Agentos

io.github.imran-siddique由 GitHub 帳號 imran-siddique 發布v1.0.1更新於 Oct 24, 2026

Build and manage policy-compliant AI agents with safety enforcement and compliance checking

已驗證STDIO僅桌面開發者工具安全與監控 AI 與機器學習

服務詳細資訊

識別碼: io.github.imran-siddique/agentos
傳輸: STDIO
執行環境: Desktop only
信任: Verified
發布於: Sep 16, 2026

安全提示

MCP 服務會接收對話中的工具呼叫請求，並可能執行外部操作。啟用前請先了解該服務能做什麼，並只授予它所需的權限。

註冊中心已驗證此條目所屬的 GitHub 帳號 imran-siddique。這並不表明該帳號就是產品方。

SourceWeft 的檢查只涵蓋條目是否完整、端點是否回應；不審查伺服器的程式碼，也不審查其工具的行為。

在 README 中新增徽章

向讀者展示該 MCP 服務已收錄於 SourceWeft，徽章連結到本頁。

[![Listed on SourceWeft](https://sourceweft.com/badge/mcp/io.github.imran-siddique%2Fagentos.svg)](https://sourceweft.com/mcp/io.github.imran-siddique%2Fagentos?utm_source=readme&utm_medium=badge)

概覽

AI 產生的概覽

本機 MCP 伺服器，用來建立、測試、部署與稽核符合政策的 AI 代理，內建安全政策與合規檢查。

可以做什麼: 代理管理：依自然語言描述建立代理、附加安全政策、以試跑方式測試、部署到本機或雲端，並檢視狀態與指標。政策：依描述建立自訂政策，瀏覽內建政策與合規範本。審批：為敏感操作建立審批請求。稽核與合規：查詢稽核紀錄，並依 SOC 2、GDPR、HIPAA、PCI DSS 等框架檢查代理。範本：瀏覽代理與政策範本庫。
適用情境: 適合想讓助理建立具防護機制的自主代理、在部署前進行試跑測試，或為代理工作流程產生稽核與合規報告的情境。若只需要一次簡單的工具呼叫，則不太相關。
執行需求: 透過 stdio 在本機執行，通常使用 npx agentos-mcp-server，因此需要 Node.js。選用環境變數：AGENTOS_POLICY_MODE（strict 或 permissive）、AGENTOS_LOG_LEVEL、AGENTOS_DATA_DIR，以及供雲端功能使用的 AGENTOS_API_KEY。資料預設儲存在本機資料目錄。

安裝前請注意

部署代理會啟動對真實資料（包括郵件、檔案、資料庫與雲端儲存）執行操作的自动化，請先以試跑模式測試。permissive 政策模式僅對違規發出警告，strict 較安全。雲端功能需要 AGENTOS_API_KEY。稽核紀錄與代理設定會寫入本機資料目錄。

安裝

在 SourceWeft 中

開啟儀表板中的 Agentos，將其新增到工作區。
為需要使用其工具的對話啟用該服務。

Desktop only，透過 STDIO。 STDIO 服務會啟動本機處理程序，因此需要 SourceWeft 桌面主機。

其他 MCP 客戶端

參照儲存庫中的啟動說明。

README

AgentOS MCP Server

Build safe AI agents with natural language and 0% policy violations

[圖片]

[npm version] [MCP Registry] [License: MIT]

Part of Agent OS - Kernel-level governance for AI agents

🚀 Quick Install

npm: agentos-mcp-server
MCP Registry: io.github.imran-siddique/agentos

Overview

AgentOS MCP Server brings the complete Agent OS safety framework to any MCP-compatible AI assistant including Claude Desktop, GitHub Copilot, Cursor, and more. Create, deploy, and manage policy-compliant autonomous agents through natural conversation.

