How do I install ThoughtProof MCP?

Install ThoughtProof MCP in your harness: Codex — codex plugin marketplace add ThoughtProof/thoughtproof-mcp; MCP — git clone https://github.com/ThoughtProof/thoughtproof-mcp. Full step-by-step guidance is on the HOL plugin page.

How do I install ThoughtProof MCP in Codex?

To install ThoughtProof MCP in Codex, start with codex plugin marketplace add ThoughtProof/thoughtproof-mcp. The complete step-by-step install guide for Codex is on the HOL plugin page.

How do I install ThoughtProof MCP in MCP?

To install ThoughtProof MCP in MCP, start with git clone https://github.com/ThoughtProof/thoughtproof-mcp. The complete step-by-step install guide for MCP is on the HOL plugin page.

Is ThoughtProof MCP free?

ThoughtProof MCP is listed as freemium on HOL.

How is the Trust Score for ThoughtProof MCP computed?

ThoughtProof MCP has a HOL Trust Score of 98 out of 100. The score is a weighted sum of six components from a static scan of the source, capped for high-severity findings and adjusted by two disclosed policies. Memberships and payments are not inputs, and a scan is not a safety guarantee. Full breakdown: https://hol.org/registry/plugins/thoughtproof%2Fthoughtproof-mcp/trust

Who publishes ThoughtProof MCP?

ThoughtProof MCP is published by ThoughtProof and listed on HOL.

Is ThoughtProof MCP available now?

ThoughtProof MCP is currently available according to its latest public launch.

ThoughtProof MCP

Pre-action gate: verify before pay/trade/deploy. execute only on ALLOW.

thoughtproof/thoughtproof-mcp · v0.4.0 · Tools & Integrations

by ThoughtProofOwner verified

ThoughtProof MCP is a local stdio pre-action gate for AI agents. Before an agent pays, trades, writes, transfers, or deploys, call verify_decision (alias: verify_before_action) with: • mandate — the user’s goal • proposed_action — what the agent is about to do • reasoning — the agent’s plan It routes internally to DQL (spend/checkout) or Sentinel (irreversible exit) and returns ALLOW / BLOCK / UNCERTAIN plus a soft fail-closed execute flag. execute is true ONLY on native ALLOW. On any other result, the host must not execute. Install: npx -y [email protected] Works with Claude Desktop, Cursor, Windsurf, Cline, and other local MCP hosts. MCP package is open source (MIT). Verification calls use your DQL/Sentinel key or x402.

Install Source

Follow1

Trust Score98 Security scanPartial Components1

Protect this install with HOL Guard

Guard checks the skills and MCP servers a plugin adds on your machine and asks you before a risky action runs. The scores above are free, and no plan changes them.

Is ThoughtProof MCP a fit?

From the plugin's manifest and HOL's scan. Anything the plugin does not declare is shown as not declared.

Works with

Codex
MCP

1 MCP server

Before you install

Sign-in: Not declared
Declared access: Not declared
License: MIT

Check before relying on it

Some security checks did not finish: HOL plugin scan. See the evidence

What is ThoughtProof MCP?

ThoughtProof MCP is a published tools & integrations plugin for AI coding agents that works with Codex and MCP, developed by ThoughtProof and distributed through the HOL AI plugin registry. Local MCP pre-action verification for agents: mandate + proposed action → ALLOW/BLOCK/UNCERTAIN; execute only on ALLOW.

Canonical slug: thoughtproof/thoughtproof-mcp
Version: v0.4.0 · updated Sep 25, 2026
Open data: entity.json (JSON-LD)

Registry snapshot

Repository: https://github.com/ThoughtProof/thoughtproof-mcp
Homepage: https://www.thoughtproof.ai
Canonical profile: https://hol.org/registry/plugins/thoughtproof%2Fthoughtproof-mcp
Owner verification: Verified on HOL as @ThoughtProof
Scanner: Registry fallback scan
Security result: Partial scan
Digest verified: Yes

Trust and security

Trust & reputation

On-Chain Verified

HOL Trust Score

Per-metric points (0–100 each) combined via a weighted average into the overall score.

Installability

100/100

Maintenance

100/100

MCP server setup

100/100

Plugin Security

100/100

Provenance

80/100

Publisher Quality

100/100

Provenance

Plugin root: .
Source repo: https://github.com/ThoughtProof/thoughtproof-mcp
Source commit: 4214afc24f55…
Publisher verified: Yes
Owner verified: @ThoughtProof

Continuous scanner CI detected

No action is required. This plugin receives the full trust score.

README badge detected

The source repository README links to this HOL listing. Distribution, not security evidence. It adds a 2% engagement adjustment to the overall trust score and never changes the security result.

