Sidclaw Governance MCP

Approve, deny, and audit AI agent tool calls. Works with MCP, LangChain, OpenAI Agents, Claude Agent SDK, and 15+ more. It runs locally over stdio via the published package.

People who work with approval workflow, audit trail and crewai and want it reachable from Claude, Cursor, VS Code, or another MCP client. The project is written in TypeScript.

VERIFIED ACTIVE

LAST COMMIT 2026-09-14 · ★ 14 · #33 OF 106 MAINTAINED AI & ML · VERIFIED 2026-09-18

Apache-2.0 · TypeScript servers · how we verify → /methodology

01 · Install Sidclaw Governance MCP

before you install - you'll need

Set SIDCLAW_API_KEY, SIDCLAW_AGENT_ID, SIDCLAW_UPSTREAM_CMD, SIDCLAW_UPSTREAM_ARGS, SIDCLAW_BASE_URL before connecting.

Claude Code

claude mcp add sidclawhq-platform -- npx -y @sidclaw/sdk

Claude Desktop / Cursor / VS Code - add to config

{
  "mcpServers": {
    "sidclawhq-platform": {
      "command": "npx",
      "args": [
        "-y",
        "@sidclaw/sdk"
      ]
    }
  }
}

Same JSON for Cursor. For VS Code, rename the top-level key from `mcpServers` to `servers`.

Using another client? Same JSON, different key

Claude Desktop · mcpServers

Cursor · mcpServers

VS Code · servers

Windsurf · mcpServers

Zed · context_servers

Cline · mcpServers

Roo Code · mcpServers

Continue · mcpServers

LibreChat · mcpServers

Gemini CLI · mcpServers

Codex CLI · mcp_servers

Full setup guides: every client.

02 · Evidence

Security posture

What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.

runs as local process (stdio) - runs on your machine with your user's permissions

license Apache-2.0 - declared in the repository

npm package @sidclaw/sdk - the @sidclaw scope differs from the repo owner (sidclawhq); confirm it's the project's official package

registry registry publisher io.github.VladUZH is not the repo owner (sidclawhq) - the registry entry was published by someone else

03 · What Sidclaw Governance MCP can do

Prose above is summarized from the project's README and registry record - no invented capabilities.

Latest releases

sdk-v0.1.13 · 2026-07-28

stop marking every scoped release as a GitHub pre-release · fail closed in withGovernance - 13c6ab3 missed the generic wrapper

openclaw-plugin-v0.3.2 · 2026-07-27

mechanical hardening of the governance gate (7 fail-closed fixes) · ship the 2026-07-15 governance fail-closed fixes to npm · repair the two defects that have broken every release run

sdk-v0.1.12 · 2026-07-27

mechanical hardening of the governance gate (7 fail-closed fixes) · ship the 2026-07-15 governance fail-closed fixes to npm · repair the two defects that have broken every release run

04 · Who maintains Sidclaw Governance MCP

sidclaw-governance-mcp is maintained by sidclawhq. It's the only MCP server we track from this author; the repo dates to Mar 2026.

05 · Facts

category
AI & ML - ranked #33 of 106 actively-maintained AI & ML servers as of 2026-09-18.
release cadence
3 releases in the last 90 days (latest 2026-07-28)
registry
io.github.VladUZH/sidclaw-governance-mcp (active, first published 2026-04-02 · 2 versions)
packages
npm:@sidclaw/sdk

06 · Sidclaw Governance MCP FAQ

What is Sidclaw Governance MCP?

Approve, deny, and audit AI agent tool calls. Works with MCP, LangChain, OpenAI Agents, Claude Agent SDK, and 15+ more. It runs locally over stdio via the published package.

Is Sidclaw Governance MCP still maintained?

Yes - as of 2026-09-18, its last commit was 2026-09-14 and it shipped 3 releases in the last 90 days. We re-verify nightly.

How do I install Sidclaw Governance MCP?

Run `npx -y @sidclaw/sdk`. The README documents 5 environment variables (SIDCLAW_API_KEY, SIDCLAW_AGENT_ID, SIDCLAW_UPSTREAM_CMD…) to set first. Set SIDCLAW_API_KEY, SIDCLAW_AGENT_ID, SIDCLAW_UPSTREAM_CMD, SIDCLAW_UPSTREAM_ARGS, SIDCLAW_BASE_URL before connecting. You can also paste the ready-made client config above.

Does Sidclaw Governance MCP run locally?

Yes - it's a stdio server: it runs on your machine (via npx) with your user's permissions. Your data stays local unless the server itself calls external APIs.

07 · Alternatives to Sidclaw Governance MCP