Catalyst Governance

by Stratogenic-AI

282 downloads

Not rated

GitHub

About

Governance middleware for AI agents — permission gates, human-in-the-loop approvals, compliance scanning across 8 frameworks, and hash-linked audit ledger. Hosted SSE endpoint, no self-hosting required.

Details

Author: Stratogenic-AI
Downloads: 282
Categories: Other, Security, AI, Productivity

- Hosted SSE endpoint — no self-hosting required
- Four governance modes: observe, advisory, proposal, strict
- Human-in-the-loop proposal workflow with dashboard
- 8 pre-built compliance scanning frameworks
- Hash-linked, tamper-evident audit ledger
- Works with Claude Code, Claude Desktop, and any MCP client

Setting up with Highlight

This MCP is not yet compatible with Highlight’s one-click setup. However, you can still use it with Highlight by following these steps:

Download and install Highlight from highlightai.com/download
Navigate to the plugins tab and select "Add Custom Plugin"
Configure the plugin with the settings below

Plugin Name Catalyst Governance

Command (node, npx, python, etc.)

Please refer to the README for specific instructions on how to obtain API keys or other required environment variables.
Enable "Start Automatically" if you want the plugin to start when Highlight launches

Setting up with Cursor

Open Cursor's settings
Navigate to the MCP section
Click "Add new Global MCP server"
Copy and paste the configuration below based on your operating system

JSON

{
    "mcpServers": {
        "catalyst governance": {
            "catalyst": {
                "url": "https://catalyst.stratogenic.ai/mcp/sse",
                "transport": "sse",
                "headers": {
                    "X-API-Key": "<your-key>"
                }
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "catalyst governance": {
            "catalyst": {
                "url": "https://catalyst.stratogenic.ai/mcp/sse",
                "transport": "sse",
                "headers": {
                    "X-API-Key": "<your-key>"
                }
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "catalyst governance": {
            "catalyst": {
                "url": "https://catalyst.stratogenic.ai/mcp/sse",
                "transport": "sse",
                "headers": {
                    "X-API-Key": "<your-key>"
                }
            }
        }
    }
}

Setting up with Claude Desktop

Open Claude Desktop's settings
Go to the Integrations tab
Click "Add MCP Server"
Use the configuration below based on your operating system

Note: Make sure Claude Desktop is running before attempting to connect.

JSON

{
    "mcpServers": {
        "catalyst governance": {
            "catalyst": {
                "url": "https://catalyst.stratogenic.ai/mcp/sse",
                "transport": "sse",
                "headers": {
                    "X-API-Key": "<your-key>"
                }
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "catalyst governance": {
            "catalyst": {
                "url": "https://catalyst.stratogenic.ai/mcp/sse",
                "transport": "sse",
                "headers": {
                    "X-API-Key": "<your-key>"
                }
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "catalyst governance": {
            "catalyst": {
                "url": "https://catalyst.stratogenic.ai/mcp/sse",
                "transport": "sse",
                "headers": {
                    "X-API-Key": "<your-key>"
                }
            }
        }
    }
}

Setting up with Windsurf

Open Windsurf's preferences
Go to the Integrations section
Click "Add MCP Integration"
Use the configuration below based on your operating system

JSON

{
    "mcpServers": {
        "catalyst governance": {
            "catalyst": {
                "url": "https://catalyst.stratogenic.ai/mcp/sse",
                "transport": "sse",
                "headers": {
                    "X-API-Key": "<your-key>"
                }
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "catalyst governance": {
            "catalyst": {
                "url": "https://catalyst.stratogenic.ai/mcp/sse",
                "transport": "sse",
                "headers": {
                    "X-API-Key": "<your-key>"
                }
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "catalyst governance": {
            "catalyst": {
                "url": "https://catalyst.stratogenic.ai/mcp/sse",
                "transport": "sse",
                "headers": {
                    "X-API-Key": "<your-key>"
                }
            }
        }
    }
}

Setting up with Cline

Open Cline's settings
Navigate to the Integrations section
Click "Add MCP Server"
Copy and paste the configuration below based on your operating system

Note: Make sure to restart Cline after adding the configuration.

