T

ThoughtProof MCP

Pre-action gate: verify before pay/trade/deploy. execute only on ALLOW.

ThoughtProof MCP is a local stdio pre-action gate for AI agents. Before an agent pays, trades, writes, transfers, or deploys, call verify_decision (alias: verify_before_action) with: • mandate — the user’s goal • proposed_action — what the agent is about to do • reasoning — the agent’s plan It routes internally to DQL (spend/checkout) or Sentinel (irreversible exit) and returns ALLOW / BLOCK / UNCERTAIN plus a soft fail-closed execute flag. execute is true ONLY on native ALLOW. On any other result, the host must not execute. Install: npx -y [email protected] Works with Claude Desktop, Cursor, Windsurf, Cline, and other local MCP hosts. MCP package is open source (MIT). Verification calls use your DQL/Sentinel key or x402.

thoughtproof/thoughtproof-mcp · v0.4.0 · Tools & Integrations

ThoughtProofOwner verifiedsafe

Trust Score

92

Security

100

Surfaces

1

v0.3.2 Live launch

Pre-action gate: verify before pay/trade/deploy. execute only on ALLOW.

Launched
Sep 8, 2026
Pricing
freemium
Availability
available

What is ThoughtProof MCP?

ThoughtProof MCP is a published tools & integrations plugin for AI coding agents in the codex ecosystem, developed by ThoughtProof and distributed through the HOL AI plugin registry. Local MCP pre-action verification for agents: mandate + proposed action → ALLOW/BLOCK/UNCERTAIN; execute only on ALLOW

Canonical slug
thoughtproof/thoughtproof-mcp
Version
v0.4.0 · updated Sep 15, 2026

Trust & Reputation

HOL Trust Score
92

Factor Analysis

Per-metric points (0–100 each) combined via a weighted average into the overall score.

Installability
100pts
Maintenance
100pts
MCP Posture
100pts

Registry Snapshot

Publisher verification
No
Marketplace source
Unknown
Scanner
Broker fallback
Safety label
safe
Digest verified
Yes

Trust & reputation

Trust & Reputation

HOL Trust Score
92

Factor Analysis

Per-metric points (0–100 each) combined via a weighted average into the overall score.

Installability
100pts
Maintenance
100pts
MCP Posture
100pts
Plugin Security
100pts
Provenance
70pts
Publisher Quality
75pts

Provenance

Plugin root
.
Source repo
https://github.com/ThoughtProof/thoughtproof-mcp
Source commit
aca71ab4da36…
Publisher verified
No
Owner verified
@ThoughtProof

Continuous scanner CI detected

No action is required. This plugin receives the full trust score.

Verified badge not detected

Add the HOL verified badge to the repository README to score +2% trust. Plugin owners can open that pull request from Guard Plugins.

Security Posture

safe
Safety label
100
Security score
0
High findings
Provider
registry-broker-fallback
Grade
A · safe
Version
Unknown
cisco-skill-scanner: not_applicable

Findings

No normalized findings were returned for this plugin.

ThoughtProof MCP — Frequently asked questions

What is ThoughtProof MCP?
ThoughtProof MCP is an AI plugin in the HOL registry. ThoughtProof MCP is a local stdio pre-action gate for AI agents. Before an agent pays, trades, writes, transfers, or deploys, call verify_decision (alias: verify_before_action) with: • mandate — the user’s goal • proposed_action — what the agent is about to do •…
How do I install ThoughtProof MCP?
Install ThoughtProof MCP in your harness: Codex — codex plugin marketplace add ThoughtProof/thoughtproof-mcp; MCP — git clone https://github.com/ThoughtProof/thoughtproof-mcp. Full step-by-step guidance is on the HOL plugin page.
How do I install ThoughtProof MCP in Codex?
To install ThoughtProof MCP in Codex, start with codex plugin marketplace add ThoughtProof/thoughtproof-mcp. The complete step-by-step install guide for Codex is on the HOL plugin page.
How do I install ThoughtProof MCP in MCP?
To install ThoughtProof MCP in MCP, start with git clone https://github.com/ThoughtProof/thoughtproof-mcp. The complete step-by-step install guide for MCP is on the HOL plugin page.
Is ThoughtProof MCP free?
ThoughtProof MCP is listed as freemium on HOL.
Who publishes ThoughtProof MCP?
ThoughtProof MCP is published by ThoughtProof and listed on HOL.
Is ThoughtProof MCP available now?
ThoughtProof MCP is currently available according to its latest public launch.

