check-mcp

This is a thin wrapper. The one location for Check (install, hook mode, MCP, CLI, and the HTTP contract) is check.golproductions.com · golproductions/check. Integrate from there.

MCP server for Check, a command firewall for AI agents. Validates every shell command before execution. One round trip to the edge. Runnable or invalid.

A free key is minted automatically on first run. No signup, no key to paste.

Install

Cursor

// .cursor/mcp.json
{
  "mcpServers": {
    "Check": {
      "command": "npx",
      "args": ["@golproductions/check-mcp"]
    }
  }
}

Windsurf

// .windsurf/mcp.json
{
  "mcpServers": {
    "Check": {
      "command": "npx",
      "args": ["@golproductions/check-mcp"]
    }
  }
}

Claude Desktop

// claude_desktop_config.json
{
  "mcpServers": {
    "Check": {
      "command": "npx",
      "args": ["@golproductions/check-mcp"]
    }
  }
}

VS Code

// .vscode/mcp.json
{
  "servers": {
    "Check": {
      "type": "stdio",
      "command": "npx",
      "args": ["@golproductions/check-mcp"]
    }
  }
}

Cline

// cline_mcp_settings.json
{
  "mcpServers": {
    "Check": {
      "command": "npx",
      "args": ["@golproductions/check-mcp"]
    }
  }
}

Any other MCP client

Point it at the same command: npx @golproductions/check-mcp. Stdio transport, no other setup.

The server activates a free key on first run. To reuse an existing Client ID across machines, add it under env:

"env": { "GOL_CLIENT_ID": "your_key" }

Claude Code

For Claude Code, use the installer instead, it wires up the hook that validates every command automatically:

npx @golproductions/check --install

Tools

Check

Validate a command. Returns RUNNABLE or INVALID.

Input:  { "command": "kubectl rollout restart deployment/api" }
Output: Verdict: RUNNABLE

CheckAndExecute

Validate then run. Invalid commands are blocked before they touch the shell.

Input:  { "command": "kubectl rollout restart deployment/api" }
Output: (command output)

How it works

1. Checks locally if the binary is installed on your machine
2. If not installed, instant block, no API call, no cost
3. If installed, validates syntax and targets via the Check API
4. Returns the verdict in one network round trip

Pricing

120 free checks every day. After that, $0.0068 AUD per check. No subscriptions. Credits never expire.

License

Proprietary. See LICENSE.