.coverage
|
|
@@ -0,0 +1,19 @@
|
|
|
1
|
+
Apache License
|
|
2
|
+
Version 2.0, January 2004
|
|
3
|
+
http://www.apache.org/licenses/
|
|
4
|
+
|
|
5
|
+
TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
|
|
6
|
+
|
|
7
|
+
Copyright 2024-2026 Metric Provenance B.V.
|
|
8
|
+
|
|
9
|
+
Licensed under the Apache License, Version 2.0 (the "License");
|
|
10
|
+
you may not use this file except in compliance with the License.
|
|
11
|
+
You may obtain a copy of the License at
|
|
12
|
+
|
|
13
|
+
http://www.apache.org/licenses/LICENSE-2.0
|
|
14
|
+
|
|
15
|
+
Unless required by applicable law or agreed to in writing, software
|
|
16
|
+
distributed under the License is distributed on an "AS IS" BASIS,
|
|
17
|
+
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
18
|
+
See the License for the specific language governing permissions and
|
|
19
|
+
limitations under the License.
|
|
@@ -0,0 +1,93 @@
|
|
|
1
|
+
# ODGS Partner Programme
|
|
2
|
+
|
|
3
|
+
> ODGS is issued exclusively through verified partner firms.
|
|
4
|
+
> This document explains who the right partner looks like, what the commercial model is, and how to apply.
|
|
5
|
+
|
|
6
|
+
---
|
|
7
|
+
|
|
8
|
+
## The Model (Plain English)
|
|
9
|
+
|
|
10
|
+
| Revenue Type | Goes To |
|
|
11
|
+
|---|---|
|
|
12
|
+
| Implementation, integration, consulting | **The Partner — 100%** |
|
|
13
|
+
| Certified Pack licences + S-Cert issuance | **Metric Provenance — 100%** |
|
|
14
|
+
|
|
15
|
+
**Zero channel conflict.** Partners own the client relationship and all delivery revenue. Metric Provenance earns on the certified IP layer only. There is no scenario where we compete with a partner for a client engagement.
|
|
16
|
+
|
|
17
|
+
---
|
|
18
|
+
|
|
19
|
+
## Who the Right Partner Looks Like
|
|
20
|
+
|
|
21
|
+
We work with three types of firms:
|
|
22
|
+
|
|
23
|
+
**1. System Integrators & Data Engineering Consultancies**
|
|
24
|
+
You're building data pipelines, governance frameworks, or AI systems for regulated clients. ODGS gives you a certified compliance layer to wrap around every engagement — without building it yourself.
|
|
25
|
+
|
|
26
|
+
**2. Big 4 / Advisory Practices**
|
|
27
|
+
You have EU AI Act, DORA, GDPR, or CSRD service lines. ODGS gives your practice a mechanically-enforced, cryptographically-signed artefact that goes beyond documentation — it's a non-repudiable enforcement receipt your clients can present to regulators.
|
|
28
|
+
|
|
29
|
+
**3. Platform Providers (Databricks, Snowflake, Collibra ecosystem)**
|
|
30
|
+
You're deploying data platforms into regulated environments. ODGS integrates natively (Unity Catalog, Snowflake Horizon) and adds the S-Cert certification layer your enterprise clients need for audit-readiness.
|
|
31
|
+
|
|
32
|
+
---
|
|
33
|
+
|
|
34
|
+
## What You Get as a Partner
|
|
35
|
+
|
|
36
|
+
- **Certified Pack licensing rights** for client deployments (EU AI Act, DORA, GDPR, CSRD, NIS2, Basel III, and more)
|
|
37
|
+
- **S-Cert Registry access** — your clients' deployments are registered and verifiable
|
|
38
|
+
- **Technical briefing + onboarding** (typically 2 sessions, remote)
|
|
39
|
+
- **Delivery documentation** — integration guides, compliance narratives, client-facing collateral
|
|
40
|
+
- **Named listing** in the Metric Provenance partner directory (rolling out Q3 2026)
|
|
41
|
+
- **Priority support** for partner-led client escalations
|
|
42
|
+
|
|
43
|
+
---
|
|
44
|
+
|
|
45
|
+
## Regulations Covered
|
|
46
|
+
|
|
47
|
+
| Pack | Regulation | Status |
|
|
48
|
+
|---|---|---|
|
|
49
|
+
| EU AI Act | Regulation (EU) 2024/1689 | ✅ Certified |
|
|
50
|
+
| DORA | Digital Operational Resilience Act | ✅ Certified |
|
|
51
|
+
| GDPR | General Data Protection Regulation | ✅ Certified |
|
|
52
|
+
| CSRD | Corporate Sustainability Reporting Directive | ✅ Certified |
|
|
53
|
+
| NIS2 | Network and Information Security Directive | ✅ Certified |
|
|
54
|
+
| Basel III / BCBS-239 | Banking Regulation | ✅ Certified |
|
|
55
|
+
|
|
56
|
+
Full catalogue of 15+ packs available on request.