┌─────────────────────────────────────────────────────────────┐│           Claude Desktop / Copilot / Cursor                  ││  ┌────────────────────────────────────────────────────────┐ ││  │            "Create an agent that..."                    │ ││  └──────────────────────┬─────────────────────────────────┘ │└─────────────────────────┼───────────────────────────────────┘                          │ MCP Protocol            ┌─────────────▼─────────────┐            │   🛡️ AgentOS MCP Server   │            │                           │            │  • 10 Tools              │            │  • Policy Engine         │            │  • Approval Workflows    │            │  • Audit Logging         │            │  • Template Library      │            └─────────────┬─────────────┘                          │      ┌───────────────────┼───────────────────┐      │                   │                   │┌─────▼─────┐      ┌──────▼──────┐     ┌─────▼─────┐│  Agents   │      │  Policies   │     │  Audit    ││  (Local)  │      │  (Enforced) │     │  (Logged) │└───────────┘      └─────────────┘     └───────────┘

┌─────────────────────────────────────────────────────────────┐│           Claude Desktop / Copilot / Cursor                  ││  ┌────────────────────────────────────────────────────────┐ ││  │            "Create an agent that..."                    │ ││  └──────────────────────┬─────────────────────────────────┘ │└─────────────────────────┼───────────────────────────────────┘                          │ MCP Protocol            ┌─────────────▼─────────────┐            │   🛡️ AgentOS MCP Server   │            │                           │            │  • 10 Tools              │            │  • Policy Engine         │            │  • Approval Workflows    │            │  • Audit Logging         │            │  • Template Library      │            └─────────────┬─────────────┘                          │      ┌───────────────────┼───────────────────┐      │                   │                   │┌─────▼─────┐      ┌──────▼──────┐     ┌─────▼─────┐│  Agents   │      │  Policies   │     │  Audit    ││  (Local)  │      │  (Enforced) │     │  (Logged) │└───────────┘      └─────────────┘     └───────────┘

✨ Features

🤖 Natural Language Agent Creation

User: Create an agent that processes customer feedback from support emails daily
Claude: ✅ Agent Created Successfully!
Agent: customer-feedback-processor✅ Data Source: Email inbox via IMAP✅ Processing: Sentiment analysis + categorization✅ Output: Daily summary to Slack✅ Schedule: Every day at 9 AM
Safety Policies Applied:🛡️ PII Protection: Customer emails/names anonymized🛡️ Rate Limiting: Max 1000 emails per run🛡️ Human Review: Negative sentiment cases flagged

User: Create an agent that processes customer feedback from support emails daily
Claude: ✅ Agent Created Successfully!
Agent: customer-feedback-processor✅ Data Source: Email inbox via IMAP✅ Processing: Sentiment analysis + categorization✅ Output: Daily summary to Slack✅ Schedule: Every day at 9 AM
Safety Policies Applied:🛡️ PII Protection: Customer emails/names anonymized🛡️ Rate Limiting: Max 1000 emails per run🛡️ Human Review: Negative sentiment cases flagged

🛡️ Policy Enforcement with 0% Violations

6 built-in policies (PII, rate-limiting, cost-control, data-deletion, secrets, human-review)
Real-time policy evaluation
Automatic blocking of violations
Clear explanations and alternatives

✅ Human-in-the-Loop Approval Workflows

Risk-based approval requirements
Multi-party approval for critical actions
Email/Slack notifications
Expiration handling

📊 Complete Audit Trail

Every action logged immutably
Policy evaluations recorded
Compliance report generation
Export for auditors

📋 Template Library

10+ agent templates (data processor, email assistant, backup, scraper, etc.)
6+ policy templates (GDPR, SOC 2, HIPAA, PCI DSS, etc.)
Industry-specific compliance frameworks

🏛️ Compliance Ready

SOC 2 - Security & availability controls
GDPR - EU data protection
HIPAA - Healthcare data privacy
PCI DSS - Payment card security
CCPA - California privacy
NIST - Cybersecurity framework
ISO 27001 - Information security
FedRAMP - Federal authorization

🚀 Quick Start

Step 1: Configure Claude Desktop

Add to your claude_desktop_config.json:

Windows: %APPDATA%\Claude\claude_desktop_config.json macOS: ~/Library/Application Support/Claude/claude_desktop_config.json Linux: ~/.config/Claude/claude_desktop_config.json

json

{  "mcpServers": {    "agentos": {      "command": "npx",      "args": ["-y", "agentos-mcp-server"],      "env": {        "AGENTOS_POLICY_MODE": "strict"      }    }  }}

{  "mcpServers": {    "agentos": {      "command": "npx",      "args": ["-y", "agentos-mcp-server"],      "env": {        "AGENTOS_POLICY_MODE": "strict"      }    }  }}

Step 2: Restart Claude Desktop

Close and reopen Claude Desktop to load the MCP server.

Step 3: Start Building Agents!