Security posture

See how the Trust Score is computed

Partial scan

Security result

100

Score from finished checks

High findings

Some checks did not finish: HOL plugin scan. No blocking issue was found in the checks that did finish, but this is not a passed scan.

Provider: registry-broker-fallback
Grade: A · safe
Version: Unknown

cisco-skill-scanner: not_applicable

Published advisories

None matched in GitHub security advisories, checked 2026-10-30. This covers published advisories only, not problems nobody has reported.

GitHub security advisories are those the source repository has published.

Findings

No normalized findings were returned for this plugin.

Install guidance

Install in Codex

Install through the Codex CLI plugin marketplace.

Codex plugin docs

Optional: install HOL Guard for Codex first, so it can check this plugin's tools on your machine before Codex uses them.

1
Register the marketplace
Run in any terminal. Codex reads the marketplace entry from .agents/plugins/marketplace.json (or the legacy .claude-plugin path) in the repository. If the repository ships none, add the generated entry from the Advanced section below first.
shell
2
Install from the Plugins browser
Open Codex, open the Plugins browser, choose the marketplace registered by the previous command, and install thoughtproof-mcp.
3
Check the marketplace is registered
This confirms the marketplace source only. Confirm the plugin itself is enabled in the Plugins browser before relying on it.
shell

Did setup work in Codex?

No setup reports for Codex yet. Self-reported by signed-in visitors. Copying a command is not counted, and most installs are never reported.

Attested installs: Fewer than 10 attested installs of this plugin in week 2026-W43, so no number is shown. Counted from opt-in HOL Guard install reports, once per machine and runtime, and never mixed with the answers above. How install reports work.

1 / 1

Plugin launch media%2Fthoughtproof thoughtproof mcp%2F210218f2 6efa 4997 883c 379b6a5e42a3%2Fd096fb41 b923 49ed 8acf 16822520ac51

Full size

Loading reviews

Plugin manifest

{
  "name": "thoughtproof-mcp",
  "version": "0.4.0",
  "description": "Local stdio MCP server for pre-action decision verification. Hero tools verify_before_action / verify_decision: mandate + proposed action → ALLOW/BLOCK/UNCERTAIN; execute only on ALLOW. Fail-closed on missing key, timeout, or non-ALLOW. Catalog score is not next-action authorization.",
  "author": {
    "name": "ThoughtProof",
    "email": "[email protected]",
    "url": "https://www.thoughtproof.ai"
  },
  "homepage": "https://www.thoughtproof.ai",
  "repository": "https://github.com/ThoughtProof/thoughtproof-mcp",
  "license": "MIT",
  "keywords": [
    "mcp",
    "verification",
    "pre-action",
    "fail-closed",
    "decision-verification",
    "codex",
    "agents"
  ],
  "mcpServers": "./.registry/mcp.json",
  "interface": {
    "displayName": "ThoughtProof MCP",
    "developerName": "ThoughtProof",
    "shortDescription": "Pre-action verification for agents. Execute only on ALLOW.",
    "longDescription": "Local stdio MCP server. verify_decision / verify_before_action checks a proposed pay/trade/write/deploy against a mandate before the irreversible step. Returns ALLOW, BLOCK, or UNCERTAIN with execute=true only on ALLOW. Not identity, not a trust score, not HOL Guard. A listing or scanner score does not authorize the next action.",
    "category": "Security",
    "capabilities": [
      "Security",
      "MCP",
      "Pre-action verification"
    ],
    "websiteURL": "https://www.thoughtproof.ai",
    "privacyPolicyURL": "https://www.thoughtproof.ai/datenschutz.html",
    "termsOfServiceURL": "https://www.thoughtproof.ai/terms.html"
  },
  "websiteURL": "https://www.thoughtproof.ai",
  "privacyPolicyURL": "https://www.thoughtproof.ai/datenschutz.html",
  "termsOfServiceURL": "https://www.thoughtproof.ai/terms.html",
  "registryIndexVersion": 5
}

Marketplace source

Repo URL: https://github.com/ThoughtProof/thoughtproof-mcp
Marketplace path: Unknown
Source path: .
Install policy: Unspecified

File inventory

.codex-plugin/plugin.json

plugin-manifest

1,663 bytes

e9006626160e74c4…

.mcp.json

file

189 bytes

66b2d3ec605f4545…

.registry/mcp.json

mcp-config

127 bytes

8dc97ba6e27a9d3c…

package-lock.json

file

56,868 bytes

d8511426f90125da…

package.json

file

1,590 bytes

f329091dfde061c2…

README.md

file

6,615 bytes

aaf5f715190f3cfd…

SECURITY.md

file

2,660 bytes

2412ae760ecee268…

tsconfig.json

file

372 bytes

ce35c12ddd128c2f…