rotascale-mcp

Govern any agent that speaks the Model Context Protocol — including agents whose code you cannot touch.

pip install rotascale-mcp

Two surfaces, and the difference is the whole point

Only the proxy is a control. The server surface is genuinely useful — real evidence, and a real gate for an agent that cooperates — but an agent that never calls authorize_action is not governed by it. We would rather say that plainly than let you find out during an incident.

Rotascale as an MCP server

Adds governance tools to any MCP host. The agent chooses when to call them.

{
  "mcpServers": {
    "rotascale": {
      "command": "rotascale-mcp",
      "env": {
        "ROTASCALE_URL": "https://rotascale.acme.internal",
        "ROTASCALE_API_KEY": "rota_live_…"
      }
    }
  }
}

authorize_action returns an outcome, not a boolean

Six outcomes, each with a different remedy, and a guidance string written for a model to act on:

A boolean would collapse these, and an agent that cannot tell exhausted from gated will do the wrong thing about both — usually retrying, which is useless for the first and a security problem for the second.

Transport

stdio by default, because that is how MCP hosts launch a local server. Logging goes to stderr, since stdout is the protocol channel.

ROTASCALE_MCP_TRANSPORT=streamable-http rotascale-mcp

Why a separate package

pip install rotascale must never carry an MCP dependency, and the MCP spec revises on its own schedule. Pinning them together would force pointless releases of one to keep up with the other.

Tracking MCP servers you already use

Separate from this package: the rotascale SDK's watch_mcp wraps an MCP client session and reports each server's tool manifest, so a tool whose description changes is caught — including between sessions. A description is an instruction the model reads, so rewriting one changes what your agent does without changing a line of your code.

from rotascale.middleware import watch_mcp

session = watch_mcp(session, server="filesystem", transport="stdio")