# Nervous System MCP server

> Enforces deterministic governance and security linting for MCP server configurations through rule-based auditing and preflight checks.

- Repository: https://github.com/levelsofself/mcp-nervous-system
- Page: https://hostedmcp.org/servers/levelsofself/mcp-nervous-system
- Transport: stdio
- Stars: 4
- License: MIT
- Latest version: 1.12.1

## Install

### Claude Code

```sh
claude mcp add mcp-nervous-system -- npx -y mcp-nervous-system
```

### Cursor (`~/.cursor/mcp.json`)

```json
{
  "mcpServers": {
    "mcp-nervous-system": {
      "command": "npx",
      "args": [
        "-y",
        "mcp-nervous-system"
      ]
    }
  }
}
```

### VS Code (`.vscode/mcp.json`)

```json
{
  "servers": {
    "mcp-nervous-system": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "mcp-nervous-system"
      ]
    }
  }
}
```

### VS Code CLI

```sh
code --add-mcp '{"name":"mcp-nervous-system","type":"stdio","command":"npx","args":["-y","mcp-nervous-system"]}'
```

### Claude Desktop (`claude_desktop_config.json`)

```json
{
  "mcpServers": {
    "mcp-nervous-system": {
      "command": "npx",
      "args": [
        "-y",
        "mcp-nervous-system"
      ]
    }
  }
}
```

### Codex (`~/.codex/config.toml`)

```toml
[mcp_servers.mcp-nervous-system]
command = "npx"
args = ["-y", "mcp-nervous-system"]
```

### Gemini CLI (`~/.gemini/settings.json`)

```json
{
  "mcpServers": {
    "mcp-nervous-system": {
      "command": "npx",
      "args": [
        "-y",
        "mcp-nervous-system"
      ]
    }
  }
}
```

## Tools (2)

- `audit_mcp_config`
- `check_preflight`

## FAQ

### What does the audit_mcp_config tool do?

It performs deterministic linting to check for inline secrets, unpinned packages, broad filesystem scopes, and other security risks, returning a severity score.

### How does check_preflight handle protected files?

It reads a protected files list from a configuration file or environment variable, and it fails closed if the list is unreadable.

### Is there a hosted version of these tools?

Yes, there is a hosted API available for governance linting and audit-chain verification via pay-per-call using USDC on Base.