aigp-mcp

AIGP governance for MCP (Model Context Protocol) tool invocations.

Part of MAIGP — the Mediated AI Governance Protocol: a runtime consent / scope / evidence layer for AI systems. Every governed call is CHECKed before it runs (policy, scope, jurisdiction, circuit-breaker) and RECORDed + TRACEd as tamper-evident evidence after.

What it governs

Governs MCP tool calls — policy, scope, consent, classification, and evidence.

Governance model

This adapter maps the framework's lifecycle onto the AIGP agent-governance loop provided by maigp-agent-core:

Install

pip install aigp-mcp

Pulls in maigp-agent-core (shared lifecycle) and, transitively, maigp-client.

Quick start

from aigp_mcp import GovernedMCPClient, MCPGovernanceConfig

config = MCPGovernanceConfig(
    mode="ENFORCE",
    gov_url="https://gov.example.com",
    app_id="mcp-gateway",
    hmac_secret="...",
)
governed = GovernedMCPClient(mcp_client, config)

# Pre-check → execute only if allowed → post-record evidence
result = await governed.call_tool("wiz", "listVulnerabilities",
                                  {"severity": "HIGH"})

Modes & exports

mode="ENFORCE" blocks disallowed calls (raising GovernanceDenied); monitor-only modes record without blocking. Exports include AccessDecision, GovernanceDenied, and ToolEvidence.

Links

• Protocol, specs & full adapter catalog: https://github.com/owner-spec/aigp-protocol
• Issues: https://github.com/owner-spec/aigp-protocol/issues

License: Proprietary. © Kanjani AI Research & Causum.