Korext: AI Code Governance MCP Server

Enforce compliance policies on AI generated code in your GitHub workflows. 72 policy packs. 532 rules. 13 languages. Violations appear as GitHub Code Scanning annotations on pull requests.

People connecting developer tools tools to Claude, Cursor, VS Code, or another MCP client. The project is written in TypeScript.

VERIFIED ACTIVE

LAST COMMIT 2026-04-17 · ★ 4 · #109 OF 139 MAINTAINED DEVELOPER TOOLS · VERIFIED 2026-08-25

Apache-2.0 · TypeScript servers · how we verify → /methodology

01 · Install Korext: AI Code Governance

before you install - you'll need

The README does not document required environment variables for a basic install.

Claude Code

claude mcp add korext-enforce-action --transport http https://app.korext.com/api/mcp

Claude Desktop / Cursor / VS Code - add to config

{
  "mcpServers": {
    "korext-enforce-action": {
      "url": "https://app.korext.com/api/mcp"
    }
  }
}

Same JSON for Cursor. For VS Code, rename the top-level key from `mcpServers` to `servers`.

Using another client? Same JSON, different key

Claude Desktop · mcpServers

Cursor · mcpServers

VS Code · servers

Windsurf · mcpServers

Zed · context_servers

Cline · mcpServers

Roo Code · mcpServers

Continue · mcpServers

LibreChat · mcpServers

Gemini CLI · mcpServers

Codex CLI · mcp_servers

Full setup guides: every client.

02 · Evidence

https://app.korext.com/api/mcp

transport: streamable-http

endpoint alive - responded to MCP initialize · probed 2026-08-25

Security posture

What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.

runs as local process (stdio) - runs on your machine with your user's permissions · remote - your agent's requests go to app.korext.com

endpoint auth accepted our unauthenticated MCP initialize - no credentials needed to connect

license Apache-2.0 - declared in the repository

npm package korext - unscoped; check the name against the project README before installing

registry namespace io.github.Korext is GitHub-verified and matches the repo owner

03 · What Korext: AI Code Governance can do

Prose above is summarized from the project's README and registry record - no invented capabilities.

Latest releases

v3.0.0 · 2026-04-15

Production release. Full platform parity. · 72 policy packs with 532 detection rules across 18 industries · - Data sovereignty: choose US, EU, or Asia Pacific for data processing · - Cryptographically signed proof…

v3.0.1 · 2026-04-16

Updated to Korext CLI 1.0.1. · 72 policy packs with 547 detection rules across 18 industries · Data sovereignty: choose US, EU, or Asia Pacific for data processing · Cryptographically signed proof bundles with HMAC v2…

v2.0.0 · 2026-04-11

What's New in v2.0.0 · Proof bundles. Every scan now generates cryptographically signed compliance proof. Bundle IDs available in action outputs. · Multi-pack enforcement. Scan against multiple compliance frameworks in…

04 · Who maintains Korext: AI Code Governance

Korext: AI Code Governance is maintained by korext. It's the only MCP server we track from this author; the repo dates to Apr 2026.

05 · Facts

repository: github.com/korext/enforce-action
category: developer tools - ranked #109 of 139 actively-maintained developer tools servers as of 2026-08-25.
registry: io.github.Korext/governance (active, first published 2026-04-11 · 3 versions)
packages: npm:korext

06 · Korext: AI Code Governance FAQ

What is Korext: AI Code Governance?

Enforce compliance policies on AI generated code in your GitHub workflows. 72 policy packs. 532 rules. 13 languages. Violations appear as GitHub Code Scanning annotations on pull requests.

Is Korext: AI Code Governance still maintained?

Yes - as of 2026-08-25, its last commit was 2026-04-17. We re-verify nightly.

How do I install Korext: AI Code Governance?

Run `npx -y korext`. The README does not document required environment variables for a basic install. You can also paste the ready-made client config above.

Does Korext: AI Code Governance require authentication?

No - the endpoint accepted our unauthenticated MCP initialize when probed on 2026-08-25; you can connect without credentials.

07 · Alternatives to Korext: AI Code Governance

Alternatives to Korext: AI Code Governance

Maintained developer tools servers if Korext: AI Code Governance isn't the fit.

Pairs well with

Servers that cover what Korext: AI Code Governance doesn't - only shown when the pairing reason fits the companion.

More developer tools MCP servers · Xdebug · Bitbucket MCP Server · Fuse · Understand Quickly · Repo Relay

More TypeScript MCP servers · Porkbun MCP · Vueuse MCP · Inhalt · Krimto · see all