io.github.torkjacobs/tork-governance
NPM · @TORKNETWORK/MCP-SERVER · SCANNED SEP 24
AI agent governance for MCP: PII detection, policy enforcement, compliance, and kill switch.
Available components
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →
Supply Chain Security98
- No malware found by supply-chain analysis.Pass
- No known CVEs affecting this package version or its production dependencies.Pass
- No install/post-install scripts declared.Pass
- 31 of 96 dependencies flagged as unhealthy. View diagnostics → Partial
Provenance & Transparency19
- Repository check failed: the declared repository URL returned HTTP 404. See how to fix → View diagnostics → Fail
- Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
- Clear OSI-approved license (MIT).Pass
- Actively maintained (last published 18 days ago).Pass
- Security-disclosure policy not yet verified: we couldn't inspect the source repository.Unverified
Schema Quality & AI Usability79
- AI-judged instruction clarity (excellent).Pass
- Tool/resource definitions use about 4387 tokens (~91/item across 48 items; 48 tools + 0 resources), lean.Pass
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management100
- No destabilizing schema changes in the last 30 days.Pass
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
Tool Safety75
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- 0 of 2 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation; "tork_governed_passthrough" implies "execute" and declares no destructiveHint at all, which the MCP spec reads as destructive by default. See how to fix → Fail
- An AI judge read all 48 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
How do I install the io.github.torkjacobs/tork-governance MCP server?
io.github.torkjacobs/tork-governance runs locally as an npm package, launched with npx -y @torknetwork/mcp-server. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
npm · @torknetwork/mcp-server
claude mcp add torkjacobs-tork-governance -- npx -y @torknetwork/mcp-server
{
"mcpServers": {
"torkjacobs-tork-governance": {
"command": "npx",
"args": [
"-y",
"@torknetwork/mcp-server"
]
}
}
} {
"servers": {
"torkjacobs-tork-governance": {
"command": "npx",
"args": [
"-y",
"@torknetwork/mcp-server"
]
}
}
} codex mcp add torkjacobs-tork-governance -- npx -y @torknetwork/mcp-server
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"torkjacobs-tork-governance": {
"type": "local",
"command": [
"npx",
"-y",
"@torknetwork/mcp-server"
],
"enabled": true
}
}
} openclaw mcp add torkjacobs-tork-governance --command npx --arg -y --arg @torknetwork/mcp-server
mcp_servers:
torkjacobs-tork-governance:
command: "npx"
args: ["-y", "@torknetwork/mcp-server"] {
"McpServers": {
"torkjacobs-tork-governance": {
"Transport": "stdio",
"Command": "npx",
"Arguments": [
"-y",
"@torknetwork/mcp-server"
]
}
}
} assistant mcp add torkjacobs-tork-governance -t stdio -c npx -a -y @torknetwork/mcp-server
{
"mcpServers": {
"torkjacobs-tork-governance": {
"command": "npx",
"args": [
"-y",
"@torknetwork/mcp-server"
]
}
}
} Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 24 Sept 26 0
- Stability: 0.97 → pass security
- 23 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 93 to 97. That category is still filling its 30-day observation window: 28 days of observed history at the previous scan, 29 at this one. The score rises as the window fills, whether or not the server changes.
- 21 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 87 to 90. That category is still filling its 30-day observation window: 26 days of observed history at the previous scan, 27 at this one. The score rises as the window fills, whether or not the server changes.
- 19 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 80 to 83. That category is still filling its 30-day observation window: 24 days of observed history at the previous scan, 25 at this one. The score rises as the window fills, whether or not the server changes.
- 18 Sept 26 −3
- Stability: pass → 0.80 functional
- 17 Sept 26 0
- Stability: 0.97 → pass security
- 16 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 93 to 97. That category is still filling its 30-day observation window: 28 days of observed history at the previous scan, 29 at this one. The score rises as the window fills, whether or not the server changes.