Just ask Claude naturally:

Claude will:

Create the agent with appropriate configuration
Suggest safety policies based on the task
Let you test before deployment
Deploy with monitoring enabled

💬 Example Conversations

Creating a Data Processing Agent

User: I need an agent that processes customer feedback from support emails daily
Claude: ✅ Agent Created Successfully!
Agent: customer-feedback-processorID: a1b2c3d4-e5f6-7890-abcd-ef1234567890Status: draftLanguage: python
Task:Process customer feedback from support emails daily
Workflow Steps:1. connect_email: email.connect2. process_data: execute3. output_results: output
Safety Policies Applied:🛡️ PII Protection: Customer emails/names anonymized🛡️ Rate Limiting: Max 1000 emails per run🛡️ Human Review: Negative sentiment cases flagged
Next Steps:1. Use `test_agent` to run a dry-run test2. Use `attach_policy` to add more safety policies3. Use `deploy_agent` when ready to run

User: I need an agent that processes customer feedback from support emails daily
Claude: ✅ Agent Created Successfully!
Agent: customer-feedback-processorID: a1b2c3d4-e5f6-7890-abcd-ef1234567890Status: draftLanguage: python
Task:Process customer feedback from support emails daily
Workflow Steps:1. connect_email: email.connect2. process_data: execute3. output_results: output
Safety Policies Applied:🛡️ PII Protection: Customer emails/names anonymized🛡️ Rate Limiting: Max 1000 emails per run🛡️ Human Review: Negative sentiment cases flagged
Next Steps:1. Use `test_agent` to run a dry-run test2. Use `attach_policy` to add more safety policies3. Use `deploy_agent` when ready to run

Testing Before Deployment

User: Test this agent with a scenario of processing 100 emails
Claude: ✅ Test PASSED
Agent: customer-feedback-processorScenario: Process 100 customer emailsMode: Dry Run (no changes)
Configuration Check: ✅ ValidWorkflow Check: ✅ Valid (3 steps)
Policy Evaluation: ✅ No violations detected
Warnings:⚠️  PII access logged
Resource Estimates:- Duration: ~30 seconds- Cost: $0.05
Next Step: Use `deploy_agent` to deploy this agent.

User: Test this agent with a scenario of processing 100 emails
Claude: ✅ Test PASSED
Agent: customer-feedback-processorScenario: Process 100 customer emailsMode: Dry Run (no changes)
Configuration Check: ✅ ValidWorkflow Check: ✅ Valid (3 steps)
Policy Evaluation: ✅ No violations detected
Warnings:⚠️  PII access logged
Resource Estimates:- Duration: ~30 seconds- Cost: $0.05
Next Step: Use `deploy_agent` to deploy this agent.

Checking Compliance

User: Check if this agent is SOC 2 compliant
Claude: # Compliance Report: SOC2
Agent: customer-feedback-processorFramework: SOC2Date: 2026-01-30
## Summary✅ COMPLIANTScore: 100% (4/4 controls passed)
## Control Assessment
✅ CC6.1: Logical Access Controls   Restrict logical access to information assets   Evidence: Policy enforcement enabled, Access logging active
✅ CC6.6: Security Event Monitoring   Detect and respond to security events   Evidence: Audit logging enabled, Event timestamps recorded
✅ CC7.2: Incident Response   Respond to security incidents   Evidence: Human review enabled, Escalation procedures in place
✅ CC8.1: Change Management   Manage changes to system components   Evidence: Deployment approval required, Version control enabled

User: Check if this agent is SOC 2 compliant
Claude: # Compliance Report: SOC2
Agent: customer-feedback-processorFramework: SOC2Date: 2026-01-30
## Summary✅ COMPLIANTScore: 100% (4/4 controls passed)
## Control Assessment
✅ CC6.1: Logical Access Controls   Restrict logical access to information assets   Evidence: Policy enforcement enabled, Access logging active
✅ CC6.6: Security Event Monitoring   Detect and respond to security events   Evidence: Audit logging enabled, Event timestamps recorded
✅ CC7.2: Incident Response   Respond to security incidents   Evidence: Human review enabled, Escalation procedures in place
✅ CC8.1: Change Management   Manage changes to system components   Evidence: Deployment approval required, Version control enabled

