Open Data Governance Standard (ODGS) — MCP Server
Deterministic governance enforcement at the AI agent boundary.
For engineers: See Quick Start below, or the guided walkthrough at metricprovenance.com/start.
For compliance and risk officers: The ODGS engine generates cryptographic audit trails (S-Certs).
For architectural clearance and certified packs: metricprovenance.com/#suite
See it in action
Eight ISO/IEC 38505-1 & ISO/IEC 25012 pillars scored in about ten minutes — real MCP server, real maturity engine, click to watch on GitHub.
Core Capabilities
| Change | Detail |
|---|---|
governance_score |
Delegates to odgs-maturity (8-pillar ISO/IEC 38505-1 & ISO/IEC 25012) when installed; falls back to built-in heuristic. Returns 0–100 score with per-pillar gap analysis. |
| AuthGate | Community / Professional / Enterprise access via API key validation. 24h disk cache; workspace.yaml fallback for air-gapped deployments. |
| Licensed tools | compile_regulation, check_drift, detect_conflicts, narrate_audit, discover_bindings (Professional); harvest_sovereign_rules (Enterprise). |
The European Data Governance Maturity Benchmark 2026 recorded an average maturity of 37.6% across 99 enterprises — a 62.4% gap against current regulatory expectation.
governance_scoreapplies the same assessment methodology to your project.
What This Is
The ODGS MCP Server connects any MCP-compatible AI agent to the ODGS Sovereign Validation Engine. The engine evaluates data operations against governance rules at runtime and produces S-Certs (Sovereign Certificates) — cryptographically signed, machine-verifiable records that a governance rule was applied.
This is the bridge between probabilistic AI inference and deterministic governance enforcement.
EU AI Act & High-Risk AI Systems
Organisations operating High-Risk AI Systems under EU AI Act Articles 10 and 12 require demonstrable, auditable data governance at the pipeline level. S-Certs provide that audit trail in a format suitable for regulatory submission.
Certified Sovereign Packs and the S-Cert Registry are available through Metric Provenance certified implementation partners. For architectural assessment: metricprovenance.com/#suite.
Capabilities
- Runtime validation: Data payloads are evaluated against sovereign governance rules at call time; each evaluation produces a signed S-Cert.
- Governance maturity scoring: 8-pillar ISO/IEC 38505-1 & ISO/IEC 25012 assessment (0–100) with per-pillar gap analysis, aligned to the European Governance Maturity Benchmark methodology.
- Regulatory compilation (licensed): Converts legislative text — EU AI Act, DORA, GDPR — into validated ODGS rule JSON.
- Semantic drift detection (licensed): Identifies definitional drift between governance artefacts across versions.
- Enterprise catalog integration (licensed): Harvests and mints sovereign rules from Databricks, Snowflake, and Collibra via the Flint Bridge.
Quick Start
# Core validation capabilities (free, no account needed)
pip install odgs-mcp-server
# With maturity scoring
pip install odgs-mcp-server odgs-maturity
# Complete installation with LLM bridge capabilities
pip install "odgs-mcp-server[llm]"
Client Configuration
The server operates over standard stdio transport, making it instantly compatible with any MCP client.
Claude Desktop
Add to claude_desktop_config.json:
{
"mcpServers": {
"odgs-governance": {
"command": "odgs-mcp-server",
"args": ["--transport", "stdio"],
"env": {
"ODGS_PROJECT_ROOT": "/path/to/your/odgs/project"
}
}
}
}
Cursor
Add to .cursor/mcp.json:
{
"mcpServers": {
"odgs-governance": {
"command": "odgs-mcp-server",
"args": ["--transport", "stdio"],
"env": {
"ODGS_PROJECT_ROOT": "/path/to/your/odgs/project"
}
}
}
}
Licensed Tool Access
Regulatory compilation, certified packs, and catalog synchronisation require a Certified Pack licence. Provide the issued API key in your client configuration:
"env": {
"ODGS_API_KEY": "sk-odgs-...",
"ODGS_PROJECT_ROOT": "/path/to/your/odgs/project"
}
Enterprise Rollout & Certified Packs — see metricprovenance.com/#suite or read the Executive Brief:
| Edition | Scope | Includes |
|---|---|---|
| Open-Source Core | Free (Apache 2.0) | validate_payload, governance_score, list_packs, conformance_check — no registration |
| Production Pilot & Air-Gapped Hub | Enterprise Rollout | Signed .odgs-bundle Regulation Packs (EU AI Act, DORA, CSRD), Policy Studio, and Catalog Sync |
Tools Reference
Community (Free — no API key required)
| Tool | Description |
|---|---|
validate_payload |
Validate data against ODGS governance rules, produce S-Cert |
validate_batch |
Validate multiple payloads in one call |
list_packs |
List available Certified Regulation Packs |
governance_score |
Score governance maturity (0–100) across 8 ISO/IEC 38505-1 & 25012 pillars with gap analysis |
conformance_check |
Run ODGS conformance self-check (L1/L2) |
Professional (API Key Required)
| Tool | Description |
|---|---|
download_pack |
Download and cache certified regulatory rule packs locally |
compile_regulation |
Convert regulation text → validated ODGS rule JSON |
check_drift |
Detect semantic drift in governance definitions |
detect_conflicts |
Find contradictions between regulatory rules |
narrate_audit |
Convert S-Cert → human-readable narrative |
discover_bindings |
Auto-generate physical data mappings from catalogs |
Enterprise (API Key Required)
| Tool | Description |
|---|---|
harvest_sovereign_rules |
(Flint Bridge) Automatically extract and mint rules from data stores — preview, pending verification against the harvester interface |
Architecture
The ODGS MCP Server is designed for zero-trust, local-first execution. All data validation happens strictly on your machine. No sensitive data leaves your perimeter.
