MergeGuide MCP Server

Embrace AI velocity — without sacrificing control.

MergeGuide is AI-assisted code governance. This MCP server plugs your organization's security and compliance policy directly into the AI coding assistants your team already uses — Claude Code, Cursor, and GitHub Copilot — so the AI writes compliant code by default, before a line ever lands.

AI is a brilliant, reckless developer: it ships in hours what used to take weeks — and guesses, takes shortcuts, and hallucinates to get there. Your regulations didn't relax because your code got faster, and you're still accountable for what you ship. MergeGuide puts deterministic controls at the moment of generation.

Why at the MCP layer

Most tooling runs after you commit — it tells you what's already wrong. This server moves the control all the way left: it exposes your policy to the assistant as it generates code, so violations are prevented at creation instead of caught in review. Earlier is cheaper, faster, and quieter.

It's one of four graduated enforcement layers — the MergeGuide PolicyMesh: AI assistant (MCP) → IDE → pre-commit hooks → PR gate. Start here to make your assistant policy-aware; add the others as you grow.

Install

npx @mergeguide/mcp-server

Connect your assistant

Add MergeGuide to your assistant's MCP config (e.g. .mcp.json):

{ "mcpServers": { "mergeguide": { "command": "npx", "args": ["-y", "@mergeguide/mcp-server"] } } }

Then write code as usual — MergeGuide checks it against your active policy and steers the assistant toward compliant output.

What it does

• Prevent at generation — compliant code becomes the default, not an afterthought.
• Govern the whole change — application code, IaC, dependencies, and supply-chain provenance.
• The frameworks you answer to — SOC 2, PCI-DSS, HIPAA, ISO 27001, NIST SSDF, and more.
• Prove it automatically — signed, tamper-evident evidence, OSCAL output for your GRC stack, and an SBOM (CycloneDX / SPDX) for every check.

The rest of MergeGuide

This is the generation-time layer. The full platform adds the IDE extension, pre-commit hooks, the server-side PR gate, a governance dashboard, and enterprise SSO/SCIM — mergeguide.ai · docs at docs.mergeguide.ai.

Pricing

Free / Builder / Enterprise — no feature gating across tiers; you pay for scale, not capability.

License

Proprietary. © MergeGuide.