io.github.levelsofself/nervous-system
Governance for LLM agents: 7 enforced rules + read-only reference tools. Safe in any MCP client.
Open source Open in the app JSON README (API)
About
Governance for LLM agents: 7 enforced rules + read-only reference tools. Safe in any MCP client.
Details
- Kind
- MCP servers
- Topic
- AI, RAG & memory
- Publisher
- levelsofself
- Origin
- official
- Category
- ferramentas
- Transport
- local
- Version
- 1.12.1
- Stars
- 4
- Last push
- 2026-07-17T02:59:35Z
- Repository state
- ativo
- Language
- JavaScript
- License
- MIT
- Added
- 2026-08-29 04:00:23
- Updated
- 2026-08-29 04:00:23
- Origin id
io.github.levelsofself/nervous-system
README
# Nervous System
Deterministic governance lint for MCP server configurations, plus reference tooling for the 7 rules.
## What each tool actually does
| Tool | Does real work? |
|---|---|
| `audit_mcp_config` | **Yes.** Deterministic lint, zero dependencies, fully offline, never throws. Checks inline secrets in env, shell wrappers, unpinned packages, auto-install flags, broad filesystem scopes, non-TLS remote transports, unpinned docker tags. Returns findings with severities and a 0-100 score. |
| `check_preflight` | **Yes, when configured.** Reads `protected_files_list` from `nervous-system.config.json` or `NERVOUS_SYSTEM_PROTECTED_LIST`. With no list it says so rather than guessing. If the list is unreadable it FAILS CLOSED. |
| `get_*` (everything else) | **No.** They return text: the framework, templates, instructions. That is why they are named `get_`. |
## Install
npx mcp-nervous-system
## Free local tool: audit_mcp_config
Pass your config as `config` (object) or `config_json` (string), e.g. the contents of
`claude_desktop_config.json`. Returns findings with severities and a 0-100 score.
## Hosted API (pay-per-call, x402, USDC on Base)
The write-capable toolset runs server-side and is not in this package.
- `POST https://api.100levelup.com/x402/audit-mcp` - governance lint ($0.05 USDC)
- `GET https://api.100levelup.com/x402/verify-audit` - audit-chain verification ($0.005 USDC)
Discovery: `/openapi.json` and `/llms.txt`.
## 2.0.0 breaking changes
- `emergency_kill_switch` -> `get_kill_switch_instructions`. It never stopped anything.
- `verify_audit_chain` -> `get_audit_verification_instructions`. It never verified a chain.
- `dispatch_to_llm` -> `get_dispatch_command`. It never dispatched.
- `check_preflight` no longer matches hardcoded filenames from the author's own server. It reads your list.
- Hardcoded fleet counts and violation totals removed from `get_origin_story`. A number baked into a
package is a fossil the moment it ships.
## License
MIT