English Français العربية

io.github.dingdawg/dingdawg-governance

Official registry Security

Universal governance layer for AI agents. MCP-native, fail-closed, audit proofs and rollback.

Source code Documentation

Install

Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).

NPM package dingdawg-governance
Claude Code 
claude mcp add dingdawg-governance -e 'DINGDAWG_API_KEY=<your dingdawg_api_key>' -- npx -y dingdawg-governance@2.1.6
JSON configuration (Claude Desktop, Cursor, VS Code) 
{
    "mcpServers": {
        "dingdawg-governance": {
            "command": "npx",
            "args": [
                "-y",
                "dingdawg-governance@2.1.6"
            ],
            "env": {
                "DINGDAWG_API_KEY": "<your dingdawg_api_key>"
            }
        }
    }
}

Environment variables

  • DINGDAWG_API_KEY secret API key for paid tier access — get free at dingdawg.com

Documentation

From the project's README on GitHub, refreshed weekly. Links open on GitHub.

Contents
  1. DingDawg Governance
  2. Install
  3. Quick Start
  4. What You Get
  5. MCP Tools
  6. Plans
  7. Documentation
  8. Contributing

DingDawg Governance

Every AI action receipted. Capability-gated. Rollback-ready.

AI Governance-as-a-Service via MCP. Every write, shell command, and state-changing operation your agent makes is validated before it runs and cryptographically receipted after it completes — giving you a tamper-evident audit trail you can query, export, or roll back at any time.

Works with Claude Code, Codex, Cursor, Windsurf, and any MCP-compatible agent.

Install

npm install dingdawg-governance

Quick Start

# Authenticate (free — no credit card)
npx dingdawg-governance auth login

# Start the governance MCP server
DINGDAWG_API_KEY=your_key npx dingdawg-governance

Add to your MCP client config:

{
  "mcpServers": {
    "dingdawg-governance": {
      "command": "npx",
      "args": ["dingdawg-governance"],
      "env": {
        "DINGDAWG_API_KEY": "your_key_here"
      }
    }
  }
}

Get your free API key at app.dingdawg.com/settings/api.

What You Get

  • Pre-execution validation — Every action checked against your policy before it runs. Blocked actions never touch your filesystem.
  • Cryptographic receipts — Tamper-evident record for every action with a unique ID, output hash, and public verification URL.
  • One-command rollback — Undo any file write by referencing its receipt ID. Prior state is captured automatically before every write.
  • Real-time trust scores — Behavioral pattern tracking across sessions surfaces anomalies before they become incidents.
  • Compliance reports in seconds — SOC 2 and ISO 27001-aligned audit reports as signed PDF or structured JSON. One API call.

MCP Tools

ToolWhat it does
validate_actionPre-execution check. Returns APPROVED, FLAGGED, or BLOCKED with reason code and risk score.
generate_receiptPost-execution cryptographic receipt with tamper-evident output hash.
capture_rollback_stateSnapshot current state before destructive or high-risk operations.
rollback_actionRestore prior state from a receipt ID.
query_receiptsSearch receipts by date, agent, action type, or status. Export-ready.
check_statusCurrent tier, daily usage, quota, and active governance alerts.
generate_audit_reportOn-demand compliance report — SOC 2, ISO 27001, or custom policy framework.

Plans

PlanGoverned actions/dayRollback windowAudit reports
Free200——
Pro — $29/mo10,00030 daysUnlimited
Business — $149/moUnlimited90 daysCompliance PDF

No credit card to start. Full pricing: dingdawg.com/governance#pricing

Documentation

Full docs at dingdawg.com/governance/docs

Contributing

Issues and pull requests welcome. See CONTRIBUTING.md.

github.com/dingdawg/governance-mcp

Built by DingDawg — Trust layer for the agentic internet.

Frequently asked questions

What is io.github.dingdawg/dingdawg-governance?

Universal governance layer for AI agents. MCP-native, fail-closed, audit proofs and rollback.

How do I install io.github.dingdawg/dingdawg-governance?

It runs on your machine. In Claude Code: claude mcp add dingdawg-governance -e 'DINGDAWG_API_KEY=<your dingdawg_api_key>' -- npx -y dingdawg-governance@2.1.6. For other clients, paste the JSON configuration from this page into their MCP settings.

Does io.github.dingdawg/dingdawg-governance need an API key?

Yes. It expects DINGDAWG_API_KEY, which you set in its configuration.

Is io.github.dingdawg/dingdawg-governance open source?

Yes. Its code is on GitHub under the MIT license.

Who maintains io.github.dingdawg/dingdawg-governance?

It is published by dingdawg. AI.tn lists it but does not maintain or endorse it.

From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.