|
|
57
|
+
|
|
58
|
+
---
|
|
59
|
+
|
|
60
|
+
## Current Programme Status
|
|
61
|
+
|
|
62
|
+
We onboard a small cohort of partners each quarter to maintain quality of technical support and onboarding.
|
|
63
|
+
|
|
64
|
+
**Q2/Q3 2026 cohort: accepting applications.**
|
|
65
|
+
|
|
66
|
+
---
|
|
67
|
+
|
|
68
|
+
## How to Apply
|
|
69
|
+
|
|
70
|
+
Email **[partner@metricprovenance.com](mailto:partner@metricprovenance.com)** with:
|
|
71
|
+
|
|
72
|
+
1. Your firm name and relevant practice area
|
|
73
|
+
2. A client use case or sector you have in mind
|
|
74
|
+
3. Your evaluation timeline
|
|
75
|
+
|
|
76
|
+
Or use the enquiry form at **[platform.metricprovenance.com](https://platform.metricprovenance.com)**.
|
|
77
|
+
|
|
78
|
+
We respond to all partner enquiries within 48 hours.
|
|
79
|
+
|
|
80
|
+
---
|
|
81
|
+
|
|
82
|
+
## For Developers
|
|
83
|
+
|
|
84
|
+
If you're an engineer who found ODGS through the CLI or MCP server and want to surface it to your compliance or procurement team, the easiest path is:
|
|
85
|
+
|
|
86
|
+
1. Download the [Executive Summary PDF](https://platform.metricprovenance.com/executive-summary.pdf)
|
|
87
|
+
2. Forward it to your CDO, CTO, or Chief Compliance Officer with the note: *"We're already running this — here's the commercial certification layer."*
|
|
88
|
+
3. Point them to [platform.metricprovenance.com](https://platform.metricprovenance.com) for a partner briefing
|
|
89
|
+
|
|
90
|
+
---
|
|
91
|
+
|
|
92
|
+
*Metric Provenance B.V. · The Hague, Netherlands · KvK: 94504474*
|
|
93
|
+
*[metricprovenance.com](https://www.metricprovenance.com) · [partner@metricprovenance.com](mailto:partner@metricprovenance.com)*
|
|
@@ -0,0 +1,251 @@
|
|
|
1
|
+
Metadata-Version: 2.4
|
|
2
|
+
Name: odgs-mcp-server
|
|
3
|
+
Version: 0.1.0
|
|
4
|
+
Summary: MCP server for ODGS governance enforcement — validate data, compile regulations, generate S-Certs, detect drift.
|
|
5
|
+
Project-URL: Homepage, https://metricprovenance.com
|
|
6
|
+
Project-URL: Repository, https://github.com/MetricProvenance/odgs-mcp-server
|
|
7
|
+
Project-URL: Documentation, https://github.com/MetricProvenance/odgs-mcp-server/blob/main/README.md
|
|
8
|
+
Project-URL: ODGS Core, https://pypi.org/project/odgs/
|
|
9
|
+
Project-URL: LLM Bridge, https://pypi.org/project/odgs-llm-bridge/
|
|
10
|
+
Project-URL: Partner Platform, https://platform.metricprovenance.com
|
|
11
|
+
Author-email: Metric Provenance <partner@metricprovenance.com>
|
|
12
|
+
License: Apache-2.0
|
|
13
|
+
License-File: LICENSE
|
|
14
|
+
Keywords: ai-safety,claude,compliance,copilot,cursor,data-quality,dora,enforcement,eu-ai-act,governance,mcp,model-context-protocol,odgs,regulatory
|
|
15
|
+
Classifier: Development Status :: 3 - Alpha
|
|
16
|
+
Classifier: Intended Audience :: Developers
|
|
17
|
+
Classifier: Intended Audience :: Financial and Insurance Industry
|
|
18
|
+
Classifier: Intended Audience :: Legal Industry
|
|
19
|
+
Classifier: License :: OSI Approved :: Apache Software License
|
|
20
|
+
Classifier: Programming Language :: Python :: 3.10
|
|
21
|
+
Classifier: Programming Language :: Python :: 3.11
|
|
22
|
+
Classifier: Programming Language :: Python :: 3.12
|
|
23
|
+
Classifier: Programming Language :: Python :: 3.13
|
|
24
|
+
Classifier: Topic :: Office/Business :: Financial
|
|
25
|
+
Classifier: Topic :: Scientific/Engineering :: Artificial Intelligence
|
|
26
|
+
Classifier: Topic :: Software Development :: Libraries :: Application Frameworks
|
|
27
