@governancehq/mcp

MCP (Model Context Protocol) server for GaaS — Governance as a Service.

Gives Claude Code, Claude Desktop, and any MCP client direct access to the GaaS governance pipeline: submit intents, check decisions, query signed audit records, and validate .gaas/ governance files.

Setup

Claude Code

claude mcp add gaas --env GAAS_API_KEY=gsk_your_key -- npx -y @governancehq/mcp

Claude Desktop / .mcp.json

{
  "mcpServers": {
    "gaas": {
      "type": "stdio",
      "command": "npx",
      "args": ["-y", "@governancehq/mcp"],
      "env": {
        "GAAS_API_URL": "https://api.gaas.is",
        "GAAS_API_KEY": "gsk_your_key"
      }
    }
  }
}

Environment

| Variable | Default | Purpose | |-------------------|------------------------|-------------------------------| | GAAS_API_KEY | — (required) | GaaS API key (gsk_...) | | GAAS_API_URL | https://api.gaas.is | GaaS API base URL | | GAAS_TIMEOUT_MS | 30000 | HTTP timeout for API calls |

Tools

| Tool | What it does | API | |------|--------------|-----| | gaas_submit_intent | Submit a governance intent, get the decision (APPROVE / ESCALATE / BLOCK) with risk assessment and signed proof token. mode=shadow evaluates without enforcement. | POST /v1/intents | | gaas_check_decision | Fetch the decision for an intent ID (poll after ESCALATE). | GET /v1/intents/{id}/decision | | gaas_query_audit | Fetch the full signed audit record: pipeline stages, policy evaluations, hash-chain position. | GET /v1/intents/{id}/audit | | gaas_validate_governance_files | Dry-run .gaas/ bundle validation against the authmd spec. Never mutates. | POST /v1/governance-files/validate |

No write-side policy tools: applying governance bundles from an LLM session is the wrong trust direction. Use the API, CLI, or CI Action to apply.

Resources

• governance://current — the org's applied governance-file bundle + drift
• governance://policy-packs — policy registry packs available to the org
• governance://spec — pointer to the authmd spec (github.com/H2OmAI/authmd)

HTTP mode

For shared/remote deployment, run a stateless Streamable HTTP endpoint instead of stdio:

GAAS_API_KEY=gsk_... npx -y @governancehq/mcp --http --port 3917
# MCP endpoint: POST http://localhost:3917/mcp

Links

• Docs: https://gaas.to/sdks.html
• Spec: https://gaas.to/spec.html
• GaaS: https://gaas.is