JSON

{
    "mcpServers": {
        "catalyst governance": {
            "catalyst": {
                "url": "https://catalyst.stratogenic.ai/mcp/sse",
                "transport": "sse",
                "headers": {
                    "X-API-Key": "<your-key>"
                }
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "catalyst governance": {
            "catalyst": {
                "url": "https://catalyst.stratogenic.ai/mcp/sse",
                "transport": "sse",
                "headers": {
                    "X-API-Key": "<your-key>"
                }
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "catalyst governance": {
            "catalyst": {
                "url": "https://catalyst.stratogenic.ai/mcp/sse",
                "transport": "sse",
                "headers": {
                    "X-API-Key": "<your-key>"
                }
            }
        }
    }
}

Setting up with Goose

Open Goose's preferences
Go to the Integrations tab
Select "MCP Servers"
Click "Add New Server"
Use the configuration below based on your operating system

JSON

{
    "mcpServers": {
        "catalyst governance": {
            "catalyst": {
                "url": "https://catalyst.stratogenic.ai/mcp/sse",
                "transport": "sse",
                "headers": {
                    "X-API-Key": "<your-key>"
                }
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "catalyst governance": {
            "catalyst": {
                "url": "https://catalyst.stratogenic.ai/mcp/sse",
                "transport": "sse",
                "headers": {
                    "X-API-Key": "<your-key>"
                }
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "catalyst governance": {
            "catalyst": {
                "url": "https://catalyst.stratogenic.ai/mcp/sse",
                "transport": "sse",
                "headers": {
                    "X-API-Key": "<your-key>"
                }
            }
        }
    }
}

From the repository

Configure your MCP client to connect to Catalyst’s hosted SSE endpoint using an X-API-Key. The server checks every agent action against your policy and enforces the selected governance mode.

`catalyst_ingest_task`

Ingest one or more tasks into Catalyst governance pipeline. Items should include at minimum a 'title'. Optional fields: details, owner, priority (Low/Medium/High/Critical), stage, domain, due_at, tags, group_id. Returns ingested count and proposal IDs created.

`catalyst_search_tasks`

Search normalised tasks in the tenant flow cycle. Performs case-insensitive substring match on title/details. Filter by canonical domain (e.g. security, product, operations) or priority.

`catalyst_update_task`

Update a single task in the governance flow. Ledger-recorded. Patch may include: title, details, owner, priority, stage, domain, due_at, status, tags, done. Normalisation is applied automatically.

`catalyst_bulk_update_tasks`

Bulk update all tasks matching a filter. Growth/Enterprise plans only. filter keys: domain, priority, stage, owner, tag, group_id. updates keys: owner, priority, domain, stage, tags_add, tags_remove. Returns matched and updated counts.

`catalyst_list_proposals`

List all pending governance proposals awaiting acceptance or decline. Proposals are work items that have been ingested but not yet committed to the live flow cycle. They require human (or agent) review. Each proposal contains an `idempotency_key` field — this is the canonical proposal identifier. Always use `idempotency_key` (not `task_id` or `id`) when passing proposal IDs to catalyst_accept_proposals, catalyst_decline_proposals, or catalyst_review_proposal.

`catalyst_accept_proposals`

Accept one or more proposals, committing them to the flow cycle. ids: list of proposal `idempotency_key` values from catalyst_list_proposals. Do not pass `task_id` or `id` — the backend looks up proposals by `idempotency_key` and will silently match nothing if the wrong field is used. Acceptance is the governance commit step: items move from review state into live execution state and are recorded in the immutable ledger.

`catalyst_decline_proposals`

Decline one or more proposals without committing them. ids: list of proposal `idempotency_key` values from catalyst_list_proposals. Do not pass `task_id` or `id` — the backend looks up proposals by `idempotency_key` and will silently match nothing if the wrong field is used. Declined proposals are recorded for audit and learning but are not added to the live flow cycle.

`catalyst_review_proposal`

Approve or reject a review-required proposal (AI governance hold). proposal_id: the `idempotency_key` field from catalyst_list_proposals. Do not pass `task_id` or `id` — the backend looks up by `idempotency_key`. decision must be 'approve' or 'reject'. Approved proposals can then be accepted via catalyst_accept_proposals. Rejected proposals are marked review-rejected in the ledger.

`catalyst_get_graph_views`

Get all 7 governance graph views for the tenant. Views: org_snapshot, execution_flow, ownership_map, compliance_web, risk_heatmap, client_influence, catalyst_metrics. Read-only, derived from flow_cycle on demand. Requires governance_dashboard entitlement.

`catalyst_get_dashboard`

Get the governance dashboard snapshot including all views. Returns tenant metadata, execution metrics, and all 5 governance views (execution_flow, ownership_map, compliance_web, risk_heatmap, client_influence).

`catalyst_get_org_summary`

Get an AI-generated narrative summary of the org's execution state. time_window: 'last_7_days' or 'last_30_days'. extra_query: optional focus bias (e.g. 'compliance', 'delivery risk'). Returns a MASC-L3 compliant narrative — no individual evaluations. Requires governance_dashboard entitlement.

`catalyst_run_compliance_scan`

Run a compliance scan against all loaded compliance documents. Detects compliance gaps, conflicts, and policy violations across the current flow cycle. Requires can_scan entitlement. Returns findings grouped by severity.

