Odgs Mcp Server

com.metricprovenancePublished by metricprovenance.comv0.3.3Updated Nov 3, 2026

ODGS governance enforcement — validation, regulation compilation, drift detection, signed S-Certs.

VerifiedSTDIODesktop onlySecurity & MonitoringData & Analytics

Overview

AI-generated overview

Local stdio MCP server that checks data payloads against ODGS governance rules, issues signed S-Certs, and scores governance maturity.

What you can do
  • Validate single or batched data payloads against ODGS governance rules and produce signed S-Certs
  • Score governance maturity 0-100 across eight ISO/IEC 38505-1 and 25012 pillars with gap analysis, and run conformance self-checks
  • List available certified regulation packs, and with a licence download and cache them locally
  • Compile regulation text into validated rule JSON, detect semantic drift and conflicting rules, and turn S-Certs into readable audit narratives
  • Generate physical data mappings from catalogs, and preview harvesting rules from data stores on the enterprise tier
When to use it
Useful when an assistant works on data pipelines that must be checked against governance or regulatory rules at runtime and leave an auditable, signed record, or when you need a quick maturity assessment of a governance project. The free community tier covers validation, scoring and conformance checks without registration.
Requirements
Runs as a local Python process installed from PyPI (pip install odgs-mcp-server), configured over stdio in the MCP client. ODGS_PROJECT_ROOT points at the project holding governance definitions and defaults to the current working directory. Licensed tools need ODGS_API_KEY; optional ODGS_REGISTRY_URL and ODGS_CACHE_DIR control key validation and pack caching. The odgs-maturity package is needed for full pillar scoring.
Before you install
Licensed tools require a paid Certified Pack licence and an ODGS_API_KEY, which is sent to the vendor registry for validation and cached on disk for 24 hours. Licensed tools download and cache rule packs and write into the local project. The enterprise harvesting tool is marked as a preview pending verification. The README claims local-only validation, but key validation contacts the vendor registry.

Installation

In SourceWeft

  1. Open Odgs Mcp Server in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

Open Data Governance Standard (ODGS) — MCP Server

Deterministic governance enforcement at the AI agent boundary.

[Protocol] [MCP Server] [PyPI Downloads] [Python] [License]


For engineers: See Quick Start below, or the guided walkthrough at metricprovenance.com/start.
For compliance and risk officers: The ODGS engine generates cryptographic audit trails (S-Certs).
For architectural clearance and certified packs: metricprovenance.com/#suite

See it in action

[Watch an AI agent run governance_score through this MCP server]

Eight ISO/IEC 38505-1 & ISO/IEC 25012 pillars scored in about ten minutes — real MCP server, real maturity engine, click to watch on GitHub.


[!IMPORTANT] ODGS MCP Server v0.3.4 — Maturity Diagnostics + Certified Pack Access governance_score now delegates to the odgs-maturity 8-pillar ISO/IEC 38505-1 & ISO/IEC 25012 engine. Regulatory compilation, drift detection, and catalog synchronisation require a Certified Pack licence. The community tier — validation, scoring, conformance checking — remains open with no registration.


Core Capabilities

ChangeDetail
governance_scoreDelegates to odgs-maturity (8-pillar ISO/IEC 38505-1 & ISO/IEC 25012) when installed; falls back to built-in heuristic. Returns 0–100 score with per-pillar gap analysis.
AuthGateCommunity / Professional / Enterprise access via API key validation. 24h disk cache; workspace.yaml fallback for air-gapped deployments.
Licensed toolscompile_regulation, check_drift, detect_conflicts, narrate_audit, discover_bindings (Professional); harvest_sovereign_rules (Enterprise).

The European Data Governance Maturity Benchmark 2026 recorded an average maturity of 37.6% across 99 enterprises — a 62.4% gap against current regulatory expectation. governance_score applies the same assessment methodology to your project.


What This Is

The ODGS MCP Server connects any MCP-compatible AI agent to the ODGS Sovereign Validation Engine. The engine evaluates data operations against governance rules at runtime and produces S-Certs (Sovereign Certificates) — cryptographically signed, machine-verifiable records that a governance rule was applied.

This is the bridge between probabilistic AI inference and deterministic governance enforcement.

EU AI Act & High-Risk AI Systems

Organisations operating High-Risk AI Systems under EU AI Act Articles 10 and 12 require demonstrable, auditable data governance at the pipeline level. S-Certs provide that audit trail in a format suitable for regulatory submission.

Certified Sovereign Packs and the S-Cert Registry are available through Metric Provenance certified implementation partners. For architectural assessment: metricprovenance.com/#suite.


Capabilities

  • Runtime validation: Data payloads are evaluated against sovereign governance rules at call time; each evaluation produces a signed S-Cert.
  • Governance maturity scoring: 8-pillar ISO/IEC 38505-1 & ISO/IEC 25012 assessment (0–100) with per-pillar gap analysis, aligned to the European Governance Maturity Benchmark methodology.
  • Regulatory compilation (licensed): Converts legislative text — EU AI Act, DORA, GDPR — into validated ODGS rule JSON.
  • Semantic drift detection (licensed): Identifies definitional drift between governance artefacts across versions.
  • Enterprise catalog integration (licensed): Harvests and mints sovereign rules from Databricks, Snowflake, and Collibra via the Flint Bridge.

