English Français العربية

Taplid

Official registry Security

Audit AI responses and artifacts with ALLOW, REVIEW, or BLOCK decisions and trust scores.

Source code Documentation

Install

Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).

NPM package @taplid/mcp
Claude Code 
claude mcp add taplid -e 'TAPLID_API_KEY=<your taplid_api_key>' -e 'TAPLID_API_URL=<TAPLID_API_URL>' -- npx -y @taplid/mcp@1.0.1
JSON configuration (Claude Desktop, Cursor, VS Code) 
{
    "mcpServers": {
        "taplid": {
            "command": "npx",
            "args": [
                "-y",
                "@taplid/mcp@1.0.1"
            ],
            "env": {
                "TAPLID_API_KEY": "<your taplid_api_key>",
                "TAPLID_API_URL": "<TAPLID_API_URL>"
            }
        }
    }
}

Environment variables

  • TAPLID_API_KEY secret Taplid API key. Required for taplid_audit; retrieval and verification do not require an API key.
  • TAPLID_API_URL Optional Taplid API base URL override. Defaults to https://api.taplid.com.

Documentation

From the project's README on GitHub, refreshed weekly. Links open on GitHub.

Contents
  1. Taplid
  2. Start here
  3. What Taplid does
  4. Artifact and schema validation
  5. Packages
  6. Documentation

Taplid

Audit AI outputs and validate structured artifacts before you trust them.

Taplid checks LLM responses, AI code reviews, SQL, Docker, Kubernetes YAML, JSON Schema, API contracts, configs, security rules, and technical review claims against supplied context, schema, code, config, or policy.

Start here

What Taplid does

Taplid has three core operations:

  1. Run an audit
    Run a Standard or Artifact audit against supplied context, schema, code, config, or policy.
  2. Retrieve an audit
    Retrieve a persisted public audit result by auditId.
  3. Verify an audit
    Verify the signed attestation, issuer, signed fields, and result hash for a saved audit.

Artifact and schema validation

Artifact mode works as a schema checker, config validator, SQL schema checker, Docker/Kubernetes checker, API contract validator, and AI code-review verifier.

Use it for:

  • JSON Schema and structured output checks
  • SQL schema and DDL validation
  • Docker, Kubernetes YAML, and Terraform/IaC checks
  • API, HTTP, CORS, and policy contract checks
  • Security, secrets, credentials, and auth-header checks
  • AI code reviews, implementation plans, and agent workflows

Packages

PackagePurpose
@taplid/clientServer-side SDK
@taplid/cliLocal and CI audit checks
@taplid/mcpMCP server for Claude, Cursor, OpenAI-compatible agents, and other MCP clients

Documentation

The full integration guide, code examples, response format, CLI commands, MCP setup, OpenAI-compatible usage, retrieval, and verification examples are maintained here:

https://taplid.com/docs

This README intentionally stays small so the official documentation remains the source of truth.

Frequently asked questions

What is Taplid?

Audit AI responses and artifacts with ALLOW, REVIEW, or BLOCK decisions and trust scores.

How do I install Taplid?

It runs on your machine. In Claude Code: claude mcp add taplid -e 'TAPLID_API_KEY=<your taplid_api_key>' -e 'TAPLID_API_URL=<TAPLID_API_URL>' -- npx -y @taplid/mcp@1.0.1. For other clients, paste the JSON configuration from this page into their MCP settings.

Does Taplid need an API key?

Yes. It expects TAPLID_API_KEY, which you set in its configuration.

Is Taplid open source?

Its code is public on GitHub, but the repository does not declare a standard license.

Who maintains Taplid?

It is published by taplid. AI.tn lists it but does not maintain or endorse it.

From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.