mcp-kinetic-gain · v0.8.0 · AGPL-3.0

71 governance tools.
One MCP config entry.

The unified Model Context Protocol server that exposes every Kinetic Gain Protocol Suite spec — plus the DefenseTech 6-pack — as callable tools to Claude Desktop, Cursor, Cline, or any MCP client. 71 tools = 47 spec tools + 16 implementation-preview tools + 8 DefenseTech tools. stdio transport. 126 tests passing. No API key. No phone-home.

71Tools
11Specs covered
126Tests passing
4Registries
Install (or run via npx) npm install -g mcp-kinetic-gain npx -y mcp-kinetic-gain

Registry status

Where mcp-kinetic-gain is live. Bumped on every release via the canonical generator — these counts cannot drift from the actual published state.

RegistryStatusSinceNotes
npm ● LIVE 2026-05-24 npmjs.com/package/mcp-kinetic-gain · v0.8.0 · provenance-stamped
Official MCP Registry ● LIVE 2026-06-02 io.github.mizcausevic-dev/mcp-kinetic-gain @ registry.modelcontextprotocol.io
mcp.so ● LIVE 2026-06-01 Community directory · auto-crawls metadata from GitHub repo
Cline marketplace 2026-05-26 cline/mcp-marketplace#1661 — open, awaiting team review

The eleven Suite specs, as MCP tools

Each Kinetic Gain Protocol Suite specification exposes a tight tool surface — typically fetch + inspect + validate + cross-cutting checks. The agent picks the spec by the document's *_version field; the tool family handles the rest.

Spec 01

AEO Protocol

4 tools

Entity declaration at /.well-known/aeo.json. Fetch, inspect, extract a claim, compute the well-known URL.

aeo_fetch aeo_inspect
Spec 02

Prompt Provenance

3 tools

Validate Prompt Provenance documents against the v0.1 schema. Inspect, evaluate result.

prompt_provenance_validate prompt_provenance_eval_result
Spec 03

Agent Cards

4 tools

Inspect or validate Agent Cards. Probe the tool disclosure surface. Resolve well-known URL.

agent_card_validate agent_card_tool_disclosure
Spec 04

AI Evidence Format

3 tools

Validate, inspect, and verify the content hash of an AI Evidence object.

ai_evidence_validate ai_evidence_verify_hash
Spec 05

MCP Tool Cards

4 tools

Inspect or validate MCP Tool Cards. Check tested-with declarations. Resolve well-known URL.

tool_card_validate tool_card_tested_with
Spec 06 · EdTech

AI Tutor Cards

6 tools

Fetch, inspect, validate, check COPPA applicability, check subject coverage, well-known.

tutor_card_coppa_check tutor_card_subject_check
Spec 07 · EdTech

Student AI Disclosure

5 tools

Validate, inspect, check against AUP, verify prompt hash, verify artifact hash.

disclosure_aup_check disclosure_verify_prompt_hash
Spec 08 · EdTech

Classroom AI AUP

5 tools

Fetch, inspect, validate, check compliance against a student disclosure, well-known URL.

aup_check_compliance aup_validate
Spec 09 · HealthTech

Clinical AI Disclosure

4 tools

Fetch, inspect, validate, well-known. Clinical-AI vocabulary aligned with FDA SaMD + IMDRF.

clinical_ai_validate clinical_ai_inspect
Spec 10 · Cross-cutting

AI Incident Card

7 tools

Fetch, inspect, validate, walk-affected, remediation plan, index, well-known.

incident_affected_walk incident_remediation_plan
Spec 11 · Cross-cutting

AI Procurement Decision Card

7 tools

Fetch, inspect, validate, infer status, signature check, to-PolicyBundle preview, well-known.

decision_card_validate decision_card_to_policy_bundle
Vertical extension

DefenseTech 6-pack — 8 tools

CUI · ITAR · DFARS · CMMC L2/L3

Beyond the 11 horizontal specs, the DefenseTech 6-pack adds a vertical-specific tool family: 3-axis vault contract resolver (CUI tier × export-control × foreign-person), CUI distribution-statement invariant (DoDI 5230.24), ITAR us-person check (22 CFR 120.62 + deemed-export rule), DFARS 72-hour wall-clock, CMMC evidence-bundle summarizer, Incident Card event-type classifier, cross-binding consistency check.

defensetech_vault_resolve_3axis defensetech_audit_event_check_invariants defensetech_check_dfars_72h_clock defensetech_summarize_cmmc_evidence_bundle

Implementation-preview tools (16)

Beyond the spec-level surface, the unified server wraps the v0.1.0 implementation stack at preview scale — read-only, deterministic, no HTTP round trip. These are the tools an agent reaches for when it needs to compute against governance state, not just validate documents.

Layer 1

Hash attestation (3 tools)

ed25519 over canonical hashes

Canonical-hash an object, verify a detached signature, inspect a signed attestation envelope. Same math as hash-attestation-rs.

Layer 2

Audit-stream (6 tools)

offline + live event composition

Compose events, verify a hash-chained log, inspect events. Live mode: emit/query/verify against a running audit-stream-py via AUDIT_STREAM_URL.

Layer 3

Decision Intelligence (5 tools)

Decision Card → PolicyBundle preview

Infer Decision Card status from a rubric, compute signature, preview generated PolicyBundle, plan incident remediation, walk affected systems.

Layer 4

Cross-spec drift (2 tools)

detect spec + structural diff

Detect which Suite spec a JSON document is. Compute a structural diff between two versions of the same document — catches the silent re-shape.

Use it in 60 seconds

Drop one entry into your Claude Desktop / Cursor / Cline config. Restart the client. 71 tools appear.

claude_desktop_config.json (macOS: ~/Library/Application Support/Claude/ · Windows: %APPDATA%\Claude\)
{
  "mcpServers": {
    "kinetic-gain": {
      "command": "npx",
      "args": ["-y", "mcp-kinetic-gain"]
    }
  }
}

Optional: set AUDIT_STREAM_URL in the env block to enable the 3 live audit-stream tools against a running audit-stream-py instance. Without it, the server runs fully offline — the other 68 tools work unchanged.

Who's this for

Three audiences. One config entry.

Application developers

Building an agent that needs to validate or emit Kinetic Gain Protocol Suite documents — System Cards, Tool Cards, Decision Cards, audit-stream events. The MCP server is the read+write surface.

Security / GRC teams

Auditing vendor AI disclosures, running policy-as-code previews against Decision Cards, verifying hash-chained event logs, checking DefenseTech invariants on CUI/ITAR-bearing artifacts.

Procurement / DPO

Pair with the Lock-In Cost calculator and SLA Negotiator — let the agent fetch + validate a vendor's published disclosures while you negotiate the contract.

Where to next

The unified server is the runtime layer. To explore the specs themselves, the visualizer, or the implementation stack:

Suite hub

The eleven specs, side-by-side, with audit-stream + Decision Card patterns.

Visualizer

Render any document from any of the eleven specs. Six tabs including the live audit-stream demo.

Source

TypeScript, AGPL-3.0, 126 tests, OpenSSF Scorecard + CodeQL + CycloneDX SBOM.

Registry docs

How the package got published to four registries + the bump-checklist for next time.