English Français العربية

ThinkNEO Control Plane

Official registry Security

Enterprise AI Control Plane: governance, guardrails, spend tracking, compliance & smart routing.

Source code Website Documentation

Install

Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).

Remote (streamable-http)
Claude Code 
claude mcp add --transport http thinkneo-control-plane 'https://mcp.thinkneo.ai/mcp'
JSON configuration (Claude Desktop, Cursor, VS Code) 
{
    "mcpServers": {
        "thinkneo-control-plane": {
            "type": "http",
            "url": "https://mcp.thinkneo.ai/mcp"
        }
    }
}

Documentation

From the project's README on GitHub, refreshed weekly. Links open on GitHub.

Contents
  1. ThinkNEO MCP Server
  2. What This Is
  3. What This Is Not
  4. Why Open
  5. Architecture
  6. Quickstart
  7. Components
  8. MCP Spec Compliance
  9. Ecosystem
  10. Security
  11. Contributing
  12. Related
  13. License
  14. About

ThinkNEO MCP Server

Open MCP server with built-in defense layer (ThinkShield). Part of the ThinkNEO Platform — enterprise AI governance.

What This Is

An open-source MCP server providing 72 tools for AI governance, observability, and security:

  • ThinkShield — Production defense layer: detection engine, 5 rule packs, runtime middleware. 145 tests, p99 < 1ms.
  • 72 MCP Tools — Governance, guardrails, FinOps, smart routing, observability, compliance, outcome validation, and more.
  • 24 A2A Skills — Bidirectional MCP-A2A bridge for Google's Agent-to-Agent Protocol (v0.3.0, Linux Foundation).
  • Apache-2.0 — Use it, fork it, contribute.

What This Is Not

  • Not the full ThinkNEO Platform. Governance orchestration, cryptographic audit chain, tenant management, and enterprise integrations are proprietary and run at thinkneo.ai.
  • Not a standalone security product. ThinkShield is the defense component of a larger governed platform.

Why Open

We open-source our defense layer because real security doesn't depend on hidden rules — it depends on tested, audited, continuously improved detection plus a strong governance moat around it.

Snort. Suricata. Falco. OWASP CRS. The security industry runs on open detection. We follow that tradition.

The detection is open. The governance is proprietary. That's where the moat is.

Architecture

                        Open Source (this repo)                    Proprietary (thinkneo.ai)
                   ┌─────────────────────────────────┐     ┌──────────────────────────────────┐
                   │                                 │     │                                  │
  MCP Clients ────>│  72 MCP Tools                   │     │  Governance Orchestration         │
  (Claude, Cursor, │  ├── Guardrails & Safety        │────>│  ├── Policy Engine (AIRGP)        │
   ChatGPT, etc.)  │  ├── FinOps & Smart Routing     │     │  ├── Cryptographic Audit Chain    │
                   │  ├── Observability              │     │  ├── Tenant Management            │
  A2A Agents ─────>│  ├── Compliance & Validation    │     │  ├── Enterprise Integrations      │
  (Google A2A)     │  └── MCP-A2A Bridge (24 skills) │     │  └── SLA & Support                │
                   │                                 │     │                                  │
                   │  ThinkShield Defense Layer       │     │  SHA-256 Hash Chain (949K+ rows)  │
                   │  ├── Detection Engine            │     │  Stripe Billing                   │
                   │  ├── 5 Rule Packs               │     │  Resend Email                     │
                   │  └── ASGI Middleware             │     │  Multi-tenant Auth                │
                   │                                 │     │                                  │
                   └─────────────────────────────────┘     └──────────────────────────────────┘
                          Apache-2.0 License                      Commercial License

Quickstart

# Clone
git clone https://github.com/thinkneo-ai/mcp-server.git
cd mcp-server

# Install
pip install -r requirements.txt

# Run
python -m uvicorn src.server:app --host 0.0.0.0 --port 8081

# Test
python -m pytest tests/ -q

Or with Docker:

cd deploy
docker compose up -d

Connect from Claude Desktop, Cursor, or any MCP client:

https://mcp.thinkneo.ai/mcp

Free tier: 500 calls/month, auto-provisioned API key. All 72 tools available.

