ThinkShield is the server's defense layer, including a detection engine, five rule packs, and runtime middleware.

Which security issues can the rule packs detect?

The rule packs cover injection, authentication abuse, rate and resource abuse, reconnaissance, and header anomalies.

Does this repository include the full ThinkNEO Platform?

No. Governance orchestration, cryptographic audit chains, tenant management, and enterprise integrations are proprietary and are not included.

Is a hosted endpoint available?

Yes. The README lists https://mcp.thinkneo.ai/mcp and says the free tier includes 500 calls per month with an auto-provisioned API key.

MCP Server

Q: What does this server provide?

It provides MCP tools for AI governance, guardrails, FinOps, smart routing, observability, compliance, validation, security, and related functions.

ai-governancesecurityobservabilityfinopsa2a

Open-source MCP server for AI governance, runtime security, observability, FinOps, compliance, and agent lifecycle control.

Quick Install

Automated & IDE Setup

Copy the AI prompt to install this server into Claude Code, Cursor, or another agent — or use 1-click editor setup below.

Add to Cursor Add to VS Code

Manual Client & Custom JSON ConfigExpand JSON ▾

Client Config & Setup

Remote HTTP

Choose your client or environment

Target File:~/Library/Application Support/Claude/claude_desktop_config.json

claude_desktop_config.json

{
  "mcpServers": {
    "thinkneoai-mcp-server": {
      "url": "https://mcp.thinkneo.ai/mcp"
    }
  }
}

💡 Paste the JSON block into your client's configuration file under mcpServers, then restart the application.

Overview

ThinkNEO MCP Server exposes 72 MCP tools for governance, guardrails, security, observability, FinOps, routing, compliance, validation, and related operations. It includes ThinkShield, a defense layer with detection rules and ASGI middleware, plus a bridge providing 24 A2A skills. Use it for MCP-based governance and runtime protection; the full ThinkNEO Platform remains proprietary.

Use cases

Apply runtime detection for injection, authentication abuse, reconnaissance, and header anomalies

Monitor AI usage and support FinOps and smart-routing workflows

Validate agent outcomes and compliance-related operations

Bridge MCP tools to Google A2A agents

Connect Claude Desktop or Cursor to governance and security tools

Key features

72 MCP tools

ThinkShield detection engine

Five security rule packs

ASGI runtime middleware

24 MCP-A2A bridge skills

MCP 2024-11-05 implementation

Capabilities & Tool Schemas

Inspect callable tools, capabilities, and parameters exposed to AI agents by MCP Server.

Extracted Tool Capabilities

72 MCP tools

ThinkShield detection engine

Five security rule packs

ASGI runtime middleware

24 MCP-A2A bridge skills

MCP 2024-11-05 implementation

Documentation Overview

ThinkNEO MCP Server

Open MCP server with built-in defense layer (ThinkShield). Part of the ThinkNEO Platform — enterprise AI governance.

What This Is

An open-source MCP server providing 72 tools for AI governance, observability, and security:

ThinkShield — Production defense layer: detection engine, 5 rule packs, runtime middleware. 145 tests, p99 < 1ms.
72 MCP Tools — Governance, guardrails, FinOps, smart routing, observability, compliance, outcome validation, and more.
24 A2A Skills — Bidirectional MCP-A2A bridge for Google's Agent-to-Agent Protocol (v0.3.0, Linux Foundation).
Apache-2.0 — Use it, fork it, contribute.

What This Is Not

Not the full ThinkNEO Platform. Governance orchestration, cryptographic audit chain, tenant management, and enterprise integrations are proprietary and run at thinkneo.ai.
Not a standalone security product. ThinkShield is the defense component of a larger governed platform.

Why Open

We open-source our defense layer because real security doesn't depend on hidden rules — it depends on tested, audited, continuously improved detection plus a strong governance moat around it.

Snort. Suricata. Falco. OWASP CRS. The security industry runs on open detection. We follow that tradition.

The detection is open. The governance is proprietary. That's where the moat is.