Creating Custom Policies

User: Create a policy that blocks access to customer credit card data
Claude: ✅ Custom Policy Created
Policy: Block Access To CustomerID: custom-a1b2c3d4Category: security
Description:Block access to customer credit card data
Rules Generated (1):
🟠 custom_block_rule [high]   Block actions based on: block access to customer credit card data   Action: deny
Usage:1. Attach to agent: `attach_policy` with policyId "custom-a1b2c3d4"2. Test enforcement: `test_agent` with policy scenarios3. View active policies: `get_agent_status`

User: Create a policy that blocks access to customer credit card data
Claude: ✅ Custom Policy Created
Policy: Block Access To CustomerID: custom-a1b2c3d4Category: security
Description:Block access to customer credit card data
Rules Generated (1):
🟠 custom_block_rule [high]   Block actions based on: block access to customer credit card data   Action: deny
Usage:1. Attach to agent: `attach_policy` with policyId "custom-a1b2c3d4"2. Test enforcement: `test_agent` with policy scenarios3. View active policies: `get_agent_status`

🔧 Available Tools

Tool	Description
`create_agent`	Create agent from natural language description
`attach_policy`	Attach safety policies to agents
`test_agent`	Dry-run test before deployment
`deploy_agent`	Deploy agent locally or to cloud
`get_agent_status`	Get agent status and metrics
`list_templates`	Browse agent and policy templates
`request_approval`	Create approval request for sensitive actions
`audit_log`	Query audit trail
`create_policy`	Create custom policy from description
`check_compliance`	Check against compliance frameworks

Tool Details

`create_agent`

Create a new AI agent from a natural language description with automatic policy recommendations.

Parameters:

Parameter	Type	Required	Description
`description`	string	✅	Natural language description of agent task
`policies`	string[]		Policy templates to apply
`approvalRequired`	boolean		Require human approval before execution
`language`	string		`python`, `typescript`, `javascript`, `go`
`schedule`	string		Cron schedule for recurring execution

`attach_policy`

Attach safety policies to an agent with conflict detection.

Parameters:

`test_agent`

Run a dry-run test with simulated scenarios.

Parameters:

`deploy_agent`

Deploy an agent to local or cloud environment.

Parameters:

`check_compliance`

Check an agent against regulatory frameworks.

Parameters:

📋 Policy Templates

Built-in Security Policies

Policy ID	Name	Description
`pii-protection`	PII Protection	Protects personally identifiable information (GDPR)
`rate-limiting`	Rate Limiting	Prevents resource abuse through rate limits
`cost-control`	Cost Control	Prevents runaway costs from automation
`data-deletion`	Data Deletion Safety	Prevents accidental data loss
`secrets-protection`	Secrets Protection	Prevents exposure of credentials
`human-review`	Human Review Required	Requires approval for sensitive actions

Compliance Templates

Template ID	Framework	Description
`gdpr-compliance`	GDPR	EU General Data Protection Regulation
`soc2-security`	SOC 2	SOC 2 Type II security controls
`hipaa-healthcare`	HIPAA	Healthcare data privacy (PHI protection)
`pci-dss-payments`	PCI DSS	Payment card data security
`read-only-access`	Security	Restricts database to read-only
`production-safety`	Operations	Extra safeguards for production

🤖 Agent Templates

Data Processing

Template	Description	Default Policies
`data-processor`	Processes and transforms data files	rate-limiting, cost-control
`web-scraper`	Scrapes websites for data collection	rate-limiting, cost-control
`report-generator`	Generates periodic reports	pii-protection, rate-limiting

Communication

Infrastructure

Template	Description	Default Policies
`backup-agent`	Backs up files to cloud storage	cost-control
`api-monitor`	Monitors API health and performance	rate-limiting
`file-organizer`	Organizes files based on rules	data-deletion

Analytics

⚙️ Configuration

Environment Variables

Variable	Description	Default
`AGENTOS_API_KEY`	API key for cloud features	(none)
`AGENTOS_POLICY_MODE`	`strict` or `permissive`	`strict`
`AGENTOS_DATA_DIR`	Local data directory	`.agentos`
`AGENTOS_LOG_LEVEL`	`debug`, `info`, `warn`, `error`	`info`

Policy Modes

Data Storage

All data is stored locally in the AGENTOS_DATA_DIR:

.agentos/├── agents/           # Agent configurations│   └── {id}.json├── approvals/        # Approval requests│   └── {id}.json└── audit/            # Audit logs (JSONL format)    └── {date}.jsonl