- 14 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 87 to 90. That category is still filling its 30-day observation window: 26 days of observed history at the previous scan, 27 at this one. The score rises as the window fills, whether or not the server changes.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 24 Sept 2026 · Analysed npm/@torknetwork/mcp-server@1.5.1
Provenance No attestation
The registry publishes no build provenance for this version, so there is nothing to verify.
| Result | No attestation |
|---|---|
| Ecosystem | npm |
Background: How many MCP packages publish verified provenance →
Dependencies 96 packages
| Packages resolved | 96 |
|---|---|
| Stale | 31 |
| Tree resolution | Complete |
Background: SBOMs and build attestations, explained →
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
tork_approve ~73
Approve a pending HITL request in Tork Cloud. Requires reviewer_id. Requires TORK_API_KEY.
| Name | Type | Req | Description |
|---|---|---|---|
| approval_id | string | yes | ID of the approval request |
| comment | string | – | Optional comment explaining the approval |
| reviewer_id | string | yes | ID of the human reviewer approving the action |
No output schema declared.
No examples provided.
tork_approve_action ~70
Human approves a pending action. Checks for reviewer fatigue and enforces cool-down periods.
| Name | Type | Req | Description |
|---|---|---|---|
| approval_id | string | yes | ID of the approval request to approve |
| reason | string | – | Optional reason for approval |
| reviewer_id | string | yes | ID of the human reviewer approving the action |
No output schema declared.
No examples provided.
tork_audit_logs ~73
Query audit logs for governance events.
| Name | Type | Req | Description |
|---|---|---|---|
| agent_id | string | – | Filter by agent ID |
| event_type | string | – | Filter by event type |
| limit | number | – | Maximum number of logs to return (default: 50) |
| since | string | – | ISO timestamp to filter logs after |
No output schema declared.
No examples provided.
tork_audit_stats ~48
Get audit statistics for governance events.
| Name | Type | Req | Description |
|---|---|---|---|
| agent_id | string | – | Filter by specific agent ID |
| window_hours | number | – | Time window in hours (default: 24) |
No output schema declared.
No examples provided.
tork_check_approval ~43
Check the status of an approval request. Returns current status and whether it has expired.
| Name | Type | Req | Description |
|---|---|---|---|
| approval_id | string | yes | ID of the approval request to check |
No output schema declared.
No examples provided.
tork_check_policy ~88
Check if an action is allowed by the current governance policy without executing it.
| Name | Type | Req | Description |
|---|---|---|---|
| action_type | string | yes | Type of action (e.g., 'read', 'write', 'delete', 'execute') |
| agent_id | string | – | ID of the agent requesting the action |
| context | object | – | Additional context for policy evaluation |
| resource | string | yes | Resource being accessed |
No output schema declared.
No examples provided.
tork_cloud_audit_logs ~91
Query audit logs from Tork Cloud. Supports filtering by agent, action type, and date. Requires TORK_API_KEY.
| Name | Type | Req | Description |
|---|---|---|---|
| action | string | – | Filter by action type |
| agent_id | string | – | Filter by agent ID |
| limit | number | – | Maximum number of logs to return (default: 50) |
| since | string | – | ISO timestamp to filter logs after |
No output schema declared.
No examples provided.
tork_cost_alerts ~85
Get unacknowledged cost alerts for an agent. Alerts include budget warnings, threshold breaches, and anomaly detections.
| Name | Type | Req | Description |
|---|---|---|---|
| agent_id | string | – | Filter alerts by agent ID (optional) |
| include_acknowledged | boolean | – | Include acknowledged alerts (default: false) |
| limit | number | – | Maximum number of alerts to return (default: 20) |
No output schema declared.
No examples provided.
tork_cost_budget_status ~46
Check budget status for an agent. Returns all active budgets with current spend, remaining amount, and percent used.
| Name | Type | Req | Description |
|---|---|---|---|
| agent_id | string | yes | Unique identifier for the agent |
No output schema declared.