|
+
Requires-Python: >=3.10
|
|
28
|
+
Requires-Dist: httpx>=0.25.0
|
|
29
|
+
Requires-Dist: mcp>=1.0.0
|
|
30
|
+
Requires-Dist: odgs>=6.0.0
|
|
31
|
+
Requires-Dist: pydantic>=2.0.0
|
|
32
|
+
Provides-Extra: all
|
|
33
|
+
Requires-Dist: odgs-collibra-bridge>=0.3.0; extra == 'all'
|
|
34
|
+
Requires-Dist: odgs-databricks-bridge>=0.5.0; extra == 'all'
|
|
35
|
+
Requires-Dist: odgs-llm-bridge>=0.1.0; extra == 'all'
|
|
36
|
+
Requires-Dist: odgs-snowflake-bridge>=0.3.0; extra == 'all'
|
|
37
|
+
Provides-Extra: bridges
|
|
38
|
+
Requires-Dist: odgs-collibra-bridge>=0.3.0; extra == 'bridges'
|
|
39
|
+
Requires-Dist: odgs-databricks-bridge>=0.5.0; extra == 'bridges'
|
|
40
|
+
Requires-Dist: odgs-snowflake-bridge>=0.3.0; extra == 'bridges'
|
|
41
|
+
Provides-Extra: dev
|
|
42
|
+
Requires-Dist: pytest-asyncio>=0.23.0; extra == 'dev'
|
|
43
|
+
Requires-Dist: pytest>=8.0.0; extra == 'dev'
|
|
44
|
+
Requires-Dist: ruff>=0.4.0; extra == 'dev'
|
|
45
|
+
Provides-Extra: llm
|
|
46
|
+
Requires-Dist: odgs-llm-bridge>=0.1.0; extra == 'llm'
|
|
47
|
+
Description-Content-Type: text/markdown
|
|
48
|
+
|
|
49
|
+
# Open Data Governance Standard (ODGS) — MCP Server
|
|
50
|
+
|
|
51
|
+
> **Runtime governance enforcement for any AI agent.**
|
|
52
|
+
|
|
53
|
+
[-0055AA)](https://platform.metricprovenance.com)
|
|
54
|
+
[](https://modelcontextprotocol.io/)
|
|
55
|
+
[](https://www.python.org/downloads/)
|
|
56
|
+
[](LICENSE)
|
|
57
|
+
|
|
58
|
+
---
|
|
59
|
+
|
|
60
|
+
> **For engineers:** See [Quick Start](#quick-start) below.
|
|
61
|
+
> **For compliance, legal, or procurement teams:** Your organisation may already be running ODGS.
|
|
62
|
+
> [Request a technical partner briefing →](https://platform.metricprovenance.com#partner-enquiry)
|
|
63
|
+
> **Consulting or platform partner?** See [PARTNERS.md](PARTNERS.md) for the commercial model.
|
|
64
|
+
|
|
65
|
+
---
|
|
66
|
+
|
|
67
|
+
|
|
68
|
+
## Why ODGS MCP?
|
|
69
|
+
|
|
70
|
+
Every AI agent that touches regulated data needs a compliance conscience. ODGS provides the industry's only open standard that produces **cryptographic audit certificates (S-Certs)** — machine-verifiable proof that governance rules were evaluated at runtime.
|
|
71
|
+
|
|
72
|
+
This server puts that enforcement capability inside any AI agent's tool context, bridging the deterministic governance engine with probabilistic AI agents.
|
|
73
|
+
|
|
74
|
+
## Features
|
|
75
|
+
|
|
76
|
+
- **Runtime Validation:** Validate data payloads against sovereign governance rules in real-time.
|
|
77
|
+
- **Flint Bridge Integration (Enterprise):** Allow your agent to harvest, extract, and auto-mint sovereign rules from enterprise catalogs.
|
|
78
|
+
- **LLM Bridge (Pro):** Compile raw legal text (EU AI Act, DORA, GDPR) into enforceable machine rules.
|
|
79
|
+
- **Drift & Conflict Detection:** Automatically detect semantic drift in governance definitions and resolve regulatory contradictions.
|
|
80
|
+
- **Audit Narratives:** Convert cryptic S-Certs into human-readable compliance reports.
|
|
81
|
+
|
|
82
|
+
## Quick Start
|
|
83
|
+
|
|
84
|
+
```bash
|
|
85
|
+
# Core validation capabilities
|
|
86
|
+
pip install odgs-mcp-server
|
|
87
|
+
|
|
88
|
+
# Complete installation with LLM bridge capabilities
|
|
89
|
+
pip install "odgs-mcp-server[llm]"
|
|
90
|
+
```
|
|
91
|
+
|
|
92
|
+
### Client Configuration
|
|
93
|
+
|
|
94
|
+
The server operates over standard **stdio transport**, making it instantly compatible with any MCP client.
