Odgs Mcp Server

com.metricprovenance由 metricprovenance.com 發布v0.3.3更新於 Nov 3, 2026

ODGS governance enforcement — validation, regulation compilation, drift detection, signed S-Certs.

已驗證STDIO僅桌面安全與監控資料與分析

概覽

AI 產生的概覽

本機 stdio MCP 伺服器,依 ODGS 治理規則驗證資料承載、簽發簽章 S-Cert,並評估治理成熟度。

可以做什麼
  • 依 ODGS 治理規則驗證單筆或批次資料承載,並產生簽章 S-Cert
  • 依 ISO/IEC 38505-1 與 25012 的八個支柱給出 0–100 成熟度分數與落差分析,並執行一致性自我檢查
  • 列出可用的認證法規包,持有授權時可下載並快取到本機
  • 將法規文字編譯為通過驗證的規則 JSON,偵測語意漂移與規則衝突,並把 S-Cert 轉寫成可讀的稽核敘述
  • 從資料目錄產生實體資料對應,企業版可預覽從資料存放區擷取規則
適用情境
適合資料管線需要在執行時對照治理或法規規則檢查、並留下可稽核簽章紀錄時使用,也適合快速評估治理專案的成熟度。免費社群版無需註冊即可完成驗證、評分與一致性檢查。
執行需求
以本機 Python 程序執行,從 PyPI 安裝(pip install odgs-mcp-server),在 MCP 用戶端以 stdio 設定。ODGS_PROJECT_ROOT 指向存放治理定義的專案,預設為目前工作目錄。授權工具需要 ODGS_API_KEY;選用的 ODGS_REGISTRY_URL 與 ODGS_CACHE_DIR 控制金鑰驗證與規則包快取。完整支柱評分需安裝 odgs-maturity 套件。
安裝前請注意
授權工具需要付費的 Certified Pack 授權與 ODGS_API_KEY,該金鑰會傳送到廠商註冊服務驗證,並在本機快取 24 小時。授權工具會下載並快取規則包,並寫入本機專案。企業版規則擷取工具標示為預覽狀態、尚待驗證。README 聲稱驗證完全在本機進行,但金鑰驗證會連線廠商註冊服務。

安裝

在 SourceWeft 中

  1. 開啟 儀表板中的 Odgs Mcp Server,將其新增到工作區。
  2. 為需要使用其工具的對話啟用該服務。

Desktop only,透過 STDIO。 STDIO 服務會啟動本機處理程序,因此需要 SourceWeft 桌面主機。

其他 MCP 客戶端

參照 儲存庫 中的啟動說明。

README

Open Data Governance Standard (ODGS) — MCP Server

Deterministic governance enforcement at the AI agent boundary.

[Protocol] [MCP Server] [PyPI Downloads] [Python] [License]


For engineers: See Quick Start below, or the guided walkthrough at metricprovenance.com/start.
For compliance and risk officers: The ODGS engine generates cryptographic audit trails (S-Certs).
For architectural clearance and certified packs: metricprovenance.com/#suite

See it in action

[Watch an AI agent run governance_score through this MCP server]

Eight ISO/IEC 38505-1 & ISO/IEC 25012 pillars scored in about ten minutes — real MCP server, real maturity engine, click to watch on GitHub.


[!IMPORTANT] ODGS MCP Server v0.3.4 — Maturity Diagnostics + Certified Pack Access governance_score now delegates to the odgs-maturity 8-pillar ISO/IEC 38505-1 & ISO/IEC 25012 engine. Regulatory compilation, drift detection, and catalog synchronisation require a Certified Pack licence. The community tier — validation, scoring, conformance checking — remains open with no registration.


Core Capabilities

ChangeDetail
governance_scoreDelegates to odgs-maturity (8-pillar ISO/IEC 38505-1 & ISO/IEC 25012) when installed; falls back to built-in heuristic. Returns 0–100 score with per-pillar gap analysis.
AuthGateCommunity / Professional / Enterprise access via API key validation. 24h disk cache; workspace.yaml fallback for air-gapped deployments.
Licensed toolscompile_regulation, check_drift, detect_conflicts, narrate_audit, discover_bindings (Professional); harvest_sovereign_rules (Enterprise).