`catalyst_get_compliance_findings`

Get the latest compliance findings from the most recent scan. Returns findings flattened by category: conflicts, gaps, ok. Each finding includes category, severity, status, and task linkage. Does not trigger a new scan — use catalyst_run_compliance_scan first.

`catalyst_create_tasks_from_findings`

Materialise compliance findings as actionable flow tasks. classes: list of finding classes to convert, e.g. ['MISSING_CONTROL', 'PROHIBITED_ACTION']. Defaults to both. Created tasks enter the governance pipeline like any other ingest.

`catalyst_list_compliance_frameworks`

List all available pre-built compliance framework packs. Returns each pack (GDPR, SOC 2, ISO 27001, HIPAA, PCI-DSS, EU AI Act, Bribery Act, AML/KYC) with its name, description, rule count, and whether it is currently active for this organisation. Activate a pack with catalyst_activate_compliance_framework.

`catalyst_activate_compliance_framework`

Activate a pre-built compliance framework pack for this organisation. framework: one of gdpr, soc2, iso27001, hipaa, pci_dss, eu_ai_act, bribery_act, aml_kyc. Once activated, the pack's DENY/REQUIRE/ADVISE rules are merged into every subsequent compliance scan — no document upload required. Requires can_scan entitlement.

`catalyst_list_compliance_rules`

List all compliance rules currently in effect for the organisation. Returns rules from three sources combined and deduplicated: - Rules extracted from uploaded policy documents - Custom org-level rules (PATCH /compliance/rules) - Rules from any activated framework packs Each rule includes: id, type (DENY/REQUIRE/ADVISE), trigger sentence, severity, scope, remediation guidance, confidence score, and authority citation.

`catalyst_register_machine_actor`

`catalyst_evaluate_agent_action`

Evaluate whether an agent action is permitted by the governance gate. Returns decision: 'allow' | 'proposal_required' | 'deny'. High-risk actors with allow decisions are escalated to proposal_required. The actor must be registered and active for this tenant.

`catalyst_register_workflow`

Register an AI workflow for EU AI Act compliance governance. risk_level: unacceptable (rejected) | high | limited | minimal. mode: observe | advisory | proposal. High-risk workflows are forced to proposal. Sets ai_standards=True to opt into the Built to AI Standards evidence trail. Requires can_configure_ai_workflows (Enterprise+).

`catalyst_send_lite_event`

Send a lifecycle event for a registered AI workflow. event_type examples: run.started, action.executed, approval.requested, run.completed, run.failed. Idempotent via request_id (UUID recommended). Payload is scrubbed of credentials before storage.

`catalyst_get_workflow_trust`

Get the four-component trust score for a registered AI workflow. Score = 0.25×ai_declared + 0.25×risk_eval + 0.25×override + 0.25×(1−failure). Range 0.0–1.0. window_days controls the lookback period (1–365).

`catalyst_export_workflow_audit`

Export audit events for an AI workflow as JSON. since: ISO timestamp filter (inclusive). ai_standards_only: limit to events from workflows opted into Built to AI Standards. Suitable for regulatory submissions and investor due diligence.

`catalyst_weekly_summary`

Get a 7-day activity rollup: ingested, accepted, declined proposals, domain breakdown, priority breakdown, and average risk score. Fully deterministic — no LLM calls.

`catalyst_export_ledger`

Export the immutable SHA-256 chained audit ledger. since: ISO timestamp to filter entries (inclusive). format: 'json' returns full entries; 'csv' sets entries to null (use REST API for CSV). The ledger is tamper-evident — any modification breaks the hash chain.

`catalyst_my_governance`

Show your governance profile, actor registration, and plan capabilities. Returns governance_mode (observe/advisory/proposal/strict), risk_class, declared capabilities, and actor_id. Auto-registers you in observe mode on first connection — the lightest governance touch. Also returns plan_capabilities showing which features are active and which require an upgrade — relay any upgrade_required fields to the user so they can unlock compliance scanning or AI workflow governance. Call this first to understand what you are and are not permitted to do.

`catalyst_check_action`

Check if a capability/action is permitted by your governance policy. Returns decision: 'allow' | 'proposal_required' | 'deny' with guidance. Call BEFORE any consequential action (API call, data write, send, deploy). If title is provided and decision is 'proposal_required', the intent is logged automatically and proposal_id is returned — no second call needed. If 'proposal_required' without a title, call catalyst_log_task separately. capability examples: 'send_email', 'write_file', 'deploy_code', 'update_record', 'delete_record', 'external_api_call'.

`catalyst_log_task`

`catalyst_pending_approvals`

List proposals currently awaiting governance approval. Shows proposals with status pending or in review. Use this to check whether an action you submitted is still waiting for human sign-off before you proceed. Returns count and full proposal objects with IDs for catalyst_await_approval.

