dingdawg-shield

Name: dingdawg-shield
Author: dingdawg

Local

github.com/dingdawgSecurity1Updated 12w ago

Repository

About dingdawg-shield

dingdawg-shield is part of DingDawg’s governed-agent service, aimed at developers who need records of AI agent activity. It issues cryptographically signed receipts and provides compliance classification, trust scores, and audit features.

Key features

01Signed receipts for agent actions
02Governed execution routing
03Compliance classification and regulation lookup
04Trust scores and live stream
05API key signup and metering

Use cases

01Keep records of agent decisions and actions
02Look up regulations and classify compliance
03Monitor agent trust scores

Configuration

Local server config is the same for every client. Copy it into your client’s MCP config file.

mcp.json · Universal config

{
  "mcpServers": {
    "dingdawg-dingdawg-shield": {
      "command": "npx",
      "args": [
        "-y",
        "dingdawg-shield"
      ],
      "env": {
        "DINGDAWG_API_KEY": "<DINGDAWG_API_KEY>"
      }
    }
  }
}

Run commandnpx -y dingdawg-shield

Environment variables to set

DINGDAWG_API_KEYSecretAPI key for paid tier access — get free at dingdawg.com

Local servers need a runtime on your machine (e.g. Node.js 18+). Config file locations differ by client; see your client’s docs.

Packages

npmdingdawg-shield1.0.4stdio

Tools

Saved tool list · updated 2w ago

Parameter	Type	Required	Description
language	string	No	Programming language (python, typescript, javascript, etc.)
scan_depth	enum	No	Scan depth — quick (free), standard (API), deep (API)quick \| standard \| deep
code_snippet	string	Yes	Code or system description to scan for AI security vulnerabilities

Details

From the project README

DingDawg Agent 1

Governance receipts for AI agents.

Every action a governed agent takes generates a cryptographically-signed receipt: what it decided, why, which model, which version, at what time. Built toward EU AI Act Art. 12, Colorado AI Act (SB 24-205), and NIST AI RMF requirements.

The receipt is what turns a policy document into evidence.

What's live today

Capability	Endpoint
Developer signup — issues a scoped API key	`POST /v1/developers/signup`
Governed execution — routes agent calls through metering + audit	`POST /v1/govern/execute`
Compliance classification	`POST /api/v1/compliance/classify`
Regulation lookup	`GET /api/v1/compliance/regulations`
Agent trust score + live stream	`GET /api/v1/agents/{id}/trust`, `WS .../trust/stream`
Billing (Stripe)	`POST /api/v1/payments/create-checkout-session`

Backed by 10 governed-agent npm packages (compliance, legal, healthcare, finance, devops, marketing, sales, support, code-review, planning).

Quickstart

curl -X POST https://api.dingdawg.com/v1/developers/signup \
  -H "Content-Type: application/json" \
  -d '{"email":"[email protected]","name":"Your Name","role":"consumer"}'
# -> {"api_key": "dd_...", ...}  store it — shown once

export DINGDAWG_API_KEY=dd_your_key
npx dingdawg-compliance quick-check

Architecture

Client (npm package / your agent) --auth: DINGDAWG_API_KEY-->
  api.dingdawg.com (FastAPI, Railway)
    -> Tier isolation + rate limiting
    -> Governance gate (score, log, decide)
    -> Audit trail (signed receipt)
    -> Stripe metering / billing
  -> Response (governed, scored, receipted)

Documentation

Contributing

See CONTRIBUTING.md for contribution guidelines.

Security

See SECURITY.md for our responsible disclosure policy.

License

MIT License. See LICENSE for details.

Innovative Systems Global. The name is not aspirational. It is a statement of fact.

Comments

Markdown supported

New to MCP?

From what the protocol is to installing your first server, these answers cover most first questions.

Read the getting-started guide

An open protocol that defines how AI applications connect to external tools and data in a uniform way. Clients talk to the model; MCP servers provide tools, resources and prompt templates. They exchange standard messages, so one server can be reused by many clients.