Dingdawg Governance

io.github.dingdawgPublished by GitHub account dingdawgv2.1.6Updated Oct 24, 2026

Universal governance layer for AI agents. MCP-native, fail-closed, audit proofs and rollback.

VerifiedSTDIODesktop onlyDeveloper ToolsSecurity & Monitoring

Overview

AI-generated overview

Governance layer for AI agents that validates actions before they run, issues cryptographic receipts, and supports rollback and audit reports.

What you can do
  • Validate proposed actions against policy before execution, returning approved, flagged or blocked with a risk score
  • Generate tamper-evident receipts for completed actions and query or export them by date, agent, action type or status
  • Snapshot state before high-risk operations and roll back a file write by receipt ID
  • Produce SOC 2 or ISO 27001-aligned audit reports as signed PDF or JSON
  • Check current tier, daily usage, quota and active governance alerts
When to use it
Use it when an agent performs writes, shell commands or other state-changing operations and you want a pre-execution policy gate, an auditable trail of what it did, and a way to undo changes. Also relevant for teams that need compliance-style audit reports from agent activity.
Requirements
Runs locally as an npm package over stdio, started with npx. Requires a Dingdawg API key supplied in the DINGDAWG_API_KEY environment variable; the README says a free key is available after authenticating. Network access to the Dingdawg service is implied by receipts, verification URLs and audit reports.
Before you install
Requires an API key stored in DINGDAWG_API_KEY, and the service is hosted, so action metadata is sent to a third party. Paid tiers are listed at $29/mo and $149/mo with daily action limits and rollback windows on the free tier. Rollback restores prior state and can overwrite current files, so verify receipt IDs before undoing. The manifest lists no tools, so confirm the actual tool set after connecting.

Installation

In SourceWeft

  1. Open Dingdawg Governance in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

DingDawg Governance

[npm version] [npm downloads] [License: MIT]

Every AI action receipted. Capability-gated. Rollback-ready.

AI Governance-as-a-Service via MCP. Every write, shell command, and state-changing operation your agent makes is validated before it runs and cryptographically receipted after it completes — giving you a tamper-evident audit trail you can query, export, or roll back at any time.

Works with Claude Code, Codex, Cursor, Windsurf, and any MCP-compatible agent.

Install

bash
npm install dingdawg-governance

Quick Start

bash
# Authenticate (free — no credit card)npx dingdawg-governance auth login
# Start the governance MCP serverDINGDAWG_API_KEY=your_key npx dingdawg-governance

Add to your MCP client config:

json
{  "mcpServers": {    "dingdawg-governance": {      "command": "npx",      "args": ["dingdawg-governance"],      "env": {        "DINGDAWG_API_KEY": "your_key_here"      }    }  }}

Get your free API key at app.dingdawg.com/settings/api.

What You Get

  • Pre-execution validation — Every action checked against your policy before it runs. Blocked actions never touch your filesystem.
  • Cryptographic receipts — Tamper-evident record for every action with a unique ID, output hash, and public verification URL.
  • One-command rollback — Undo any file write by referencing its receipt ID. Prior state is captured automatically before every write.
  • Real-time trust scores — Behavioral pattern tracking across sessions surfaces anomalies before they become incidents.
  • Compliance reports in seconds — SOC 2 and ISO 27001-aligned audit reports as signed PDF or structured JSON. One API call.

MCP Tools

ToolWhat it does
validate_actionPre-execution check. Returns APPROVED, FLAGGED, or BLOCKED with reason code and risk score.
generate_receiptPost-execution cryptographic receipt with tamper-evident output hash.
capture_rollback_stateSnapshot current state before destructive or high-risk operations.
rollback_actionRestore prior state from a receipt ID.
query_receiptsSearch receipts by date, agent, action type, or status. Export-ready.
check_statusCurrent tier, daily usage, quota, and active governance alerts.
generate_audit_reportOn-demand compliance report — SOC 2, ISO 27001, or custom policy framework.

Plans

PlanGoverned actions/dayRollback windowAudit reports
Free200——
Pro — $29/mo10,00030 daysUnlimited
Business — $149/moUnlimited90 daysCompliance PDF

No credit card to start. Full pricing: dingdawg.com/governance#pricing

Documentation

Full docs at dingdawg.com/governance/docs

Contributing

Issues and pull requests welcome. See CONTRIBUTING.md.

github.com/dingdawg/governance-mcp

Built by DingDawg — Trust layer for the agentic internet.

Source: README.md at commit d9f09b8

Tools

0
SourceWeft has not started this package in its sandbox yet, so its tools are not known.

Version history

1
  1. v2.1.6LatestSep 16, 2026

Score

50% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts

    Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.

  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts