Is Openvox Mcp safe to use?

Openvox Mcp has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments. Licensed under GPL-3.0.

How do I install Openvox Mcp?

Openvox Mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.

What can Openvox Mcp do?

Openvox Mcp provides 9 tools: validate_commit, check_disclosure, check_file_access, get_policy, get_tier and 4 more. See the full tools list on the server page for descriptions and parameters.

What AI clients work with Openvox Mcp?

Openvox Mcp is compatible with Claude Desktop, Cursor, Claude Code, and most MCP clients that support stdio transport. It uses stdio and sse and http transport.

Is Openvox Mcp actively maintained?

Openvox Mcp is actively maintained — last commit was 4 days ago. It has 1 GitHub stars.

Openvox Mcp

Name: Openvox Mcp
Author: NeatNerdPrime

by NeatNerdPrime

OpenVox MCP Server - AI governance tooling for the OpenVox Puppet ecosystem

1 9 tools GitHub

No known CVEs

GPL-3.0 license

Actively maintained

Last commit 4d ago

Untested

Transport: stdio, sse, http

9 tools

Grade F

Legal

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Untested on Claude Desktopstdio, sse, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "openvox-mcp": {
      "url": "http://localhost:9393",
      "type": "http",
      "headers": {
        "Authorization": "Bearer ovmcp_your_key_here"
      }
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/openvox-mcp)](https://mcppedia.org/s/openvox-mcp)

Read me

What Openvox Mcp does

An open-source Model Context Protocol (MCP) server for the OpenVox Puppet ecosystem. Provides AI tools with deep knowledge of OpenVox core projects and Voxpupuli modules, with built-in AI governance, transparency, and legal protection.

Test This Server

No automated test available for this server. Check the GitHub README for setup instructions.

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

42/100across 5 weighted dimensions

How we score →

0255075100

−58

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

No package registry to scan.

Inventory

Tools (9)

Click any tool to inspect its schema.

Inventory

Resources (8)

openvox://policy/summary

AI policy summary (instructions field)

openvox://policy/summary

openvox://policy/full

Complete policy (all 9 areas)

openvox://policy/full

openvox://policy/licenses

License allowlist

openvox://policy/licenses

openvox://policy/dco

DCO v1.1 text

openvox://policy/dco

openvox://policy/provenance-format

Provenance file spec

openvox://policy/provenance-format

openvox://policy/trailers

Trailer reference

openvox://policy/trailers

openvox://policy/deny-list

Security deny-list

openvox://policy/deny-list

openvox://policy/protected-files

Protected files list

openvox://policy/protected-files

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is Openvox Mcp safe to use?: Openvox Mcp has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments. Licensed under GPL-3.0.
How do I install Openvox Mcp?: Openvox Mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can Openvox Mcp do?: Openvox Mcp provides 9 tools: validate_commit, check_disclosure, check_file_access, get_policy, get_tier and 4 more. See the full tools list on the server page for descriptions and parameters.
What AI clients work with Openvox Mcp?: Openvox Mcp is compatible with Claude Desktop, Cursor, Claude Code, and most MCP clients that support stdio transport. It uses stdio and sse and http transport.
Is Openvox Mcp actively maintained?: Openvox Mcp is actively maintained — last commit was 4 days ago. It has 1 GitHub stars.

Similar servers

Others in legal

View all →

A11y Mcp88

An MCP (Model Context Protocol) server for performing accessibility audits on webpages using axe-core. Use the results in an agentic loop with your favorite AI assistants (Amp/Cline/Cursor/GH Copilot) and let them fix a11y issues for you!

40 2

io.github.cmendezs/mcp-facture-electronique-fr87

MCP server for French e-invoicing (XP Z12-013). Manages invoices, validation and compliance.

Swiss Caselaw MCP Server86

956k Swiss court decisions: full-text search, citation graph, statute lookup (DE/FR/IT)

19 3

io.github.delimit-ai/delimit-mcp-server86

API governance for AI coding assistants. Breaking changes, policies, cross-model context.

13 9

MCP Security Weekly

Get CVE alerts and security updates for Openvox Mcp and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Legal

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Untested on Claude Desktopstdio, sse, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "openvox-mcp": {
      "url": "http://localhost:9393",
      "type": "http",
      "headers": {
        "Authorization": "Bearer ovmcp_your_key_here"
      }
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/openvox-mcp)](https://mcppedia.org/s/openvox-mcp)

Read me

What Openvox Mcp does

Test This Server

No automated test available for this server. Check the GitHub README for setup instructions.