Install Guidance

Install in Codex

Install through the Codex CLI plugin marketplace.

Codex plugin docs
  1. 1

    Register the marketplace

    Run in any terminal. Codex reads the marketplace entry from .agents/plugins/marketplace.json (or the legacy .claude-plugin path) in the repository. If the repository ships none, add the generated entry from the Advanced section below first.

    shell
  2. 2

    Install from the Plugins browser

    Open Codex, open the Plugins browser, choose the thoughtproof-mcp marketplace, and install thoughtproof-mcp.

  3. 3

    Verify the marketplace registration

    shell
Plugin launch media%2Fthoughtproof thoughtproof mcp%2F210218f2 6efa 4997 883c 379b6a5e42a3%2Fd096fb41 b923 49ed 8acf 16822520ac51
1 / 1

Plugin launch media%2Fthoughtproof thoughtproof mcp%2F210218f2 6efa 4997 883c 379b6a5e42a3%2Fd096fb41 b923 49ed 8acf 16822520ac51

Full size
Loading reviews

Plugin Manifest

{
  "name": "thoughtproof-mcp",
  "version": "0.4.0",
  "description": "Local stdio MCP server for pre-action decision verification. Hero tools verify_before_action / verify_decision: mandate + proposed action → ALLOW/BLOCK/UNCERTAIN; execute only on ALLOW. Fail-closed on missing key, timeout, or non-ALLOW. Catalog score is not next-action authorization.",
  "author": {
    "name": "ThoughtProof",
    "email": "[email protected]",
    "url": "https://www.thoughtproof.ai"
  },
  "homepage": "https://www.thoughtproof.ai",
  "repository": "https://github.com/ThoughtProof/thoughtproof-mcp",
  "license": "MIT",
  "keywords": [
    "mcp",
    "verification",
    "pre-action",
    "fail-closed",
    "decision-verification",
    "codex",
    "agents"
  ],
  "mcpServers": "./.registry/mcp.json",
  "interface": {
    "displayName": "ThoughtProof MCP",
    "developerName": "ThoughtProof",
    "shortDescription": "Pre-action verification for agents. Execute only on ALLOW.",
    "longDescription": "Local stdio MCP server. verify_decision / verify_before_action checks a proposed pay/trade/write/deploy against a mandate before the irreversible step. Returns ALLOW, BLOCK, or UNCERTAIN with execute=true only on ALLOW. Not identity, not a trust score, not HOL Guard. A listing or scanner score does not authorize the next action.",
    "category": "Security",
    "capabilities": [
      "Security",
      "MCP",
      "Pre-action verification"
    ],
    "websiteURL": "https://www.thoughtproof.ai",
    "privacyPolicyURL": "https://www.thoughtproof.ai/datenschutz.html",
    "termsOfServiceURL": "https://www.thoughtproof.ai/terms.html"
  },
  "websiteURL": "https://www.thoughtproof.ai",
  "privacyPolicyURL": "https://www.thoughtproof.ai/datenschutz.html",
  "termsOfServiceURL": "https://www.thoughtproof.ai/terms.html",
  "registryIndexVersion": 5
}

Marketplace Source

Repo URL
https://github.com/ThoughtProof/thoughtproof-mcp
Marketplace path
Unknown
Source path
.
Install policy
Unspecified

File Inventory

.codex-plugin/plugin.json

plugin-manifest

1,663 bytes

e9006626160e74c4

README.md

file

6,377 bytes

af7d9b49af0b51ea

.mcp.json

file

189 bytes

66b2d3ec605f4545

package.json

file

1,590 bytes

bf374719974af836

tsconfig.json

file

372 bytes

ce35c12ddd128c2f

package-lock.json

file

56,868 bytes

69097bbaf121b34b

SECURITY.md

file

2,660 bytes

2412ae760ecee268

.registry/mcp.json

mcp-config

127 bytes

8dc97ba6e27a9d3c

History, reviews, and alternatives

Latest launch

User reviews

from 0 reviews

The first substantive review can be added on this page.

Read or write reviews

Milestones and alternatives

Makers can publish releases and security milestones after claiming the plugin.