English Français العربية

ThoughtProof

Official registry Cloud and DevOps

Pre-action gate: verify before pay/trade/write/deploy. execute=true only on ALLOW.

Source code Website Documentation

Install

Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).

NPM package thoughtproof-mcp
Claude Code 
claude mcp add thoughtproof -e 'DQL_API_KEY=<your dql_api_key>' -e 'SENTINEL_API_KEY=<your sentinel_api_key>' -e 'THOUGHTPROOF_API_KEY=<your thoughtproof_api_key>' -- npx -y thoughtproof-mcp@0.3.2
JSON configuration (Claude Desktop, Cursor, VS Code) 
{
    "mcpServers": {
        "thoughtproof": {
            "command": "npx",
            "args": [
                "-y",
                "thoughtproof-mcp@0.3.2"
            ],
            "env": {
                "DQL_API_KEY": "<your dql_api_key>",
                "SENTINEL_API_KEY": "<your sentinel_api_key>",
                "THOUGHTPROOF_API_KEY": "<your thoughtproof_api_key>"
            }
        }
    }
}

Environment variables

  • DQL_API_KEY secret Required for DQL-backed verify_decision calls. Sentinel and RV paths use their respective keys.
  • SENTINEL_API_KEY secret Optional; needed when mode=sentinel or auto-route picks Sentinel.
  • THOUGHTPROOF_API_KEY secret Optional operator key for verify_claim / verify_trade / Sentinel fallback.

Documentation

From the project's README on GitHub, refreshed weekly. Links open on GitHub.

Contents
  1. thoughtproof-mcp
  2. Quick Start
  3. Tools
  4. Configuration
  5. Development
  6. Security
  7. Related
  8. License

thoughtproof-mcp

thoughtproof-mcp — local stdio. Hero tool verify_decision (DQL spend / Sentinel irreversible exit). execute is true only on ALLOW.

MCP server for ThoughtProof — pre-execution decision verification for AI agents.

Hero tool: verify_decision. It routes inside the tool to DQL (spend / checkout) or Sentinel (irreversible exit) and returns a fail-closed execute flag. execute is true only on a native ALLOW.

This package is a local stdio MCP server (Node 18+) for Desktop / CLI hosts such as Cursor, Claude Desktop, Windsurf, and Cline. It is not a remote HTTP MCP server. It is not a Grok Web/Mobile custom connector.

Get keys at https://app.thoughtproof.ai/pricing.

Unpublished work is documented in UNRELEASED.md.

Quick Start

{
  "mcpServers": {
    "thoughtproof": {
      "command": "npx",
      "args": ["-y", "thoughtproof-mcp@0.3.2"],
      "env": {
        "DQL_API_KEY": "<YOUR_DQL_VERIFY_KEY>"
      }
    }
  }
}

Install with npx -y thoughtproof-mcp@0.3.2. Works with Claude Desktop, Cursor, Windsurf, Cline, and other local stdio MCP clients.

Tools

verify_before_action / verify_decision (hero)

verify_before_action is an alias of verify_decision (identical schema + handler). Soft fail-closed: host must honor execute=false.

Pre-execution gate for a proposed action. Routing is inside the tool — not an agent quiz.

ParameterTypeDefaultDescription
mandatestring(required)User's stated goal / instruction
proposed_actionstring(required)What the agent is about to do
reasoningstring(required)The agent's own plan / reasoning
contextstring(optional)Extra evidence
modedql / sentinel / autoautoExplicit surface, or auto-route

Auto-route: spend / checkout / booking / purchase / payment / cart / Stripe / price / budget / cap → DQL. High-blast irreversible exit without that language (publish, delete, deploy, send-to-prod, memory write) → Sentinel. Unsure → DQL. Explicit mode wins. RV / PLV are not on this path.

Camera mandate: do not put the overshoot in proposed_action or reasoning (for example, do not write “price is above the cap”). The verifier has to find the mismatch.

Envelope (always this shape):

{
  "verdict": "ALLOW",
  "execute": true,
  "objections": [],
  "receipt_id": "dql_…",
  "surface": "dql",
  "axes": [],
  "recommendation": "execute"
}

execute is true only on ALLOW. REVIEW, UNCERTAIN, BLOCK, timeouts, HTTP 402/4xx/5xx, and missing keys return execute: false. Fail-closed is soft at the protocol layer — the tool does not hard-stop the host. Replan is a new call (new receipt).

verify_claim

Verify any claim or AI-generated reasoning via RV (POST /v1/check). Unchanged.

ParameterTypeDefaultDescription
claimstring(required)The text to verify
stakeLevellow / medium / high / criticalmediumRisk level — higher stakes trigger deeper verification
domainfinancial / medical / legal / code / generalgeneralDomain context for specialized verification
speedfast / standard / deepstandardVerification depth
check_agent_score

Look up an agent's composite trust score on the ERC-8004 registry.

ParameterTypeDescription
agentIdstringAgent ID to look up
domainstringOptional domain filter
verify_trade

Optional pre-execution gate for trading agents (Sentinel → RV). Not the default verify_decision path. See VERIFY_TRADE.md.

Configuration

Environment VariableDefaultDescription
DQL_API_KEY(none)DQL key (dqlk_…) for the default verify_decision path. Alias: THOUGHTPROOF_DQL_KEY
SENTINEL_API_KEY(none)Optional. Required only when mode=sentinel or auto-route picks Sentinel. Fallback: THOUGHTPROOF_API_KEY as X-Sentinel-Key
DQL_SANDBOX(off)Set to 1 to send sandbox: true on DQL calls (local/dev only)
THOUGHTPROOF_API_KEY(none)Operator key for verify_claim / verify_trade / Sentinel fallback
THOUGHTPROOF_BASE_URLhttps://api.thoughtproof.aiRV API base URL (verify_claim)

A missing Sentinel key returns execute: false with “Sentinel key not configured” — it does not silently call DQL.

Development

git clone https://github.com/ThoughtProof/thoughtproof-mcp.git
cd thoughtproof-mcp
npm install
npm run build
npm test
npm run dev          # Run with tsx (hot reload)
npm run inspect      # Test with MCP Inspector

For local MCP clients, point command at node and args at dist/index.js after npm run build.

Security

See SECURITY.md for supported versions, private reporting (security@thoughtproof.ai), and key handling (dqlk_… for MCP hero — never commit real keys).

HOL listing / Guard scanner score is a review baseline only. It is not next-action authorization and not a substitute for fail-closed host behavior (execute: true only on ALLOW).

  • ThoughtProof — Decision verification for AI agents
  • pot-cli — CLI for reasoning verification
  • ERC-8004 — Autonomous Agent Registry

License

MIT — ThoughtProof

Frequently asked questions

What is ThoughtProof?

Pre-action gate: verify before pay/trade/write/deploy. execute=true only on ALLOW.

How do I install ThoughtProof?

It runs on your machine. In Claude Code: claude mcp add thoughtproof -e 'DQL_API_KEY=<your dql_api_key>' -e 'SENTINEL_API_KEY=<your sentinel_api_key>' -e 'THOUGHTPROOF_API_KEY=<your thoughtproof_api_key>' -- npx -y thoughtproof-mcp@0.3.2. For other clients, paste the JSON configuration from this page into their MCP settings.

Does ThoughtProof need an API key?

Yes. It expects DQL_API_KEY, SENTINEL_API_KEY, THOUGHTPROOF_API_KEY, which you set in its configuration.

Is ThoughtProof open source?

Yes. Its code is on GitHub under the MIT license.

Who maintains ThoughtProof?

It is published by ThoughtProof. AI.tn lists it but does not maintain or endorse it.

From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.