Skip to content
Agentmart
Submit a tool

WhitePact

AI governance MCP server: trust scoring, guardrails, bias/hallucination detection, compliance.

Connector by Guruprasath-Annadurai · GitHub account verified by the MCP Registry

IndexedMITLocal (stdio)Remote (HTTP)Remote (SSE)★ 2
Write a review

Install

Works with Claude Code, VS Code, Codex, Cursor, Windsurf, Claude Desktop. Read the repository before you give any tool access to your data.

npx agentmarket install connector/guruprasath-annadurai-whitepact

Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.

Remote endpoints

  • https://whitepact-mcp-http.onrender.com/mcp Remote (HTTP)
  • https://whitepact-mcp-http.onrender.com/sse Remote (SSE)

Get the weekly diff

The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.

We use your email only for this newsletter. Privacy

About

AI governance MCP server: trust scoring, guardrails, bias/hallucination detection, compliance.

Reviews

Write a review

No reviews yet. Installed it? Reviews come from verified installers only. How reviews work

Permissions

What this server can do and what it asks for, from its tool list, install config and code. Checked Oct 26, 2026.

Tools
30 read · 1 write · 0 delete
Secrets
1 (API keys, tokens or passwords)
Install scripts
None found
Runs as
Python package

Tools by what they do 31

Read from the source code; the running server may list different tools.

Read 30 · Look things up without changing anything.

  • rai_audit_summary
  • rai_benchmark
  • rai_benchmark_prompts
  • rai_bias_evaluate
  • rai_budget_check
  • rai_causal_influence_check
  • rai_check_trust
  • rai_compare_models
  • rai_compliance
  • rai_cost_estimate
  • rai_drift_check
  • rai_eu_ai_act_classify
Show 18 more tools
  • rai_executive_summary
  • rai_hallucination
  • rai_health
  • rai_incident_log
  • rai_iso42001_gap
  • rai_memory_read_check
  • rai_memory_write_check
  • rai_model_route
  • rai_org_status
  • rai_passport_generate
  • rai_pii_report
  • rai_policy_check
  • rai_redteam_analyze
  • rai_redteam_payloads
  • rai_scan
  • rai_stream_scan
  • rai_trust_score
  • rai_webhook_status

Write 1 · Create, change, send or run things.

  • test.counter.increment

Secrets and settings it asks for

Secrets: values you paste in that let it act as you.

  • Authorization

Other settings (environment variables or headers).

  • RAI_MCP_LOG_LEVEL

Network hosts it talks to 36

  • ::1 · found in code
  • accounts.google.com · found in code
  • antigravity.google · found in code
  • api.paddle.com · found in code
  • bestpractices.dev · found in code
  • buy.paddle.com · found in code
  • cdn.jsdelivr.net · found in code
  • cdn.paddle.com · found in code
  • cdn.tailwindcss.com · found in code
  • chatgpt.com · found in code
  • checkout-service.paddle.com · found in code
  • create-checkout.paddle.com · found in code
  • developer.paddle.com · found in code
  • docs.docker.com · found in code
  • github.com · found in code
  • googleapis.com · found in code
  • login.microsoftonline.com · found in code
  • oauth2.googleapis.com · found in code
  • ollama.ai · found in code
  • openvex.dev · found in code
  • raw.githubusercontent.com · found in code
  • refeds.org · found in code
  • releases.hashicorp.com · found in code
  • responsibleai-dashboard.onrender.com · found in code
  • responsibleai.dev · found in code
  • sandbox-api.paddle.com · found in code
  • sandbox-buy.paddle.com · found in code
  • sandbox-cdn.paddle.com · found in code
  • sandbox-checkout-service.paddle.com · found in code
  • sandbox-create-checkout.paddle.com · found in code
Show 6 more hosts
  • schemas.microsoft.com · found in code
  • schemas.xmlsoap.org · found in code
  • slsa.dev · found in code
  • whitepact-mcp-http.onrender.com · found in remote endpoint, install command, code
  • whitepact.com · found in code
  • your-resource.openai.azure.com · found in code

