# nervous-system [Health: Active]

**Category:** 💻 Developer Tools  
**Repository:** https://github.com/levelsofself/mcp-nervous-system  
**GitHub Stars:** 4  
**Views:** 0  
**Installs:** 0  
**Upvotes:** 0  
**Directory Page:** https://allmcps.com/mcp/nervous-system

## Description
LLM behavioral enforcement: 7 rules preventing context loss, file damage, and drift.

## Claude Desktop Quick Installation
Install path detected from listing signals. Uses `npx` (confidence: high):

```json
"mcpServers": {
  "nervous-system": {
    "command": "npx",
    "args": ["-y","mcp-nervous-system"]
  }
}
```

## Documentation & README

# Nervous System

Deterministic governance lint for MCP server configurations, plus reference tooling for the 7 rules.

## What each tool actually does

| Tool | Does real work? |
|---|---|
| `audit_mcp_config` | **Yes.** Deterministic lint, zero dependencies, fully offline, never throws. Checks inline secrets in env, shell wrappers, unpinned packages, auto-install flags, broad filesystem scopes, non-TLS remote transports, unpinned docker tags. Returns findings with severities and a 0-100 score. |
| `check_preflight` | **Yes, when configured.** Reads `protected_files_list` from `nervous-system.config.json` or `NERVOUS_SYSTEM_PROTECTED_LIST`. With no list it says so rather than guessing. If the list is unreadable it FAILS CLOSED. |
| `get_*` (everything else) | **No.** They return text: the framework, templates, instructions. That is why they are named `get_`. |

## Install

    npx mcp-nervous-system

## Free local tool: audit_mcp_config

Pass your config as `config` (object) or `config_json` (string), e.g. the contents of
`claude_desktop_config.json`. Returns findings with severities and a 0-100 score.

## Hosted API (pay-per-call, x402, USDC on Base)

The write-capable toolset runs server-side and is not in this package.

- `POST https://api.100levelup.com/x402/audit-mcp` - governance lint ($0.05 USDC)
- `GET  https://api.100levelup.com/x402/verify-audit` - audit-chain verification ($0.005 USDC)

Discovery: `/openapi.json` and `/llms.txt`.

## 2.0.0 breaking changes

- `emergency_kill_switch` -> `get_kill_switch_instructions`. It never stopped anything.
- `verify_audit_chain` -> `get_audit_verification_instructions`. It never verified a chain.
- `dispatch_to_llm` -> `get_dispatch_command`. It never dispatched.
- `check_preflight` no longer matches hardcoded filenames from the author's own server. It reads your list.
- Hardcoded fleet counts and violation totals removed from `get_origin_story`. A number baked into a
  package is a fossil the moment it ships.

## License

MIT