No examples provided.
tork_cost_check ~81
Check if a proposed spend is allowed before making an API call. Validates against budgets and rate limits. Use this before expensive operations to prevent budget overruns.
| Name | Type | Req | Description |
|---|---|---|---|
| agent_id | string | yes | Unique identifier for the agent |
| proposed_cost | number | yes | Proposed cost amount in USD |
| proposed_tokens | number | – | Proposed token count (optional) |
No output schema declared.
No examples provided.
tork_cost_record ~185
Record a cost transaction for an AI agent. Track LLM calls, embeddings, tool usage, API calls, storage, and compute costs. Essential for budget governance and spend tracking.
| Name | Type | Req | Description |
|---|---|---|---|
| agent_id | string | yes | Unique identifier for the agent |
| input_tokens | number | – | Number of input tokens |
| metadata | object | – | Additional metadata about the transaction |
| model | string | – | Model name (e.g., 'gpt-4', 'claude-3-opus') |
| output_tokens | number | – | Number of output tokens |
| provider | string | – | Provider name (e.g., 'openai', 'anthropic', 'aws') |
| session_id | string | – | Optional session ID for grouping transactions |
| total_cost | number | yes | Total cost of the transaction in USD |
| transaction_type | string | yes | Type of cost transaction |
No output schema declared.
No examples provided.
tork_cost_summary ~59
Get current spend summary for an agent. Shows total cost, transaction count, top providers/models, and budget status.
| Name | Type | Req | Description |
|---|---|---|---|
| agent_id | string | yes | Unique identifier for the agent |
| period | string | – | Summary period (default: daily) |
No output schema declared.
No examples provided.
tork_create_webhook ~109
Create a webhook for HITL notifications. Webhooks are called when approvals are requested, approved, or rejected. Requires TORK_API_KEY.
| Name | Type | Req | Description |
|---|---|---|---|
| event_types | array | – | Event types to subscribe to. Options: approval_requested, approval_approved, approval_rejected, approval_timeout. Defaults to ['approval_requested', 'approval_timeout'] |
| name | string | yes | Name for the webhook (e.g., 'Slack Alerts') |
| url | string | yes | URL to receive webhook POST requests |
No output schema declared.
No examples provided.
tork_dashboard ~38
Get dashboard statistics from Tork Cloud. Shows total tools, agents, policies, pending approvals, and recent activity. Requires TORK_API_KEY.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
tork_delete_webhook ~37
Delete a webhook by ID. Requires TORK_API_KEY.
| Name | Type | Req | Description |
|---|---|---|---|
| webhook_id | string | yes | ID of the webhook to delete |
No output schema declared.
No examples provided.
tork_deny ~75
Deny a pending HITL request in Tork Cloud. Requires reviewer_id and reason. Requires TORK_API_KEY.
| Name | Type | Req | Description |
|---|---|---|---|
| approval_id | string | yes | ID of the approval request |
| reason | string | yes | Reason for denial (required) |
| reviewer_id | string | yes | ID of the human reviewer denying the action |
No output schema declared.
No examples provided.
tork_get_policy ~41
Get a specific governance policy by name from Tork Cloud. Requires TORK_API_KEY.
| Name | Type | Req | Description |
|---|---|---|---|
| name | string | yes | Name of the policy to retrieve |
No output schema declared.
No examples provided.
tork_governance_check ~173
Check if an action is allowed by cloud governance policies. Supports regional PII profiles (v1.1) for country-specific detection. Returns permission status and matched policy. Requires TORK_API_KEY.
| Name | Type | Req | Description |
|---|---|---|---|
| agent_id | string | yes | ID of the agent requesting the action |
| industry | string | – | Industry profile to activate for specialized PII patterns |
| parameters | object | – | Parameters being passed to the tool (optional) |
| region | array | – | Regional PII profiles to activate (e.g. ['ae', 'in']). Available: au, us, gb, eu, ae, sa, ng, in, jp, cn, kr, br |
| target | string | – | Target environment or resource (optional) |
| tool_name | string | yes | Name of the tool being called |
No output schema declared.
