{"name":"com.moltlinestudio/govern","slug":"moltlinestudio-govern","title":"Moltline Agent Governance","description":"Audit MCP configs and skill files for over-broad scope and injection risk. 6 of 8 free.","url":"https://mcp.market/server/moltlinestudio-govern","rating":null,"grade":"A","score":87,"certified":false,"status":"active","category":"ai","tags":["ai"],"presence":{"score":23,"stars":0,"forks":0,"downloads_week":null,"last_push_at":"2026-09-19T15:00:29.000Z","license":"MIT"},"uptime":{"percent":100,"checks":3,"ok":3,"last_checked_at":"2026-09-20T03:21:08.988Z","last_ok_at":"2026-09-20T03:21:08.988Z","latency_ms":119},"claimed":false,"transport":"remote","callable_via_gateway":true,"default_price_micros":0,"repository":"https://github.com/GarphenGate/moltline-mcp","website":"https://moltlinestudio.com/servers.html#govern","version":"1.2.0","remotes":[{"type":"streamable-http","url":"https://mcp.moltlinestudio.com/govern"}],"packages":[],"tools":[{"name":"agent_readiness_scan","description":"Score a public domain against 21 agent-readiness checks. FREE.\n\nUse when you need to know whether an autonomous agent can discover, read,\nuse or pay a website - your own, or a vendor you are evaluating before\nrecommending it. Typical input {\"domain\": \"example.com\"} returns\n{\"score\": 8, \"total\": 21, \"grade\": \"F\", \"passed\": [...], \"failed\":\n[{\"title\": \"...\", \"detail\": \"...\", \"fix\": \"...\"}], \"report_url\": \"...\"}\nwhere report_url is a permanent shareable page for the same result.\n\nNot for auditing an MCP client configuration (audit_mcp_config) and not\nfor scanning text for injection (injection_scan) - this one reaches out\nover the network and fetches public URLs on a live domain. Errors: on invalid, missing, or malformed input this tool never raises a protocol error — it returns {\"error\": \"<what is wrong and how to fix it>\"} (for example {\"error\": \"The readiness scanner is not reachable right now.\"}). Every call is read-only and idempotent, so after correcting the input it is always safe to retry.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"domain":{"type":"string","description":"A public hostname such as example.com. A full URL is accepted\nand reduced to its host. Hostnames that resolve to private or\ninternal addresses are refused."}},"required":["domain"],"additionalProperties":false}},{"name":"audit_mcp_config","description":"Audit an MCP server config for risk-ranked posture findings. FREE.\n\nFlags exposed machine credentials in the config, required inputs that\naren't gated/optional, unpinned versions, over-broad env access, and\ndangerous auto-run flags. It never echoes any matched secret value back.\nTypical input {\"config\": \"<mcpize.yaml, mcp.json, or a Claude/Cursor\nservers block>\"} returns {\"posture_score\": 0-100, \"verdict\": \"...\",\n\"findings\": [{\"line\": N, \"severity\": 1-5, \"issue\": \"...\", \"fix\": \"...\"}],\n\"note\": \"...\"}.\n\nUse on a server configuration document. Not for a skill or instruction\nfile (audit_skill_file) and not for untrusted content an agent is about to\nread (injection_scan). Errors: on invalid, missing, or malformed input this tool never raises a protocol error — it returns {\"error\": \"<what is wrong and how to fix it>\"}. Every call is read-only and idempotent, so after correcting the input it is always safe to retry.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"config":{"type":"string","description":"The MCP config to audit, pasted as text or JSON —\nmcpize.yaml, mcp.json, or a Claude/Cursor servers block."}},"required":["config"],"additionalProperties":false}},{"name":"audit_skill_file","description":"Audit an agent skill or instruction file before you trust it. FREE.