# governance-mcp

An MCP server that pushes AI compliance evidence into Mima and keeps your readiness score current across EU AI Act, ISO 42001, SOC 2 and NIST AI RMF.

- MCP server · `type=mcp` · Claude Code, Codex, Cursor, GitHub Copilot, Windsurf (Devin Desktop), Cline, Zed, Gemini CLI
- Author: mimaworks
- License: not stated · policy=link-only · description only; the file stays with the author
- Source: https://github.com/mimaworks/governance-mcp
- Updated: 2026-07-05
- HTML: https://affpapa.org/en/nevibecode/mcp/governance-mcp

## What it does

The agent gets 10 tools for the AI system registry and the evidence records in a Mima workspace. `attest` writes a GRC evidence entry; `dry_run_attest` previews which controls that entry would earn before anything is saved. `register_system` registers an AI system under EU AI Act Art. 9. For reporting there's `get_posture` with the overall score and a per-framework split, plus `check_gates` returning gate status with exit codes and `suggest_gates` for prioritised recommendations. One attestation maps onto all four frameworks at once, so the same record counts everywhere.

Setup is an `npx -y @mima-ai/governance-mcp` command in the MCP config of your editor or CLI. Two values are required first: `MIMA_API_KEY` and `MIMA_WORKSPACE_ID`, both from the Mima dashboard. Sign up there and copy the key before you wire anything in — without them the server has nothing to authenticate with.

If attestations belong in app code rather than agent chat, there's a Python SDK: `pip install mima-governance`. Teams that must show EU AI Act evidence on every step will get more from `check_gates`, because exit codes plug straight into a pipeline; hand-collecting records each time is slower and easy to get wrong.

## Requirements
- Needs: Node.js (commands run via npx)
- Environment variables: `MIMA_API_KEY`, `MIMA_WORKSPACE_ID` — keys and tokens: ask the human for the values, never commit them or put them in shared files.

## Install

### Claude Code (native platform)

**Platform CLI**
```bash
claude mcp add governance-mcp -e MIMA_API_KEY=<MIMA_API_KEY> -e MIMA_WORKSPACE_ID=<MIMA_WORKSPACE_ID> -- npx -y @mima-ai/governance-mcp
```
Replace <…> with your own values

### Codex

**Platform CLI**
```bash
codex mcp add governance-mcp --env MIMA_API_KEY=<MIMA_API_KEY> --env MIMA_WORKSPACE_ID=<MIMA_WORKSPACE_ID> -- npx -y @mima-ai/governance-mcp
```
Replace <…> with your own values

### Cursor

**Config file**
File `.cursor/mcp.json`:
```json
{
    "mcpServers": {
        "governance-mcp": {
            "command": "npx",
            "args": [
                "-y",
                "@mima-ai/governance-mcp"
            ],
            "env": {
                "MIMA_API_KEY": "<MIMA_API_KEY>",
                "MIMA_WORKSPACE_ID": "<MIMA_WORKSPACE_ID>"
            }
        }
    }
}
```
Replace <…> with your own values

### GitHub Copilot

**Config file**
File `.vscode/mcp.json`:
```json
{
    "servers": {
        "governance-mcp": {
            "type": "stdio",
            "command": "npx",
            "args": [
                "-y",
                "@mima-ai/governance-mcp"
            ],
            "env": {
                "MIMA_API_KEY": "<MIMA_API_KEY>",
                "MIMA_WORKSPACE_ID": "<MIMA_WORKSPACE_ID>"
            }
        }
    }
}
```
Replace <…> with your own values

### Gemini CLI

**Platform CLI**
```bash
gemini mcp add -e MIMA_API_KEY=<MIMA_API_KEY> -e MIMA_WORKSPACE_ID=<MIMA_WORKSPACE_ID> governance-mcp npx -y @mima-ai/governance-mcp
```
Replace <…> with your own values

## When to use it
- log an AI-risk evidence record in one call
- preview which controls an attestation earns before writing it
- register an AI system under EU AI Act Art. 9
- compare readiness scores across four frameworks
- get gate pass/fail with exit codes for a pipeline

## Example prompts
- Check our compliance posture across all four frameworks.
- Dry-run an AI risk assessment for loan-scorer and show the mapped controls.

## Similar
- [compliance-os](https://affpapa.org/en/nevibecode/plugins/compliance-os.md) — plugin · ★ 28786
- [flowstudio-power-automate-governance](https://affpapa.org/en/nevibecode/skills/flowstudio-power-automate-governance.md) — skill · 777 installs
- [agent-governance](https://affpapa.org/en/nevibecode/skills/agent-governance.md) — skill · 9623 installs
- [arize-compliance-audit](https://affpapa.org/en/nevibecode/skills/arize-compliance-audit.md) — skill · 2600 installs
- [mcp-eu-ai-act](https://affpapa.org/en/nevibecode/mcp/mcp-eu-ai-act.md) — MCP server · ★ 11
- [Agent Module](https://affpapa.org/en/nevibecode/mcp/agent-module.md) — MCP server · ★ 2

---
NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md