No examples provided.
tork_governed_passthrough ~169
Execute a tool call with TORK governance checks. Validates parameters, checks policies, scans for PII with optional regional profiles (v1.1), and logs the call.
| Name | Type | Req | Description |
|---|---|---|---|
| agent_id | string | – | ID of the agent making the call |
| correlation_id | string | – | Optional correlation ID for tracing |
| industry | string | – | Industry profile to activate for specialized PII patterns |
| parameters | object | yes | Parameters to pass to the tool |
| region | array | – | Regional PII profiles to activate (e.g. ['ae', 'in']). Available: au, us, gb, eu, ae, sa, ng, in, jp, cn, kr, br |
| tool_name | string | yes | Name of the tool to execute |
No output schema declared.
No examples provided.
tork_hitl_check_cooldown ~67
Check if an agent is currently in a cooldown period. Returns cooldown status, type, reason, and remaining time.
| Name | Type | Req | Description |
|---|---|---|---|
| agent_id | string | yes | Unique identifier for the agent |
| approver_id | string | – | Optional: Check cooldown for specific approver |
No output schema declared.
No examples provided.
tork_hitl_check_velocity ~105
Check velocity limits for an agent/approver. Returns whether additional approvals are allowed based on rate limits. Use before processing approvals to prevent bypass attacks.
| Name | Type | Req | Description |
|---|---|---|---|
| action_type | string | – | Type of action being approved (default: 'default') |
| agent_id | string | yes | Unique identifier for the agent |
| approver_id | string | yes | ID of the human approver |
| value | number | – | Optional value/amount of the action for aggregate tracking |
No output schema declared.
No examples provided.
tork_hitl_create_cooldown ~108
Create a cooldown period for an agent. Prevents approvals during the cooldown period. Use when slicing attacks are detected or for manual security lockdowns.
| Name | Type | Req | Description |
|---|---|---|---|
| agent_id | string | yes | Unique identifier for the agent |
| approver_id | string | – | Optional: Specific approver to cooldown |
| cooldown_type | string | yes | Type of cooldown |
| duration_minutes | number | yes | Duration of the cooldown in minutes |
| reason | string | yes | Reason for the cooldown |
No output schema declared.
No examples provided.
tork_hitl_detect_slicing ~73
Detect slicing attacks - patterns of many small requests that bypass individual review thresholds. Checks for rapid-fire approvals, value aggregation, and pattern anomalies.
| Name | Type | Req | Description |
|---|---|---|---|
| agent_id | string | yes | Unique identifier for the agent to analyze |
| approver_id | string | – | Optional: Analyze patterns for specific approver |
No output schema declared.
No examples provided.
tork_hitl_get_config ~50
Get HITL enforcement configuration including velocity limits, cooldown defaults, and slicing detection thresholds.
| Name | Type | Req | Description |
|---|---|---|---|
| agent_id | string | – | Optional: Get config for a specific agent (returns agent-specific overrides) |
No output schema declared.
No examples provided.
tork_list_approvals ~52
List pending approval requests from Tork Cloud. Filter by status (pending, approved, rejected). Requires TORK_API_KEY.
| Name | Type | Req | Description |
|---|---|---|---|
| status | string | – | Filter by approval status (default: pending) |
No output schema declared.
No examples provided.
tork_list_policies ~36
List all governance policies from Tork Cloud. Shows policy names, priorities, and YAML content. Requires TORK_API_KEY.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
tork_list_tools ~37
List all registered tools from Tork Cloud. Shows tool configurations, rate limits, and HITL requirements. Requires TORK_API_KEY.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
tork_list_webhooks ~26
List all configured webhooks for the organization. Requires TORK_API_KEY.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
tork_mcp_analyze ~97
Run anomaly detection for an agent's MCP tool usage. Checks for high frequency calls, repeated failures, unusual patterns, suspicious parameters, and new tool usage.
| Name | Type | Req | Description |
|---|---|---|---|
| agent_id | string | yes | Agent ID to analyze |
| high_frequency_threshold | number | – | Threshold for high frequency detection (default: 100 calls/minute) |
| repeated_failure_threshold | number | – | Threshold for repeated failure detection (default: 5 consecutive) |
No output schema declared.
