works.mima/governance-mcp

Official registry AI and agents

AI governance evidence for EU AI Act, ISO 42001, SOC 2, and NIST AI RMF.

Install

Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).

NPM package @mima-ai/governance-mcp
Claude Code
claude mcp add governance-mcp -e 'MIMA_API_KEY=<your mima_api_key>' -e 'MIMA_WORKSPACE_ID=<MIMA_WORKSPACE_ID>' -- npx -y @mima-ai/governance-mcp@0.1.13
JSON configuration (Claude Desktop, Cursor, VS Code)
{
    "mcpServers": {
        "governance-mcp": {
            "command": "npx",
            "args": [
                "-y",
                "@mima-ai/governance-mcp@0.1.13"
            ],
            "env": {
                "MIMA_API_KEY": "<your mima_api_key>",
                "MIMA_WORKSPACE_ID": "<MIMA_WORKSPACE_ID>"
            }
        }
    }
}

Environment variables

  • MIMA_API_KEY required secret Your Mima API key (mima_ext_...)
  • MIMA_WORKSPACE_ID required Your Mima workspace ID (ws-...)

Documentation

From the project's README on GitHub, refreshed weekly. Links open on GitHub.

Contents
  1. @mima-ai/governance-mcp
  2. Install
  3. 10 tools
  4. Usage — Claude Code
  5. Usage — Cursor / Windsurf
  6. Dry-run support
  7. Four frameworks, one call
  8. Get an API key
  9. Python SDK
  10. Docs

@mima-ai/governance-mcp

MCP server for AI governance — push compliance evidence to Mima from any agent, any stack, 4 lines of config.

One tool call maps to EU AI Act, ISO 42001, SOC 2, and NIST AI RMF simultaneously. Your readiness score updates automatically.

Install

npx @mima-ai/governance-mcp@0.1.13

Or add to your MCP config (always pin the version):

{
  "mcpServers": {
    "mima-governance": {
      "command": "npx",
      "args": ["-y", "@mima-ai/governance-mcp@0.1.13"],
      "env": {
        "MIMA_API_KEY": "mima_ext_...",
        "MIMA_WORKSPACE_ID": "ws-..."
      }
    }
  }
}

10 tools

ToolWhat it does
get_postureOverall readiness score + per-framework breakdown
list_systemsAll AI systems — registered vs unregistered
list_evidenceEvidence records filtered by system and time
dry_run_attestPreview which controls an attestation would earn
attestWrite a GRC evidence record
register_systemRegister an AI system under EU AI Act Art. 9
acknowledge_policyRecord a policy acknowledgment
derive_controlsRecommended evidence types for a system description
check_gatesGate pass/fail status with exit codes
suggest_gatesPrioritised gate recommendations

Usage — Claude Code

Add to ~/.claude/settings.json:

{
  "mcpServers": {
    "mima-governance": {
      "command": "npx",
      "args": ["-y", "@mima-ai/governance-mcp"],
      "env": {
        "MIMA_API_KEY": "mima_ext_...",
        "MIMA_WORKSPACE_ID": "ws-..."
      }
    }
  }
}

Then ask Claude: "Check our compliance posture" or "Register this AI system and suggest which controls we need."

Usage — Cursor / Windsurf

Add to .cursor/mcp.json or .windsurf/mcp.json in your project root:

{
  "mcpServers": {
    "mima-governance": {
      "command": "npx",
      "args": ["-y", "@mima-ai/governance-mcp"],
      "env": {
        "MIMA_API_KEY": "mima_ext_...",
        "MIMA_WORKSPACE_ID": "ws-..."
      }
    }
  }
}

Dry-run support

All write tools support dry-run — preview what controls you'd earn before committing:

dry_run_attest({ record_type: "ai_risk_assessment", system_name: "loan-scorer" })
// → { mapped_controls: ["EUAIA_ART9", "ISO42001_6_1", "NIST_AIRF_MAP_1"] }

Four frameworks, one call

FrameworkWhat it covers
EU AI ActArt. 9–15 risk management, oversight, accuracy obligations
ISO 42001AI management system controls — A.6.x risk, A.9.x performance
SOC 2CC3.x–CC8.x risk, change, and incident management
NIST AI RMFGOVERN, MAP, MEASURE, MANAGE functions

Get an API key

mima.works → sign up → copy your key from the dashboard.

Python SDK

For app-code attestation (decorators, batch pushes, pre-approval gates):

pip install mima-governance

Docs

docs.mima.works

Frequently asked questions

What is works.mima/governance-mcp?

AI governance evidence for EU AI Act, ISO 42001, SOC 2, and NIST AI RMF.

How do I install works.mima/governance-mcp?

It runs on your machine. In Claude Code: claude mcp add governance-mcp -e 'MIMA_API_KEY=<your mima_api_key>' -e 'MIMA_WORKSPACE_ID=<MIMA_WORKSPACE_ID>' -- npx -y @mima-ai/governance-mcp@0.1.13. For other clients, paste the JSON configuration from this page into their MCP settings.

Does works.mima/governance-mcp need an API key?

Yes. It expects MIMA_API_KEY, MIMA_WORKSPACE_ID, which you set in its configuration.

Is works.mima/governance-mcp open source?

Its code is public on GitHub, but the repository does not declare a standard license.

Who maintains works.mima/governance-mcp?

It is published by mimaworks. AI.tn lists it but does not maintain or endorse it.

From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.