|
|
95
|
+
|
|
96
|
+
<details>
|
|
97
|
+
<summary><b>Claude Desktop</b></summary>
|
|
98
|
+
|
|
99
|
+
Add to `claude_desktop_config.json`:
|
|
100
|
+
```json
|
|
101
|
+
{
|
|
102
|
+
"mcpServers": {
|
|
103
|
+
"odgs-governance": {
|
|
104
|
+
"command": "odgs-mcp-server",
|
|
105
|
+
"args": ["--transport", "stdio"],
|
|
106
|
+
"env": {
|
|
107
|
+
"ODGS_PROJECT_ROOT": "/path/to/your/odgs/project"
|
|
108
|
+
}
|
|
109
|
+
}
|
|
110
|
+
}
|
|
111
|
+
}
|
|
112
|
+
```
|
|
113
|
+
</details>
|
|
114
|
+
|
|
115
|
+
<details>
|
|
116
|
+
<summary><b>Cursor</b></summary>
|
|
117
|
+
|
|
118
|
+
Add to `.cursor/mcp.json`:
|
|
119
|
+
```json
|
|
120
|
+
{
|
|
121
|
+
"mcpServers": {
|
|
122
|
+
"odgs-governance": {
|
|
123
|
+
"command": "odgs-mcp-server",
|
|
124
|
+
"args": ["--transport", "stdio"],
|
|
125
|
+
"env": {
|
|
126
|
+
"ODGS_PROJECT_ROOT": "/path/to/your/odgs/project"
|
|
127
|
+
}
|
|
128
|
+
}
|
|
129
|
+
}
|
|
130
|
+
}
|
|
131
|
+
```
|
|
132
|
+
</details>
|
|
133
|
+
|
|
134
|
+
### Pro & Enterprise Authentication
|
|
135
|
+
|
|
136
|
+
To unlock regulatory compilation, certified packs, and catalog synchronization, provide your ODGS API key:
|
|
137
|
+
|
|
138
|
+
```json
|
|
139
|
+
"env": {
|
|
140
|
+
"ODGS_API_KEY": "sk-odgs-...",
|
|
141
|
+
"ODGS_PROJECT_ROOT": "/path/to/your/odgs/project"
|
|
142
|
+
}
|
|
143
|
+
```
|
|
144
|
+
*Get your API key at [platform.metricprovenance.com](https://platform.metricprovenance.com).*
|
|
145
|
+
|
|
146
|
+
---
|
|
147
|
+
|
|
148
|
+
## Tools Reference
|
|
149
|
+
|
|
150
|
+
### Community (Free)
|
|
151
|
+
| Tool | Description |
|
|
152
|
+
|:---|:---|
|
|
153
|
+
| `validate_payload` | Validate data against ODGS governance rules, produce S-Cert |
|
|
154
|
+
| `validate_batch` | Validate multiple payloads in one call |
|
|
155
|
+
| `list_packs` | List available Certified Regulation Packs |
|
|
156
|
+
| `governance_score` | Score governance maturity (0-100) across 4 categories |
|
|
157
|
+
| `conformance_check` | Run ODGS conformance self-check (L1/L2) |
|
|
158
|
+
|
|
159
|
+
### Professional (API Key Required)
|
|
160
|
+
| Tool | Description |
|
|
161
|
+
|:---|:---|
|
|
162
|
+
| `download_pack` | Download and cache certified regulatory rule packs locally |
|
|
163
|
+
| `compile_regulation` | Convert regulation text → validated ODGS rule JSON |
|
|
164
|
+
| `check_drift` | Detect semantic drift in governance definitions |
|
|
165
|
+
| `detect_conflicts` | Find contradictions between regulatory rules |
|
|
166
|
+
| `narrate_audit` | Convert S-Cert → human-readable narrative |
|
|
167
|
+
| `discover_bindings` | Auto-generate physical data mappings from catalogs |
|
|
168
|
+
|
|
169
|
+
### Enterprise (API Key Required)
|
|
170
|
+
| Tool | Description |
|
|
171
|
+
|:---|:---|
|
|
172
|
+
| `harvest_sovereign_rules` | (Flint Bridge) Automatically extract and mint rules from data stores |
|
|
173
|
+
| `sync_catalog` | Pull metadata from Databricks / Snowflake / Collibra |
|
|
174
|
+
|
|
175
|
+
---
|
|
176
|
+
|
|
177
|
+
## Architecture
|
|
178
|
+
|
|
179
|
+
The ODGS MCP Server is designed for **zero-trust, local-first execution**. All data validation happens strictly on your machine. No sensitive data leaves your perimeter.