No examples provided.
tork_mcp_get_alerts ~119
Get unacknowledged security and anomaly alerts for MCP tool usage. Alerts include high frequency, unusual patterns, repeated failures, and suspicious parameters.
| Name | Type | Req | Description |
|---|---|---|---|
| agent_id | string | – | Filter alerts by agent ID (optional) |
| alert_type | string | – | Filter by alert type (optional) |
| include_acknowledged | boolean | – | Include acknowledged alerts (default: false) |
| limit | number | – | Maximum number of alerts to return (default: 50) |
| severity | string | – | Filter by severity level (optional) |
No output schema declared.
No examples provided.
tork_mcp_get_stats ~95
Get aggregated statistics for MCP tool usage. Shows total calls, success/failure rates, and average execution times per tool.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | number | – | Maximum number of tool stats to return (default: 100) |
| order_by | string | – | Field to order results by (default: total_calls) |
| tool_name | string | – | Get stats for a specific tool (optional, returns all if not specified) |
No output schema declared.
No examples provided.
tork_mcp_log_call ~159
Log an MCP tool invocation for auditing and compliance. Use this for self-reporting tool calls. Records agent, tool, parameters, result, execution time, and success status.
| Name | Type | Req | Description |
|---|---|---|---|
| agent_id | string | yes | Unique identifier for the agent making the call |
| error_message | string | – | Error message if the call failed |
| execution_time_ms | number | – | Execution time in milliseconds |
| result | object | – | Result returned by the tool |
| session_id | string | – | Optional session identifier for grouping related calls |
| success | boolean | – | Whether the call succeeded (default: true) |
| tool_name | string | yes | Name of the tool being invoked |
| tool_parameters | object | – | Parameters passed to the tool |
No output schema declared.
No examples provided.
tork_memory_snapshot ~94
Create a memory fingerprint/snapshot for an agent. Stores a hash of the current memory state for later verification. Use this after significant memory operations to establish a baseline.
| Name | Type | Req | Description |
|---|---|---|---|
| agent_id | string | yes | Unique identifier for the agent |
| memory_state | object | yes | The current memory state to snapshot (object or string) |
| metadata | object | – | Optional metadata about the snapshot (e.g., session_id, context) |
No output schema declared.
No examples provided.
tork_memory_track_modification ~173
Record a memory modification for audit trail. Track all changes to agent memory including adds, updates, deletes, and clears. Essential for compliance and trust scoring.
| Name | Type | Req | Description |
|---|---|---|---|
| agent_id | string | yes | Unique identifier for the agent |
| authorized | boolean | – | Whether this modification was authorized (default: true) |
| authorized_by | string | – | Who/what authorized the modification |
| key_path | string | – | Path to the modified key (e.g., 'user.preferences.theme') |
| metadata | object | – | Additional metadata about the modification |
| modification_type | string | yes | Type of modification being made |
| new_value | object | – | New value (for adds and updates) |
| old_value | object | – | Previous value (for updates and deletes) |
| reason | string | – | Reason for the modification |
No output schema declared.
No examples provided.
tork_memory_trust_score ~170
Get or calculate trust score for an agent based on memory integrity. Trust = (consistency × 0.3) + (compliance × 0.3) + (transparency × 0.2) + (predictability × 0.2). Levels: >0.8 trusted, 0.5-0.8 caution, <0.5 untrusted.
| Name | Type | Req | Description |
|---|---|---|---|
| action | string | – | Action to perform: 'get' retrieves current score, 'calculate' recalculates, 'stats' returns full stats, 'untrusted' lists agents below threshold |
| agent_id | string | yes | Unique identifier for the agent |
| max_trust_level | string | – | For 'untrusted' action: maximum trust level to include (default: caution) |
No output schema declared.