The European Data Governance Maturity Benchmark 2026 recorded an average maturity of 37.6% across 99 enterprises — a 62.4% gap against current regulatory expectation. governance_score applies the same assessment methodology to your project.


What This Is

The ODGS MCP Server connects any MCP-compatible AI agent to the ODGS Sovereign Validation Engine. The engine evaluates data operations against governance rules at runtime and produces S-Certs (Sovereign Certificates) — cryptographically signed, machine-verifiable records that a governance rule was applied.

This is the bridge between probabilistic AI inference and deterministic governance enforcement.

EU AI Act & High-Risk AI Systems

Organisations operating High-Risk AI Systems under EU AI Act Articles 10 and 12 require demonstrable, auditable data governance at the pipeline level. S-Certs provide that audit trail in a format suitable for regulatory submission.

Certified Sovereign Packs and the S-Cert Registry are available through Metric Provenance certified implementation partners. For architectural assessment: metricprovenance.com/#suite.


Capabilities

  • Runtime validation: Data payloads are evaluated against sovereign governance rules at call time; each evaluation produces a signed S-Cert.
  • Governance maturity scoring: 8-pillar ISO/IEC 38505-1 & ISO/IEC 25012 assessment (0–100) with per-pillar gap analysis, aligned to the European Governance Maturity Benchmark methodology.
  • Regulatory compilation (licensed): Converts legislative text — EU AI Act, DORA, GDPR — into validated ODGS rule JSON.
  • Semantic drift detection (licensed): Identifies definitional drift between governance artefacts across versions.
  • Enterprise catalog integration (licensed): Harvests and mints sovereign rules from Databricks, Snowflake, and Collibra via the Flint Bridge.

Quick Start

bash
# Core validation capabilities (free, no account needed)pip install odgs-mcp-server
# With maturity scoringpip install odgs-mcp-server odgs-maturity
# Complete installation with LLM bridge capabilitiespip install "odgs-mcp-server[llm]"

Client Configuration

The server operates over standard stdio transport, making it instantly compatible with any MCP client.

Claude Desktop

Add to claude_desktop_config.json:

json
{  "mcpServers": {    "odgs-governance": {      "command": "odgs-mcp-server",      "args": ["--transport", "stdio"],      "env": {        "ODGS_PROJECT_ROOT": "/path/to/your/odgs/project"      }    }  }}
Cursor

Add to .cursor/mcp.json:

json
{  "mcpServers": {    "odgs-governance": {      "command": "odgs-mcp-server",      "args": ["--transport", "stdio"],      "env": {        "ODGS_PROJECT_ROOT": "/path/to/your/odgs/project"      }    }  }}

Licensed Tool Access

Regulatory compilation, certified packs, and catalog synchronisation require a Certified Pack licence. Provide the issued API key in your client configuration:

json
"env": {  "ODGS_API_KEY": "sk-odgs-...",  "ODGS_PROJECT_ROOT": "/path/to/your/odgs/project"}

Enterprise Rollout & Certified Packs — see metricprovenance.com/#suite or read the Executive Brief:

EditionScopeIncludes
Open-Source CoreFree (Apache 2.0)validate_payload, governance_score, list_packs, conformance_check — no registration
Production Pilot & Air-Gapped HubEnterprise RolloutSigned .odgs-bundle Regulation Packs (EU AI Act, DORA, CSRD), Policy Studio, and Catalog Sync

Tools Reference

Community (Free — no API key required)

ToolDescription
validate_payloadValidate data against ODGS governance rules, produce S-Cert
validate_batchValidate multiple payloads in one call
list_packsList available Certified Regulation Packs
governance_scoreScore governance maturity (0–100) across 8 ISO/IEC 38505-1 & 25012 pillars with gap analysis
conformance_checkRun ODGS conformance self-check (L1/L2)

Professional (API Key Required)

