P31 Governed Agent CLI is answering right now. Last checked 14 min ago. 18 installs a week from npm. Last commit 6 Nov 2026.
Capability-routed CLI/MCP: signed provenance exports, WCAG-validated themes, sovereign deploy modes.
We read the source, 3 h ago · rules 995398eba69f
A value the model can set ends up inside a file or shell call. That is not a flaw by itself — for a terminal server it is the job — but it is where things go wrong when it is not.
const parsed = yaml.parse(fs.readFileSync(tokensPath, 'utf8'));
What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.
const artifactPath = path.join(outDir, artifactName);
execSync(`git tag -a v${nextVersion} -m "Release v${nextVersion}"`);
if (input && !key.return && !key.backspace && !key.delete && !key.ctrl && !key.meta) {
setInput((prev) => prev + input);
Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.
That is not a flaw by itself — but it is where things go wrong when it is not the job. We re-read this code on every release. Watch it and you hear from us the day another one appears.
Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 14 min ago.
claude mcp add governed-agent-cli --transport http https://mcp.p31ca.org/mcp
https://mcp.p31ca.org/mcp
[mcp_servers.governed-agent-cli]
url = "https://mcp.p31ca.org/mcp"
{
"mcpServers": {
"governed-agent-cli": {
"url": "https://mcp.p31ca.org/mcp"
}
}
}
{
"servers": {
"governed-agent-cli": {
"type": "http",
"url": "https://mcp.p31ca.org/mcp"
}
}
}
This endpoint answered with an authorization challenge. The server is running, and it signs you in through your browser: there is no API key to paste.
| URL | Transport | State | Latency | Checked |
|---|---|---|---|---|
| https://mcp.p31ca.org/mcp | streamable-http | sign-in | 187 ms | 14 min ago |
Pre-deploy governance for AI agents: posture scores, policies, budget cap checks, trust manifests.
Sealed render-proof for deployed websites — signed verdicts bound to the deployed artifact.
Deploy from your terminal, and give an AI coding agent the same abilities over MCP.
Expose Fascia-deployed Tools and Entity schemas to AI agents via MCP
Deploy and diagnose applications in governed Kubernetes Preview Spaces through authenticated MCP.
Create, validate, simulate and deploy Camunda 8 BPMN processes, forms and DMN from an agent.
Pre-deploy ship gate AI agents call before shipping. Also audits the agent's own MCP config.
Remote MCP server to integrate and validate self-hosted PayRam deployments.
Answers built from our own checks of this server.