Skip to main content

Open Data Governance Standard (ODGS) — MCP Server

Deterministic governance enforcement at the AI agent boundary.

Protocol MCP Server PyPI Downloads Python License


For engineers: See Quick Start below, or the guided walkthrough at metricprovenance.com/start.
For compliance and risk officers: The ODGS engine generates cryptographic audit trails (S-Certs).
For architectural clearance and certified packs: metricprovenance.com/#suite

See it in action

Watch an AI agent run governance_score through this MCP server

Eight ISO/IEC 38505-1 & ISO/IEC 25012 pillars scored in about ten minutes — real MCP server, real maturity engine, click to watch on GitHub.



Core Capabilities

Change Detail
governance_score Delegates to odgs-maturity (8-pillar ISO/IEC 38505-1 & ISO/IEC 25012) when installed; falls back to built-in heuristic. Returns 0–100 score with per-pillar gap analysis.
AuthGate Community / Professional / Enterprise access via API key validation. 24h disk cache; workspace.yaml fallback for air-gapped deployments.
Licensed tools compile_regulation, check_drift, detect_conflicts, narrate_audit, discover_bindings (Professional); harvest_sovereign_rules (Enterprise).

The European Data Governance Maturity Benchmark 2026 recorded an average maturity of 37.6% across 99 enterprises — a 62.4% gap against current regulatory expectation. governance_score applies the same assessment methodology to your project.


What This Is

The ODGS MCP Server connects any MCP-compatible AI agent to the ODGS Sovereign Validation Engine. The engine evaluates data operations against governance rules at runtime and produces S-Certs (Sovereign Certificates) — cryptographically signed, machine-verifiable records that a governance rule was applied.

This is the bridge between probabilistic AI inference and deterministic governance enforcement.

EU AI Act & High-Risk AI Systems

Organisations operating High-Risk AI Systems under EU AI Act Articles 10 and 12 require demonstrable, auditable data governance at the pipeline level. S-Certs provide that audit trail in a format suitable for regulatory submission.

Certified Sovereign Packs and the S-Cert Registry are available through Metric Provenance certified implementation partners. For architectural assessment: metricprovenance.com/#suite.


Capabilities

  • Runtime validation: Data payloads are evaluated against sovereign governance rules at call time; each evaluation produces a signed S-Cert.
  • Governance maturity scoring: 8-pillar ISO/IEC 38505-1 & ISO/IEC 25012 assessment (0–100) with per-pillar gap analysis, aligned to the European Governance Maturity Benchmark methodology.
  • Regulatory compilation (licensed): Converts legislative text — EU AI Act, DORA, GDPR — into validated ODGS rule JSON.
  • Semantic drift detection (licensed): Identifies definitional drift between governance artefacts across versions.
  • Enterprise catalog integration (licensed): Harvests and mints sovereign rules from Databricks, Snowflake, and Collibra via the Flint Bridge.

Quick Start

# Core validation capabilities (free, no account needed)
pip install odgs-mcp-server

# With maturity scoring
pip install odgs-mcp-server odgs-maturity

# Complete installation with LLM bridge capabilities
pip install "odgs-mcp-server[llm]"

Client Configuration

The server operates over standard stdio transport, making it instantly compatible with any MCP client.

Claude Desktop

Add to claude_desktop_config.json:

{
  "mcpServers": {
    "odgs-governance": {
      "command": "odgs-mcp-server",
      "args": ["--transport", "stdio"],
      "env": {
        "ODGS_PROJECT_ROOT": "/path/to/your/odgs/project"
      }
    }
  }
}
Cursor

Add to .cursor/mcp.json:

{
  "mcpServers": {
    "odgs-governance": {
      "command": "odgs-mcp-server",
      "args": ["--transport", "stdio"],
      "env": {
        "ODGS_PROJECT_ROOT": "/path/to/your/odgs/project"
      }
    }
  }
}

Licensed Tool Access

Regulatory compilation, certified packs, and catalog synchronisation require a Certified Pack licence. Provide the issued API key in your client configuration:

"env": {
  "ODGS_API_KEY": "sk-odgs-...",
  "ODGS_PROJECT_ROOT": "/path/to/your/odgs/project"
}

Enterprise Rollout & Certified Packs — see metricprovenance.com/#suite or read the Executive Brief:

Edition Scope Includes
Open-Source Core Free (Apache 2.0) validate_payload, governance_score, list_packs, conformance_check — no registration
Production Pilot & Air-Gapped Hub Enterprise Rollout Signed .odgs-bundle Regulation Packs (EU AI Act, DORA, CSRD), Policy Studio, and Catalog Sync

Tools Reference

Community (Free — no API key required)

Tool Description
validate_payload Validate data against ODGS governance rules, produce S-Cert
validate_batch Validate multiple payloads in one call
list_packs List available Certified Regulation Packs
governance_score Score governance maturity (0–100) across 8 ISO/IEC 38505-1 & 25012 pillars with gap analysis
conformance_check Run ODGS conformance self-check (L1/L2)

