
ProofFlow
Run evidence-backed infrastructure audits and policy gates on agent-proposed changes before they reach production.
Overview
ProofFlow is a MCP server for the Ship phase that audits infrastructure for AI coding agents with evidence-backed review and policy gates.
What is this MCP server?
- MCP bridge to ProofFlow backend for structured infra audits
- Evidence-backed review outputs suitable for human or automated sign-off
- Configurable PROOFFLOW_BASE_URL (default http://127.0.0.1:8787) and PROOFFLOW_API_KEY
- PyPI package proofflow-mcp v0.1.2 with stdio transport
- MCP package proofflow-mcp version 0.1.2 with stdio transport and optional local backend on port 8787
Community signal: 108 GitHub stars.
What problem does it solve?
Agents can propose infra changes quickly, but you lack a repeatable audit trail and policy stop signs before those changes go live.
Who is it for?
Indie teams running Hyperion-GPU-style ProofFlow locally or on a controlled backend who want MCP-native audit hooks in Claude Code or Cursor.
Skip if: Builders with no ProofFlow backend running or who only need linting without evidence storage.
What do I get? / Deliverables
After wiring proofflow-mcp, agent actions can trigger recorded reviews and policy checks you treat as a ship gate before deploy.
- Audit findings tied to agent-proposed infra changes
- Policy gate results usable as a pre-deploy checklist item
Recommended MCP Servers
Journey fit
How it compares
Evidence-backed infra audit MCP, not a single-repo code review skill or generic cloud console.
Common Questions / FAQ
Who is proofflow for?
Solo builders and small teams using AI coding agents on infrastructure who already run or plan to run a ProofFlow audit backend.
When should I use proofflow?
Use it in the ship and security pass when an agent has drafted infra changes and you need policy-gated review before merge or release.
How do I add proofflow to my agent?
Install proofflow-mcp from PyPI, set PROOFFLOW_BASE_URL and PROOFFLOW_API_KEY, add the stdio MCP server entry, and ensure the ProofFlow backend is reachable.