Architecture

Code

                        Open Source (this repo)                    Proprietary (thinkneo.ai)
                   ┌─────────────────────────────────┐     ┌──────────────────────────────────┐
                   │                                 │     │                                  │
  MCP Clients ────>│  72 MCP Tools                   │     │  Governance Orchestration         │
  (Claude, Cursor, │  ├── Guardrails & Safety        │────>│  ├── Policy Engine (AIRGP)        │
   ChatGPT, etc.)  │  ├── FinOps & Smart Routing     │     │  ├── Cryptographic Audit Chain    │
                   │  ├── Observability              │     │  ├── Tenant Management            │
  A2A Agents ─────>│  ├── Compliance & Validation    │     │  ├── Enterprise Integrations      │
  (Google A2A)     │  └── MCP-A2A Bridge (24 skills) │     │  └── SLA & Support                │
                   │                                 │     │                                  │
                   │  ThinkShield Defense Layer       │     │  SHA-256 Hash Chain (949K+ rows)  │
                   │  ├── Detection Engine            │     │  Stripe Billing                   │
                   │  ├── 5 Rule Packs               │     │  Resend Email                     │
                   │  └── ASGI Middleware             │     │  Multi-tenant Auth                │
                   │                                 │     │                                  │
                   └─────────────────────────────────┘     └──────────────────────────────────┘
                          Apache-2.0 License                      Commercial License

Quickstart

bash

# Clone
git clone https://github.com/thinkneo-ai/mcp-server.git
cd mcp-server

# Install
pip install -r requirements.txt

# Run
python -m uvicorn src.server:app --host 0.0.0.0 --port 8081

# Test
python -m pytest tests/ -q

Or with Docker:

bash

cd deploy
docker compose up -d

Connect from Claude Desktop, Cursor, or any MCP client:

Code

https://mcp.thinkneo.ai/mcp

Free tier: 500 calls/month, auto-provisioned API key. All 72 tools available.

Components

Directory	Description	License
`src/tools/`	72 MCP tools — governance, security, FinOps, observability	Apache-2.0
`src/thinkshield/`	Defense layer — detection engine, 5 rule packs	Apache-2.0
`tests/thinkshield/`	ThinkShield test suite — 145 tests + attack/benign fixtures	Apache-2.0
`agent.json`	A2A Agent Card — 24 skills bridged from MCP	Apache-2.0

ThinkShield Rule Packs

Pack	Detects
`injection`	SQL injection, XSS, command injection, path traversal
`auth`	Credential stuffing, brute force, token replay, privilege escalation
`abuse`	Rate abuse, resource exhaustion, API scraping
`recon`	Path probing, tool enumeration, method probing, fingerprinting
`headers`	Header anomalies, spoofing, missing security headers

MCP Tools (72)

Full tool reference: docs/quickstart.md

MCP Spec Compliance

Complete Model Context Protocol 2024-11-05 implementation. Forward-compatible with MCP 2025-03-26.

Capability	Status	Details
tools	72 tools, full annotations	destructiveHint, readOnlyHint, idempotentHint, openWorldHint
resources	2 resources	Getting Started guide, Supported Providers
prompts	2 prompts with completions	governance_audit, policy_preflight
logging	logging/setLevel	8 levels, per-session, audit trail
completions	completion/complete	workspace (auth-scoped), provider, model (provider-aware)

Ecosystem

This repo is part of the ThinkNEO ecosystem:

Project	Description
ThinkNEO Platform	Enterprise AI governance platform
AIRGP	AI Runtime Governance Protocol — open standard
A2ASTC	A2A Security & Trust Conformance
ThinkNEO SMB Hub	Business applications for SMBs
Robotics Governance	Robot fleet governance dashboard

Security

See SECURITY.md for vulnerability reporting.

Contributing

See CONTRIBUTING.md.

Server	Description	Tools
thinkneo-control-plane	Enterprise AI Control Plane (this repo)	72 tools
thinkneo-mcp-smb-products	SMB standalone products — self-serve via TNC credits	37 tools

License

Apache-2.0 — see LICENSE.

About

ThinkNEO AI Technology Co., Ltd. — Hong Kong CR No. 2296774.

Built by the team behind the ThinkNEO Enterprise AI Control Plane, AIRGP protocol, and A2ASTC conformance suite.

