Global AI Governance

Governance checks your AI agents can call, with humans in charge.

Open-source tools that check an AI system inventory or an agent passport and prepare the evidence for an accountable human decision. Use them in the browser, from the command line, or inside your agent over Model Context Protocol (MCP). Free, local-first, and non-authorizing.

Every output carries authority_effect: NONE. Approval, deployment, risk acceptance, and shutdown stay with accountable humans. Compatible with Model Context Protocol (MCP) based agents; not affiliated with or endorsed by any AI lab or platform.

For AI agents

Connect your agent

Read first: llms.txt and machine-interface.json list the CLI, inputs, outputs, profiles, and raw schema URLs.

Use it in your agent in 5 minutes with AI Governance MCP, the AI Governance Model Context Protocol Server. Model Context Protocol (MCP) is an open standard that lets AI assistants call external tools. It is read-only and has three tools: check_inventory, build_decision_pack, and validate_passport.

uvx --from git+https://github.com/GLOBAL-AI-GOVERNANCE/ai-governance-mcp@v0.3.1 gaig-mcp   # stdio

That one command needs only uv: the pinned Toolkit and Agentic files are bundled in the package, so nothing else is cloned or fetched. It was tested in a clean environment. To run from source instead, or to run the test suite and smoke test:

git clone https://github.com/GLOBAL-AI-GOVERNANCE/ai-governance-mcp && cd ai-governance-mcp
python3 -m venv .venv && . .venv/bin/activate && pip install -e ".[dev]"
gaig-mcp                     # stdio (Claude Desktop and other local clients)
gaig-mcp --http --port 8000  # Streamable HTTP at /mcp
pytest && python scripts/smoke_test.py   # optional checks; need the [dev] extra

On your machine

Claude Desktop

Add under mcpServers. Launch command tested; not yet tested inside Claude Desktop. From source, use "command": "/ABS/PATH/ai-governance-mcp/.venv/bin/gaig-mcp" instead.

"gaig": {
  "command": "uvx",
  "args": ["--from", "git+https://github.com/GLOBAL-AI-GOVERNANCE/ai-governance-mcp@v0.3.1", "gaig-mcp"]
}

Claude Code

Launch command tested; not yet tested inside Claude Code.

claude mcp add gaig --scope project -- \
  uvx --from git+https://github.com/GLOBAL-AI-GOVERNANCE/ai-governance-mcp@v0.3.1 gaig-mcp

Grok CLI

Launch command tested; not yet tested inside the Grok CLI.

grok mcp add gaig -- \
  uvx --from git+https://github.com/GLOBAL-AI-GOVERNANCE/ai-governance-mcp@v0.3.1 gaig-mcp

Codex

Add to ~/.codex/config.toml (file). One recorded local stdio run (Codex CLI 0.151.0).

[mcp_servers.gaig]
command = "uvx"
args = ["--from", "git+https://github.com/GLOBAL-AI-GOVERNANCE/ai-governance-mcp@v0.3.1", "gaig-mcp"]

Cursor

Add to .cursor/mcp.json (file). Launch command tested; not yet tested inside Cursor.

{"mcpServers": {"gaig": {
  "command": "uvx",
  "args": ["--from", "git+https://github.com/GLOBAL-AI-GOVERNANCE/ai-governance-mcp@v0.3.1", "gaig-mcp"]
}}}

VS Code

Add to .vscode/mcp.json (file). Launch command tested; not yet tested inside VS Code.

{"servers": {"gaig": {
  "type": "stdio",
  "command": "uvx",
  "args": ["--from", "git+https://github.com/GLOBAL-AI-GOVERNANCE/ai-governance-mcp@v0.3.1", "gaig-mcp"]
}}}

Through the OpenAI, Anthropic, or xAI API

Point the provider at an HTTPS endpoint you host. Replace YOUR-HOST and TOKEN (your GAIG_MCP_BEARER_TOKEN).