\n\nChecks for governance smells: prompt-injection and guardrail-bypass\nphrasing, concealment instructions ('don't tell the user'), exfiltration\nlanguage, and exposed credential material. Typical input {\"content\":\n\"<SKILL.md, system prompt, or tool description text>\"} returns\n{\"verdict\": \"reject — do not install\" | \"no governance red flags on a\npattern pass\", \"findings\": [{\"severity\": 1-5, \"issue\": \"...\"}],\n\"note\": \"...\"}.\n\nUse before trusting a skill or instruction file that came from outside\nyour own repository. Not for arbitrary untrusted input at run time\n(injection_scan). Errors: on invalid, missing, or malformed input this tool never raises a protocol error — it returns {\"error\": \"<what is wrong and how to fix it>\"}. Every call is read-only and idempotent, so after correcting the input it is always safe to retry.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"content":{"type":"string","description":"Full text of the skill file, system prompt, or tool\ndescription to audit."}},"required":["content"],"additionalProperties":false}},{"name":"get_auditor_persona","description":"Load the Governance Auditor persona for consistent fleet audits. PREMIUM (license).\n\nThe persona is methodical, evidence-driven, and allergic to 'it's\nprobably fine'. Takes no arguments. Returns {\"persona\": ...,\n\"identity\": ..., \"rules\": [\"...\", ...], \"opening_move\": \"...\"} ready to\nadopt as a system prompt.\n\nUse to keep repeated audits consistent in voice and rigor. Not for running\nan audit - the audit tools do that. Errors: on invalid, missing, or malformed input this tool never raises a protocol error — it returns {\"error\": \"<what is wrong and how to fix it>\"}. Every call is read-only and idempotent, so after correcting the input it is always safe to retry.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{},"additionalProperties":false}},{"name":"governance_policy","description":"Generate an audit-ready agent-governance policy for a fleet. PREMIUM (license).\n\nCovers inventory cadence, ownership rules, least-privilege approval\ngates, injection defense, logging/retention, and decommissioning\ntriggers. Typical input {\"fleet_context\": \"20 agents, 3 with shell\naccess, one finance bot\"} returns {\"policy\": ..., \"sections\": {...},\n\"context_note\": ..., \"audit_checklist\": [\"...\", ...]}.\n\nUse when a fleet needs a written policy document. Not for assessing what\nthe fleet currently does (inventory_report, audit_mcp_config). Errors: on invalid, missing, or malformed input this tool never raises a protocol error — it returns {\"error\": \"<what is wrong and how to fix it>\"}. Every call is read-only and idempotent, so after correcting the input it is always safe to retry.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"fleet_context":{"default":"","type":"string","description":"Optional plain-language description of the fleet\n(size, capabilities, sensitive systems) used to tailor the\npolicy; empty returns the generic baseline."}},"additionalProperties":false}},{"name":"injection_scan","description":"Scan untrusted text for prompt-injection patterns before ingestion. FREE.\n\nUse on any web page, email, or document an agent is about to ingest to\ncatch prompt-injection and data-exfiltration patterns before they reach\nthe agent's context. Typical input {\"text\": \"<untrusted content>\"}\nreturns {\"injection_suspected\": bool, \"count\": N, \"hits\": [{\"line\": N,\n\"pattern\": \"...\", \"text\": \"<flagged line>\"}], \"note\": \"...\"}.\n\nNot for reviewing a skill file you control (audit_skill_file), and a clean\nresult is not a guarantee of safety - it reports pattern matches only. Errors: on invalid, missing, or malformed input this tool never raises a protocol error — it returns {\"error\": \"<what is wrong and how to fix it>\"}. Every call is read-only and idempotent, so after correcting the input it is always safe to retry.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"text":{"type":"string","description":"The untrusted content to scan, pasted as a single string."