NVIDIA Inception | Anthropic Partner | Linux Foundation A2A

Read the full README →View source on GitHub →

Related MCP Servers

View all in Monitoring View all alternatives

Adoption & maintenance

Factual signals from GitHub, npm, and our automated checks — not a rating.

GitHub stars

Stargazers on the source repository.

Last commit

2mo ago

Most recent push to the default branch.

Directory activity

1 views

Config copies, upvotes, and views on AllMCPs.

Reviews

No reviews yet — be the first to share how this listing worked for you.

Frequently Asked Questions about MCP Server

It provides MCP tools for AI governance, guardrails, FinOps, smart routing, observability, compliance, validation, security, and related functions.

AllMCPs Directory Badge

Full Badge Customizer

Showcase your server listing on GitHub or your project documentation. Embed this dynamic SVG badge to highlight official listing status and live engagement.

Badge Style:

Live Dynamic SVG Preview

Markdown (GitHub README)

[![AllMCPs](https://allmcps.com/api/badge/thinkneoai-mcp-server?style=directory)](https://allmcps.com/mcp/thinkneoai-mcp-server)

HTML Embed

<a href="https://allmcps.com/mcp/thinkneoai-mcp-server"><img src="https://allmcps.com/api/badge/thinkneoai-mcp-server?style=directory" alt="MCP Server on AllMCPs" /></a>

Technical Specs & Signals

CategoryMonitoring

PricingFreemium

8/9 checks healthy over the last 33d

48Quality signal: Fair · 48/100How this signal is calculated ▾

Server availabilityNot measured

Not scored for repo-hosted servers — we can't reach the running server, only its GitHub page. Hosted MCP endpoints are health-checked live.

Verified ownership10/20

Documentation & tools23/30

Adoption & activity3/15

Community engagement0/10

A guidance signal from public completeness & health data — not a user rating. New listings start lower and rise as they add docs, get verified, and grow adoption. Signals we can't observe for a listing are skipped, not counted against it.

★ Featured

Moxie Docs MCP

MCP & Agent Skills for Automated Documentation, and codebase conventions + context

Explore Server →

Own this project?

This directory is pre-filled from public sources. Claim via GitHub README, site badge, or DNS TXT to unlock edit access and the Official badge — proof is checked automatically, then reviewed by our team.

Free dofollow backlink: add your website and place the AllMCPs badge on it — no claim needed. We detect it automatically and keep it verified as long as the badge stays live.

Claim & get free dofollow

Share & Embed

Add our SVG badge (dark/light directory styles) or embeddable widget to your site.

Explore more

More in 📊 Monitoring →Best MCP servers for Monitoring & Observability →Alternatives to MCP Server →Install in Claude Desktop Install in Cursor Install in VS Code

MCP Server

ai-governancesecurityobservabilityfinopsa2a

Open-source MCP server for AI governance, runtime security, observability, FinOps, compliance, and agent lifecycle control.

Quick Install

Automated & IDE Setup

Copy the AI prompt to install this server into Claude Code, Cursor, or another agent — or use 1-click editor setup below.

Add to Cursor Add to VS Code

Manual Client & Custom JSON ConfigExpand JSON ▾

Client Config & Setup

Remote HTTP

Choose your client or environment

Target File:~/Library/Application Support/Claude/claude_desktop_config.json

claude_desktop_config.json

{
  "mcpServers": {
    "thinkneoai-mcp-server": {
      "url": "https://mcp.thinkneo.ai/mcp"
    }
  }
}

💡 Paste the JSON block into your client's configuration file under mcpServers, then restart the application.

Overview

Use cases

Apply runtime detection for injection, authentication abuse, reconnaissance, and header anomalies

Monitor AI usage and support FinOps and smart-routing workflows

Validate agent outcomes and compliance-related operations

Bridge MCP tools to Google A2A agents

Connect Claude Desktop or Cursor to governance and security tools

Key features

72 MCP tools

ThinkShield detection engine

Five security rule packs

ASGI runtime middleware

24 MCP-A2A bridge skills

MCP 2024-11-05 implementation

Capabilities & Tool Schemas

Inspect callable tools, capabilities, and parameters exposed to AI agents by MCP Server.