Professional (API Key Required)

Tool Description
download_pack Download and cache certified regulatory rule packs locally
compile_regulation Convert regulation text → validated ODGS rule JSON
check_drift Detect semantic drift in governance definitions
detect_conflicts Find contradictions between regulatory rules
narrate_audit Convert S-Cert → human-readable narrative
discover_bindings Auto-generate physical data mappings from catalogs

Enterprise (API Key Required)

Tool Description
harvest_sovereign_rules (Flint Bridge) Automatically extract and mint rules from data stores — preview, pending verification against the harvester interface

Architecture

The ODGS MCP Server is designed for zero-trust, local-first execution. All data validation happens strictly on your machine. No sensitive data leaves your perimeter.

flowchart TB
    Agent[AI Agent\nClaude/Cursor/Custom]
    
    subgraph "ODGS MCP Server"
        Auth[AuthGate]
        Val[OdgsInterceptor v6]
        Maturity[odgs-maturity\n8-pillar ISO 38505/25012]
        LLM[OdgsLlmBridge]
        Flint[Flint Bridge]
    end
    
    Reg[(S-Cert Registry\nregistry.metricprovenance.com)]
    Project[(Local ODGS Project)]

    Agent -- "JSON-RPC (stdio)" --> Auth
    Auth -- "Validate Key (HTTPS, cached 24h)" --> Reg
    Auth --> Val
    Auth --> Maturity
    Auth --> LLM
    Auth --> Flint
    
    Val -- "Reads Rules" --> Project
    Val -- "Generates" --> SCert[S-Cert]
    Maturity -- "Scores pillars" --> Project
    LLM -- "Compiles Regulations" --> Project
    Flint -- "Harvests Sovereign Rules" --> Project

Certified Regulation Packs

Cryptographically signed rule bundles, each mapped to a specific regulatory instrument. Packs are compiled from authoritative legislative text and certified by Metric Provenance.

Pack Regulation Status
EU AI Act Regulation (EU) 2024/1689 ✅ Certified
DORA Digital Operational Resilience Act ✅ Certified
GDPR General Data Protection Regulation ✅ Certified
CSRD Corporate Sustainability Reporting Directive ✅ Certified
NIS2 Network and Information Security Directive ✅ Certified
Basel III Basel Committee on Banking Supervision ✅ Certified

Full catalogue of 15+ packs. Licensing and deployment via metricprovenance.com/#suite.


Environment Variables

Variable Description Default
ODGS_PROJECT_ROOT Path to ODGS governance definitions Current directory
ODGS_API_KEY API key for Professional/Enterprise access None (community)
ODGS_REGISTRY_URL Registry endpoint for key validation https://registry.metricprovenance.com
ODGS_CACHE_DIR Local cache for downloaded packs ~/.odgs/cache

About ODGS

The Open Data Governance Standard (ODGS) is an open protocol for deterministic data governance enforcement. ODGS is on a path toward formal standardization.

Licence

Apache 2.0 — see LICENSE.

The protocol engine and MCP server are open source. Certified Regulation Packs are issued under a commercial licence.

Metadata

Release files for odgs-mcp-server 0.4.0

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for odgs-mcp-server 0.4.0
File Size Uploaded Provenance
odgs_mcp_server-0.4.0.tar.gz 32.7 kB Without provenance Details

Built distribution (wheel)

Table of built distributions (wheels) for odgs-mcp-server 0.4.0
File Interpreter ABI Platform
odgs_mcp_server-0.4.0-py3-none-any.whl Python 3 none any Details

Total release size: 64.3 kB

Release files / odgs_mcp_server-0.4.0.tar.gz

Download URL odgs_mcp_server-0.4.0.tar.gz
Size 32.7 kB
Tags Source
SHA-256 checksum
How to use checksums
1954756dbae7859d17c9b56478c63a6210428f1879199e09d4f5158c95415d80
BLAKE2b-256 checksum
How to use checksums
94282e990d12d9aa4f22cfa160505422d0f511e4bdfdd8fe02296c3e6688173b
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via uv/0.11.8 {"installer":{"name":"uv","version":"0.11.8","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"macOS","version":null,"id":null,"libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":null}

Release files / odgs_mcp_server-0.4.0-py3-none-any.whl

Download URL odgs_mcp_server-0.4.0-py3-none-any.whl
Size 31.6 kB
Tags Python 3
SHA-256 checksum
How to use checksums
7e3fd7b24f7be65fade3f2376d640644448960ea155c729fb3bfe7539f6c51b6
BLAKE2b-256 checksum
How to use checksums
8e77e6f82610c2b9343bbd948462eba3bb368cdfc56a09b4991e7f1b480b7019
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via uv/0.11.8 {"installer":{"name":"uv","version":"0.11.8","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"macOS","version":null,"id":null,"libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":null}

Security for odgs-mcp-server 0.4.0

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

No provenance found

None of the files in this release were uploaded with provenance metadata.

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page