Skip to content

MCP Governance Composer for Agent Tooling

Last updated:

This tool is provided as-is for convenience. Output should be verified before use in any production or critical context.

Agent Invocation

Best Path For Builders

Browser workflow

Runs instantly in the browser with private local processing and copy/export-ready output.

Browser Workflow

This tool is optimized for instant in-browser execution with local data handling. Run it here and copy/export the output directly.

/mcp-governance-composer/

For automation planning, fetch the canonical contract at /api/tool/mcp-governance-composer.json.

How to Use MCP Governance Composer for Agent Tooling

  1. 1

    Paste MCP server inventory JSON

    Open the tool and paste your MCP server object in the editor. You can use either a root map of servers or an object with an mcpServers key.

  2. 2

    Choose governance mode and run compose

    Select allow-list, approve-on-write, or observe mode, then run Compose Governance. The mode controls default enablement and approval posture.

  3. 3

    Review high-risk and approval-required sets

    Inspect summary counts, reviewRequired list, and generated allow or deny buckets to confirm policy intent before rollout.

  4. 4

    Copy managed policy output into runtime config

    Copy the generated managedMcp and toolPolicy output and apply it to your governance configuration repository or deployment pipeline.

Frequently Asked Questions

What is MCP Governance Composer?
MCP Governance Composer builds managed policy packs from your MCP server inventory. It generates allow and deny sets, approval-required lists, and rollout checklists for safer agent operations.
How do I use MCP Governance Composer?
Paste your MCP server JSON, choose a governance mode, and run the composer. Review the generated managed policy object and checklist, then apply the output to your runtime configuration.
How are high-risk servers identified?
The tool scans server names and config hints for sensitive capabilities such as shell execution, file writes, destructive commands, and unrestricted network actions. Matching entries are marked for approval review.
Does MCP Governance Composer store or send my data?
No. Processing runs in your browser. Your server definitions are not uploaded or persisted by the tool.