English Français العربية

ThoughtProof

Registre officiel Cloud et DevOps

Pre-action gate: verify before pay/trade/write/deploy. execute=true only on ALLOW.

Code source Site web Documentation

Installation

Ajoutez ceci à la configuration MCP de votre client (Claude Desktop : claude_desktop_config.json ; Cursor : .cursor/mcp.json ; VS Code et les autres utilisent la même forme « mcpServers »).

NPM package thoughtproof-mcp
Claude Code 
claude mcp add thoughtproof -e 'DQL_API_KEY=<your dql_api_key>' -e 'SENTINEL_API_KEY=<your sentinel_api_key>' -e 'THOUGHTPROOF_API_KEY=<your thoughtproof_api_key>' -- npx -y thoughtproof-mcp@0.3.2
Configuration JSON (Claude Desktop, Cursor, VS Code) 
{
    "mcpServers": {
        "thoughtproof": {
            "command": "npx",
            "args": [
                "-y",
                "thoughtproof-mcp@0.3.2"
            ],
            "env": {
                "DQL_API_KEY": "<your dql_api_key>",
                "SENTINEL_API_KEY": "<your sentinel_api_key>",
                "THOUGHTPROOF_API_KEY": "<your thoughtproof_api_key>"
            }
        }
    }
}

Variables d'environnement

  • DQL_API_KEY secret Required for DQL-backed verify_decision calls. Sentinel and RV paths use their respective keys.
  • SENTINEL_API_KEY secret Optional; needed when mode=sentinel or auto-route picks Sentinel.
  • THOUGHTPROOF_API_KEY secret Optional operator key for verify_claim / verify_trade / Sentinel fallback.

Documentation

Tirée du README du projet sur GitHub, actualisée chaque semaine. Les liens ouvrent GitHub.

Sommaire
  1. thoughtproof-mcp
  2. Quick Start
  3. Tools
  4. Configuration
  5. Development
  6. Security
  7. Related
  8. License

thoughtproof-mcp

thoughtproof-mcp — local stdio. Hero tool verify_decision (DQL spend / Sentinel irreversible exit). execute is true only on ALLOW.

MCP server for ThoughtProof — pre-execution decision verification for AI agents.

Hero tool: verify_decision. It routes inside the tool to DQL (spend / checkout) or Sentinel (irreversible exit) and returns a fail-closed execute flag. execute is true only on a native ALLOW.

This package is a local stdio MCP server (Node 18+) for Desktop / CLI hosts such as Cursor, Claude Desktop, Windsurf, and Cline. It is not a remote HTTP MCP server. It is not a Grok Web/Mobile custom connector.

Get keys at https://app.thoughtproof.ai/pricing.

Unpublished work is documented in UNRELEASED.md.

Quick Start

{
  "mcpServers": {
    "thoughtproof": {
      "command": "npx",
      "args": ["-y", "thoughtproof-mcp@0.3.2"],
      "env": {
        "DQL_API_KEY": "<YOUR_DQL_VERIFY_KEY>"
      }
    }
  }
}

Install with npx -y thoughtproof-mcp@0.3.2. Works with Claude Desktop, Cursor, Windsurf, Cline, and other local stdio MCP clients.

Tools

verify_before_action / verify_decision (hero)

verify_before_action is an alias of verify_decision (identical schema + handler). Soft fail-closed: host must honor execute=false.

Pre-execution gate for a proposed action. Routing is inside the tool — not an agent quiz.

ParameterTypeDefaultDescription
mandatestring(required)User's stated goal / instruction
proposed_actionstring(required)What the agent is about to do
reasoningstring(required)The agent's own plan / reasoning
contextstring(optional)Extra evidence
modedql / sentinel / autoautoExplicit surface, or auto-route

Auto-route: spend / checkout / booking / purchase / payment / cart / Stripe / price / budget / cap → DQL. High-blast irreversible exit without that language (publish, delete, deploy, send-to-prod, memory write) → Sentinel. Unsure → DQL. Explicit mode wins. RV / PLV are not on this path.

Camera mandate: do not put the overshoot in proposed_action or reasoning (for example, do not write “price is above the cap”). The verifier has to find the mismatch.

