evidentia-mcp

Model Context Protocol (MCP) server for Evidentia.

Exposes Evidentia's gap analysis, risk-statement generation, control explanation, OSCAL emit, and gap-diff surfaces to MCP-aware AI clients (Claude Desktop, Claude Code, ChatGPT Desktop, custom MCP clients).

Quick start

pip install evidentia[mcp]

# Run the server over stdio (the canonical MCP transport)
evidentia mcp serve

# Health check (validates SDK availability + reachable
# evidentia-core / evidentia-ai surfaces)
evidentia mcp doctor

Tool surface

Tool	Maps to	Auth
`gap_analyze`	`evidentia_core.gap_analyzer`	none (read-only)
`risk_generate`	`evidentia_ai.risk_statements`	optional API key (LiteLLM env vars)
`explain_control`	`evidentia_ai.explain`	optional API key
`oscal_emit`	`evidentia_core.oscal.exporter`	optional Sigstore identity (env-driven)
`gap_diff`	`evidentia_core.gap_analyzer.diff`	none
`collect_aws`	`evidentia_collectors.aws`	provider creds (env-driven)
`collect_github`	`evidentia_collectors.github`	provider creds
`collect_jira`	`evidentia_collectors.jira`	provider creds

All credential handling follows the same env-var-driven secret-handling protocol Evidentia uses everywhere — the MCP server NEVER accepts credentials in tool arguments.

Transport

v0.8.0 ships the stdio transport only (the most common + canonical MCP transport — used by Claude Desktop, Claude Code, and most other MCP clients). HTTP transport + Client ID Metadata Document (CIMD) richness defer to v0.8.1.

License

Apache-2.0. See the workspace root LICENSE file.

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

evidentia_mcp-0.12.0.tar.gz (37.6 kB view details)

Uploaded Aug 23, 2026 Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

The dropdown lists show the available interpreters, ABIs, and platforms. Enable javascript to be able to filter the list of wheel files.

evidentia_mcp-0.12.0-py3-none-any.whl (40.9 kB view details)

Uploaded Aug 23, 2026 Python 3

File details

Details for the file evidentia_mcp-0.12.0.tar.gz.

File metadata

Download URL: evidentia_mcp-0.12.0.tar.gz
Upload date: Aug 23, 2026
Size: 37.6 kB
Tags: Source
Uploaded using Trusted Publishing? Yes
Uploaded via: twine/7.0.0 CPython/3.13.14

File hashes

Hashes for evidentia_mcp-0.12.0.tar.gz
Algorithm	Hash digest
SHA256	`2b8de984d4696dd499f769f3738d54ac3c06790273a19ac13a239c0de3ebfac7`
MD5	`d489ee424426bfa645911e4da3f38b50`
BLAKE2b-256	`759fc5676201a1d84e9b0e020d1fa3fe2637b56524609923991d98c4f9b79b9e`

See more details on using hashes here.

Provenance

The following attestation bundles were made for evidentia_mcp-0.12.0.tar.gz:

Publisher: release.yml on Polycentric-Labs/evidentia

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Statement:
- Statement type: https://in-toto.io/Statement/v1
- Predicate type: https://docs.pypi.org/attestations/publish/v1
- Subject name: evidentia_mcp-0.12.0.tar.gz
- Subject digest: 2b8de984d4696dd499f769f3738d54ac3c06790273a19ac13a239c0de3ebfac7
- Sigstore transparency entry: 2578526614
- Sigstore integration time: Aug 23, 2026
Source repository:
- Permalink: Polycentric-Labs/evidentia@b7ac58432e65d3727b01a797bf01290b9799356d
- Branch / Tag: refs/tags/v0.12.0
- Owner: https://github.com/Polycentric-Labs
- Access: public
Publication detail:
- Token Issuer: https://token.actions.githubusercontent.com
- Runner Environment: github-hosted
- Publication workflow: release.yml@b7ac58432e65d3727b01a797bf01290b9799356d
- Trigger Event: push