No examples provided.
tork_memory_verify ~69
Verify current memory against the last snapshot. Detects unauthorized modifications by comparing hashes and identifying changes. Returns drift detection and trust score impact.
| Name | Type | Req | Description |
|---|---|---|---|
| agent_id | string | yes | Unique identifier for the agent |
| current_memory_state | object | yes | The current memory state to verify (object or string) |
No output schema declared.
No examples provided.
tork_register_tool ~169
Register a tool with a governance policy. Defines which agents can call it, allowed targets, blocked flags, rate limits, and HITL requirements.
| Name | Type | Req | Description |
|---|---|---|---|
| allowed_agents | array | – | List of agent IDs allowed to call this tool. Empty array means all agents allowed. |
| allowed_targets | array | – | List of allowed target environments (e.g., ['dev', 'staging']). Empty means all allowed. |
| blocked_flags | array | – | Additional flags to block beyond defaults (e.g., ['--recursive', '--all']) |
| max_calls_per_minute | number | – | Maximum calls allowed per minute (default: 60) |
| requires_hitl | boolean | – | Whether this tool requires human-in-the-loop approval |
| tool_name | string | yes | Unique name of the tool to register |
No output schema declared.
No examples provided.
tork_reject_action ~71
Human rejects a pending action. Does not trigger cool-down as rejections indicate vigilance.
| Name | Type | Req | Description |
|---|---|---|---|
| approval_id | string | yes | ID of the approval request to reject |
| reason | string | yes | Reason for rejection (required) |
| reviewer_id | string | yes | ID of the human reviewer rejecting the action |
No output schema declared.
No examples provided.
tork_request_approval ~117
Submit an action for human approval. Creates an approval request in the queue. Used when a tool requires HITL or for high-risk actions.
| Name | Type | Req | Description |
|---|---|---|---|
| agent_id | string | yes | ID of the agent requesting approval |
| amount | number | – | Optional monetary amount (for velocity tracking) |
| parameters | string | yes | JSON string of parameters for the action |
| target | string | yes | Target resource or environment (e.g., 'production', 'user@example.com') |
| tool_name | string | yes | Name of the tool requiring approval |
No output schema declared.
No examples provided.
tork_scan_pii ~159
Scan text for PII (Personally Identifiable Information) and optionally redact it. Supports regional PII profiles (v1.1) for country-specific and industry-specific detection across 13 countries and 3 industries. Returns found PII types and redacted text.
| Name | Type | Req | Description |
|---|---|---|---|
| industry | string | – | Industry profile to activate for specialized PII patterns |
| redact | boolean | – | Whether to return redacted text (default: true) |
| region | array | – | Regional PII profiles to activate (e.g. ['ae', 'in']). Available: au, us, gb, eu, ae, sa, ng, in, jp, cn, kr, br |
| text | string | yes | The text to scan for PII |
No output schema declared.
No examples provided.
tork_supply_chain_deps ~105
Get dependencies for an AI agent. Returns a list of all registered dependencies or a dependency tree structure showing relationships.
| Name | Type | Req | Description |
|---|---|---|---|
| agent_id | string | yes | Unique identifier for the agent |
| dependency_type | string | – | Filter by dependency type (optional) |
| format | string | – | Output format: 'list' for flat list, 'tree' for hierarchical view (default: list) |
| include_unverified | boolean | – | Include unverified dependencies (default: true) |
No output schema declared.
No examples provided.
tork_supply_chain_health ~66
Get supply chain health score and report for an agent. Calculates health based on dependency verification status, vulnerability counts, and trust levels.
| Name | Type | Req | Description |
|---|---|---|---|
| agent_id | string | yes | Unique identifier for the agent |
| include_report | boolean | – | Include detailed health report (default: true) |
No output schema declared.
