dingdawg-governance

Name: dingdawg-governance
Author: dingdawg

Local

github.com/dingdawgAI & Agents1Updated 15w ago

Repository

About dingdawg-governance

dingdawg-governance is an MCP-based governance service for teams using AI agents. It checks actions against policy before execution, creates cryptographic receipts, supports rollback, and provides audit reports.

Key features

01Pre-execution policy validation
02Cryptographic action receipts
03Rollback from receipt IDs
04Behavioral trust scores and alerts
05SOC 2 and ISO 27001-aligned reports

Use cases

01Block policy-violating actions before they run
02Undo a file write using its receipt
03Review agent activity and export audit reports

MCP support

The MCP server exposes tools to validate actions, generate and query receipts, capture rollback state, roll back actions, check status, and generate audit reports.

Configuration

Local server config is the same for every client. Copy it into your client’s MCP config file.

mcp.json · Universal config

{
  "mcpServers": {
    "dingdawg-dingdawg-governance": {
      "command": "npx",
      "args": [
        "-y",
        "dingdawg-governance"
      ],
      "env": {
        "DINGDAWG_API_KEY": "<DINGDAWG_API_KEY>"
      }
    }
  }
}

Run commandnpx -y dingdawg-governance

Environment variables to set

DINGDAWG_API_KEYSecretAPI key for paid tier access — get free at dingdawg.com

Local servers need a runtime on your machine (e.g. Node.js 18+). Config file locations differ by client; see your client’s docs.

Packages

npmdingdawg-governance2.1.6stdio

Tools

Saved tool list · updated 2w ago

Parameter	Type	Required	Description
context	object	No	Additional context key-value pairs for policy evaluation
agent_id	string	Yes	Identifier for the AI agent performing the action
risk_tier	enum	No	Self-assessed risk level of this actionlow \| medium \| high \| critical
action_type	string	Yes	Type of action (e.g., 'send_email', 'make_purchase', 'modify_data', 'api_call')
target_resource	string	No	The resource being acted upon (e.g., 'user_database', 'email_server', 'payment_api')
action_description	string	Yes	Human-readable description of what the agent is about to do

Details

From the project README

DingDawg Governance

Every AI action receipted. Capability-gated. Rollback-ready.

AI Governance-as-a-Service via MCP. Every write, shell command, and state-changing operation your agent makes is validated before it runs and cryptographically receipted after it completes — giving you a tamper-evident audit trail you can query, export, or roll back at any time.

Works with Claude Code, Codex, Cursor, Windsurf, and any MCP-compatible agent.

Install

npm install dingdawg-governance

Quick Start

# Authenticate (free — no credit card)
npx dingdawg-governance auth login

# Start the governance MCP server
DINGDAWG_API_KEY=your_key npx dingdawg-governance

Add to your MCP client config:

{
  "mcpServers": {
    "dingdawg-governance": {
      "command": "npx",
      "args": ["dingdawg-governance"],
      "env": {
        "DINGDAWG_API_KEY": "your_key_here"
      }
    }
  }
}

Get your free API key at app.dingdawg.com/settings/api.

What You Get

Pre-execution validation — Every action checked against your policy before it runs. Blocked actions never touch your filesystem.
Cryptographic receipts — Tamper-evident record for every action with a unique ID, output hash, and public verification URL.
One-command rollback — Undo any file write by referencing its receipt ID. Prior state is captured automatically before every write.
Real-time trust scores — Behavioral pattern tracking across sessions surfaces anomalies before they become incidents.
Compliance reports in seconds — SOC 2 and ISO 27001-aligned audit reports as signed PDF or structured JSON. One API call.

MCP Tools

Tool	What it does
`validate_action`	Pre-execution check. Returns `APPROVED`, `FLAGGED`, or `BLOCKED` with reason code and risk score.
`generate_receipt`	Post-execution cryptographic receipt with tamper-evident output hash.
`capture_rollback_state`	Snapshot current state before destructive or high-risk operations.
`rollback_action`	Restore prior state from a receipt ID.
`query_receipts`	Search receipts by date, agent, action type, or status. Export-ready.
`check_status`	Current tier, daily usage, quota, and active governance alerts.
`generate_audit_report`	On-demand compliance report — SOC 2, ISO 27001, or custom policy framework.

Plans

Plan	Governed actions/day	Rollback window	Audit reports
Free	200	—	—
Pro — $29/mo	10,000	30 days	Unlimited
Business — $149/mo	Unlimited	90 days	Compliance PDF

No credit card to start. Full pricing: dingdawg.com/governance#pricing

Documentation

Full docs at dingdawg.com/governance/docs

Contributing

Issues and pull requests welcome. See CONTRIBUTING.md.

github.com/dingdawg/governance-mcp

Built by DingDawg — Trust layer for the agentic internet.

Comments

Markdown supported

New to MCP?

From what the protocol is to installing your first server, these answers cover most first questions.

Read the getting-started guide

An open protocol that defines how AI applications connect to external tools and data in a uniform way. Clients talk to the model; MCP servers provide tools, resources and prompt templates. They exchange standard messages, so one server can be reused by many clients.