Files it touches

  • /opt/cursor/artifacts/v131_95
  • /opt/cursor/artifacts/v131_95_addendum
  • /opt/cursor/artifacts/v131_95_phase0b
  • /opt/cursor/artifacts/v131_95/browser
  • /opt/cursor/artifacts/v131_phase0c
  • /tmp/openapi.json
  • /tmp/trivy_after_full.json
  • /tmp/trivy_before.json
  • Your home directory (~)
  • ~/.responsibleai/data.db
  • Any path the agent passes to its tools

Tools (31)

Read from the source code; the running server may differ. Descriptions are the server’s own words; hidden characters are shown as [U+…].

  • rai_audit_summaryGet Governance Capability Summaryread-only

    Return a governance capability summary including supported tools, frameworks, and available attack vectors. Full audit log access requires the REST endpoint.

  • rai_benchmarkEvaluate Responses Against Benchmarkread-only

    Evaluate pre-collected model responses against a standard benchmark suite. Suites: truthfulqa (factual accuracy), bbq (bias in questions), hellaswag (reasoning). Call rai_benchmark_prompts first to get the question set, collect responses, then pass them here.

  • rai_benchmark_promptsGet Benchmark Question Setread-only

    Return the question set for a benchmark suite. Use to collect model responses before calling rai_benchmark. Suites: truthfulqa, bbq, hellaswag.

  • rai_bias_evaluateEvaluate Demographic Biasread-only

    Evaluate demographic bias across six probe dimensions: gender, racial, age, religious, occupational, and cultural. Provide paired response samples for each demographic group. Returns per-probe bias scores (0=no bias, 1=maximum divergence), confidence intervals, intersectional amplification, and an overall bias grade.

  • rai_budget_checkCheck AI Spending Against Budgetread-only

    Evaluate current AI spending against monthly budget limits. Returns consumption percentage, alert status, per-team and per-model breakdown, and projected month-end spend. Used by LLMOps Engineers and Finance to prevent budget overruns.

  • rai_causal_influence_checkCheck Causal Influence Provenance for Injection Patternsread-only

    Scan a list of upstream sources that causally shaped a proposed action (a prior tool's output, a sub-agent's result, an external document, ...) for prompt-injection patterns, and flag whether any of them are untrusted. Generalizes rai_memory_write_check beyond persistent memory: any content that will be treated as trusted context by whatever consumes this action's result carries the same replay risk memory does. Each provenance entry needs a 'kind' (memory_read | tool_output | sub_agent_result | user_input | external_content) and a 'trust' level (TRUSTED | UNTRUSTED | UNKNOWN); 'content' is op…

  • rai_check_trustCheck Public Trust Index Scoreread-only

    Check the public, independently-verifiable Trust Index score, certification status, and reported-incident history for a named AI model or tool BEFORE invoking it. Unlike every other rai_* tool, which evaluates output the caller itself produced, this one looks up a public record about a THIRD PARTY'S model or tool — built for agents and agent frameworks (LangChain, LangGraph, Google ADK) deciding whether to trust something before calling it. Free, no auth required, exact model+provider match. Queries the hosted ResponsibleAI Trust Index (configurable via the RAI_TRUST_API_BASE environment varia…

  • rai_compare_modelsCompare Two Models' Trust Scoresread-only

    Compare two AI models across all six trust dimensions. Returns scores for each, delta analysis, and a recommendation on which model is more trustworthy.

  • rai_complianceEvaluate Governance Complianceread-only

    Evaluate AI governance *maturity* against NIST AI RMF, EU AI Act, or ISO 42001, given your own self-assessed control scores (fairness/privacy/security/robustness 0-1, plus overall compliance maturity 0-1). Returns a compliance score, findings per control, and remediation recommendations. Use this when the caller already has maturity/control scores and wants a gap assessment. Do NOT use this to classify what EU AI Act risk tier a specific system falls into from a description of what it does (sector, automation, biometric use, etc.) -- use `rai_eu_ai_act_classify` instead for that; this tool has…

  • rai_cost_estimateEstimate Model API Costread-only

    Estimate the USD cost of a model API call from token counts.