Quick Start

bash
# Core validation capabilities (free, no account needed)pip install odgs-mcp-server
# With maturity scoringpip install odgs-mcp-server odgs-maturity
# Complete installation with LLM bridge capabilitiespip install "odgs-mcp-server[llm]"

Client Configuration

The server operates over standard stdio transport, making it instantly compatible with any MCP client.

Claude Desktop

Add to claude_desktop_config.json:

json
{  "mcpServers": {    "odgs-governance": {      "command": "odgs-mcp-server",      "args": ["--transport", "stdio"],      "env": {        "ODGS_PROJECT_ROOT": "/path/to/your/odgs/project"      }    }  }}
Cursor

Add to .cursor/mcp.json:

json
{  "mcpServers": {    "odgs-governance": {      "command": "odgs-mcp-server",      "args": ["--transport", "stdio"],      "env": {        "ODGS_PROJECT_ROOT": "/path/to/your/odgs/project"      }    }  }}

Licensed Tool Access

Regulatory compilation, certified packs, and catalog synchronisation require a Certified Pack licence. Provide the issued API key in your client configuration:

json
"env": {  "ODGS_API_KEY": "sk-odgs-...",  "ODGS_PROJECT_ROOT": "/path/to/your/odgs/project"}

Enterprise Rollout & Certified Packs — see metricprovenance.com/#suite or read the Executive Brief:

EditionScopeIncludes
Open-Source CoreFree (Apache 2.0)validate_payload, governance_score, list_packs, conformance_check — no registration
Production Pilot & Air-Gapped HubEnterprise RolloutSigned .odgs-bundle Regulation Packs (EU AI Act, DORA, CSRD), Policy Studio, and Catalog Sync

Tools Reference

Community (Free — no API key required)

ToolDescription
validate_payloadValidate data against ODGS governance rules, produce S-Cert
validate_batchValidate multiple payloads in one call
list_packsList available Certified Regulation Packs
governance_scoreScore governance maturity (0–100) across 8 ISO/IEC 38505-1 & 25012 pillars with gap analysis
conformance_checkRun ODGS conformance self-check (L1/L2)

Professional (API Key Required)

ToolDescription
download_packDownload and cache certified regulatory rule packs locally
compile_regulationConvert regulation text → validated ODGS rule JSON
check_driftDetect semantic drift in governance definitions
detect_conflictsFind contradictions between regulatory rules
narrate_auditConvert S-Cert → human-readable narrative
discover_bindingsAuto-generate physical data mappings from catalogs

Enterprise (API Key Required)

ToolDescription
harvest_sovereign_rules(Flint Bridge) Automatically extract and mint rules from data stores — preview, pending verification against the harvester interface

Architecture

The ODGS MCP Server is designed for zero-trust, local-first execution. All data validation happens strictly on your machine. No sensitive data leaves your perimeter.

mermaid
flowchart TB    Agent[AI Agent\nClaude/Cursor/Custom]        subgraph "ODGS MCP Server"        Auth[AuthGate]        Val[OdgsInterceptor v6]        Maturity[odgs-maturity\n8-pillar ISO 38505/25012]        LLM[OdgsLlmBridge]        Flint[Flint Bridge]    end        Reg[(S-Cert Registry\nregistry.metricprovenance.com)]    Project[(Local ODGS Project)]
    Agent -- "JSON-RPC (stdio)" --> Auth    Auth -- "Validate Key (HTTPS, cached 24h)" --> Reg    Auth --> Val    Auth --> Maturity    Auth --> LLM    Auth --> Flint        Val -- "Reads Rules" --> Project    Val -- "Generates" --> SCert[S-Cert]    Maturity -- "Scores pillars" --> Project    LLM -- "Compiles Regulations" --> Project    Flint -- "Harvests Sovereign Rules" --> Project

Certified Regulation Packs

Cryptographically signed rule bundles, each mapped to a specific regulatory instrument. Packs are compiled from authoritative legislative text and certified by Metric Provenance.

PackRegulationStatus
EU AI ActRegulation (EU) 2024/1689✅ Certified
DORADigital Operational Resilience Act✅ Certified
GDPRGeneral Data Protection Regulation✅ Certified
CSRDCorporate Sustainability Reporting Directive✅ Certified
NIS2Network and Information Security Directive✅ Certified
Basel IIIBasel Committee on Banking Supervision✅ Certified

Full catalogue of 15+ packs. Licensing and deployment via metricprovenance.com/#suite.


Environment Variables

VariableDescriptionDefault
ODGS_PROJECT_ROOTPath to ODGS governance definitionsCurrent directory
ODGS_API_KEYAPI key for Professional/Enterprise accessNone (community)
ODGS_REGISTRY_URLRegistry endpoint for key validationhttps://registry.metricprovenance.com
ODGS_CACHE_DIRLocal cache for downloaded packs~/.odgs/cache

About ODGS

The Open Data Governance Standard (ODGS) is an open protocol for deterministic data governance enforcement. ODGS is on a path toward formal standardization.

Licence

Apache 2.0 — see LICENSE.

The protocol engine and MCP server are open source. Certified Regulation Packs are issued under a commercial licence.

Source: README.md at commit fa2cad9

Tools

0
SourceWeft has not started this package in its sandbox yet, so its tools are not known.

Version history

1
  1. v0.3.3LatestSep 16, 2026

Score

40% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts

    Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.

  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts

    Declare a license in the repository or the registry entry.