English Français العربية

WhiteBoxXAI

Official registry Cloud and DevOps

AI observability, explainability and governance: drift, fairness, ISO 42001, risk register.

Source code Website Documentation

Install

Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).

Remote (streamable-http)
Claude Code 
claude mcp add --transport http whiteboxxai 'https://api.whiteboxxai.com/mcp/' --header 'Authorization: <Bearer token: your WhiteBoxXAI API key or personal JWT, as '\''Bearer <token>'\''.>'
JSON configuration (Claude Desktop, Cursor, VS Code) 
{
    "mcpServers": {
        "whiteboxxai": {
            "type": "http",
            "url": "https://api.whiteboxxai.com/mcp/",
            "headers": {
                "Authorization": "<Bearer token: your WhiteBoxXAI API key or personal JWT, as 'Bearer <token>'.>"
            }
        }
    }
}
PYPI package whiteboxxai-mcp
Claude Code 
claude mcp add whiteboxxai -e 'WHITEBOXXAI_MCP_API_KEY=<your whiteboxxai_mcp_api_key>' -e 'WHITEBOXXAI_MCP_API_BASE_URL=https://api.whiteboxxai.com' -- uvx whiteboxxai-mcp==0.3.0
JSON configuration (Claude Desktop, Cursor, VS Code) 
{
    "mcpServers": {
        "whiteboxxai": {
            "command": "uvx",
            "args": [
                "whiteboxxai-mcp==0.3.0"
            ],
            "env": {
                "WHITEBOXXAI_MCP_API_KEY": "<your whiteboxxai_mcp_api_key>",
                "WHITEBOXXAI_MCP_API_BASE_URL": "https://api.whiteboxxai.com"
            }
        }
    }
}

Environment variables

  • WHITEBOXXAI_MCP_API_KEY required secret WhiteBoxXAI API key, generated from the dashboard under Settings > API Keys.
  • WHITEBOXXAI_MCP_API_BASE_URL Base URL of your WhiteBoxXAI instance.

Documentation

From the project's README on GitHub, refreshed weekly. Links open on GitHub.

Contents
  1. whiteboxxai-mcp
  2. Install
  3. Run (stdio — local/self-hosted)
  4. Agent skills
  5. Versioning & support
  6. Known v1 limitations
  7. MCP Registry
  8. Development
  9. License

whiteboxxai-mcp

An MCP (Model Context Protocol) server that exposes WhiteBoxXAI observability and explainability capabilities — model registry, Git-backed model diffing, prediction logging, drift detection, bias/fairness auditing, ISO/IEC 42001 readiness and compliance evidence, AI Risk Register / governance review queries, prompt governance, asynchronous SHAP/LIME explanation generation, LLM explainability (attention/token-importance/sensitivity/counterfactual analysis and prompt debugging), LLM call monitoring (token/cost/latency tracking), RAG pipeline monitoring, content safety analysis, alert rules and triage context, alert intelligence, alert management, multi-agent workflow tracking, and model performance metrics (197 tools across 18 domains) — to any MCP-compatible client (Claude Desktop, Claude Code, LangChain, custom agent harnesses, etc.). Supports MCP Apps (ui:// resources) with sandboxed interactive audit cards, stdio transport, and Streamable HTTP transport (hosted at https://api.whiteboxxai.com/mcp/).

See the integration docs for full setup, connection examples, the tool reference, and known v1 limitations. See examples/ for runnable LangChain, Semantic Kernel, and raw-MCP-client integrations.

Install

pip install whiteboxxai-mcp

Run (stdio — local/self-hosted)

Configure a credential via environment variables, then run the console script. Stdio transport authenticates via WHITEBOXXAI_MCP_API_KEY:

# An API key generated from the WhiteBoxXAI dashboard's Settings > API Keys tab.
# Never expires on a fixed schedule -- only when explicitly revoked -- and doesn't require storing a password.
export WHITEBOXXAI_MCP_API_BASE_URL="https://api.whiteboxxai.com"
export WHITEBOXXAI_MCP_API_KEY="wbx_live_..."

whiteboxxai-mcp

Point your MCP client at this command (e.g. in Claude Desktop's mcpServers config, or Claude Code's .mcp.json).

For hosted Streamable HTTP (https://api.whiteboxxai.com/mcp/), pass your API key or personal JWT in the Authorization: Bearer <token> header.

Agent skills

To have a coding agent set this up and call the tools correctly, give it the whitebox-mcp-server skill (and whitebox-governance-rules). They are published at https://whiteboxxai.com/skills/index.md. The tool list they reference is pinned in tests/mcp_inspector_snapshot.json; a rename or removal of a tool shows up as a diff there.

Versioning & support

This package follows Semantic Versioning; see CHANGELOG.md for release history. Self-hosted stdio usage (above) is best-effort supported; the hosted /mcp/ HTTP endpoint is a product surface whose support/SLA follows the caller's underlying Free/Business Cloud plan.

Known v1 limitations

  • Auth: stdio uses WHITEBOXXAI_MCP_API_KEY — a scoped, revocable credential that isn't tied to a human account's password or session lifecycle. Hosted Streamable HTTP (https://api.whiteboxxai.com/mcp/) accepts an API key or personal JWT.
  • Alerts: covers core alert rules and triage context (whitebox_alerts_*), alert intelligence (whitebox_alert_intelligence_*, 20 tools), and alert management (whitebox_alert_management_*, 13 tools).
  • whitebox_agent_workflows_cost_breakdown/_bottlenecks/_timeline: these three can take up to ~30s — the backend blocks server-side on a Celery task before responding, and the SDK client uses an extended (40s) timeout for exactly these calls.
  • Scope: models, predictions, drift, bias/fairness, AI Risk Register / governance queries, prompts, compliance, explanations, LLM explainability, LLM call monitoring, RAG monitoring, content safety, alert intelligence, alert management, multi-agent workflows, and metrics all ship across 18 domains (197 tools total) over both stdio and hosted Streamable HTTP.

MCP Registry

The server is published to the official MCP Registry as io.github.AgentaFlow/whiteboxxai-mcp.

Development

pip install -e ".[dev]"
pytest tests/unit

# MCP Inspector tool-list regression check (needs Node.js); after an intentional
# tool change, regenerate the committed snapshot with --write
python tests/check_mcp_inspector_snapshot.py

Releases are cut from GitHub releases; see RELEASING.md.

License

MIT -- see LICENSE.

Frequently asked questions

What is WhiteBoxXAI?

AI observability, explainability and governance: drift, fairness, ISO 42001, risk register.

How do I install WhiteBoxXAI?

It runs as a remote server. In Claude Code: claude mcp add --transport http whiteboxxai 'https://api.whiteboxxai.com/mcp/' --header 'Authorization: <Bearer token: your WhiteBoxXAI API key or personal JWT, as '\''Bearer <token>'\''.>'. For other clients, paste the JSON configuration from this page into their MCP settings.

Does WhiteBoxXAI need an API key?

Yes. It expects WHITEBOXXAI_MCP_API_KEY, Authorization, which you set in its configuration.

Is WhiteBoxXAI open source?

Yes. Its code is on GitHub under the MIT license.

Who maintains WhiteBoxXAI?

It is published by AgentaFlow. AI.tn lists it but does not maintain or endorse it.

From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.