Global AI Governance
Governance checks your AI agents can call, with humans in charge.
Open-source tools that check an AI system inventory or an agent passport and prepare the evidence for an accountable human decision. Use them in the browser, from the command line, or inside your agent over Model Context Protocol (MCP). Free, local-first, and non-authorizing.
Every output carries authority_effect: NONE. Approval, deployment, risk acceptance, and shutdown stay with accountable humans. Compatible with Model Context Protocol (MCP) based agents; not affiliated with or endorsed by any AI lab or platform.
For AI agents
Connect your agent
Read first: llms.txt and machine-interface.json list the CLI, inputs, outputs, profiles, and raw schema URLs.
Use it in your agent in 5 minutes with AI Governance MCP, the AI Governance Model Context Protocol Server. Model Context Protocol (MCP) is an open standard that lets AI assistants call external tools. It is read-only and has three tools: check_inventory, build_decision_pack, and validate_passport.
uvx --from git+https://github.com/GLOBAL-AI-GOVERNANCE/ai-governance-mcp@v0.3.1 gaig-mcp # stdio
That one command needs only uv: the pinned Toolkit and Agentic files are bundled in the package, so nothing else is cloned or fetched. It was tested in a clean environment. To run from source instead, or to run the test suite and smoke test:
git clone https://github.com/GLOBAL-AI-GOVERNANCE/ai-governance-mcp && cd ai-governance-mcp
python3 -m venv .venv && . .venv/bin/activate && pip install -e ".[dev]"
gaig-mcp # stdio (Claude Desktop and other local clients)
gaig-mcp --http --port 8000 # Streamable HTTP at /mcp
pytest && python scripts/smoke_test.py # optional checks; need the [dev] extra
On your machine
Claude Desktop
Add under mcpServers. Launch command tested; not yet tested inside Claude Desktop. From source, use "command": "/ABS/PATH/ai-governance-mcp/.venv/bin/gaig-mcp" instead.
"gaig": {
"command": "uvx",
"args": ["--from", "git+https://github.com/GLOBAL-AI-GOVERNANCE/ai-governance-mcp@v0.3.1", "gaig-mcp"]
}
Claude Code
Launch command tested; not yet tested inside Claude Code.
claude mcp add gaig --scope project -- \
uvx --from git+https://github.com/GLOBAL-AI-GOVERNANCE/ai-governance-mcp@v0.3.1 gaig-mcp
Grok CLI
Launch command tested; not yet tested inside the Grok CLI.
grok mcp add gaig -- \
uvx --from git+https://github.com/GLOBAL-AI-GOVERNANCE/ai-governance-mcp@v0.3.1 gaig-mcp
Codex
Add to ~/.codex/config.toml (file). One recorded local stdio run (Codex CLI 0.151.0).
[mcp_servers.gaig]
command = "uvx"
args = ["--from", "git+https://github.com/GLOBAL-AI-GOVERNANCE/ai-governance-mcp@v0.3.1", "gaig-mcp"]
Cursor
Add to .cursor/mcp.json (file). Launch command tested; not yet tested inside Cursor.
{"mcpServers": {"gaig": {
"command": "uvx",
"args": ["--from", "git+https://github.com/GLOBAL-AI-GOVERNANCE/ai-governance-mcp@v0.3.1", "gaig-mcp"]
}}}
VS Code
Add to .vscode/mcp.json (file). Launch command tested; not yet tested inside VS Code.
{"servers": {"gaig": {
"type": "stdio",
"command": "uvx",
"args": ["--from", "git+https://github.com/GLOBAL-AI-GOVERNANCE/ai-governance-mcp@v0.3.1", "gaig-mcp"]
}}}
Through the OpenAI, Anthropic, or xAI API
Point the provider at an HTTPS endpoint you host. Replace YOUR-HOST and TOKEN (your GAIG_MCP_BEARER_TOKEN).
OpenAI API
Responses API tool entry.
{"type": "mcp",
"server_label": "gaig",
"server_url": "https://YOUR-HOST/mcp",
"headers": {"Authorization": "Bearer TOKEN"}}
Anthropic API
Messages API: beta header, server entry, and toolset.
anthropic-beta: mcp-client-2026-09-15
"mcp_servers": [{"type": "url", "name": "gaig",
"url": "https://YOUR-HOST/mcp",
"authorization_token": "TOKEN"}]
"tools": [{"type": "mcp_toolset",
"mcp_server_name": "gaig"}]
xAI API
Responses API tool entry.
{"type": "mcp",
"server_label": "gaig",
"server_url": "https://YOUR-HOST/mcp",
"headers": {"Authorization": "Bearer TOKEN"}}
Remote use needs an HTTPS endpoint you host yourself; Global AI Governance operates no hosted endpoint. Any network-reachable server must set GAIG_MCP_ALLOWED_HOSTS and GAIG_MCP_BEARER_TOKEN (32+ characters); without them it refuses to start. Consumer connector UIs that cannot send a static bearer token (ChatGPT on the web today; Claude.ai outside its request-headers beta) cannot connect. These remote recipes have not been tested against a live provider; see the repository README. The command is gaig-mcp and the Python package is gaig_mcp.
Where your data goes: the browser Toolkit processes files only in this browser. Through MCP, the inventory or passport you pass becomes part of your AI client's conversation, so a hosted assistant sends it to its provider, and a remote server you host receives it over HTTPS. validate_passport checks a passport document; it does not monitor, enforce, or revoke anything at runtime.
For agent builders
Guard every tool call
Your agent has more tools than these three. A small Action Level guard (Python standard library) checks each tool call before it runs, using the Action Levels in the action-authority spec: Levels 0 to 3 run, Level 4 waits for an accountable person to approve or reject it, Level 5 is blocked, and a tool missing from your policy counts as Level 4. The guard never approves a Level 4 call itself.
| Works with | How Level 4 and Level 5 are enforced | Status |
| OpenAI Agents SDK | require_approval pauses Level 4 for a person; a tool input guardrail rejects Level 5 | Tested offline (real runner and server, scripted model) |
| Claude Agent SDK | PreToolUse hook returns ask or deny | Tested offline (hook called directly) |
| Claude Code | Command hook returns ask or deny | Hook contract tested; not run inside Claude Code |
| Grok CLI | Command hook denies Level 4 and Level 5 (Grok hooks cannot ask) and denies on any error | Hook contract tested; not run inside the Grok CLI |
| OpenAI, Anthropic, and xAI APIs (hosted MCP) | Only Level 0 to 3 tools are exposed unattended; OpenAI can also ask for Level 4 through require_approval | Request shapes tested offline; no live request |
Files and setup: AI Governance MCP README (release v0.3.1). The guard limits what an agent can do unattended; it does not make any action authorized.