  • rai_drift_checkCheck Trust Score Driftread-only

    Detect trust score drift between a baseline evaluation and a current evaluation. Returns drift delta per dimension, overall drift severity (NONE/LOW/MEDIUM/HIGH/CRITICAL), and whether an alert threshold was breached.

  • rai_eu_ai_act_classifyClassify EU AI Act Risk Tierread-only

    Classify an AI system into an EU AI Act risk tier: UNACCEPTABLE, HIGH, LIMITED, or MINIMAL, from a description of what the system does (deployment sector, automation level, biometric/emotion-recognition use). Evaluates deployment context, capabilities, and affected populations against Annex III and Annex VI criteria. Returns risk tier, applicable articles, required conformity assessment actions, and a compliance roadmap. Use this for 'what EU AI Act category does this system fall into' questions. Do NOT use this for a general maturity/gap assessment against self-scored controls (fairness/priva…

  • rai_executive_summaryGenerate Executive Governance Summaryread-only

    Generate a board-ready executive AI governance summary. Synthesises trust grades, compliance posture, cost intelligence, risk incidents, and drift trends into a C-suite-readable report with RAG (Red/Amber/Green) status indicators. Used by CAIO for quarterly board reporting.

  • rai_hallucinationDetect Hallucination Riskread-only

    Detect hallucination risk in AI-generated text. Analyses hedging language, self-consistency across candidate responses, unsupported factual claims, and (when a `source` is supplied) explicit factual disagreement with that source -- e.g. the source names one day/month/number and the response names another.

  • rai_healthCheck Governance Engine Healthread-only

    Check the status and module availability of the ResponsibleAI governance engine.

Show 16 more tools
  • rai_incident_logBuild Governance Incident Recordread-only

    Create a structured governance incident record. Used by Security Engineers and AI Risk Analysts to log AI safety events (PII leaks, jailbreak attempts, bias triggers, hallucination incidents) for audit trail and SIEM integration.

  • rai_iso42001_gapRun ISO 42001 Gap Analysisread-only

    Perform an ISO/IEC 42001:2023 AI Management System gap analysis. Evaluates maturity across all 10 clauses: Context, Leadership, Planning, Support, Operation, Performance Evaluation, Improvement, plus AI-specific annexes. Returns gap findings, maturity scores per clause, and a prioritised remediation roadmap. Used by AI Compliance Managers.

  • rai_memory_read_checkCheck Memory Read Scope Authorizationread-only

    Gate a read from persistent agent memory. Standalone, this tool only echoes back the requested scope (there's no content to scan for a read) -- its real enforcement value is when governance is enabled on the hosted MCP server: the caller's authority's memory_scope constraint (if any) is checked against the requested memory_scope, denying cross-tenant/cross-agent memory access before the read happens.

  • rai_memory_write_checkCheck Memory Write for Injection Patternsread-only

    Gate a write to PERSISTENT agent memory (a vector DB, conversation log, or similar long-term store your own system owns -- WhitePact does not host a memory store itself). Scans the content for prompt-injection patterns aimed specifically at persistent memory -- text engineered to look like an instruction, a fake system/assistant role marker, or an override, so that a future session reading this memory back treats it as trusted context rather than as content. Call this BEFORE actually persisting the write; if 'allowed' is false, do not write it. When governance is enabled on the hosted MCP serv…

  • rai_model_routeRecommend Optimal Modelread-only

    Recommend the optimal AI model for a task based on complexity analysis and cost-quality tradeoff. Returns recommended model, alternative, estimated cost per 1K tokens, and estimated savings vs GPT-4o. Used by LLMOps Engineers for intelligent model routing.

