thoughtproof/thoughtproof-mcp

thoughtproof-mcp — local stdio. Hero tool verify_decision (DQL spend / Sentinel irreversible exit). execute is true only on ALLOW.
MCP server for ThoughtProof — pre-execution decision verification for AI agents.
**Hero tool:** verify_decision. It routes inside the tool to DQL (spend / checkout) or Sentinel (irreversible exit) and returns a fail-closed execute flag. execute is true only on a native ALLOW.
This package is a **local stdio** MCP server (Node 18+) for Desktop / CLI hosts such as Cursor, Claude Desktop, Windsurf, and Cline. It is **not** a remote HTTP MCP server. It is **not** a Grok Web/Mobile custom connector.
Get keys at https://app.thoughtproof.ai/pricing.
Unpublished work is documented in UNRELEASED.md.
Quick Start
Install with npx -y thoughtproof-mcp@0.3.2. Works with **Claude Desktop**, **Cursor**, **Windsurf**, **Cline**, and other local stdio MCP clients.
Tools
verify_before_action / verify_decision (hero)
verify_before_action is an alias of verify_decision (identical schema + handler). Soft fail-closed: host must honor execute=false.
Pre-execution gate for a proposed action. Routing is inside the tool — not an agent quiz.
| Parameter | Type | Default | Description |
|-----------|------|---------|-------------|
| mandate | string | *(required)* | User's stated goal / instruction |
| proposed_action | string | *(required)* | What the agent is about to do |
| reasoning | string | *(required)* | The agent's own plan / reasoning |
| context | string | *(optional)* | Extra evidence |
| mode | dql / sentinel / auto | auto | Explicit surface, or auto-route |
**Auto-route:** spend / checkout / booking / purchase / payment / cart / Stripe / price / budget / cap → DQL. High-blast irreversible exit without that language (publish, delete, deploy, send-to-prod, memory write) → Sentinel. Unsure → DQL. Explicit mode wins. RV / PLV are not on this path.
**Camera mandate:** do **not** put the overshoot in proposed_action or reasoning (for example, do not write “price is above the cap”). The verifier has to find the mismatch.
**Envelope** (always this shape):
execute is true only on ALLOW. REVIEW, UNCERTAIN, BLOCK, timeouts, HTTP 402/4xx/5xx, and missing keys return execute: false. Fail-closed is soft at the protocol layer — the tool does not hard-stop the host. Replan is a new call (new receipt).
verify_claim
Verify any claim or AI-generated reasoning via RV (POST /v1/check). Unchanged.
| Parameter | Type | Default | Description |
|-----------|------|---------|-------------|
| claim | string | *(required)* | The text to verify |
| stakeLevel | low / medium / high / critical | medium | Risk level — higher stakes trigger deeper verification |
| domain | financial / medical / legal / code / general | general | Domain context for specialized verification |
| speed | fast / standard / deep | standard | Verification depth |
check_agent_score
Look up an agent's composite trust score on the ERC-8004 registry.