Provides real-time validation and governance of JavaScript code for enterprise compliance.
Provides real-time validation and governance of React code for enterprise compliance.
Provides real-time validation and governance of Apex, LWC, and Visualforce code for enterprise compliance.
This server does not currently have a deployable release on Glama. Follow the repository's setup instructions to install and configure it for your MCP client, including any required credentials and local dependencies.
The code governance layer for enterprise platforms and AI-generated code, in any Git repository. This repository is the index of everything Quality Clouds publishes on GitHub.
Quality Clouds turns an organization's governance, security, and quality standards into machine-readable rules, then applies those rules where code is written and before it reaches production. Human-written code and AI-generated code go through the same rules.
We have been doing this since 2017 on enterprise SaaS platforms, where a bad change is expensive and hard to reverse. That rule library and the scan data behind it are what the products run on.
Two product lines, two different problems.
Norma by Quality Clouds reviews any Git repository the way a senior engineer would, in two layers. Findings are an AI review that asks the same architecture, database, and performance questions on every repository, such as whether the database has the indexes it needs or whether the app keeps a client-server split. Checks are rule-based and deterministic, the same verdict every time, and every check leaves an audit record. Norma runs inside the agent loop through the Norma MCP server (Claude Code, Cursor, Lovable, Replit, and any MCP client), on every pull request through the Norma GitHub App, and in VS Code. Stacks covered include JavaScript, TypeScript, Python, PHP, and Dart and Flutter. The repository's Production-Ready Score is a diagnostic and never blocks anything. Permanent free tier.
Quality Clouds for ServiceNow, Salesforce, Microsoft Dynamics 365, and Adobe governs the platform itself: Full Scan for a complete instance audit, Livecheck for real-time validation in the editor, and Quality Gates in CI to stop non-compliant changes.
Related MCP server: standards-mcp
If you are | Start with | Sign up |
Building in a Git repository, with or without an AI editor | ||
Running ServiceNow, Salesforce, Dynamics 365, or Adobe | ||
Curious how AI-generated code actually scores | No account needed |
Repository | What it is | Platform |
Remote MCP server for Norma at | Any stack | |
Reviews every pull request and posts the result as a review comment. Asks for one permission: read and write on pull requests. Comments only; it has no access to repository contents. | Any stack | |
Livecheck on the active file, results in the Problems panel, and a "Fix with AI" action that hands a prompt to your editor's AI chat. Also on Open VSX for Cursor and VSCodium. | Any stack | |
GitHub Action that runs a Quality Clouds scan on every pull request, with inline results. | Salesforce, ServiceNow | |
MCP server for ServiceNow and Salesforce: instance and scan visibility, real-time component validation, and rule lookups. | ServiceNow, Salesforce | |
Free Agent Skill that scores a codebase 0 to 100 for production readiness. No account, no network calls, read-only. | Any stack |
Repository | What it is |
Open dataset from scanning AI-generated public projects built with Lovable, Bolt, v0, and AI-assisted GitHub repositories. Methodology, ruleset, and charts included. CC-BY-4.0. |
Repository | What it is |
Announcements, feature requests, bug reports, questions, and roadmap. This is the only place we run discussions. | |
Sample application we scan in Norma demos. Deliberately imperfect. Not a starter template. | |
Materials for "When code is cheap, governance is the hard part", Workshop 2 of the AI Foundations track at AI Summit Barcelona 2026. | |
Security policy, code of conduct, contributing guide, and issue templates for the organization. |
Questions, ideas, and bugs: community discussions
Security reports: SECURITY.md
Anything else: help@qualityclouds.com
Quality Clouds is a UK-headquartered company with offices in Barcelona and New York, governing enterprise platforms since 2017. ISO 27001:2022 certified and SOC 2 Type II attested.
This server cannot be deployed
Read-only AI coding tools for change verification, release readiness, capacity, and guidance.
Governance copilot for AI-assisted coding. 72 packs, 532 rules, proof bundles.
Security reviews for coding agents: diffs checked against your org policy and live infrastructure.
Checks AI-written code against your rules as it is written, and keeps a record of what it found.