Extracted Tool Capabilities

72 MCP tools

ThinkShield detection engine

Five security rule packs

ASGI runtime middleware

24 MCP-A2A bridge skills

MCP 2024-11-05 implementation

Documentation Overview

ThinkNEO MCP Server

Open MCP server with built-in defense layer (ThinkShield). Part of the ThinkNEO Platform — enterprise AI governance.

What This Is

An open-source MCP server providing 72 tools for AI governance, observability, and security:

ThinkShield — Production defense layer: detection engine, 5 rule packs, runtime middleware. 145 tests, p99 < 1ms.
72 MCP Tools — Governance, guardrails, FinOps, smart routing, observability, compliance, outcome validation, and more.
24 A2A Skills — Bidirectional MCP-A2A bridge for Google's Agent-to-Agent Protocol (v0.3.0, Linux Foundation).
Apache-2.0 — Use it, fork it, contribute.

What This Is Not

Not the full ThinkNEO Platform. Governance orchestration, cryptographic audit chain, tenant management, and enterprise integrations are proprietary and run at thinkneo.ai.
Not a standalone security product. ThinkShield is the defense component of a larger governed platform.

Why Open

We open-source our defense layer because real security doesn't depend on hidden rules — it depends on tested, audited, continuously improved detection plus a strong governance moat around it.

Snort. Suricata. Falco. OWASP CRS. The security industry runs on open detection. We follow that tradition.

The detection is open. The governance is proprietary. That's where the moat is.

Architecture

Code

                        Open Source (this repo)                    Proprietary (thinkneo.ai)
                   ┌─────────────────────────────────┐     ┌──────────────────────────────────┐
                   │                                 │     │                                  │
  MCP Clients ────>│  72 MCP Tools                   │     │  Governance Orchestration         │
  (Claude, Cursor, │  ├── Guardrails & Safety        │────>│  ├── Policy Engine (AIRGP)        │
   ChatGPT, etc.)  │  ├── FinOps & Smart Routing     │     │  ├── Cryptographic Audit Chain    │
                   │  ├── Observability              │     │  ├── Tenant Management            │
  A2A Agents ─────>│  ├── Compliance & Validation    │     │  ├── Enterprise Integrations      │
  (Google A2A)     │  └── MCP-A2A Bridge (24 skills) │     │  └── SLA & Support                │
                   │                                 │     │                                  │
                   │  ThinkShield Defense Layer       │     │  SHA-256 Hash Chain (949K+ rows)  │
                   │  ├── Detection Engine            │     │  Stripe Billing                   │
                   │  ├── 5 Rule Packs               │     │  Resend Email                     │
                   │  └── ASGI Middleware             │     │  Multi-tenant Auth                │
                   │                                 │     │                                  │
                   └─────────────────────────────────┘     └──────────────────────────────────┘
                          Apache-2.0 License                      Commercial License

Quickstart

bash

# Clone
git clone https://github.com/thinkneo-ai/mcp-server.git
cd mcp-server

# Install
pip install -r requirements.txt

# Run
python -m uvicorn src.server:app --host 0.0.0.0 --port 8081

# Test
python -m pytest tests/ -q

Or with Docker:

bash

cd deploy
docker compose up -d

Connect from Claude Desktop, Cursor, or any MCP client:

Code

https://mcp.thinkneo.ai/mcp

Free tier: 500 calls/month, auto-provisioned API key. All 72 tools available.

Components

Directory	Description	License
`src/tools/`	72 MCP tools — governance, security, FinOps, observability	Apache-2.0
`src/thinkshield/`	Defense layer — detection engine, 5 rule packs	Apache-2.0
`tests/thinkshield/`	ThinkShield test suite — 145 tests + attack/benign fixtures	Apache-2.0
`agent.json`	A2A Agent Card — 24 skills bridged from MCP	Apache-2.0

ThinkShield Rule Packs

Pack	Detects
`injection`	SQL injection, XSS, command injection, path traversal
`auth`	Credential stuffing, brute force, token replay, privilege escalation
`abuse`	Rate abuse, resource exhaustion, API scraping
`recon`	Path probing, tool enumeration, method probing, fingerprinting
`headers`	Header anomalies, spoofing, missing security headers

MCP Tools (72)

Full tool reference: docs/quickstart.md

MCP Spec Compliance

Complete Model Context Protocol 2024-11-05 implementation. Forward-compatible with MCP 2025-03-26.

