Digital Passport Assessment Workbench

io.github.CE-RISE-softwarePublished by GitHub account CE-RISE-softwarev0.1.2Updated Oct 24, 2026

Deterministic SHACL-based assessment and comparison for digital passport data models.

The publisher's own server: Passport.Me

VerifiedSTDIODesktop onlyDeveloper ToolsData & Analytics

Overview

AI-generated overview

Local stdio MCP server that lets an assistant run deterministic SHACL-based assessments, comparisons and coverage analysis of digital passport data models.

What you can do
Assess and summarize digital passport profiles against SHACL sources, producing JSON results for chaining. Compare two assessment results, optionally with an analyst-authored alignment, and inspect alignment coverage and gaps. Run use-case coverage analysis and prioritize ranked improvement targets. Recommend a combined composition from two assessed model sets. Discover bundled schemas, vocabularies, templates and capabilities.
When to use it
Useful when working with digital product passport or similar SHACL data models and you want an assistant to run repeatable, file-based assessments, pairwise comparisons, coverage checks and composition recommendations rather than chat-style analysis.
Requirements
Runs as a local process over stdio. Install the Python package (pip install dpawb) or use the published OCI image; the server command is dpawb-mcp, or python -m dpawb.mcp_server. Inputs are local files such as profile, use-case and alignment YAML/JSON. No authentication, environment variables or headers are declared.
Before you install
The tool reads local input files and writes JSON outputs; point it only at files you intend to share with the assistant. Results are analytical and conservative, so treat comparisons and recommendations as review material rather than authoritative conclusions.

Installation

In SourceWeft

  1. Open Digital Passport Assessment Workbench in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

Digital Passport Model Assessment Workbench

[PyPI - Version] [DOI] [MCP Registry]

A Python toolkit and thin CLI for SHACL-based assessment of digital passport data models, pairwise comparison of composed solutions, and SHACL-only use-case coverage analysis.

This README is primarily a repository and development entry point. The user-facing conceptual and usage reference is at the published documentation site. The repository-source docs remain available in docs/.


What this repository contains

  • A publishable Python package with a CLI entry point: dpawb
  • A thin stdio MCP server entry point: dpawb-mcp
  • Contract-aligned input schemas for composition profiles, use cases, and alignments
  • Built-in vocabularies and templates exposed through discovery commands
  • Synthetic local fixtures used only for tests and validation
  • A progression-based examples tree for human and AI-agent tutorials

Tool Shape

The tool is designed primarily as an agent-usable analytical toolkit with a thin CLI. The core command surface is:

  • assess
  • coverage
  • compare
  • prioritize
  • recommend-composition
  • schema
  • vocabulary
  • template
  • capabilities
  • summarize

AI-agent use

The intended primary integration mode is an AI agent orchestrating the analytical pipeline through the package API or the CLI. In practice, this means:

  • deterministic file-based inputs
  • JSON outputs suitable for agent parsing and chaining
  • explicit analytical steps instead of a chat-oriented interface

The CLI remains useful for direct human invocation, but the main product shape is an analytical engine that can be called by agent skills, workflow runners, or tool adapters.

The package also ships a thin stdio MCP server over the same deterministic command surface:

  • assess
  • coverage
  • compare
  • prioritize
  • recommend-composition
  • schema
  • vocabulary
  • template
  • capabilities
  • summarize

The MCP surface stays intentionally thin:

  • keep dpawb as the core Python package
  • expose the same operations through dpawb-mcp
  • ship the MCP runtime as both a local Python entry point and a GitHub Container Registry image
  • publish registry metadata from the GitHub mirror

The MCP runtime and publication shape are documented in the published MCP server page.

The public Python API is documented in the published API reference.

MCP Access

The MCP server is published with this identity:

  • registry name: io.github.CE-RISE-software/dpawb
  • OCI image pattern: ghcr.io/ce-rise-software/dpawb-mcp:<release-version>
  • transport: stdio
  • official registry base: https://registry.modelcontextprotocol.io/

The server is discoverable in the official MCP Registry under the name io.github.CE-RISE-software/dpawb.

Registry discovery page:

  • https://registry.modelcontextprotocol.io/?q=dpawb

Local client configuration example:

json
{  "mcpServers": {    "dpawb": {      "command": "dpawb-mcp"    }  }}

OCI-oriented registry metadata is declared in server.json. The publish workflow fills in the release version and image tag when publishing.

Install

bash
python -m venv .venv. .venv/bin/activatepip install -e .

Published package name:

bash
pip install dpawb

The installed MCP server command is:

bash
dpawb-mcp

If you are working in a restricted environment, the package is configured to build with setuptools so editable installs do not depend on fetching an extra build backend.

