SpineFrame

SpineFrame is a local governance runtime for AI agents, offering signed provenance, compliance audits and OSINT capabilities through an MCP stdio server.

What you can do

Provides a governance runtime for AI agents, covering signed provenance of agent activity, compliance auditing and OSINT work, as described in the registry entry. Runs locally over stdio and reads a providers configuration file plus a run-data directory. No individual tools are listed in the manifest, so the exact operations available are not documented here.

When to use it

Consider it when you need an agent's actions to be recorded with signed provenance, want compliance audits of agent runs, or need OSINT-style investigation support inside an MCP-connected assistant.

Requirements

Runs as a local process on the user's machine, launched with uvx from the spineframe PyPI package, so Python and uv are needed. Two environment variables configure it: SPINEFRAME_CONFIG points to a providers.json config file, and SPINEFRAME_RUNS_DIR sets where run data and artifacts are stored. Desktop only; no authentication is declared.