Config is the same across clients — only the file and path differ.
{
"mcpServers": {
"recourseos": {
"args": [
"-y",
"recourse-cli@latest",
"mcp",
"serve"
],
"command": "npx"
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
Recourse is an MCP server that evaluates Terraform plans, shell commands, and tool calls before execution. It returns structured facts — recoverability tier, evidence assessment, and risk level — so callers can make context-aware decisions. Agents call Recourse before they act; humans see what the agent checked.
Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.
npx -y 'recourse-cli' 2>&1 | head -1 && echo "✓ Server started successfully"
After testing, let us know if it worked:
Five weighted categories — click any category to see the underlying evidence.
No known CVEs.
Checked recourse-cli against OSV.dev.
Click any tool to inspect its schema.
recourse://instructionsSafety protocol — when to call, how to interpret results
recourse://instructions
Be the first to review
Have you used this server?
Share your experience — it helps other developers decide.
Sign in to write a review.
Others in ai-ml
Dynamic problem-solving through sequential thought chains
Workspace template + MCP server for Claude Code, Codex CLI, Cursor & Windsurf. Multi-agent knowledge engine (ag-refresh / ag-ask) that turns any codebase into a queryable AI assistant.
Persistent memory using a knowledge graph
Privacy-first. MCP is the protocol for tool access. We're the virtualization layer for context.
MCP Security Weekly
Get CVE alerts and security updates for io.github.recourseOS/recourse and similar servers.
Start a conversation
Ask a question, share a tip, or report an issue.
Sign in to join the discussion.
Consequence layer for AI agents
Check recoverability before destructive actions
[](https://safeskill.dev/scan/recourseos-recourse)
Website · MCP Setup · Console · Coverage
Recourse is an MCP server that evaluates Terraform plans, shell commands, and tool calls before execution. It returns structured facts — recoverability tier, evidence assessment, and risk level — so callers can make context-aware decisions. Agents call Recourse before they act; humans see what the agent checked.
One config block. Works with Claude Desktop, Claude Code, Cursor, and any MCP-compatible client.
{
"mcpServers": {
"recourseos": {
"command": "npx",
"args": ["-y", "recourse-cli@latest", "mcp", "serve"]
}
}
}
The server exposes five tools:
| Tool | Purpose |
|---|---|
recourse_evaluate_terraform | Check Terraform plans before terraform apply |
recourse_evaluate_shell | Check shell commands before execution |
recourse_evaluate_mcp_call | Check other MCP tool calls before invocation |
recourse_evaluate_with_evidence | Re-evaluate with verification evidence |
recourse_supported_resources | List resources with deterministic rules |
Plus a resource agents can read:
| Resource | Purpose |
|---|---|
recourse://instructions | Safety protocol — when to call, how to interpret results |
Each tool returns:
allow, warn, escalate, or blockThe engine emits facts. Callers interpret them in context — a block assessment in staging might be acceptable; in production it might require approval.
Terraform plan says:
- aws_db_instance.main will be destroyed
Recourse tells the agent what that means:
aws_db_instance.main
recoverability: unrecoverable
reason: skip_final_snapshot=true, backup_retention_period=0, deletion_protection=false
riskAssessment: block
The agent can interpret these facts: "Recourse assessed this as block-level risk — deletes the database with no backup. Should I proceed?"
That's different from "I deleted your production database."
Agents can read the built-in safety protocol from recourse://instructions. Or use this prompt:
Before executing destructive operations, call RecourseOS:
- Shell commands → recourse_evaluate_shell
- Terraform plans → recourse_evaluate_terraform
- Other MCP tools →
... [View full README on GitHub](https://github.com/recourseos/recourse#readme)