ToolDescription
download_packDownload and cache certified regulatory rule packs locally
compile_regulationConvert regulation text → validated ODGS rule JSON
check_driftDetect semantic drift in governance definitions
detect_conflictsFind contradictions between regulatory rules
narrate_auditConvert S-Cert → human-readable narrative
discover_bindingsAuto-generate physical data mappings from catalogs

Enterprise (API Key Required)

ToolDescription
harvest_sovereign_rules(Flint Bridge) Automatically extract and mint rules from data stores — preview, pending verification against the harvester interface

Architecture

The ODGS MCP Server is designed for zero-trust, local-first execution. All data validation happens strictly on your machine. No sensitive data leaves your perimeter.

mermaid
flowchart TB    Agent[AI Agent\nClaude/Cursor/Custom]        subgraph "ODGS MCP Server"        Auth[AuthGate]        Val[OdgsInterceptor v6]        Maturity[odgs-maturity\n8-pillar ISO 38505/25012]        LLM[OdgsLlmBridge]        Flint[Flint Bridge]    end        Reg[(S-Cert Registry\nregistry.metricprovenance.com)]    Project[(Local ODGS Project)]
    Agent -- "JSON-RPC (stdio)" --> Auth    Auth -- "Validate Key (HTTPS, cached 24h)" --> Reg    Auth --> Val    Auth --> Maturity    Auth --> LLM    Auth --> Flint        Val -- "Reads Rules" --> Project    Val -- "Generates" --> SCert[S-Cert]    Maturity -- "Scores pillars" --> Project    LLM -- "Compiles Regulations" --> Project    Flint -- "Harvests Sovereign Rules" --> Project

Certified Regulation Packs

Cryptographically signed rule bundles, each mapped to a specific regulatory instrument. Packs are compiled from authoritative legislative text and certified by Metric Provenance.

PackRegulationStatus
EU AI ActRegulation (EU) 2024/1689✅ Certified
DORADigital Operational Resilience Act✅ Certified
GDPRGeneral Data Protection Regulation✅ Certified
CSRDCorporate Sustainability Reporting Directive✅ Certified
NIS2Network and Information Security Directive✅ Certified
Basel IIIBasel Committee on Banking Supervision✅ Certified

Full catalogue of 15+ packs. Licensing and deployment via metricprovenance.com/#suite.


Environment Variables

VariableDescriptionDefault
ODGS_PROJECT_ROOTPath to ODGS governance definitionsCurrent directory
ODGS_API_KEYAPI key for Professional/Enterprise accessNone (community)
ODGS_REGISTRY_URLRegistry endpoint for key validationhttps://registry.metricprovenance.com
ODGS_CACHE_DIRLocal cache for downloaded packs~/.odgs/cache

About ODGS

The Open Data Governance Standard (ODGS) is an open protocol for deterministic data governance enforcement. ODGS is on a path toward formal standardization.

Licence

Apache 2.0 — see LICENSE.

The protocol engine and MCP server are open source. Certified Regulation Packs are issued under a commercial licence.

來源:README.md,提交 fa2cad9

工具

0
SourceWeft 尚未在沙箱中啟動過該軟體包,因此其工具未知。

版本歷史

1
  1. v0.3.3最新Sep 16, 2026

評分

已滿足適用檢查項的 40%

該評分衡量此收錄條目的完整程度,依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價,也不表示伺服器安全或目前可用:可連通性是帶日期的檢查結果,評分也不包含安裝量或使用者評價。

  • 近 30 天內可連通25 分

    請保持端點能夠回應 MCP 握手;SourceWeft 每 30 天探測一次。

  • 已宣告認證方式10 分

    請在註冊中心條目中宣告憑證請求標頭,或保持端點能夠回應探測,以便判定其認證方式。

  • 已列出工具15 分

    請讓伺服器在無憑證時回應 tools/list,或發布可在沙箱中無憑證啟動的軟體包。

  • 描述必需15 分
  • 圖示10 分
  • 文件15 分
  • 授權條款10 分

    請在儲存庫或註冊中心條目中宣告授權條款。