If build isolation or wheel support is unavailable locally, use:

bash
python -m pip install --no-build-isolation -e .

In constrained environments where editable installation is blocked by local Python packaging tooling, the repository still supports a repo-native execution path:

bash
./scripts/run-local.sh capabilities./scripts/test-local.shmake smokemake testmake validate

Minimal local MCP runtime command:

bash
python -m dpawb.mcp_server

Example commands

bash
dpawb assess --profile fixtures/profiles/synthetic_evolution_latest.yamldpawb coverage --profile fixtures/profiles/synthetic_evolution_latest.yaml --use-case fixtures/use_cases/product_identity_lookup.yamldpawb compare --left left_assessment.json --right right_assessment.jsondpawb recommend-composition --left left_assessment.json --right right_assessment.json --comparison comparison_result.jsondpawb summarize --result comparison_result.json --format markdowndpawb capabilities

Local Release Check

Before wiring PyPI CI/CD, run the local packaging check in an environment with wheel available:

bash
make release-check

This builds a wheel and sdist, installs the wheel into a clean temporary environment, and runs installed CLI smoke checks.

Structure

There are two distinct input areas in this repository:

  • fixtures/ Synthetic, repository-local test data only. These files are used by tests, smoke checks, and CI validation.

  • examples/01-source-ingestion/ Live-source example inputs intended for manual runs. These are the first step in the tutorial progression and are not part of CI validation.

The full examples tree is organized by analytical task, not by input data model:

  • examples/01-source-ingestion/ Load and assess declared profiles.
  • examples/02-structural-comparison/ Compare two profile assessment results.
  • examples/03-reduced-use-case-comparison/ Run the first aligned use-case comparison.
  • examples/04-extended-use-case-comparison/ Run a broader aligned use-case comparison.
  • examples/05-composition-recommendation/ Recommend a combined profile from two assessed model sets.

Each example is usable by humans as a step-by-step command tutorial and by AI agents as a deterministic recipe over explicit files.

Source-ingestion examples

Example profiles for live SHACL sources are included at:

  • examples/01-source-ingestion/profiles/battery_dpp_representation_live.yaml
  • examples/01-source-ingestion/profiles/battery_product_identification_live.yaml
  • examples/01-source-ingestion/profiles/dp_record_metadata_live.yaml
  • examples/01-source-ingestion/profiles/traceability_and_life_cycle_events_live.yaml
  • examples/01-source-ingestion/profiles/metadata_focused_composition_live.yaml
  • examples/01-source-ingestion/profiles/metadata_and_traceability_live.yaml
  • examples/02-structural-comparison/profiles/metadata_slice_left_live.yaml
  • examples/02-structural-comparison/profiles/metadata_slice_right_live.yaml

If you want a single live source, the metadata-oriented example is the main starting point:

bash
./scripts/run-local.sh assess --profile examples/01-source-ingestion/profiles/dp_record_metadata_live.yaml

If you want a composed profile, use:

bash
./scripts/run-local.sh assess --profile examples/01-source-ingestion/profiles/metadata_and_traceability_live.yaml

You can also run the traceability-only example:

bash
./scripts/run-local.sh assess --profile examples/01-source-ingestion/profiles/traceability_and_life_cycle_events_live.yaml

For manual coverage runs, example use cases are included at:

  • examples/01-source-ingestion/use_cases/battery_dpp_representation.yaml
  • examples/01-source-ingestion/use_cases/battery_product_identification.yaml
  • examples/01-source-ingestion/use_cases/battery_passport_metadata_and_classification.yaml
  • examples/01-source-ingestion/use_cases/record_identity_lookup.yaml
  • examples/01-source-ingestion/use_cases/provenance_actor_lookup.yaml

Example:

bash
./scripts/run-local.sh coverage \  --profile examples/01-source-ingestion/profiles/dp_record_metadata_live.yaml \  --use-case examples/01-source-ingestion/use_cases/record_identity_lookup.yaml

The main real comparison-driver use case is:

  • examples/01-source-ingestion/use_cases/battery_dpp_representation.yaml

It intentionally stays narrow. It requires:

  • passport identity
  • battery identity
  • passport version or revision
  • one responsible actor
  • one battery type or classification signal

and the joins needed to treat those as one battery-DPP representation slice.

The matching starting composition for that use case is:

  • examples/01-source-ingestion/profiles/battery_dpp_representation_live.yaml

It currently composes:

  • dp_record_metadata
  • traceability_and_life_cycle_events

This is the current broader baseline for the battery-DPP comparison work.