.agentos/├── agents/           # Agent configurations│   └── {id}.json├── approvals/        # Approval requests│   └── {id}.json└── audit/            # Audit logs (JSONL format)    └── {date}.jsonl

🏗️ Architecture

┌─────────────────────────────────────────────────────────────┐│                     Claude Desktop                           ││  ┌────────────────────────────────────────────────────────┐ ││  │                    Claude AI Model                      │ ││  │     Natural language understanding & orchestration      │ ││  └──────────────────────┬─────────────────────────────────┘ ││                         │ MCP Protocol                       ││  ┌──────────────────────▼─────────────────────────────────┐ ││  │                    MCP Client                           │ ││  │          Tool discovery & request handling              │ ││  └──────────────────────┬─────────────────────────────────┘ │└─────────────────────────┼───────────────────────────────────┘                          │ stdio┌─────────────────────────▼───────────────────────────────────┐│               @agentos/mcp-server (Node.js)                 ││  ┌────────────────────────────────────────────────────────┐ ││  │                    MCP Server                           │ ││  │            Tool/Resource/Prompt handlers                │ ││  └────────────────────────────────────────────────────────┘ ││  ┌──────────┐ ┌──────────┐ ┌──────────┐ ┌───────────────┐  ││  │  Agent   │ │  Policy  │ │ Approval │ │    Audit      │  ││  │ Manager  │ │  Engine  │ │ Workflow │ │   Logger      │  ││  └──────────┘ └──────────┘ └──────────┘ └───────────────┘  ││  ┌────────────────────────────────────────────────────────┐ ││  │              Template Library (50+ templates)           │ ││  └────────────────────────────────────────────────────────┘ │└─────────────────────────────────────────────────────────────┘                          │ HTTPS (optional)┌─────────────────────────▼───────────────────────────────────┐│              AgentOS Cloud Platform (Future)                ││     • Persistent storage  • Multi-tenant  • Enterprise      │└─────────────────────────────────────────────────────────────┘

┌─────────────────────────────────────────────────────────────┐│                     Claude Desktop                           ││  ┌────────────────────────────────────────────────────────┐ ││  │                    Claude AI Model                      │ ││  │     Natural language understanding & orchestration      │ ││  └──────────────────────┬─────────────────────────────────┘ ││                         │ MCP Protocol                       ││  ┌──────────────────────▼─────────────────────────────────┐ ││  │                    MCP Client                           │ ││  │          Tool discovery & request handling              │ ││  └──────────────────────┬─────────────────────────────────┘ │└─────────────────────────┼───────────────────────────────────┘                          │ stdio┌─────────────────────────▼───────────────────────────────────┐│               @agentos/mcp-server (Node.js)                 ││  ┌────────────────────────────────────────────────────────┐ ││  │                    MCP Server                           │ ││  │            Tool/Resource/Prompt handlers                │ ││  └────────────────────────────────────────────────────────┘ ││  ┌──────────┐ ┌──────────┐ ┌──────────┐ ┌───────────────┐  ││  │  Agent   │ │  Policy  │ │ Approval │ │    Audit      │  ││  │ Manager  │ │  Engine  │ │ Workflow │ │   Logger      │  ││  └──────────┘ └──────────┘ └──────────┘ └───────────────┘  ││  ┌────────────────────────────────────────────────────────┐ ││  │              Template Library (50+ templates)           │ ││  └────────────────────────────────────────────────────────┘ │└─────────────────────────────────────────────────────────────┘                          │ HTTPS (optional)┌─────────────────────────▼───────────────────────────────────┐│              AgentOS Cloud Platform (Future)                ││     • Persistent storage  • Multi-tenant  • Enterprise      │└─────────────────────────────────────────────────────────────┘

🔒 Security

Feature	Description
Policy Enforcement	All actions validated against policies before execution
Data Redaction	Sensitive data automatically redacted from logs
Secret Protection	Secrets never stored in plain text
Audit Trail	Complete immutable log for compliance
Human Approval	Required for high-risk operations
Local-First	All data stored locally by default

💻 Development

Local Development

bash

# Clone the repositorygit clone https://github.com/imran-siddique/agent-oscd agent-os/packages/mcp-server
# Install dependenciesnpm install
# Buildnpm run build
# Run in stdio mode (for Claude Desktop)npm start -- --stdio
# Run in HTTP mode (for development)npm start -- --http --port 3000

