English Français العربية

ThoughtProof

السجل الرسمي السحابة وDevOps

Pre-action gate: verify before pay/trade/write/deploy. execute=true only on ALLOW.

الشيفرة المصدرية الموقع التوثيق

التثبيت

أضف هذا إلى إعدادات MCP في عميلك (Claude Desktop: claude_desktop_config.json، وCursor: ‏.cursor/mcp.json، ويستخدم VS Code وغيره الصيغة نفسها «mcpServers»).

NPM package thoughtproof-mcp
Claude Code 
claude mcp add thoughtproof -e 'DQL_API_KEY=<your dql_api_key>' -e 'SENTINEL_API_KEY=<your sentinel_api_key>' -e 'THOUGHTPROOF_API_KEY=<your thoughtproof_api_key>' -- npx -y thoughtproof-mcp@0.3.2
إعداد JSON (Claude Desktop وCursor وVS Code) 
{
    "mcpServers": {
        "thoughtproof": {
            "command": "npx",
            "args": [
                "-y",
                "thoughtproof-mcp@0.3.2"
            ],
            "env": {
                "DQL_API_KEY": "<your dql_api_key>",
                "SENTINEL_API_KEY": "<your sentinel_api_key>",
                "THOUGHTPROOF_API_KEY": "<your thoughtproof_api_key>"
            }
        }
    }
}

متغيرات البيئة

  • DQL_API_KEY سري Required for DQL-backed verify_decision calls. Sentinel and RV paths use their respective keys.
  • SENTINEL_API_KEY سري Optional; needed when mode=sentinel or auto-route picks Sentinel.
  • THOUGHTPROOF_API_KEY سري Optional operator key for verify_claim / verify_trade / Sentinel fallback.

التوثيق

مأخوذ من ملف README للمشروع على GitHub ويُحدَّث أسبوعيًا. تفتح الروابط على GitHub.

المحتويات
  1. thoughtproof-mcp
  2. Quick Start
  3. Tools
  4. Configuration
  5. Development
  6. Security
  7. Related
  8. License

thoughtproof-mcp

thoughtproof-mcp — local stdio. Hero tool verify_decision (DQL spend / Sentinel irreversible exit). execute is true only on ALLOW.

MCP server for ThoughtProof — pre-execution decision verification for AI agents.

Hero tool: verify_decision. It routes inside the tool to DQL (spend / checkout) or Sentinel (irreversible exit) and returns a fail-closed execute flag. execute is true only on a native ALLOW.

This package is a local stdio MCP server (Node 18+) for Desktop / CLI hosts such as Cursor, Claude Desktop, Windsurf, and Cline. It is not a remote HTTP MCP server. It is not a Grok Web/Mobile custom connector.

Get keys at https://app.thoughtproof.ai/pricing.

Unpublished work is documented in UNRELEASED.md.

Quick Start

{
  "mcpServers": {
    "thoughtproof": {
      "command": "npx",
      "args": ["-y", "thoughtproof-mcp@0.3.2"],
      "env": {
        "DQL_API_KEY": "<YOUR_DQL_VERIFY_KEY>"
      }
    }
  }
}

Install with npx -y thoughtproof-mcp@0.3.2. Works with Claude Desktop, Cursor, Windsurf, Cline, and other local stdio MCP clients.

Tools

verify_before_action / verify_decision (hero)

verify_before_action is an alias of verify_decision (identical schema + handler). Soft fail-closed: host must honor execute=false.

Pre-execution gate for a proposed action. Routing is inside the tool — not an agent quiz.

ParameterTypeDefaultDescription
mandatestring(required)User's stated goal / instruction
proposed_actionstring(required)What the agent is about to do
reasoningstring(required)The agent's own plan / reasoning
contextstring(optional)Extra evidence
modedql / sentinel / autoautoExplicit surface, or auto-route

Auto-route: spend / checkout / booking / purchase / payment / cart / Stripe / price / budget / cap → DQL. High-blast irreversible exit without that language (publish, delete, deploy, send-to-prod, memory write) → Sentinel. Unsure → DQL. Explicit mode wins. RV / PLV are not on this path.

Camera mandate: do not put the overshoot in proposed_action or reasoning (for example, do not write “price is above the cap”). The verifier has to find the mismatch.