|
|
180
|
+
|
|
181
|
+
```mermaid
|
|
182
|
+
flowchart TB
|
|
183
|
+
Agent[AI Agent\nClaude/Cursor/Custom]
|
|
184
|
+
|
|
185
|
+
subgraph "ODGS MCP Server"
|
|
186
|
+
Auth[AuthGate]
|
|
187
|
+
Val[OdgsInterceptor v6]
|
|
188
|
+
LLM[OdgsLlmBridge]
|
|
189
|
+
Flint[Flint Bridge]
|
|
190
|
+
end
|
|
191
|
+
|
|
192
|
+
Reg[(ODGS S-Cert Registry)]
|
|
193
|
+
Project[(Local ODGS Project)]
|
|
194
|
+
|
|
195
|
+
Agent -- "JSON-RPC (stdio)" --> Auth
|
|
196
|
+
Auth -- "Validate Key (HTTPS, cached 24h)" --> Reg
|
|
197
|
+
Auth --> Val
|
|
198
|
+
Auth --> LLM
|
|
199
|
+
Auth --> Flint
|
|
200
|
+
|
|
201
|
+
Val -- "Reads Rules" --> Project
|
|
202
|
+
Val -- "Generates" --> SCert[S-Cert]
|
|
203
|
+
|
|
204
|
+
LLM -- "Compiles Regulations" --> Project
|
|
205
|
+
Flint -- "Harvests Sovereign Rules" --> Project
|
|
206
|
+
```
|
|
207
|
+
|
|
208
|
+
---
|
|
209
|
+
|
|
210
|
+
## Certified Regulation Packs
|
|
211
|
+
|
|
212
|
+
Pre-built, cryptographically signed rule bundles for immediate compliance enforcement:
|
|
213
|
+
|
|
214
|
+
| Pack | Regulation | Status |
|
|
215
|
+
|:---|:---|:---|
|
|
216
|
+
| **EU AI Act** | Regulation (EU) 2024/1689 | ✅ Certified |
|
|
217
|
+
| **DORA** | Digital Operational Resilience Act | ✅ Certified |
|
|
218
|
+
| **GDPR** | General Data Protection Regulation | ✅ Certified |
|
|
219
|
+
| **CSRD** | Corporate Sustainability Reporting Directive | ✅ Certified |
|
|
220
|
+
| **NIS2** | Network and Information Security Directive | ✅ Certified |
|
|
221
|
+
| **Basel III** | Banking Regulation | ✅ Certified |
|
|
222
|
+
|
|
223
|
+
*Full catalog of 15+ packs available via [platform.metricprovenance.com](https://platform.metricprovenance.com). For pricing and enterprise licensing, contact [partner@metricprovenance.com](mailto:partner@metricprovenance.com).*
|
|
224
|
+
|
|
225
|
+
---
|
|
226
|
+
|
|
227
|
+
## Environment Variables
|
|
228
|
+
|
|
229
|
+
| Variable | Description | Default |
|
|
230
|
+
|:---|:---|:---|
|
|
231
|
+
| `ODGS_PROJECT_ROOT` | Path to ODGS governance definitions | Current directory |
|
|
232
|
+
| `ODGS_API_KEY` | API key for Professional/Enterprise access | None (community) |
|
|
233
|
+
| `ODGS_REGISTRY_URL` | Registry endpoint for key validation | `https://registry.metricprovenance.com` |
|
|
234
|
+
| `ODGS_CACHE_DIR` | Local cache for downloaded packs | `~/.odgs/cache` |
|
|
235
|
+
|
|
236
|
+
---
|
|
237
|
+
|
|
238
|
+
## About ODGS
|
|
239
|
+
|
|
240
|
+
The Open Data Governance Standard is a sovereign enforcement protocol that validates data operations against governance rules at runtime — not retroactively. It produces cryptographic S-Certs (Sovereign Certificates) that serve as machine-verifiable audit trails.
|
|
241
|
+
|
|
242
|
+
- [ODGS Documentation](https://metricprovenance.com)
|
|
243
|
+
- [ODGS on PyPI](https://pypi.org/project/odgs/)
|
|
244
|
+
- [Research Paper (SSRN)](https://papers.ssrn.com/abstract=6205478)
|
|
245
|
+
- [Partner Platform](https://platform.metricprovenance.com)
|
|
246
|
+
|
|
247
|
+
## License
|
|
248
|
+
|
|
249
|
+
Apache 2.0 — see [LICENSE](LICENSE).
|
|
250
|
+
|
|
251
|
+
The ODGS engine and MCP server are open source. Certified Regulation Packs are commercially licensed.
|
|
@@ -0,0 +1,203 @@
|
|
|
1
|
+
# Open Data Governance Standard (ODGS) — MCP Server
|
|
2
|
+
|
|
3
|
+
> **Runtime governance enforcement for any AI agent.**
|
|
4
|
+
|
|
5
|
+
[-0055AA)](https://platform.metricprovenance.com)
|
|
6
|
+
[](https://modelcontextprotocol.io/)
|
|
7
|
+
[](https://www.python.org/downloads/)
|
|
8
|
+
[](LICENSE)
|
|
9
|
+
|
|
10
|
+
---
|
|
11
|
+
|
|
12
|
+
> **For engineers:** See [Quick Start](#quick-start) below.
|
|
13
|
+
> **For compliance, legal, or procurement teams:** Your organisation may already be running ODGS.
|
|
14
|
+
> [Request a technical partner briefing →](https://platform.metricprovenance.com#partner-enquiry)
|
|
15
|
+
> **Consulting or platform partner?** See [PARTNERS.md](PARTNERS.md) for the commercial model.