flowchart TB
Agent[AI Agent\nClaude/Cursor/Custom]
subgraph "ODGS MCP Server"
Auth[AuthGate]
Val[OdgsInterceptor v6]
Maturity[odgs-maturity\n8-pillar ISO 38505/25012]
LLM[OdgsLlmBridge]
Flint[Flint Bridge]
end
Reg[(S-Cert Registry\nregistry.metricprovenance.com)]
Project[(Local ODGS Project)]
Agent -- "JSON-RPC (stdio)" --> Auth
Auth -- "Validate Key (HTTPS, cached 24h)" --> Reg
Auth --> Val
Auth --> Maturity
Auth --> LLM
Auth --> Flint
Val -- "Reads Rules" --> Project
Val -- "Generates" --> SCert[S-Cert]
Maturity -- "Scores pillars" --> Project
LLM -- "Compiles Regulations" --> Project
Flint -- "Harvests Sovereign Rules" --> Project
Certified Regulation Packs
Cryptographically signed rule bundles, each mapped to a specific regulatory instrument. Packs are compiled from authoritative legislative text and certified by Metric Provenance.
| Pack | Regulation | Status |
|---|---|---|
| EU AI Act | Regulation (EU) 2024/1689 | ✅ Certified |
| DORA | Digital Operational Resilience Act | ✅ Certified |
| GDPR | General Data Protection Regulation | ✅ Certified |
| CSRD | Corporate Sustainability Reporting Directive | ✅ Certified |
| NIS2 | Network and Information Security Directive | ✅ Certified |
| Basel III | Basel Committee on Banking Supervision | ✅ Certified |
Full catalogue of 15+ packs. Licensing and deployment via metricprovenance.com/#suite.
Environment Variables
| Variable | Description | Default |
|---|---|---|
ODGS_PROJECT_ROOT |
Path to ODGS governance definitions | Current directory |
ODGS_API_KEY |
API key for Professional/Enterprise access | None (community) |
ODGS_REGISTRY_URL |
Registry endpoint for key validation | https://registry.metricprovenance.com |
ODGS_CACHE_DIR |
Local cache for downloaded packs | ~/.odgs/cache |
About ODGS
The Open Data Governance Standard (ODGS) is an open protocol for deterministic data governance enforcement. ODGS is on a path toward formal standardization.
- Protocol specification —
pip install odgs - PyPI package
- Research paper (SSRN 6205478)
- Metric Provenance
Licence
Apache 2.0 — see LICENSE.
The protocol engine and MCP server are open source. Certified Regulation Packs are issued under a commercial licence.
Metadata
Release files for odgs-mcp-server 0.4.0
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | Actions |
|---|---|---|---|---|
| odgs_mcp_server-0.4.0.tar.gz | 32.7 kB | Without provenance | Details for odgs_mcp_server-0.4.0.tar.gz |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Actions Reset |
|---|---|---|---|---|
| odgs_mcp_server-0.4.0-py3-none-any.whl | Python 3 | none | any | Details for odgs_mcp_server-0.4.0-py3-none-any.whl |
Total release size: 64.3 kB
Release files / odgs_mcp_server-0.4.0.tar.gz
| Download URL | odgs_mcp_server-0.4.0.tar.gz |
|---|---|
| Size | 32.7 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
1954756dbae7859d17c9b56478c63a6210428f1879199e09d4f5158c95415d80
|
|
BLAKE2b-256 checksum How to use checksums |
94282e990d12d9aa4f22cfa160505422d0f511e4bdfdd8fe02296c3e6688173b
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
uv/0.11.8 {"installer":{"name":"uv","version":"0.11.8","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"macOS","version":null,"id":null,"libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":null}
|
Release files / odgs_mcp_server-0.4.0-py3-none-any.whl
| Download URL | odgs_mcp_server-0.4.0-py3-none-any.whl |
|---|---|
| Size | 31.6 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
7e3fd7b24f7be65fade3f2376d640644448960ea155c729fb3bfe7539f6c51b6
|
|
BLAKE2b-256 checksum How to use checksums |
8e77e6f82610c2b9343bbd948462eba3bb368cdfc56a09b4991e7f1b480b7019
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
uv/0.11.8 {"installer":{"name":"uv","version":"0.11.8","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"macOS","version":null,"id":null,"libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":null}
|
Security for odgs-mcp-server 0.4.0
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
No provenance found
None of the files in this release were uploaded with provenance metadata.
A note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.