OpenAI API

Responses API tool entry.

{"type": "mcp",
 "server_label": "gaig",
 "server_url": "https://YOUR-HOST/mcp",
 "headers": {"Authorization": "Bearer TOKEN"}}

Anthropic API

Messages API: beta header, server entry, and toolset.

anthropic-beta: mcp-client-2026-09-15

"mcp_servers": [{"type": "url", "name": "gaig",
  "url": "https://YOUR-HOST/mcp",
  "authorization_token": "TOKEN"}]
"tools": [{"type": "mcp_toolset",
  "mcp_server_name": "gaig"}]

xAI API

Responses API tool entry.

{"type": "mcp",
 "server_label": "gaig",
 "server_url": "https://YOUR-HOST/mcp",
 "headers": {"Authorization": "Bearer TOKEN"}}

Remote use needs an HTTPS endpoint you host yourself; Global AI Governance operates no hosted endpoint. Any network-reachable server must set GAIG_MCP_ALLOWED_HOSTS and GAIG_MCP_BEARER_TOKEN (32+ characters); without them it refuses to start. Consumer connector UIs that cannot send a static bearer token (ChatGPT on the web today; Claude.ai outside its request-headers beta) cannot connect. These remote recipes have not been tested against a live provider; see the repository README. The command is gaig-mcp and the Python package is gaig_mcp.

Where your data goes: the browser Toolkit processes files only in this browser. Through MCP, the inventory or passport you pass becomes part of your AI client's conversation, so a hosted assistant sends it to its provider, and a remote server you host receives it over HTTPS. validate_passport checks a passport document; it does not monitor, enforce, or revoke anything at runtime.

For agent builders

Guard every tool call

Your agent has more tools than these three. A small Action Level guard (Python standard library) checks each tool call before it runs, using the Action Levels in the action-authority spec: Levels 0 to 3 run, Level 4 waits for an accountable person to approve or reject it, Level 5 is blocked, and a tool missing from your policy counts as Level 4. The guard never approves a Level 4 call itself.

Works withHow Level 4 and Level 5 are enforcedStatus
OpenAI Agents SDKrequire_approval pauses Level 4 for a person; a tool input guardrail rejects Level 5Tested offline (real runner and server, scripted model)
Claude Agent SDKPreToolUse hook returns ask or denyTested offline (hook called directly)
Claude CodeCommand hook returns ask or denyHook contract tested; not run inside Claude Code
Grok CLICommand hook denies Level 4 and Level 5 (Grok hooks cannot ask) and denies on any errorHook contract tested; not run inside the Grok CLI
OpenAI, Anthropic, and xAI APIs (hosted MCP)Only Level 0 to 3 tools are exposed unattended; OpenAI can also ask for Level 4 through require_approvalRequest shapes tested offline; no live request

Files and setup: AI Governance MCP README (release v0.3.1). The guard limits what an agent can do unattended; it does not make any action authorized.

Specifications

Read the spec

Product map

What exists today

ProductWhat you getStatus
ToolkitInventory to findings to human Decision Packv2.7.1 · released
AI Governance MCPToolkit and passport checks inside Model Context Protocol (MCP) based agentsv0.3.1 · preview
Agentic AI GovernanceAgent authority and passport schemasv0.1.0-alpha.2 · experimental
Verified Vulnerability GovernanceEvidence-linked remediation and verified closurev0.1.3 · pre-release
AI Cyber Resilience FrameworkBoundary assessment and hardening backlogv0.1.1 · reference
Containment Ledger: Security Boundary ReviewLocal browser review of security domains, boundary paths, evidence marks, and a human dispositionUnreleased · instrument
Peace OS: Crisis RoomFictional crisis-verification exercisev0.3.0-rc2 · review candidate
Governed Systems AdministrationProposed governed administration contractsPre-alpha · design only
AI Governance FoundationsThe original foundation: governance model, registers, and templates the later repositories build onv1.1 · foundational