data-ai MCP Server
The merge gate for AI-written code, with signed, replayable attestation. Works across Claude Code, Codex, Cursor, and Gemini CLI.
Discovered via unknown and last synced 1mo ago.
1. Install the package
npx delimit-cli
2. Add to claude_desktop_config.json
{
"mcpServers": {
"delimit-cli": {
"command": "npx",
"args": [
"delimit-cli"
]
}
}
}Config file location: ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) / %APPDATA%\Claude\claude_desktop_config.json (Windows)
`required_param_added`
`method_added`
`optional_field_added`
Path
`DELETE /pets/{petId}`
`response_removed`
`/pets:GET:200[].id` (string -> integer)
`required_field_added`
`param_type_changed`
`optional_param_added`
`field_removed`
`security_added`
Status
`type_changed`
`min_length_increased`
`deprecated_added`
`method_removed`
security_audit -> evidence_collect
`format_changed`
`endpoint_added`
`default_changed`
`max_length_decreased`
json`. Audit-friendly output for PRs and compliance. - **Memory hardening** -- SHA-256 integrity hash + source model tag on every `remember`. Cross-model trust, verified on every `recall`. - **Tag-based publishing** -- automated gateway sync, no more version drift between source and npm bundle. ### Multi-Model Deliberation Run your question through 4 AI models simultaneously. They debate each other until unanimous agreement. ```bash delimit deliberate "Should we build rate limiting in-house or use a managed service?" ``` ``` Round 1 (independent): Claude: Build in-house. Redis sliding window is 50 lines. Gemini: Build. You already have Redis. Codex: Agree — but add circuit breaker for Redis failures. Grok: Build. Managed service costs $200/mo for 50 lines of code. Round 2 (deliberation): All models: AGREE UNANIMOUS CONSENSUS (2 rounds, confidence 94/100) Build rate limiting in-house with Redis + circuit breaker. ``` 3 free deliberations, then BYOK for unlimited. Works with Grok, Gemini, Claude, GPT-4o. ### v4.1 - **TUI** -- terminal-native Ventures panel, real `delimit think` and `delimit build` commands - **Security hardening** -- notify.py stubbed in npm, axios pinned against supply chain attacks - **Free tier restructure** -- deliberations use Gemini Flash + GPT-4o-mini (cost: <$20/mo) - **Zero-config onboarding** -- auto-detect framework, scan, and first evidence in one command - **Auto-approve tools** -- `delimit setup` configures permissions for Claude Code, Codex, and Gemini CLI ### v4.0 - **Toolcard Delta Cache** -- SHA256 schema hashing, delta-only transmission, saves tokens - **Session Phoenix** -- cross-model session resurrection with soul capture - **Handoff Receipts** -- structured acknowledgment protocol between agents - **Cross-Model Audit** -- 3 lenses (security, correctness, governance) with deterministic synthesis - **4-model deliberation** -- Claude + Grok + Gemini + Codex debate until consensus - **Universal Swarm Triggers** -- "Think and Build", "Keep building", "Ask Delimit" - **Full governance toolkit** -- lint, diff, policy, evidence, drift, attestation, and swarm orchestration exposed as MCP tools and CLI subcommands --- ## GitHub Action Zero-config -- auto-detects your OpenAPI spec: ```yaml - uses: delimit-ai/delimit-action@v1 ``` Or with full configuration: ```yaml name: API Contract Check on: pull_request jobs: delimit: runs-on: ubuntu-latest permissions: pull-requests: write steps: - uses: actions/checkout@v4 with: fetch-depth: 0 - uses: delimit-ai/delimit-action@v1 with: spec: api/openapi.yaml ``` That's it. Delimit auto-fetches the base branch spec, diffs it, and posts a PR comment with breaking changes, semver classification, migration guides, and governance gate results. [View on GitHub Marketplace](https://github.com/marketplace/actions/delimit-api-governance)
`enum_value_added`
`description_changed`
`endpoint_removed`
`/pets:GET:200[].status`
relaxed) ``` `scan` (`delimit_scan`) reports what Delimit can do for this repo. `init` (`delimit_init`) drops in the policy preset and merge-gate config. No account, no keys. ### 2. The merge gate, end to end **Lint the spec change (the gate).** Baseline vs. proposed, with policy applied — one pass/fail verdict. ```bash npx delimit-cli lint old.yaml new.yaml # tool: delimit_lint ``` **See exactly what breaks.** Pure structural diff — added/removed/modified endpoints, schemas, params, no policy. ```bash npx delimit-cli diff old.yaml new.yaml # tool: delimit_diff ``` **Classify the bump.** Deterministic MAJOR/MINOR/PATCH/NONE — same input, same answer, every time. ```text delimit_semver → MAJOR/MINOR/PATCH/NONE + next version string delimit_impact → blast radius: scans your dependency manifest for downstream callers (informational) ``` **Settle the hard calls.** When the gate verdict is a judgment call, put it to multiple models and let them debate to consensus. ```bash npx delimit-cli deliberate "Is dropping the deprecated v1 /users field a safe MINOR?" # tool: delimit_deliberate — 3 free, then bring your own key ``` **Capture the signed, replayable attestation.