Provides SDLC compliance verification for GitHub repositories via a GitHub App, enabling AI agents to monitor and evaluate development processes.
This server does not currently have a deployable release on Glama. Follow the repository's setup instructions to install and configure it for your MCP client, including any required credentials and local dependencies.
SDLC process inspector — Remote MCP Server + GitHub App powered by libverify.
Metsuke is a Remote MCP Server that provides SDLC compliance verification as tools that AI agents (Claude Code, etc.) can invoke. Named after the Edo-period inspector officials (目付), it continuously monitors and evaluates your organization's development processes.
Related MCP server: Rigour MCP
28 SDLC Controls: SLSA v1.2 (Source/Build/Dependencies) + SOC2 CC7/CC8
9 Policy Presets: default, oss, aiops, soc1, soc2, slsa-l1 through slsa-l4
GitHub App: Install on your org
MCP Tools
Agent Skills
Remote MCP Server
https://metsuke.plenoai.com/mcpClaude Code (~/.claude/settings.json)
{
"mcpServers": {
"metsuke": {
"type": "url",
"url": "https://metsuke.plenoai.com/mcp"
}
}
}or
claude mcp add metsuke --transport http https://metsuke.plenoai.com/mcpAgent Skills
npx skills add plenoai/metsukeInstall: https://github.com/apps/pleno-metsuke
For enterprises requiring on-premises or private cloud deployment (GHES, air-gapped networks):
docker compose up -dSee docs/self-hosted-guide.md for full instructions including GHES configuration, TLS setup, and backup procedures.
See docs/security-whitepaper.md for:
Architecture and data flow
OAuth 2.1 authentication details
Data handling and retention policies
Webhook security
Compliance considerations (SOC2, GDPR, ISMAP)
cargo build --release
nix build .#default # binary
nix build .#docker # Docker image
docker build -t metsuke .MIT
This server cannot be deployed
Compliance frameworks (SOC 2, ISO 27001, CMMC, NIST, more) delivered to AI agents as MCP tools.
Read-only AI coding tools for change verification, release readiness, capacity, and guidance.
Threat modeling, code/cloud/pipeline scanning, shadow-AI discovery, compliance checks and fixes.
Register every AI agent, log every action, prove it. EU AI Act compliance built in.
