Sidclaw Governance MCP

Approve, deny, and audit AI agent tool calls. Works with MCP, LangChain, OpenAI Agents, Claude Agent SDK, and 15+ more. It runs locally over stdio via the published package.

People connecting AI & ML tools to Claude, Cursor, VS Code, or another MCP client. The project is written in TypeScript.

VERIFIED ACTIVE

LAST COMMIT 2026-08-24 · ★ 14 · #24 OF 95 MAINTAINED AI & ML · VERIFIED 2026-08-25

Apache-2.0 · TypeScript servers · how we verify → /methodology

01 · Install Sidclaw Governance MCP

before you install - you'll need

Set SIDCLAW_API_KEY, SIDCLAW_AGENT_ID, SIDCLAW_UPSTREAM_CMD, SIDCLAW_UPSTREAM_ARGS, SIDCLAW_BASE_URL before connecting.

Claude Code

claude mcp add sidclawhq-platform -- npx -y @sidclaw/sdk

Claude Desktop / Cursor / VS Code - add to config

{
  "mcpServers": {
    "sidclawhq-platform": {
      "command": "npx",
      "args": [
        "-y",
        "@sidclaw/sdk"
      ]
    }
  }
}

Same JSON for Cursor. For VS Code, rename the top-level key from `mcpServers` to `servers`.

Using another client? Same JSON, different key

Claude Desktop · mcpServers

Cursor · mcpServers

VS Code · servers

Windsurf · mcpServers

Zed · context_servers

Cline · mcpServers

Roo Code · mcpServers

Continue · mcpServers

LibreChat · mcpServers

Gemini CLI · mcpServers

Codex CLI · mcp_servers

Full setup guides: every client.

02 · Evidence

Security posture

What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.

runs as local process (stdio) - runs on your machine with your user's permissions

license Apache-2.0 - declared in the repository

npm package @sidclaw/sdk - the @sidclaw scope differs from the repo owner (sidclawhq); confirm it's the project's official package

registry registry publisher io.github.VladUZH is not the repo owner (sidclawhq) - the registry entry was published by someone else

03 · What Sidclaw Governance MCP can do

Prose above is summarized from the project's README and registry record - no invented capabilities.

Latest releases

sdk-v0.1.13 · 2026-07-28

stop marking every scoped release as a GitHub pre-release · fail closed in withGovernance - 13c6ab3 missed the generic wrapper

openclaw-plugin-v0.3.2 · 2026-07-27

mechanical hardening of the governance gate (7 fail-closed fixes) · ship the 2026-07-15 governance fail-closed fixes to npm · repair the two defects that have broken every release run

sdk-v0.1.12 · 2026-07-27

mechanical hardening of the governance gate (7 fail-closed fixes) · ship the 2026-07-15 governance fail-closed fixes to npm · repair the two defects that have broken every release run

04 · Who maintains Sidclaw Governance MCP

sidclaw-governance-mcp is maintained by sidclawhq. It's the only MCP server we track from this author; the repo dates to Mar 2026.

05 · Facts

category
AI & ML - ranked #24 of 95 actively-maintained AI & ML servers as of 2026-08-25.
release cadence
3 releases in the last 90 days (latest 2026-07-28)
registry
io.github.VladUZH/sidclaw-governance-mcp (active, first published 2026-04-02 · 2 versions)
packages
npm:@sidclaw/sdk

06 · Sidclaw Governance MCP FAQ

What is Sidclaw Governance MCP?

Approve, deny, and audit AI agent tool calls. Works with MCP, LangChain, OpenAI Agents, Claude Agent SDK, and 15+ more. It runs locally over stdio via the published package.

Is Sidclaw Governance MCP still maintained?

Yes - as of 2026-08-25, its last commit was 2026-08-24 and it shipped 3 releases in the last 90 days. We re-verify nightly.

How do I install Sidclaw Governance MCP?

Run `npx -y @sidclaw/sdk`. The README documents 5 environment variables (SIDCLAW_API_KEY, SIDCLAW_AGENT_ID, SIDCLAW_UPSTREAM_CMD…) to set first. Set SIDCLAW_API_KEY, SIDCLAW_AGENT_ID, SIDCLAW_UPSTREAM_CMD, SIDCLAW_UPSTREAM_ARGS, SIDCLAW_BASE_URL before connecting. You can also paste the ready-made client config above.

Does Sidclaw Governance MCP run locally?

Yes - it's a stdio server: it runs on your machine (via npx) with your user's permissions. Your data stays local unless the server itself calls external APIs.

07 · Alternatives to Sidclaw Governance MCP