{
  "markdown": "# @mima-ai/governance-mcp\n\n[![governance-mcp MCP server](https://glama.ai/mcp/servers/mimaworks/governance-mcp/badges/score.svg)](https://glama.ai/mcp/servers/mimaworks/governance-mcp)\n[![MCP Badge](https://lobehub.com/badge/mcp/mimaworks-governance-mcp)](https://lobehub.com/mcp/mimaworks-governance-mcp)\n\nMCP server for AI governance — push compliance evidence to [Mima](https://mima.works) from any agent, any stack, 4 lines of config.\n\nOne tool call maps to EU AI Act, ISO 42001, SOC 2, and NIST AI RMF simultaneously. Your readiness score updates automatically.\n\n## Install\n\n```bash\nnpx @mima-ai/governance-mcp@0.1.13\n```\n\nOr add to your MCP config (always pin the version):\n\n```json\n{\n  \"mcpServers\": {\n    \"mima-governance\": {\n      \"command\": \"npx\",\n      \"args\": [\"-y\", \"@mima-ai/governance-mcp@0.1.13\"],\n      \"env\": {\n        \"MIMA_API_KEY\": \"mima_ext_...\",\n        \"MIMA_WORKSPACE_ID\": \"ws-...\"\n      }\n    }\n  }\n}\n```\n\n## 10 tools\n\n| Tool | What it does |\n|---|---|\n| `get_posture` | Overall readiness score + per-framework breakdown |\n| `list_systems` | All AI systems — registered vs unregistered |\n| `list_evidence` | Evidence records filtered by system and time |\n| `dry_run_attest` | Preview which controls an attestation would earn |\n| `attest` | Write a GRC evidence record |\n| `register_system` | Register an AI system under EU AI Act Art. 9 |\n| `acknowledge_policy` | Record a policy acknowledgment |\n| `derive_controls` | Recommended evidence types for a system description |\n| `check_gates` | Gate pass/fail status with exit codes |\n| `suggest_gates` | Prioritised gate recommendations |\n\n## Usage — Claude Code\n\nAdd to `~/.claude/settings.json`:\n\n```json\n{\n  \"mcpServers\": {\n    \"mima-governance\": {\n      \"command\": \"npx\",\n      \"args\": [\"-y\", \"@mima-ai/governance-mcp\"],\n      \"env\": {\n        \"MIMA_API_KEY\": \"mima_ext_...\",\n        \"MIMA_WORKSPACE_ID\": \"ws-...\"\n      }\n    }\n  }\n}\n```\n\nThen ask Claude: *\"Check our compliance posture\"* or *\"Register this AI system and suggest which controls we need.\"*\n\n## Usage — Cursor / Windsurf\n\nAdd to `.cursor/mcp.json` or `.windsurf/mcp.json` in your project root:\n\n```json\n{\n  \"mcpServers\": {\n    \"mima-governance\": {\n      \"command\": \"npx\",\n      \"args\": [\"-y\", \"@mima-ai/governance-mcp\"],\n      \"env\": {\n        \"MIMA_API_KEY\": \"mima_ext_...\",\n        \"MIMA_WORKSPACE_ID\": \"ws-...\"\n      }\n    }\n  }\n}\n```\n\n## Dry-run support\n\nAll write tools support dry-run — preview what controls you'd earn before committing:\n\n```\ndry_run_attest({ record_type: \"ai_risk_assessment\", system_name: \"loan-scorer\" })\n// → { mapped_controls: [\"EUAIA_ART9\", \"ISO42001_6_1\", \"NIST_AIRF_MAP_1\"] }\n```\n\n## Four frameworks, one call\n\n| Framework | What it covers |\n|---|---|\n| EU AI Act | Art. 9–15 risk management, oversight, accuracy obligations |\n| ISO 42001 | AI management system controls — A.6.x risk, A.9.x performance |\n| SOC 2 | CC3.x–CC8.x risk, change, and incident management |\n| NIST AI RMF | GOVERN, MAP, MEASURE, MANAGE functions |\n\n## Get an API key\n\n[mima.works](https://mima.works) → sign up → copy your key from the dashboard.\n\n## Python SDK\n\nFor app-code attestation (decorators, batch pushes, pre-approval gates):\n\n```bash\npip install mima-governance\n```\n\n## Docs\n\n[docs.mima.works](https://docs.mima.works)\n\n",
  "bytes": 3281,
  "sha": "f84a8abc210ac456cd5d72f537a6b77715c375f00731645234182d13ec400735",
  "repo_slug": "mimaworks/governance-mcp",
  "fonte": "repo",
  "truncated": false,
  "api": "https://agentalog.com/api/listings/mcp_works_mima_governance_mcp_e838d7e9/readme"
}