# Clone the repositorygit clone https://github.com/imran-siddique/agent-oscd agent-os/packages/mcp-server
# Install dependenciesnpm install
# Buildnpm run build
# Run in stdio mode (for Claude Desktop)npm start -- --stdio
# Run in HTTP mode (for development)npm start -- --http --port 3000

Project Structure

packages/mcp-server/├── src/│   ├── index.ts              # Main entry point│   ├── cli.ts                # CLI with --stdio/--http modes│   ├── server.ts             # MCP server implementation│   ├── tools/                # 10 MCP tools│   │   ├── create-agent.ts│   │   ├── attach-policy.ts│   │   ├── test-agent.ts│   │   ├── deploy-agent.ts│   │   ├── get-agent-status.ts│   │   ├── list-templates.ts│   │   ├── request-approval.ts│   │   ├── audit-log.ts│   │   ├── create-policy.ts│   │   └── check-compliance.ts│   ├── services/             # Core business logic│   │   ├── agent-manager.ts│   │   ├── policy-engine.ts│   │   ├── approval-workflow.ts│   │   ├── audit-logger.ts│   │   └── template-library.ts│   ├── prompts/              # MCP prompts│   └── types/                # TypeScript definitions├── package.json├── tsconfig.json└── README.md

packages/mcp-server/├── src/│   ├── index.ts              # Main entry point│   ├── cli.ts                # CLI with --stdio/--http modes│   ├── server.ts             # MCP server implementation│   ├── tools/                # 10 MCP tools│   │   ├── create-agent.ts│   │   ├── attach-policy.ts│   │   ├── test-agent.ts│   │   ├── deploy-agent.ts│   │   ├── get-agent-status.ts│   │   ├── list-templates.ts│   │   ├── request-approval.ts│   │   ├── audit-log.ts│   │   ├── create-policy.ts│   │   └── check-compliance.ts│   ├── services/             # Core business logic│   │   ├── agent-manager.ts│   │   ├── policy-engine.ts│   │   ├── approval-workflow.ts│   │   ├── audit-logger.ts│   │   └── template-library.ts│   ├── prompts/              # MCP prompts│   └── types/                # TypeScript definitions├── package.json├── tsconfig.json└── README.md

Running Tests

📊 Performance

📜 License

MIT License - see LICENSE.

Build safe AI agents with AgentOS

GitHub · Documentation · Report Issue

Made with 🛡️ by the Agent OS team

來源：extensions/mcp-server/README.md，提交 a7ee6eb

工具

SourceWeft 尚未在沙箱中啟動過該軟體包，因此其工具未知。

版本歷史

v1.0.1最新Sep 16, 2026

評分

已滿足適用檢查項的 50%

該評分衡量此收錄條目的完整程度，依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價，也不表示伺服器安全或目前可用：可連通性是帶日期的檢查結果，評分也不包含安裝量或使用者評價。

近 30 天內可連通25 分
請保持端點能夠回應 MCP 握手；SourceWeft 每 30 天探測一次。
已宣告認證方式10 分
請在註冊中心條目中宣告憑證請求標頭，或保持端點能夠回應探測，以便判定其認證方式。
已列出工具15 分
請讓伺服器在無憑證時回應 tools/list，或發布可在沙箱中無憑證啟動的軟體包。
描述必需15 分
圖示10 分
文件15 分
授權條款10 分

Template	Description	Default Policies
`email-assistant`	Monitors and processes emails	pii-protection, human-review
`slack-bot`	Automated Slack notifications	human-review, rate-limiting

Template	Description	Default Policies
`database-analyst`	Queries databases and generates reports	data-deletion, pii-protection
`content-moderator`	Moderates user-generated content	human-review, pii-protection

Metric	Target
MCP server startup	<2 seconds
Tool response time	<500ms (p95)
Memory footprint	<100MB
Policy evaluation	<50ms

Parameter	Type	Required	Description
`agentId`	string	✅	Agent ID to check
`framework`	string	✅	`SOC2`, `GDPR`, `HIPAA`, `PCI_DSS`, `CCPA`, `NIST`, `ISO27001`, `FEDRAMP`
`generateReport`	boolean		Generate detailed report

Mode	Behavior
strict	Any policy violation blocks the action
permissive	Only critical violations block (warnings logged)