Envelope (always this shape):

{
  "verdict": "ALLOW",
  "execute": true,
  "objections": [],
  "receipt_id": "dql_…",
  "surface": "dql",
  "axes": [],
  "recommendation": "execute"
}

execute is true only on ALLOW. REVIEW, UNCERTAIN, BLOCK, timeouts, HTTP 402/4xx/5xx, and missing keys return execute: false. Fail-closed is soft at the protocol layer — the tool does not hard-stop the host. Replan is a new call (new receipt).

verify_claim

Verify any claim or AI-generated reasoning via RV (POST /v1/check). Unchanged.

ParameterTypeDefaultDescription
claimstring(required)The text to verify
stakeLevellow / medium / high / criticalmediumRisk level — higher stakes trigger deeper verification
domainfinancial / medical / legal / code / generalgeneralDomain context for specialized verification
speedfast / standard / deepstandardVerification depth
check_agent_score

Look up an agent's composite trust score on the ERC-8004 registry.

ParameterTypeDescription
agentIdstringAgent ID to look up
domainstringOptional domain filter
verify_trade

Optional pre-execution gate for trading agents (Sentinel → RV). Not the default verify_decision path. See VERIFY_TRADE.md.

Configuration

Environment VariableDefaultDescription
DQL_API_KEY(none)DQL key (dqlk_…) for the default verify_decision path. Alias: THOUGHTPROOF_DQL_KEY
SENTINEL_API_KEY(none)Optional. Required only when mode=sentinel or auto-route picks Sentinel. Fallback: THOUGHTPROOF_API_KEY as X-Sentinel-Key
DQL_SANDBOX(off)Set to 1 to send sandbox: true on DQL calls (local/dev only)
THOUGHTPROOF_API_KEY(none)Operator key for verify_claim / verify_trade / Sentinel fallback
THOUGHTPROOF_BASE_URLhttps://api.thoughtproof.aiRV API base URL (verify_claim)

A missing Sentinel key returns execute: false with “Sentinel key not configured” — it does not silently call DQL.

Development

git clone https://github.com/ThoughtProof/thoughtproof-mcp.git
cd thoughtproof-mcp
npm install
npm run build
npm test
npm run dev          # Run with tsx (hot reload)
npm run inspect      # Test with MCP Inspector

For local MCP clients, point command at node and args at dist/index.js after npm run build.

Security

See SECURITY.md for supported versions, private reporting (security@thoughtproof.ai), and key handling (dqlk_… for MCP hero — never commit real keys).

HOL listing / Guard scanner score is a review baseline only. It is not next-action authorization and not a substitute for fail-closed host behavior (execute: true only on ALLOW).

  • ThoughtProof — Decision verification for AI agents
  • pot-cli — CLI for reasoning verification
  • ERC-8004 — Autonomous Agent Registry

License

MIT — ThoughtProof

Questions fréquentes

Qu'est-ce que ThoughtProof ?

Pre-action gate: verify before pay/trade/write/deploy. execute=true only on ALLOW.

Comment installer ThoughtProof ?

Il s'exécute sur votre machine. Dans Claude Code : claude mcp add thoughtproof -e 'DQL_API_KEY=<your dql_api_key>' -e 'SENTINEL_API_KEY=<your sentinel_api_key>' -e 'THOUGHTPROOF_API_KEY=<your thoughtproof_api_key>' -- npx -y thoughtproof-mcp@0.3.2. Pour les autres clients, collez la configuration JSON de cette page dans leurs réglages MCP.

Faut-il une clé API pour ThoughtProof ?

Oui. Il attend DQL_API_KEY, SENTINEL_API_KEY, THOUGHTPROOF_API_KEY, à renseigner dans sa configuration.

ThoughtProof est-il open source ?

Oui. Son code est sur GitHub sous licence MIT.

Qui maintient ThoughtProof ?

Il est publié par ThoughtProof. AI.tn le référence sans le maintenir ni le recommander.

Issu du registre MCP officiel. Être listé n'est pas une recommandation : vérifiez le code et les permissions d'un serveur avant de lui donner accès à vos données.