  • rai_org_statusGet Organization Governance Statusread-only

    Compute a structured governance status rollup. The health/grade/compliance fields (models, compliance, operations) are always derived FROM caller-supplied metrics (model grades, active frameworks, open incidents, budget usage, drift alerts) -- there is no separate store of these tracked per-org yet, so calling with none supplied rolls up empty/default values, not fabricated data. The org_id/plan/usage fields are different: on the hosted MCP transport with an authenticated caller, these reflect the real, live org record and this month's real call count against quota -- absent (not present in th…

  • rai_passport_generateGenerate AI Passportread-only

    Generate a verifiable AI Passport for a model — a tamper-evident governance card containing trust scores, compliance status, bias summary, and a cryptographic verification hash. Used by Procurement/Legal for third-party AI vendor risk assessment.

  • rai_pii_reportGenerate PII Audit Reportread-only

    Generate a detailed PII audit report for a document or corpus. Classifies findings by PII category (email, phone, SSN, credit card, IP, address), counts occurrences, computes a privacy risk score, and provides GDPR/CCPA remediation guidance. Used by Privacy Engineers for compliance evidence collection.

  • rai_policy_checkCheck Text Against Governance Policyread-only

    Evaluate text or a model response against a governance policy. Checks for: prohibited topics, required disclaimers, output length limits, language restrictions, and custom keyword blocklist. Returns pass/fail per policy rule with remediation guidance.

  • rai_redteam_analyzeAnalyze Red Team Responsesread-only

    Analyse model responses to red team attack payloads. Returns a security report with vulnerability findings, severity breakdown, and an overall security score.

  • rai_redteam_payloadsGet Red Team Attack Payloadsread-only

    Return adversarial attack payloads to probe an AI model for security vulnerabilities. Categories: prompt_injection, jailbreak, data_leakage, role_confusion, delimiter_attack.

  • rai_scanScan for PII & Harmful Contentread-only

    Scan text for PII (email, phone, SSN, credit card, IP address) and harmful content (hate speech, violence, self-harm). Returns findings and a redacted copy.

  • rai_stream_scanScan Streaming Text Chunksread-only

    Scan a list of text chunks (as would arrive from an LLM streaming response) for PII and harmful content. Simulates the StreamingScanner guardrail without a live stream. Returns per-chunk scan results and an aggregated summary with stop recommendation.

  • rai_trust_scoreCompute AI Trust Scoreread-only

    Compute a composite AI Trust Score (0-100) across six governance dimensions: fairness, privacy, security, robustness, compliance, authenticity. Returns score, letter grade (A-F), and risk tier (LOW/MEDIUM/HIGH/CRITICAL).

  • rai_webhook_statusCheck Webhook Delivery Healthread-only

    Check webhook delivery health and generate a structured status report. Takes delivery statistics and returns health grade, failure analysis, dead-letter queue status, and recommended remediation actions. Used by Security Engineers feeding SIEM systems and Platform Engineers debugging webhook pipelines.

  • test.counter.incrementSynthetic governed counter (test only)

    Deterministic synthetic mutation used to prove exactly-one consequential effect on the governed execution path. Forbidden in production. Not a customer product tool.

Compare and alternatives

    Featured in

    Signals

    Stars
    2
    Forks
    0
    Open issues
    8
    Weekly downloads
    37
    Last commit
    Oct 11, 2026 (17 days ago)
    Last release
    Aug 30, 2026 (1 month ago)
    Last package publish
    Aug 30, 2026 (1 month ago)

    From GitHub (fetched Oct 24, 2026) and the package registry.

    Details

    Registry name
    io.github.Guruprasath-Annadurai/whitepact
    Version
    1.2.3
    Auth
    Bearer token
    Packages
    pypi rai-governance-platform
    License
    MIT
    Repository
    github.com/Guruprasath-Annadurai/Whitepact
    Website
    github.com/Guruprasath-Annadurai/Whitepact
    First seen
    Oct 24, 2026
    Last checked
    Oct 24, 2026
    Source
    Official MCP Registrygithub-graphql
    Cite this page

    WhitePact MCP server. Agent Mart. https://agentmart.dev/connectors/guruprasath-annadurai-whitepact (last updated 2026-10-24)