|
|
16
|
+
|
|
17
|
+
---
|
|
18
|
+
|
|
19
|
+
|
|
20
|
+
## Why ODGS MCP?
|
|
21
|
+
|
|
22
|
+
Every AI agent that touches regulated data needs a compliance conscience. ODGS provides the industry's only open standard that produces **cryptographic audit certificates (S-Certs)** — machine-verifiable proof that governance rules were evaluated at runtime.
|
|
23
|
+
|
|
24
|
+
This server puts that enforcement capability inside any AI agent's tool context, bridging the deterministic governance engine with probabilistic AI agents.
|
|
25
|
+
|
|
26
|
+
## Features
|
|
27
|
+
|
|
28
|
+
- **Runtime Validation:** Validate data payloads against sovereign governance rules in real-time.
|
|
29
|
+
- **Flint Bridge Integration (Enterprise):** Allow your agent to harvest, extract, and auto-mint sovereign rules from enterprise catalogs.
|
|
30
|
+
- **LLM Bridge (Pro):** Compile raw legal text (EU AI Act, DORA, GDPR) into enforceable machine rules.
|
|
31
|
+
- **Drift & Conflict Detection:** Automatically detect semantic drift in governance definitions and resolve regulatory contradictions.
|
|
32
|
+
- **Audit Narratives:** Convert cryptic S-Certs into human-readable compliance reports.
|
|
33
|
+
|
|
34
|
+
## Quick Start
|
|
35
|
+
|
|
36
|
+
```bash
|
|
37
|
+
# Core validation capabilities
|
|
38
|
+
pip install odgs-mcp-server
|
|
39
|
+
|
|
40
|
+
# Complete installation with LLM bridge capabilities
|
|
41
|
+
pip install "odgs-mcp-server[llm]"
|
|
42
|
+
```
|
|
43
|
+
|
|
44
|
+
### Client Configuration
|
|
45
|
+
|
|
46
|
+
The server operates over standard **stdio transport**, making it instantly compatible with any MCP client.
|
|
47
|
+
|
|
48
|
+
<details>
|
|
49
|
+
<summary><b>Claude Desktop</b></summary>
|
|
50
|
+
|
|
51
|
+
Add to `claude_desktop_config.json`:
|
|
52
|
+
```json
|
|
53
|
+
{
|
|
54
|
+
"mcpServers": {
|
|
55
|
+
"odgs-governance": {
|
|
56
|
+
"command": "odgs-mcp-server",
|
|
57
|
+
"args": ["--transport", "stdio"],
|
|
58
|
+
"env": {
|
|
59
|
+
"ODGS_PROJECT_ROOT": "/path/to/your/odgs/project"
|
|
60
|
+
}
|
|
61
|
+
}
|
|
62
|
+
}
|
|
63
|
+
}
|
|
64
|
+
```
|
|
65
|
+
</details>
|
|
66
|
+
|
|
67
|
+
<details>
|
|
68
|
+
<summary><b>Cursor</b></summary>
|
|
69
|
+
|
|
70
|
+
Add to `.cursor/mcp.json`:
|
|
71
|
+
```json
|
|
72
|
+
{
|
|
73
|
+
"mcpServers": {
|
|
74
|
+
"odgs-governance": {
|
|
75
|
+
"command": "odgs-mcp-server",
|
|
76
|
+
"args": ["--transport", "stdio"],
|
|
77
|
+
"env": {
|
|
78
|
+
"ODGS_PROJECT_ROOT": "/path/to/your/odgs/project"
|
|
79
|
+
}
|
|
80
|
+
}
|
|
81
|
+
}
|
|
82
|
+
}
|
|
83
|
+
```
|
|
84
|
+
</details>
|
|
85
|
+
|
|
86
|
+
### Pro & Enterprise Authentication
|
|
87
|
+
|
|
88
|
+
To unlock regulatory compilation, certified packs, and catalog synchronization, provide your ODGS API key:
|
|
89
|
+
|
|
90
|
+
```json
|
|
91
|
+
"env": {
|
|
92
|
+
"ODGS_API_KEY": "sk-odgs-...",
|
|
93
|
+
"ODGS_PROJECT_ROOT": "/path/to/your/odgs/project"
|
|
94
|
+
}
|
|
95
|
+
```
|
|
96
|
+
*Get your API key at [platform.metricprovenance.com](https://platform.metricprovenance.com).*
|
|
97
|
+
|
|
98
|
+
---
|
|
99
|
+
|
|
100
|
+
## Tools Reference
|
|
101
|
+
|
|
102
|
+
### Community (Free)
|
|
103
|
+
| Tool | Description |
|
|
104
|
+
|:---|:---|
|
|
105
|
+
| `validate_payload` | Validate data against ODGS governance rules, produce S-Cert |
|
|
106
|
+
| `validate_batch` | Validate multiple payloads in one call |
|
|
107
|
+
| `list_packs` | List available Certified Regulation Packs |
|
|
108
|
+
| `governance_score` | Score governance maturity (0-100) across 4 categories |
|
|
109
|
+
| `conformance_check` | Run ODGS conformance self-check (L1/L2) |
|
|
110
|
+
|
|
111
|
+
### Professional (API Key Required)
|
|
112
|
+
| Tool | Description |
|
|
113
|
+
|:---|:---|
|
|
114
|
+
