Provides real-time validation and governance of JavaScript code for enterprise compliance.
Provides real-time validation and governance of React code for enterprise compliance.
Provides real-time validation and governance of Apex, LWC, and Visualforce code for enterprise compliance.
Click on "Deploy Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type @ followed by the MCP server name and your instructions, e.g., "@Quality Clouds MCP Server Validate this Salesforce Apex class for security violations."
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
AI Code Governance for enterprise platforms and for any Git repository. This repository is the index of everything Quality Clouds publishes on GitHub.
Quality Clouds turns an organization's governance, security, and quality standards into machine-readable rules, then applies those rules where code is written and before it reaches production. Human-written code and AI-generated code go through the same rules.
We have been doing this since 2017 on enterprise SaaS platforms, where a bad change is expensive and hard to reverse. That rule library and the scan data behind it are what the products run on.
Two product lines, two different problems.
Norma governs any Git repository, in any stack. It connects to Cursor, Claude Code, Lovable, Replit, and other MCP clients, so the rules for your stack are in the model's context while it generates, and it gives the repository a Production-Ready Score across security, performance, scalability, manageability, maintainability, and architecture. The score is a diagnostic, not a gate. Permanent free tier.
Quality Clouds for ServiceNow, Salesforce, Microsoft Dynamics 365, and Adobe governs the platform itself: Full Scan for a complete instance audit, LivecheckAI for real-time validation in the editor, and Quality Gates in CI to stop non-compliant changes.
Related MCP server: standards-mcp
If you are | Start with | Sign up |
Building in a Git repository, with or without an AI editor | ||
Running ServiceNow, Salesforce, Dynamics 365, or Adobe | ||
Curious how AI-generated code actually scores | No account needed |
Repository | What it is | Platform |
Remote MCP server for Norma at | Any stack | |
GitHub Action that runs a Quality Clouds scan on every pull request, with inline results. | Salesforce, ServiceNow | |
MCP server for ServiceNow and Salesforce: instance and scan visibility, real-time component validation, and rule lookups. | ServiceNow, Salesforce | |
Free Agent Skill that scores a codebase 0 to 100 for production readiness. No account, no network calls, read-only. | Any stack |
Repository | What it is |
Open dataset from scanning AI-generated public projects built with Lovable, Bolt, v0, and AI-assisted GitHub repositories. Methodology, ruleset, and charts included. CC-BY-4.0. |
Repository | What it is |
Announcements, feature requests, bug reports, questions, and roadmap. This is the only place we run discussions. | |
Sample application we scan in Norma demos. Deliberately imperfect. Not a starter template. | |
Security policy, code of conduct, contributing guide, and issue templates for the organization. |
Questions, ideas, and bugs: community discussions
Security reports: SECURITY.md
Anything else: help@qualityclouds.com
Quality Clouds is a UK-headquartered company with offices in Barcelona and New York, governing enterprise platforms since 2017. ISO/IEC 27001 certified.
This server cannot be deployed
Read-only AI coding tools for change verification, release readiness, capacity, and guidance.
Governance copilot for AI-assisted coding. 72 packs, 532 rules, proof bundles.
Governance layer for AI coding agents: knowledge-graph grounding, session audit, policy controls.
Security reviews for coding agents: diffs checked against your org policy and live infrastructure.