For the first reduced real pass, the narrower identity-focused comparison slice is:

  • canonical example folder: examples/03-reduced-use-case-comparison/
  • use case: examples/03-reduced-use-case-comparison/use_cases/use_case.yaml
  • left profile: examples/03-reduced-use-case-comparison/profiles/left_profile.yaml
  • right profile: examples/03-reduced-use-case-comparison/profiles/right_profile.yaml

This reduced slice composes:

  • dp_record_metadata
  • product_profile
  • traceability_and_life_cycle_events

and is the first validated product-identification comparison slice against the BatteryPass General Product Information model.

A second broader validated slice is also included:

  • canonical example folder: examples/04-extended-use-case-comparison/
  • use case: examples/04-extended-use-case-comparison/use_cases/use_case.yaml
  • left profile: examples/04-extended-use-case-comparison/profiles/left_profile.yaml
  • right profile: examples/04-extended-use-case-comparison/profiles/right_profile.yaml

This slice adds passport version/revision and battery type/classification while keeping the same CE-RISE composed model set.

The two current cross-ecosystem validation notes are:

  • examples/03-reduced-use-case-comparison/notes/comparison_note.md
  • examples/04-extended-use-case-comparison/notes/comparison_note.md

The step-by-step user reference for these examples is in the published example applications guide.

For manual comparison runs, a comparison-ready live pair is included with the same declared scope label:

  • examples/02-structural-comparison/profiles/metadata_slice_left_live.yaml
  • examples/02-structural-comparison/profiles/metadata_slice_right_live.yaml
  • examples/02-structural-comparison/alignments/metadata_slice_alignment.yaml as a starting-point alignment example

Typical flow:

bash
./scripts/run-local.sh assess --profile examples/02-structural-comparison/profiles/metadata_slice_left_live.yaml --output /tmp/left.json./scripts/run-local.sh assess --profile examples/02-structural-comparison/profiles/metadata_slice_right_live.yaml --output /tmp/right.json./scripts/run-local.sh compare --left /tmp/left.json --right /tmp/right.json

With an explicit analyst-authored alignment:

bash
./scripts/run-local.sh compare \  --left /tmp/left.json \  --right /tmp/right.json \  --alignment examples/02-structural-comparison/alignments/metadata_slice_alignment.yaml

When an alignment file is provided, the comparison result now includes two alignment-oriented views:

  • evaluated_pairs Full per-pair presence status for every declared equivalence.

  • ranked_alignment_observations Review-oriented gaps for any declared pair that is only present on one side or missing on both sides.

So the main things to inspect in an alignment-aware comparison result are:

  • alignment_coverage_ratio
  • evaluated_pairs
  • ranked_alignment_observations

If that comparison result is then passed into prioritize, those alignment gaps can also appear directly as ranked improvement targets.

The current analytical core is still conservative by design, but it now goes beyond token matching alone:

  • contradiction detection covers direct cardinality conflicts and datatype-versus-object-reference conflicts
  • item coverage uses SHACL path, owner-shape, and target-class evidence
  • join coverage can be satisfied by a shared owner shape, an explicit cross-shape object-reference path, or record-level retrieval context when that is the intended analytical interpretation

Repository layout

  • src/dpawb/: package, CLI, and analytical operations
  • src/dpawb/data/: bundled schemas, vocabularies, and templates
  • fixtures/: synthetic repository-local models, profiles, use cases, and alignments for tests only
  • examples/01-source-ingestion/: source-ingestion profiles, use cases, and alignments for manual runs
  • examples/03-reduced-use-case-comparison/: self-contained aligned use-case comparison examples
  • examples/05-composition-recommendation/: self-contained composition recommendation example
  • scripts/: repo-native execution and test helpers
  • .github/workflows/validate.yml and .forgejo/workflows/validate.yml: CI validation via the repo-native path

License

Licensed under the European Union Public Licence v1.2 (EUPL-1.2).

Contributing

This repository is maintained on Codeberg — the canonical source of truth. The GitHub repository is a read mirror used for release archival and Zenodo integration. Issues and pull requests should be opened on Codeberg.


[EU emblem]

Funded by the European Union under Grant Agreement No. 101092281 — CE-RISE.
Views and opinions expressed are those of the author(s) only and do not necessarily reflect those of the European Union or the granting authority (HADEA). Neither the European Union nor the granting authority can be held responsible for them.

© 2026 CE-RISE consortium.
Licensed under the European Union Public Licence v1.2 (EUPL-1.2).
Attribution: CE-RISE project (Grant Agreement No. 101092281) and the individual authors/partners as indicated.

[NILU logo]

Developed by NILU (Riccardo Boero — [email protected]) within the CE-RISE project.

Source: README.md at commit 06427fb

Tools

0
SourceWeft has not started this package in its sandbox yet, so its tools are not known.

Version history

1
  1. v0.1.2LatestSep 16, 2026

Score

50% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts

    Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.

  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts

Other Passport integrations