Components

DirectoryDescriptionLicense
src/tools/72 MCP tools — governance, security, FinOps, observabilityApache-2.0
src/thinkshield/Defense layer — detection engine, 5 rule packsApache-2.0
tests/thinkshield/ThinkShield test suite — 145 tests + attack/benign fixturesApache-2.0
agent.jsonA2A Agent Card — 24 skills bridged from MCPApache-2.0
ThinkShield Rule Packs
PackDetects
injectionSQL injection, XSS, command injection, path traversal
authCredential stuffing, brute force, token replay, privilege escalation
abuseRate abuse, resource exhaustion, API scraping
reconPath probing, tool enumeration, method probing, fingerprinting
headersHeader anomalies, spoofing, missing security headers
MCP Tools (72)

Governance (6) | Guardrails (3) | FinOps (4) | Smart Router (4) | Trust Score (2) | Registry (5) | Bridge (4) | Observability (5) | Business Value (6) | A2A Control (4) | Optimization (1) | Outcome Validation (4) | Policy Engine (4) | Benchmarking (3) | Compliance (2) | Agent SLA (4) | Audit Export (3) | Cache (3) | Security (5) | Tokens (1) | Memory (2) | Scheduling (1) | Alerts (1)

Full tool reference: docs/quickstart.md

MCP Spec Compliance

Complete Model Context Protocol 2024-11-05 implementation. Forward-compatible with MCP 2025-03-26.

CapabilityStatusDetails
tools72 tools, full annotationsdestructiveHint, readOnlyHint, idempotentHint, openWorldHint
resources2 resourcesGetting Started guide, Supported Providers
prompts2 prompts with completionsgovernance_audit, policy_preflight
logginglogging/setLevel8 levels, per-session, audit trail
completionscompletion/completeworkspace (auth-scoped), provider, model (provider-aware)

Ecosystem

This repo is part of the ThinkNEO ecosystem:

ProjectDescription
ThinkNEO PlatformEnterprise AI governance platform
AIRGPAI Runtime Governance Protocol — open standard
A2ASTCA2A Security & Trust Conformance
ThinkNEO SMB HubBusiness applications for SMBs
Robotics GovernanceRobot fleet governance dashboard

Security

See SECURITY.md for vulnerability reporting.

Contributing

See CONTRIBUTING.md.

ServerDescriptionTools
thinkneo-control-planeEnterprise AI Control Plane (this repo)72 tools
thinkneo-mcp-smb-productsSMB standalone products — self-serve via TNC credits37 tools

License

Apache-2.0 — see LICENSE.

About

ThinkNEO AI Technology Co., Ltd. — Hong Kong CR No. 2296774.

Built by the team behind the ThinkNEO Enterprise AI Control Plane, AIRGP protocol, and A2ASTC conformance suite.

NVIDIA Inception | Anthropic Partner | Linux Foundation A2A

Frequently asked questions

What is ThinkNEO Control Plane?

Enterprise AI Control Plane: governance, guardrails, spend tracking, compliance & smart routing.

How do I install ThinkNEO Control Plane?

It runs as a remote server. In Claude Code: claude mcp add --transport http thinkneo-control-plane 'https://mcp.thinkneo.ai/mcp'. For other clients, paste the JSON configuration from this page into their MCP settings.

Does ThinkNEO Control Plane need an API key?

Its registry entry lists no required key or secret. Some features may still need an account with the service it connects to.

Is ThinkNEO Control Plane open source?

Yes. Its code is on GitHub under the Apache-2.0 license.

Who maintains ThinkNEO Control Plane?

It is published by thinkneo-ai. AI.tn lists it but does not maintain or endorse it.

From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.