Palveron MCP Server

Registre officiel Sécurité

Early access - AI governance gateway for MCP tool calls (policies, PII masking, audit).

Installation

Ajoutez ceci à la configuration MCP de votre client (Claude Desktop : claude_desktop_config.json ; Cursor : .cursor/mcp.json ; VS Code et les autres utilisent la même forme « mcpServers »).

NPM package @palveron/mcp-server
Claude Code
claude mcp add palveron-mcp-server -- npx -y @palveron/mcp-server@1.0.1
Configuration JSON (Claude Desktop, Cursor, VS Code)
{
    "mcpServers": {
        "palveron-mcp-server": {
            "command": "npx",
            "args": [
                "-y",
                "@palveron/mcp-server@1.0.1"
            ]
        }
    }
}

Documentation

Tirée du README du projet sur GitHub, actualisée chaque semaine. Les liens ouvrent GitHub.

Sommaire
  1. @palveron/mcp-server
  2. Advisory check vs. enforced governance — which one do you need?
  3. Installation
  4. Quick Start
  5. Tools exposed via MCP
  6. Configuration
  7. Requirements
  8. Links
  9. License

@palveron/mcp-server

Official Palveron MCP server — advisory AI-governance checks for MCP hosts and coding agents


⚡ Early access. Palveron is launching soon and access is currently invite-gated. This server is fully functional — you just need a pv_live_ key, which comes with an Early Access invite. Join the waitlist → palveron.com/early-access

Give your MCP-capable client — Claude Code, Cursor, any other MCP host — governance tools it can call before executing an action: policy verdicts, PII-masking results, and an audit trace for every check, all from the Palveron AI Governance Gateway.

  • Drop-in MCP server — one binary, configure your MCP host, you're done
  • Advisory governance verdicts — the gateway decides allow / mask / deny / hold; the agent (or your wrapping code) acts on the verdict
  • Audit trail per check — trace IDs flow back to the Palveron dashboard
  • Built on @palveron/sdk — retry, circuit breaker, typed errors out of the box

Advisory check vs. enforced governance — which one do you need?

This package is the advisory path. It cannot physically stop a tool call: it answers the question "is this allowed?", and the calling agent (or your code via check()/wrap()) is expected to honor the answer. That is by design — it works with any MCP host, needs no network topology change, and gives you verdicts plus audit traces immediately.

Enforced, non-bypassable governance for MCP tool calls is a different product surface: the Palveron remote MCP proxy. There you register the target MCP server in the Palveron dashboard and point your IDE at POST {gateway}/api/v1/mcp/proxy/{server_id} instead of the target — every tools/call then structurally passes through policy checks, approval holds, and drift detection before it can reach the target server. No cooperation from the agent required.

This package (@palveron/mcp-server)Remote MCP proxy
ModelVoluntary pre-flight checkIn-path enforcement
Can a call bypass it?Yes — enforcement depends on the caller honoring the verdictNo — the proxy sits between client and target server
Setupnpx, one env varRegister the target server in the dashboard, point the IDE at the proxy URL
Use it whenYou want verdicts + audit traces inside any MCP host, or wrap tool calls programmaticallyYou need governance that agents cannot skip

See the MCP setup guide for the enforced path.

Installation

npm install -g @palveron/mcp-server
# or use directly via npx
npx @palveron/mcp-server

Quick Start

The pv_live_… key in the examples below requires an Early Access invite — request one here. Once you have a key, everything works out of the box.

Claude Code

Add to your claude_desktop_config.json:

{
  "mcpServers": {
    "palveron": {
      "command": "npx",
      "args": ["@palveron/mcp-server"],
      "env": {
        "PALVERON_API_KEY": "pv_live_xxx",
        "PALVERON_BASE_URL": "https://gateway.palveron.com"
      }
    }
  }
}
Other MCP hosts

Any MCP-capable host can launch the server via the palveron-mcp binary:

PALVERON_API_KEY=pv_live_xxx palveron-mcp

Tools exposed via MCP

ToolPurpose
palveron_checkCheck a tool call against governance policies before execution. Returns the decision (PASSED, BLOCKED, MODIFIED/REDACTED/ANONYMIZED with the sanitized input, PENDING_APPROVAL, …), whether the call may proceed, findings, and the audit trace ID.
palveron_statusGovernance status and diagnostics — gateway connectivity, circuit-breaker state, configured local lists.
palveron_policy_listList the project's active policies so the host can explain its decisions.

Configuration

The server reads its configuration from environment variables. The MCP host sets them; you never put secrets in code.

VariableRequiredDescription
PALVERON_API_KEYyesAPI key (pv_live_…) — comes with an Early Access invite
PALVERON_BASE_URLnoOverride the gateway endpoint (default: https://gateway.palveron.com)
PALVERON_FAIL_OPENnotrue = allow tool calls when the gateway is unreachable (default: false, fail-closed)
PALVERON_LOG_LEVELnodebug / info / warn / error / silent (default: info)
PALVERON_ALWAYS_BLOCKnoComma-separated tool names that are always denied locally, without a gateway call
PALVERON_ALWAYS_ALLOWnoComma-separated tool names that always pass locally, without a gateway call

Requirements

  • Node.js 18 or newer
  • An MCP-capable client (Claude Code 0.4+, Cursor, etc.)

License

MIT — Copyright © 2026 Palveron.

Questions fréquentes

Qu'est-ce que Palveron MCP Server ?

Early access - AI governance gateway for MCP tool calls (policies, PII masking, audit).

Comment installer Palveron MCP Server ?

Il s'exécute sur votre machine. Dans Claude Code : claude mcp add palveron-mcp-server -- npx -y @palveron/mcp-server@1.0.1. Pour les autres clients, collez la configuration JSON de cette page dans leurs réglages MCP.

Faut-il une clé API pour Palveron MCP Server ?

Son entrée au registre n'indique aucune clé ni secret obligatoire. Certaines fonctions peuvent tout de même demander un compte auprès du service auquel il se connecte.

Palveron MCP Server est-il open source ?

Oui. Son code est sur GitHub sous licence MIT.

Qui maintient Palveron MCP Server ?

Il est publié par palveron. AI.tn le référence sans le maintenir ni le recommander.

Issu du registre MCP officiel. Être listé n'est pas une recommandation : vérifiez le code et les permissions d'un serveur avant de lui donner accès à vos données.