No examples provided.
tork_supply_chain_register ~165
Register a dependency for an AI agent. Track models, packages, tools, services, APIs, and MCP servers that the agent depends on. Essential for supply chain visibility and health monitoring.
| Name | Type | Req | Description |
|---|---|---|---|
| agent_id | string | yes | Unique identifier for the agent |
| dependency_type | string | yes | Type of dependency being registered |
| integrity_hash | string | – | Integrity hash for verification (optional) |
| metadata | object | – | Additional metadata about the dependency |
| name | string | yes | Name of the dependency (e.g., 'gpt-4', 'lodash', 'stripe-api') |
| source | string | – | Source registry or provider (e.g., 'npm', 'pypi', 'openai') |
| version | string | – | Version string of the dependency |
No output schema declared.
No examples provided.
tork_supply_chain_verify ~96
Verify a dependency against trusted sources. Checks if the source is in the trusted registry and validates the integrity hash if provided.
| Name | Type | Req | Description |
|---|---|---|---|
| agent_id | string | yes | Unique identifier for the agent |
| dependency_name | string | yes | Name of the dependency to verify |
| dependency_type | string | – | Type of dependency (optional, for more specific verification) |
| expected_hash | string | – | Expected integrity hash to verify against (optional) |
No output schema declared.
No examples provided.
tork_supply_chain_vulns ~80
Check for known vulnerabilities in agent dependencies. Returns vulnerability matches with severity levels and remediation guidance.
| Name | Type | Req | Description |
|---|---|---|---|
| agent_id | string | yes | Unique identifier for the agent |
| include_acknowledged | boolean | – | Include acknowledged/mitigated vulnerabilities (default: false) |
| severity_filter | string | – | Filter by minimum severity level (optional) |
No output schema declared.
No examples provided.
tork_tool_call_stats ~64
Get statistics on tool calls including total calls, allowed/blocked counts, and rate limit hits.
| Name | Type | Req | Description |
|---|---|---|---|
| include_unregistered | boolean | – | Include stats for unregistered tools (default: false) |
| tool_name | string | – | Filter by specific tool name (optional) |
No output schema declared.
No examples provided.
tork_validate_tool_call ~112
Validate a tool call BEFORE execution. Checks if tool is registered, agent is allowed, target is allowed, parameters don't contain blocked flags, and rate limits are not exceeded.
| Name | Type | Req | Description |
|---|---|---|---|
| agent_id | string | yes | ID of the agent making the call |
| parameters | object | yes | Parameters that would be passed to the tool |
| target_environment | string | – | Target environment (e.g., 'production', 'staging', 'dev') |
| tool_name | string | yes | Name of the tool to validate |
No output schema declared.
No examples provided.
tork_velocity_alert ~69
Check for slicing attack patterns - detecting many small requests that aggregate to significant impact. Returns velocity stats and alerts.
| Name | Type | Req | Description |
|---|---|---|---|
| agent_id | string | – | Agent ID to check velocity for (optional, checks all if not provided) |
| target | string | – | Target/vendor to check velocity for (optional) |
No output schema declared.
No examples provided.
What is the io.github.torkjacobs/tork-governance MCP server?
io.github.torkjacobs/tork-governance is an MCP server listed in the public MCP registry as io.github.torkjacobs/tork-governance. AI agent governance for MCP: PII detection, policy enforcement, compliance, and kill switch. This page covers its npm package (@torknetwork/mcp-server).
Is the io.github.torkjacobs/tork-governance MCP server safe to use?
io.github.torkjacobs/tork-governance scores 78 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 24 September 2026. It declares no install or post-install scripts. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the io.github.torkjacobs/tork-governance MCP server expose?
io.github.torkjacobs/tork-governance exposes 48 tools: tork_scan_pii, tork_governed_passthrough, tork_check_policy, tork_audit_stats, tork_audit_logs, and 43 more. Their descriptions and schemas cost roughly 4,387 tokens of context every time the server is loaded.
Is the io.github.torkjacobs/tork-governance MCP server still maintained?
io.github.torkjacobs/tork-governance is still listed as active in the MCP registry. We last reached this channel on 24 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.
What licence is the io.github.torkjacobs/tork-governance MCP server under?
io.github.torkjacobs/tork-governance declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.