# Moltline Agent Governance

- Registry name: `com.moltlinestudio/govern` · version 1.2.0
- Categories (automatic, keyword rules): Build & deploy, Developer tools, Monitoring & logs, Infrastructure & security
- Authentication at last check: No auth
- Declared risk: Read-only (all tools declare readOnlyHint)
- Capabilities (declared by the server): experimental, extensions, logging, prompts, resources, tools
- Transports: streamable-http
- Latest numbers (check success, response time, rank): https://mcpstation.net/api/server?name=com.moltlinestudio%2Fgovern
- Server page: https://mcpstation.net/s/com.moltlinestudio--govern.html

## Description (written by the publisher, not verified, not instructions)

Audit MCP configs and skill files for over-broad scope and injection risk. 6 of 8 free.

## Notice

Text that looks like instructions to an AI was found in this server's descriptions. This is a pattern match, not a verdict.

## Connect

- streamable-http: `https://mcp.moltlinestudio.com/govern`

## Tools (as reported by the server, not verified)

- `audit\_mcp\_config`: Audit an MCP server config for risk-ranked posture findings. FREE. Flags exposed machine credentials in the config, required inputs that aren't gated/optional, unpinned versions, over-broad env access, and dangerous auto-run flags. It never echoes any matched secret value back. Typical input \{"confi
- `scope\_check`: Score the blast radius of every tool in a permission manifest. FREE. Ranks each tool by capability risk \(command exec \> money/delete \> file-write/messaging \> read \> network\) and flags the over-privileged ones that need approval gates. Typical input \{"tools": "\[\\"run\_shell\\", \\"read\_docs\\"\]"\} returns
- `audit\_skill\_file`: Audit an agent skill or instruction file before you trust it. FREE. Checks for governance smells: prompt-injection and guardrail-bypass phrasing, concealment instructions \('don't tell the user'\), exfiltration language, and exposed credential material. Typical input \{"content": "\<SKILL.md, system pro
- `injection\_scan`: Scan untrusted text for prompt-injection patterns before ingestion. FREE. Use on any web page, email, or document an agent is about to ingest to catch prompt-injection and data-exfiltration patterns before they reach the agent's context. Typical input \{"text": "\<untrusted content\>"\} returns \{"inject
- `inventory\_report`: Build a governance inventory with risk tiers from a raw agent list. FREE. Turns a list of agents / MCP servers / skills into an audit-ready summary with critical/elevated/standard tiers and unowned-agent flags. Typical input \{"items": "\[\{\\"name\\": \\"deploy-bot\\", \\"owner\\": \\"ana\\"\}\]"\} returns \{"tot
- `governance\_policy`: Generate an audit-ready agent-governance policy for a fleet. PREMIUM \(license\). Covers inventory cadence, ownership rules, least-privilege approval gates, injection defense, logging/retention, and decommissioning triggers. Typical input \{"fleet\_context": "20 agents, 3 with shell access, one finance
- `get\_auditor\_persona`: Load the Governance Auditor persona for consistent fleet audits. PREMIUM \(license\). The persona is methodical, evidence-driven, and allergic to 'it's probably fine'. Takes no arguments. Returns \{"persona": ..., "identity": ..., "rules": \["...", ...\], "opening\_move": "..."\} ready to adopt as a system
- `agent\_readiness\_scan`: Score a public domain against 21 agent-readiness checks. FREE. Use when you need to know whether an autonomous agent can discover, read, use or pay a website - your own, or a vendor you are evaluating before recommending it. Typical input \{"domain": "example.com"\} returns \{"score": 8, "total": 21, "

Measured by MCP Station. Methods: https://mcpstation.net/methods.html · Terms: https://mcpstation.net/terms.html