** After a gate event (deploy / security / test / audit), record the evidence bundle and verify it any time. ```text delimit_evidence_collect → signed evidence bundle for the audit trail (Pro) delimit_evidence_verify → confirm a bundle hasn't been tampered with (Pro) delimit_seal_verify → check a Delimit Seal receipt against its bundled (Free) Layer-0 constitution — offline-verifiable ``` Every receipt is offline-verifiable: `npx delimit-cli seal-verify <receipt.json>`, or open its `delimit.ai/att/<id>` replay URL. ### 3. Context that survives sessions and models Decisions, constraints, and tasks persist across sessions and across AI assistants — switch from Claude Code to Codex, Cursor, or Gemini CLI without losing the thread. **Memory** — persist and recall the *why*, not just the diff. ```bash npx delimit-cli remember "v1 /users field is frozen until Q3 — downstream billing depends on it" # tool: delimit_memory_store npx delimit-cli recall billing # local recall over your saved memories (Free) ``` For semantic recall by meaning across sessions, the assistant calls `delimit_memory_search` (Pro) directly. **Ledger** — one task list, shared across every assistant and session. ```text delimit_ledger_add → record a task/bug/feature/strategic item delimit_ledger_context → session-start: top open items by priority (what's queued) delimit_ledger_done → close with a note (auto-captures a PR URL as ship proof) ``` That's the loop: gate the change, sign the proof, keep the context. Run it once on a real spec and you've used the whole merge gate. --- ## Think and Build Beyond the merge gate, Delimit orchestrates multi-model deliberation and autonomous builds. `delimit think` dispatches a strategic question to Claude, Codex, Gemini, and Grok; `delimit build` activates a background daemon that executes ledger tasks through the gate chain. `delimit vault` manages local secrets (AES-256). Works across any configuration, from a single model on a budget to a full panel. --- ## Try it in 2 minutes ```bash npx delimit-cli doctor # 14 prescriptive checks — tells you exactly what to fix npx delimit-cli status # Visual dashboard of your entire governance setup npx delimit-cli simulate # Dry-run: see what would be blocked before you commit npx delimit-cli scan # Instant health grade for your API spec npx delimit-cli try owner/repo # Try governance on any GitHub repo ``` No API keys. No account. No config files. ### Pick your first win **Protect my API** — catch breaking changes before merge: ```bash npx delimit-cli try # Creates a sample API, introduces breaking changes, shows what gets blocked. # Saves a governance report to delimit-report.md ``` **Watch for drift** — detect spec changes without review: ```bash npx delimit-cli init # Sets up governance + drift baseline # Weekly drift checks run automatically via GitHub Action ``` **Run PR copilot** — governance gates on every pull request: ```yaml # .github/workflows/api-governance.yml - uses: delimit-ai/delimit-action@v1 with: spec: api/openapi.yaml # Posts gate status, violations, and remediation in PR comments ``` --- ## What's New *Gate every AI-assisted invocation. Ship the receipts.* - **`delimit wrap`** — pipe `claude -p`, `cursor`, `aider`, `codex`, or any AI-assisted CLI through a signed governance gate. Snapshots the git diff before/after, runs lint + tests, HMAC-signs an `att_*` attestation, emits a public replay URL. Advisory by default; `--enforce` blocks CI on policy violations; `--max-time <s>` is a kill switch that tags the attestation as a `liability_incident` and prints a cross-model handoff command. - **`delimit trust-page`** — renders a directory of attestations into a static HTML trust page + JSON Feed 1.1 feed. Single file, no framework, offline-renderable. Deploy anywhere. - **`delimit ai-sbom`** — aggregates attestations into a CycloneDX 1.6 bill-of-materials with AI-specific fields (detected models per vendor, tool-call surface, policy gate counts). Pipe straight into procurement. - **Cross-model by construction** — `wrap` is agnostic to the producer. Same attestation schema whether the pipe upstream is Claude Code, Cursor, Aider, Codex, or Gemini CLI. Switch producers without losing the audit chain. ```bash # Gate any AI-assisted CLI delimit wrap -- claude -p "add tests for payments" # → att_7d556843c84fb881 signed, replay: https://delimit.ai/att/att_7d556843c84fb881 # Kill switch + handoff after 60s wall-clock delimit wrap --max-time 60 -- cursor edit "refactor auth middleware" # → if killed: kind=liability_incident # → suggested: delimit wrap -- claude -p "refactor auth middleware" # Render accumulated attestations as a public trust page delimit trust-page -o ./trust # → ./trust/index.html (+ feed.json) # Build a CycloneDX-AI bill of materials delimit ai-sbom -o ./ai-sbom.json # → components: 4 models detected, 187 gates run ``` ## Earlier releases *The highest state of AI governance — earlier features still active.* - **`delimit doctor`** -- 14 prescriptive diagnostics. Every failure prints the exact command to fix it. `--ci` for pipelines, `--fix` for auto-repair. - **`delimit simulate`** -- policy dry-run. See what would be blocked before you commit. The `terraform plan` for API governance. - **`delimit status`** -- visual terminal dashboard. Policy, specs, hooks, CI, MCP, models, memory, ledger, evidence, git branch. `--watch` for live refresh. - **`delimit report`** -- governance report. `--since 7d --format md
`param_removed`
`enum_value_removed`
`param_required_changed`
`response_type_changed`
`security_removed`
`security_scope_removed`
`response_added`
`field_requirement_relaxed`