| `download_pack` | Download and cache certified regulatory rule packs locally |
|
|
115
|
+
| `compile_regulation` | Convert regulation text → validated ODGS rule JSON |
|
|
116
|
+
| `check_drift` | Detect semantic drift in governance definitions |
|
|
117
|
+
| `detect_conflicts` | Find contradictions between regulatory rules |
|
|
118
|
+
| `narrate_audit` | Convert S-Cert → human-readable narrative |
|
|
119
|
+
| `discover_bindings` | Auto-generate physical data mappings from catalogs |
|
|
120
|
+
|
|
121
|
+
### Enterprise (API Key Required)
|
|
122
|
+
| Tool | Description |
|
|
123
|
+
|:---|:---|
|
|
124
|
+
| `harvest_sovereign_rules` | (Flint Bridge) Automatically extract and mint rules from data stores |
|
|
125
|
+
| `sync_catalog` | Pull metadata from Databricks / Snowflake / Collibra |
|
|
126
|
+
|
|
127
|
+
---
|
|
128
|
+
|
|
129
|
+
## Architecture
|
|
130
|
+
|
|
131
|
+
The ODGS MCP Server is designed for **zero-trust, local-first execution**. All data validation happens strictly on your machine. No sensitive data leaves your perimeter.
|
|
132
|
+
|
|
133
|
+
```mermaid
|
|
134
|
+
flowchart TB
|
|
135
|
+
Agent[AI Agent\nClaude/Cursor/Custom]
|
|
136
|
+
|
|
137
|
+
subgraph "ODGS MCP Server"
|
|
138
|
+
Auth[AuthGate]
|
|
139
|
+
Val[OdgsInterceptor v6]
|
|
140
|
+
LLM[OdgsLlmBridge]
|
|
141
|
+
Flint[Flint Bridge]
|
|
142
|
+
end
|
|
143
|
+
|
|
144
|
+
Reg[(ODGS S-Cert Registry)]
|
|
145
|
+
Project[(Local ODGS Project)]
|
|
146
|
+
|
|
147
|
+
Agent -- "JSON-RPC (stdio)" --> Auth
|
|
148
|
+
Auth -- "Validate Key (HTTPS, cached 24h)" --> Reg
|
|
149
|
+
Auth --> Val
|
|
150
|
+
Auth --> LLM
|
|
151
|
+
Auth --> Flint
|
|
152
|
+
|
|
153
|
+
Val -- "Reads Rules" --> Project
|
|
154
|
+
Val -- "Generates" --> SCert[S-Cert]
|
|
155
|
+
|
|
156
|
+
LLM -- "Compiles Regulations" --> Project
|
|
157
|
+
Flint -- "Harvests Sovereign Rules" --> Project
|
|
158
|
+
```
|
|
159
|
+
|
|
160
|
+
---
|
|
161
|
+
|
|
162
|
+
## Certified Regulation Packs
|
|
163
|
+
|
|
164
|
+
Pre-built, cryptographically signed rule bundles for immediate compliance enforcement:
|
|
165
|
+
|
|
166
|
+
| Pack | Regulation | Status |
|
|
167
|
+
|:---|:---|:---|
|
|
168
|
+
| **EU AI Act** | Regulation (EU) 2024/1689 | ✅ Certified |
|
|
169
|
+
| **DORA** | Digital Operational Resilience Act | ✅ Certified |
|
|
170
|
+
| **GDPR** | General Data Protection Regulation | ✅ Certified |
|
|
171
|
+
| **CSRD** | Corporate Sustainability Reporting Directive | ✅ Certified |
|
|
172
|
+
| **NIS2** | Network and Information Security Directive | ✅ Certified |
|
|
173
|
+
| **Basel III** | Banking Regulation | ✅ Certified |
|
|
174
|
+
|
|
175
|
+
*Full catalog of 15+ packs available via [platform.metricprovenance.com](https://platform.metricprovenance.com). For pricing and enterprise licensing, contact [partner@metricprovenance.com](mailto:partner@metricprovenance.com).*
|
|
176
|
+
|
|
177
|
+
---
|
|
178
|
+
|
|
179
|
+
## Environment Variables
|
|
180
|
+
|
|
181
|
+
| Variable | Description | Default |
|
|
182
|
+
|:---|:---|:---|
|
|
183
|
+
| `ODGS_PROJECT_ROOT` | Path to ODGS governance definitions | Current directory |
|
|
184
|
+
| `ODGS_API_KEY` | API key for Professional/Enterprise access | None (community) |
|
|
185
|
+
| `ODGS_REGISTRY_URL` | Registry endpoint for key validation | `https://registry.metricprovenance.com` |
|
|
186
|
+
| `ODGS_CACHE_DIR` | Local cache for downloaded packs | `~/.odgs/cache` |
|
|
187
|
+
|
|
188
|
+
---
|
|
189
|
+
|
|
190
|
+
## About ODGS
|
|
191
|
+
|
|
192
|
+
The Open Data Governance Standard is a sovereign enforcement protocol that validates data operations against governance rules at runtime — not retroactively. It produces cryptographic S-Certs (Sovereign Certificates) that serve as machine-verifiable audit trails.