}},"required":["text"],"additionalProperties":false}},{"name":"inventory_report","description":"Build a governance inventory with risk tiers from a raw agent list. FREE.\n\nTurns a list of agents / MCP servers / skills into an audit-ready\nsummary with critical/elevated/standard tiers and unowned-agent flags.\nTypical input {\"items\": \"[{\\\"name\\\": \\\"deploy-bot\\\", \\\"owner\\\":\n\\\"ana\\\"}]\"} returns {\"total\": N, \"tiers\": {\"critical\": N, ...},\n\"unowned_agents\": [...], \"inventory\": [{\"name\": ..., \"owner\": ...,\n\"tier\": ..., \"orphaned\": bool}], \"reading\": \"...\", \"note\": \"...\"}.\n\nUse to turn a raw agent list into risk tiers. Not for auditing any single\nagent in depth (audit_mcp_config, scope_check). Errors: on invalid, missing, or malformed input this tool never raises a protocol error — it returns {\"error\": \"<what is wrong and how to fix it>\"}. Every call is read-only and idempotent, so after correcting the input it is always safe to retry.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"items":{"type":"string","description":"The fleet as a string — a JSON array of {name, owner?,\ncapabilities?, last_seen?} objects, or plain newline-separated\nagent names."}},"required":["items"],"additionalProperties":false}},{"name":"scope_check","description":"Score the blast radius of every tool in a permission manifest. FREE.\n\nRanks each tool by capability risk (command exec > money/delete >\nfile-write/messaging > read > network) and flags the over-privileged\nones that need approval gates. Typical input {\"tools\": \"[\\\"run_shell\\\",\n\\\"read_docs\\\"]\"} returns {\"tools_scored\": N, \"high_risk_tools\": N,\n\"ranking\": [{\"tool\": ..., \"blast_radius\": 0-5, \"capabilities\": [...]}],\n\"recommendation\": [\"...\"], \"note\": \"...\"}.\n\nUse on a permission manifest to rank tools by blast radius. Not for the\nconfiguration that mounts them (audit_mcp_config). Errors: on invalid, missing, or malformed input this tool never raises a protocol error — it returns {\"error\": \"<what is wrong and how to fix it>\"}. Every call is read-only and idempotent, so after correcting the input it is always safe to retry.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"tools":{"type":"string","description":"The manifest as a string — a JSON array of tool names or\n{name, description} objects, a JSON object of name->description,\nor plain newline-separated names."}},"required":["tools"],"additionalProperties":false}}],"scan":{"score":87,"grade":"A","scanned_at":"2026-09-20T00:23:55.010Z","report":{"scannerVersion":"0.1.9","scannedAt":"2026-09-20T00:23:55.042Z","components":{"code":{"score":-1,"max":25,"notes":["remote-only server, no package to scan"]},"reliability":{"score":20,"max":20,"notes":["remote reachable in 321ms"]},"poisoning":{"score":15,"max":15,"notes":["8 tool descriptions checked"]},"auth":{"score":10,"max":15,"notes":["open endpoint, read-only tools"]},"maintenance":{"score":15,"max":15,"notes":["last push 0 days ago"]},"identity":{"score":5,"max":10,"notes":["namespace and repository owner differ","website matches verified namespace"]}},"findings":[],"inputs":{"probes":[{"url":"https://mcp.moltlinestudio.com/govern","reachable":true,"authRequired":false,"latencyMs":321,"serverInfo":{"name":"moltline-govern","version":"1.1.0"}}],"packages":[],"repo":{"found":true,"owner":"GarphenGate","repo":"moltline-mcp","archived":false,"pushedAt":"2026-09-19T15:00:29Z","stars":0,"forks":0,"openIssues":0,"ownerType":"User","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/316633241?v=4","ownerCreatedAt":"2026-08-13T15:17:26Z","license":"MIT"},"icon":{"url":"https://moltlinestudio.com/icon-192.png","source":"registry","width":192,"height":192},"presence":{"stars":0,"forks":0,"downloadsWeek":null,"license":"MIT","lastPushAt":"2026-09-19T15:00:29.000Z","score":23}}}},"grade_history":[],"reviews":[]}