Api Governance
Let coding agents call external APIs only after breaking-change detection, blast-radius scoring, and unsafe-call blocking.
Overview
io.github.coderifts/api-governance is a Ship-phase MCP server that detects breaking API changes, scores blast radius, and blocks unsafe agent API calls.
What is this MCP server?
- Detects breaking API changes before agent-driven calls ship
- Scores blast radius so you prioritize review on high-impact endpoints
- Blocks unsafe calls instead of silently forwarding bad requests
- Remote SSE endpoint at app.coderifts.com with Bearer API key auth
- Version 1.0.0 MCP server schema with hosted remote transport
- MCP server version 1.0.0
- Remote transport type SSE at app.coderifts.com/mcp
- Requires Authorization Bearer API key header
What problem does it solve?
AI agents can call or change APIs without the guardrails your team would apply in code review, so one bad tool invocation can break clients or trigger dangerous operations.
Who is it for?
Solo builders shipping agent workflows against evolving REST or OpenAPI APIs who want automated governance before production traffic.
Skip if: Teams with no external APIs, or builders who only need static OpenAPI linting without runtime agent call blocking.
What do I get? / Deliverables
After you register the server and API key, agents get governance signals and blocked unsafe calls instead of uncontrolled API access.
- Breaking-change detection signals for agent API work
- Blast-radius scores to prioritize review
- Blocked unsafe API calls from agent tool use
Recommended MCP Servers
Journey fit
How it compares
MCP governance integration for live agent calls, not a standalone OpenAPI linter skill.
Common Questions / FAQ
Who is io.github.coderifts/api-governance for?
It is for indie builders and small teams using AI coding agents against real APIs who need breaking-change detection and unsafe-call blocking at the MCP layer.
When should I use io.github.coderifts/api-governance?
Use it during Ship and security review when agents integrate with third-party or internal APIs and you want blast-radius scoring before unsafe operations run.
How do I add io.github.coderifts/api-governance to my agent?
Register the remote SSE URL https://app.coderifts.com/mcp in your MCP client and set Authorization to Bearer plus your cr_live CodeRifts API key.