|
|
193
|
+
|
|
194
|
+
- [ODGS Documentation](https://metricprovenance.com)
|
|
195
|
+
- [ODGS on PyPI](https://pypi.org/project/odgs/)
|
|
196
|
+
- [Research Paper (SSRN)](https://papers.ssrn.com/abstract=6205478)
|
|
197
|
+
- [Partner Platform](https://platform.metricprovenance.com)
|
|
198
|
+
|
|
199
|
+
## License
|
|
200
|
+
|
|
201
|
+
Apache 2.0 — see [LICENSE](LICENSE).
|
|
202
|
+
|
|
203
|
+
The ODGS engine and MCP server are open source. Certified Regulation Packs are commercially licensed.
|
|
@@ -0,0 +1,53 @@
|
|
|
1
|
+
import os
|
|
2
|
+
import json
|
|
3
|
+
import logging
|
|
4
|
+
from pprint import pprint
|
|
5
|
+
|
|
6
|
+
# Set up env for MCP Server configuration
|
|
7
|
+
os.environ["ODGS_API_KEY"] = "sk-test-enterprise-123"
|
|
8
|
+
os.environ["ODGS_REGISTRY_URL"] = "http://127.0.0.1:8080"
|
|
9
|
+
os.environ["ODGS_PROJECT_ROOT"] = "/Users/kartik/Code/open-data-governance-protocol/odgs-v5"
|
|
10
|
+
|
|
11
|
+
logging.basicConfig(level=logging.INFO)
|
|
12
|
+
logger = logging.getLogger("e2e_test")
|
|
13
|
+
|
|
14
|
+
def main():
|
|
15
|
+
logger.info("Starting S-Cert end-to-end flow test")
|
|
16
|
+
|
|
17
|
+
# 1. Initialize AuthGate (which should validate with our mock registry)
|
|
18
|
+
from odgs_mcp_server.auth import AuthGate
|
|
19
|
+
from odgs_mcp_server.config import ServerConfig
|
|
20
|
+
|
|
21
|
+
cfg = ServerConfig.from_env()
|
|
22
|
+
auth = AuthGate(
|
|
23
|
+
api_key=cfg.api_key,
|
|
24
|
+
registry_url=cfg.registry_url,
|
|
25
|
+
cache_dir=cfg.cache_dir
|
|
26
|
+
)
|
|
27
|
+
|
|
28
|
+
logger.info(f"API Key Tier resolved as: {auth.tier}")
|
|
29
|
+
assert auth.tier == "enterprise", f"Expected enterprise tier, got {auth.tier}"
|
|
30
|
+
|
|
31
|
+
# 2. Download a Pack
|
|
32
|
+
from odgs_mcp_server.tools.packs import download_pack
|
|
33
|
+
logger.info("Downloading sample-pack via MCP tool...")
|
|
34
|
+
dl_result = download_pack(
|
|
35
|
+
pack_id="sample-pack",
|
|
36
|
+
registry_url=cfg.registry_url,
|
|
37
|
+
cache_dir=cfg.cache_dir,
|
|
38
|
+
api_key=auth.api_key
|
|
39
|
+
)
|
|
40
|
+
logger.info(f"Download Result: {json.dumps(dl_result, indent=2)}")
|
|
41
|
+
assert dl_result.get("success"), "Pack download failed"
|
|
42
|
+
|
|
43
|
+
# 3. List Packs (should show it installed)
|
|
44
|
+
from odgs_mcp_server.tools.packs import list_packs
|
|
45
|
+
logger.info("Listing packs to ensure sample-pack is installed...")
|
|
46
|
+
packs_result = list_packs(project_root=cfg.project_root, cache_dir=cfg.cache_dir)
|
|
47
|
+
sample_installed = any(p["id"] == "sample-pack" and p["installed"] for p in packs_result["packs"])
|
|
48
|
+
logger.info(f"sample-pack installed: {sample_installed}")
|
|
49
|
+
|
|
50
|
+
logger.info("E2E Test Completed Successfully!")
|
|
51
|
+
|
|
52
|
+
if __name__ == "__main__":
|
|
53
|
+
main()
|