Capability	Status	Details
tools	72 tools, full annotations	destructiveHint, readOnlyHint, idempotentHint, openWorldHint
resources	2 resources	Getting Started guide, Supported Providers
prompts	2 prompts with completions	governance_audit, policy_preflight
logging	logging/setLevel	8 levels, per-session, audit trail
completions	completion/complete	workspace (auth-scoped), provider, model (provider-aware)

Ecosystem

This repo is part of the ThinkNEO ecosystem:

Project	Description
ThinkNEO Platform	Enterprise AI governance platform
AIRGP	AI Runtime Governance Protocol — open standard
A2ASTC	A2A Security & Trust Conformance
ThinkNEO SMB Hub	Business applications for SMBs
Robotics Governance	Robot fleet governance dashboard

Security

See SECURITY.md for vulnerability reporting.

Contributing

See CONTRIBUTING.md.

Server	Description	Tools
thinkneo-control-plane	Enterprise AI Control Plane (this repo)	72 tools
thinkneo-mcp-smb-products	SMB standalone products — self-serve via TNC credits	37 tools

License

Apache-2.0 — see LICENSE.

About

ThinkNEO AI Technology Co., Ltd. — Hong Kong CR No. 2296774.

Built by the team behind the ThinkNEO Enterprise AI Control Plane, AIRGP protocol, and A2ASTC conformance suite.

NVIDIA Inception | Anthropic Partner | Linux Foundation A2A

Read the full README →View source on GitHub →

Related MCP Servers

View all in Monitoring View all alternatives

Adoption & maintenance

Factual signals from GitHub, npm, and our automated checks — not a rating.

GitHub stars

Stargazers on the source repository.

Last commit

2mo ago

Most recent push to the default branch.

Directory activity

1 views

Config copies, upvotes, and views on AllMCPs.

Reviews

No reviews yet — be the first to share how this listing worked for you.

Frequently Asked Questions about MCP Server

It provides MCP tools for AI governance, guardrails, FinOps, smart routing, observability, compliance, validation, security, and related functions.

AllMCPs Directory Badge

Full Badge Customizer

Showcase your server listing on GitHub or your project documentation. Embed this dynamic SVG badge to highlight official listing status and live engagement.

Badge Style:

Live Dynamic SVG Preview

Markdown (GitHub README)

[![AllMCPs](https://allmcps.com/api/badge/thinkneoai-mcp-server?style=directory)](https://allmcps.com/mcp/thinkneoai-mcp-server)

HTML Embed

<a href="https://allmcps.com/mcp/thinkneoai-mcp-server"><img src="https://allmcps.com/api/badge/thinkneoai-mcp-server?style=directory" alt="MCP Server on AllMCPs" /></a>

Technical Specs & Signals

CategoryMonitoring

PricingFreemium

8/9 checks healthy over the last 33d

48Quality signal: Fair · 48/100How this signal is calculated ▾

Server availabilityNot measured

Not scored for repo-hosted servers — we can't reach the running server, only its GitHub page. Hosted MCP endpoints are health-checked live.

Verified ownership10/20

Documentation & tools23/30

Adoption & activity3/15

Community engagement0/10

★ Featured

Moxie Docs MCP

MCP & Agent Skills for Automated Documentation, and codebase conventions + context

Explore Server →

Own this project?

Free dofollow backlink: add your website and place the AllMCPs badge on it — no claim needed. We detect it automatically and keep it verified as long as the badge stays live.

Claim & get free dofollow

Share & Embed

Add our SVG badge (dark/light directory styles) or embeddable widget to your site.

Explore more

More in 📊 Monitoring →Best MCP servers for Monitoring & Observability →Alternatives to MCP Server →Install in Claude Desktop Install in Cursor Install in VS Code