README

OpenVox MCP Server

"The community is what drives the ecosystem, not the platform." — Ben Ford

Why This Exists

The Puppet ecosystem needs an open-source MCP server. Perforce Puppet has a closed-source MCP; this project provides the community-owned alternative. The OpenVox MCP Server is designed as an AAIF implementation for the Puppet/OpenVox ecosystem.

What It Does

Assists AI tools (Claude, GPT, Gemini, Mistral, and others) in working correctly with OpenVox and Voxpupuli codebases
Enforces AI governance through a tightly coupled three-layer system (declaration, integration, enforcement)
Protects contributors with mandatory disclosure, license compliance, and clear accountability
Respects privacy with privacy-by-design principles and configurable data handling

What It Does — Honestly

Writes provenance records (.ai-provenance.yml), policy configuration files, and override files
Reads repository structure, metadata, commit messages, and license headers for validation
Reports compliance findings, migration assessments, and policy information via structured JSON responses

What It Does NOT Do

Generate or modify Puppet code — code generation is the domain of future depth plugins (e.g., openvox-mcp-puppet), not the core server
Require an LLM — it is a governance/validation server that communicates via the MCP protocol; it has no LLM dependency and runs entirely offline
Make network write requests — all network access is read-only against allowlisted endpoints (Puppet Forge, GitHub API, RubyGems)
Operate as root — the stdio transport runs as your shell user; the HTTP transport runs under a dedicated unprivileged system user
Force AI models to comply (MCP delivers policy; enforcement happens at CI/review gates)
Replace human judgement (every contribution requires meaningful human review)
Restrict self-hosted environments (Tier 3 is advisory, not mandatory)

Projects in Scope

OpenVox Core (~80 repositories)

openvox-puppet, openvox-server, openvoxdb, openvoxdb-cli, openbolt, container-openbolt, container-openvoxagent, container-openvoxdb, container-openvoxserver, hiera, hiera-eyaml, openvox-docs, openvox-helm-chart, openvoxserver-ca, and more.

Voxpupuli Ecosystem (~379 modules)

Community-maintained Puppet modules under the Voxpupuli organization.

Architecture

Single MCP server with a plugin architecture. Governance is always loaded; depth plugins are optional.

server = OpenvoxMCP.server(plugins: [:puppet, :server, :modules])
# Governance is always loaded — cannot be bypassed
# Depth plugins are loaded conditionally

Transport

Both transports are supported from day one:

Transport	Use Case	Entry Point	Auth	User
stdio	Local development	`bin/openvox-mcp-stdio`	None (local pipe)	Shell user
HTTP (Streamable)	Shared / production	`bin/openvox-mcp-server`	API key (Bearer)	`openvox-mcp` system user

stdio runs as your shell user, launched by the MCP client. No special setup needed.

HTTP runs as a long-running daemon (typically via systemd) under a dedicated system user. See docs/deployment.md for the full deployment guide including system user creation, Ruby path configuration, and systemd setup.

Governance Tools (v0.3.0)

The core governance layer provides 9 tools:

Tool	Description
`validate_commit`	Validate commit message for AI policy compliance (stage-aware)
`check_disclosure`	C

... View full README on GitHub

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

42/100across 5 weighted dimensions

How we score →

0255075100

−58

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

No package registry to scan.

Inventory

Tools (9)

Click any tool to inspect its schema.

Inventory

Resources (8)

openvox://policy/summary

AI policy summary (instructions field)

openvox://policy/summary

openvox://policy/full

Complete policy (all 9 areas)

openvox://policy/full

openvox://policy/licenses

License allowlist

openvox://policy/licenses

openvox://policy/dco

DCO v1.1 text

openvox://policy/dco

openvox://policy/provenance-format

Provenance file spec

openvox://policy/provenance-format

openvox://policy/trailers

Trailer reference

openvox://policy/trailers

openvox://policy/deny-list

Security deny-list

openvox://policy/deny-list

openvox://policy/protected-files

Protected files list

openvox://policy/protected-files

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is Openvox Mcp safe to use?: Openvox Mcp has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments. Licensed under GPL-3.0.
How do I install Openvox Mcp?: Openvox Mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can Openvox Mcp do?: Openvox Mcp provides 9 tools: validate_commit, check_disclosure, check_file_access, get_policy, get_tier and 4 more. See the full tools list on the server page for descriptions and parameters.
What AI clients work with Openvox Mcp?: Openvox Mcp is compatible with Claude Desktop, Cursor, Claude Code, and most MCP clients that support stdio transport. It uses stdio and sse and http transport.
Is Openvox Mcp actively maintained?: Openvox Mcp is actively maintained — last commit was 4 days ago. It has 1 GitHub stars.