io.github.levelsofself/nervous-system
Governance for LLM agents: 7 enforced rules + read-only reference tools. Safe in any MCP client.
Install
Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).
mcp-nervous-systemclaude mcp add nervous-system -- npx -y mcp-nervous-system@1.12.1
{
"mcpServers": {
"nervous-system": {
"command": "npx",
"args": [
"-y",
"mcp-nervous-system@1.12.1"
]
}
}
}
Documentation
From the project's README on GitHub, refreshed weekly. Links open on GitHub.
Contents
Nervous System
Deterministic governance lint for MCP server configurations, plus reference tooling for the 7 rules.
What each tool actually does
| Tool | Does real work? |
|---|---|
audit_mcp_config | Yes. Deterministic lint, zero dependencies, fully offline, never throws. Checks inline secrets in env, shell wrappers, unpinned packages, auto-install flags, broad filesystem scopes, non-TLS remote transports, unpinned docker tags. Returns findings with severities and a 0-100 score. |
check_preflight | Yes, when configured. Reads protected_files_list from nervous-system.config.json or NERVOUS_SYSTEM_PROTECTED_LIST. With no list it says so rather than guessing. If the list is unreadable it FAILS CLOSED. |
get_* (everything else) | No. They return text: the framework, templates, instructions. That is why they are named get_. |
Install
npx mcp-nervous-system
Free local tool: audit_mcp_config
Pass your config as config (object) or config_json (string), e.g. the contents of
claude_desktop_config.json. Returns findings with severities and a 0-100 score.
Hosted API (pay-per-call, x402, USDC on Base)
The write-capable toolset runs server-side and is not in this package.
POST https://api.100levelup.com/x402/audit-mcp- governance lint ($0.05 USDC)GET https://api.100levelup.com/x402/verify-audit- audit-chain verification ($0.005 USDC)
Discovery: /openapi.json and /llms.txt.
2.0.0 breaking changes
emergency_kill_switch->get_kill_switch_instructions. It never stopped anything.verify_audit_chain->get_audit_verification_instructions. It never verified a chain.dispatch_to_llm->get_dispatch_command. It never dispatched.check_preflightno longer matches hardcoded filenames from the author's own server. It reads your list.- Hardcoded fleet counts and violation totals removed from
get_origin_story. A number baked into a package is a fossil the moment it ships.
License
MIT
Frequently asked questions
What is io.github.levelsofself/nervous-system?
Governance for LLM agents: 7 enforced rules + read-only reference tools. Safe in any MCP client.
How do I install io.github.levelsofself/nervous-system?
It runs on your machine. In Claude Code: claude mcp add nervous-system -- npx -y mcp-nervous-system@1.12.1. For other clients, paste the JSON configuration from this page into their MCP settings.
Does io.github.levelsofself/nervous-system need an API key?
Its registry entry lists no required key or secret. Some features may still need an account with the service it connects to.
Is io.github.levelsofself/nervous-system open source?
Yes. Its code is on GitHub under the MIT license.
Who maintains io.github.levelsofself/nervous-system?
It is published by levelsofself. AI.tn lists it but does not maintain or endorse it.
From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.