Envelope (always this shape):

{
  "verdict": "ALLOW",
  "execute": true,
  "objections": [],
  "receipt_id": "dql_…",
  "surface": "dql",
  "axes": [],
  "recommendation": "execute"
}

execute is true only on ALLOW. REVIEW, UNCERTAIN, BLOCK, timeouts, HTTP 402/4xx/5xx, and missing keys return execute: false. Fail-closed is soft at the protocol layer — the tool does not hard-stop the host. Replan is a new call (new receipt).

verify_claim

Verify any claim or AI-generated reasoning via RV (POST /v1/check). Unchanged.

ParameterTypeDefaultDescription
claimstring(required)The text to verify
stakeLevellow / medium / high / criticalmediumRisk level — higher stakes trigger deeper verification
domainfinancial / medical / legal / code / generalgeneralDomain context for specialized verification
speedfast / standard / deepstandardVerification depth
check_agent_score

Look up an agent's composite trust score on the ERC-8004 registry.

ParameterTypeDescription
agentIdstringAgent ID to look up
domainstringOptional domain filter
verify_trade

Optional pre-execution gate for trading agents (Sentinel → RV). Not the default verify_decision path. See VERIFY_TRADE.md.

Configuration

Environment VariableDefaultDescription
DQL_API_KEY(none)DQL key (dqlk_…) for the default verify_decision path. Alias: THOUGHTPROOF_DQL_KEY
SENTINEL_API_KEY(none)Optional. Required only when mode=sentinel or auto-route picks Sentinel. Fallback: THOUGHTPROOF_API_KEY as X-Sentinel-Key
DQL_SANDBOX(off)Set to 1 to send sandbox: true on DQL calls (local/dev only)
THOUGHTPROOF_API_KEY(none)Operator key for verify_claim / verify_trade / Sentinel fallback
THOUGHTPROOF_BASE_URLhttps://api.thoughtproof.aiRV API base URL (verify_claim)

A missing Sentinel key returns execute: false with “Sentinel key not configured” — it does not silently call DQL.

Development

git clone https://github.com/ThoughtProof/thoughtproof-mcp.git
cd thoughtproof-mcp
npm install
npm run build
npm test
npm run dev          # Run with tsx (hot reload)
npm run inspect      # Test with MCP Inspector

For local MCP clients, point command at node and args at dist/index.js after npm run build.

Security

See SECURITY.md for supported versions, private reporting (security@thoughtproof.ai), and key handling (dqlk_… for MCP hero — never commit real keys).

HOL listing / Guard scanner score is a review baseline only. It is not next-action authorization and not a substitute for fail-closed host behavior (execute: true only on ALLOW).

  • ThoughtProof — Decision verification for AI agents
  • pot-cli — CLI for reasoning verification
  • ERC-8004 — Autonomous Agent Registry

License

MIT — ThoughtProof

الأسئلة الشائعة

ما هو ThoughtProof؟

Pre-action gate: verify before pay/trade/write/deploy. execute=true only on ALLOW.

كيف أثبّت ThoughtProof؟

يعمل على جهازك. في Claude Code: claude mcp add thoughtproof -e 'DQL_API_KEY=<your dql_api_key>' -e 'SENTINEL_API_KEY=<your sentinel_api_key>' -e 'THOUGHTPROOF_API_KEY=<your thoughtproof_api_key>' -- npx -y thoughtproof-mcp@0.3.2. وفي العملاء الآخرين، الصق إعداد JSON من هذه الصفحة في إعدادات MCP الخاصة بهم.

هل يحتاج ThoughtProof إلى مفتاح API؟

نعم. يتطلب DQL_API_KEY, SENTINEL_API_KEY, THOUGHTPROOF_API_KEY، وتضبطها في إعداداته.

هل ThoughtProof مفتوح المصدر؟

نعم. شيفرته متاحة على GitHub بترخيص MIT.

من يصون ThoughtProof؟

ينشره ThoughtProof. يدرجه AI.tn لكنه لا يصونه ولا يوصي به.

من سجل MCP الرسمي. الإدراج ليس توصية: راجع شيفرة الخادم وصلاحياته قبل منحه الوصول إلى بياناتك.