`catalyst_await_approval`

Check approval status for a specific proposal. Returns approved: true/false and clear guidance on whether to proceed. Call this after catalyst_check_action returns 'proposal_required'. Do NOT proceed with the gated action until approved: true is returned. POLLING vs EVENT-DRIVEN: For interactive sessions, poll this tool. For autonomous long-running workflows, prefer registering a webhook via catalyst_register_approval_webhook(callback_url) so your orchestrator is notified the moment a human acts — no polling loop required.

`catalyst_register_approval_webhook`

Register a callback URL to receive proposal approval notifications. Subscribes callback_url to proposal.accepted and proposal.declined events. When a human approves or declines any proposal, Catalyst POSTs the event to your URL with the resolved proposal IDs in data.ids. Use this instead of polling catalyst_await_approval for autonomous workflows: register once, let your orchestrator (Temporal, job queue, webhook relay) wake the agent when the relevant proposal_id arrives. Then call catalyst_await_approval once to confirm and proceed. Returns subscription IDs, the expected payload shape, and usage guidance. Returns upgrade_required: true if outbound webhooks are not on your plan.

Claude Desktop / Cursor

Paste into your MCP client config file to install this server.

{
    "mcpServers": {
        "catalyst governance": {
            "catalyst": {
                "url": "https://catalyst.stratogenic.ai/mcp/sse",
                "transport": "sse",
                "headers": {
                    "X-API-Key": "<your-key>"
                }
            }
        }
    }
}

McpServers

{
    "catalyst": {
        "url": "https://catalyst.stratogenic.ai/mcp/sse",
        "transport": "sse",
        "headers": {
            "X-API-Key": "<your-key>"
        }
    }
}

Governance middleware for AI agents — hosted SSE endpoint, no self-hosting required.

Connect once via X-API-Key. Before your agent writes files, deploys code, sends messages, or calls external APIs, Catalyst checks in and enforces your policy.

Governance modes: observe → advisory → proposal → strict
Human-in-the-loop: agents submit proposals, humans approve/decline in the dashboard before consequential actions proceed
Compliance scanning: 8 pre-built frameworks — GDPR, SOC 2, ISO 27001, HIPAA, PCI-DSS, EU AI Act, Bribery Act, AML/KYC
Audit ledger: hash-linked, tamper-evident chain of every agent action

Built for Claude Code, Claude Desktop, and any MCP-compatible client.

No reviews yet — be the first

Use Google, GitHub, or an email account so ratings stay tied to real people.

Email sign in

No reviews posted yet.

About

Details

Jump to

Setting up with Highlight

From the repository

catalyst_ingest_task

catalyst_search_tasks

catalyst_update_task

catalyst_bulk_update_tasks

catalyst_list_proposals

catalyst_accept_proposals

catalyst_decline_proposals

catalyst_review_proposal

catalyst_get_graph_views

catalyst_get_dashboard

catalyst_get_org_summary

catalyst_run_compliance_scan

catalyst_get_compliance_findings

catalyst_create_tasks_from_findings

catalyst_list_compliance_frameworks

catalyst_activate_compliance_framework

catalyst_list_compliance_rules

catalyst_register_machine_actor

catalyst_evaluate_agent_action

catalyst_register_workflow

catalyst_send_lite_event

catalyst_get_workflow_trust

catalyst_export_workflow_audit

catalyst_weekly_summary

catalyst_export_ledger

catalyst_my_governance

catalyst_check_action

catalyst_log_task

catalyst_pending_approvals

catalyst_await_approval

catalyst_register_approval_webhook

Claude Desktop / Cursor

McpServers

Install

More like this

Sequential Thinking

Filesystem

EverArt

Google Drive

Context 7

Reactive Resume

`catalyst_ingest_task`

`catalyst_search_tasks`

`catalyst_update_task`

`catalyst_bulk_update_tasks`

`catalyst_list_proposals`

`catalyst_accept_proposals`

`catalyst_decline_proposals`

`catalyst_review_proposal`

`catalyst_get_graph_views`

`catalyst_get_dashboard`

`catalyst_get_org_summary`

`catalyst_run_compliance_scan`

`catalyst_get_compliance_findings`

`catalyst_create_tasks_from_findings`

`catalyst_list_compliance_frameworks`

`catalyst_activate_compliance_framework`

`catalyst_list_compliance_rules`

`catalyst_register_machine_actor`

`catalyst_evaluate_agent_action`

`catalyst_register_workflow`

`catalyst_send_lite_event`

`catalyst_get_workflow_trust`

`catalyst_export_workflow_audit`

`catalyst_weekly_summary`

`catalyst_export_ledger`

`catalyst_my_governance`

`catalyst_check_action`

`catalyst_log_task`

`catalyst_pending_approvals`

`catalyst_await_approval`

`catalyst_register_approval_webhook`