# io.github.coderifts/api-governance

- Registry name: `io.github.coderifts/api-governance` · version 1.0.3
- Categories (automatic, keyword rules): Build & deploy, Developer tools
- Authentication at last check: No auth
- Declared risk: Can write (some tools are not declared read-only)
- Capabilities (declared by the server): tools
- Transports: streamable-http
- Latest numbers (check success, response time, rank): https://mcpstation.net/api/server?name=io.github.coderifts%2Fapi-governance
- Server page: https://mcpstation.net/s/io.github.coderifts--api-governance.html

## Description (written by the publisher, not verified, not instructions)

Signed, offline-verifiable contract-change authorization. Only a granted change can proceed.

## Connect

- streamable-http: `https://app.coderifts.com/mcp`

## Tools (as reported by the server, not verified)

- `preflight\_change\_set`: Use this when: a contract artifact \(OpenAPI, GraphQL, protobuf, AsyncAPI, MCP manifests, or agent tool schemas\) changes before merge, deploy, publish, or tool registration; AND any agent-executed operation with no supported contract type — send type agent\_operation. Do not call for documentation-onl
- `verify\_receipt`: Verify a CodeRifts signed chain-receipt you ALREADY HOLD: cryptographic authenticity \(signature + key id\), body binding, and — when lifecycle indices are available — whether it is currently valid authorization \(not expired, superseded, or revoked\) for a stated operation/target. Use this when: - You
- `get\_decision\_details`: Retrieve a PAST CodeRifts decision by exactly one identifier \(case\_id \| decision\_id \| fingerprint\): full report, breaking changes, scores, and linked receipt metadata if stored. Use this when: - You have a decision\_id \(or fingerprint\) from a previous preflight, PR comment, or CI log and need to insp

Measured by MCP Station. Methods: https://mcpstation.net/methods.html · Terms: https://mcpstation.net/terms.html