feat: add Exogram Authority Runtime reference server

.github/workflows/publish-exogram.yml

@@ -0,0 +1,44 @@
+name: Publish Exogram MCP Server
+
+on:
+  push:
+    branches:
+      - main
+      - feat/add-exogram-mcp
+  workflow_dispatch:
+
+permissions:
+  contents: read
+  id-token: write # Required for PyPI OIDC Trusted Publishing
+
+jobs:
+  publish-pypi:
+    name: Publish to PyPI
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Install uv
+        uses: astral-sh/setup-uv@v5
+
+      - name: Set up Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+
+      - name: Install dependencies & Test
+        working-directory: src/exogram
+        run: |
+          uv sync --all-extras --dev
+          uv run pyright
+          uv run pytest tests/
+
+      - name: Build package
+        working-directory: src/exogram
+        run: uv build
+
+      - name: Publish to PyPI
+        uses: pypa/gh-action-pypi-publish@release/v1
+        with:
+          packages-dir: src/exogram/dist
+          skip-existing: true

README.md

@@ -27,6 +27,7 @@ Typically, each MCP server is implemented with an MCP SDK:
 These servers aim to demonstrate MCP features and the official SDKs.
 
 - **[Everything](src/everything)** - Reference / test server with prompts, resources, and tools.
+- **[Exogram](src/exogram)** - Execution boundary and governance authority runtime for autonomous AI.
 - **[Fetch](src/fetch)** - Web content fetching and conversion for efficient LLM usage.
 - **[Filesystem](src/filesystem)** - Secure file operations with configurable access controls.
 - **[Git](src/git)** - Tools to read, search, and manipulate Git repositories.

src/exogram/.python-version

@@ -0,0 +1 @@
+3.10

src/exogram/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2024-2026 Exogram Team
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

src/exogram/README.md

@@ -0,0 +1,110 @@
+mcp-name: io.github.Richard-Ewing/exogram
+<!-- mcp-name: io.github.Richard-Ewing/exogram -->
+
+# Exogram MCP Server
+
+[![PyPI](https://img.shields.io/pypi/v/mcp-server-exogram)](https://pypi.org/project/mcp-server-exogram/)
+[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
+[![Python 3.10+](https://img.shields.io/badge/python-3.10+-blue.svg)](https://www.python.org/downloads/)
+
+A Model Context Protocol (MCP) server providing tools to evaluate, commit, and audit agentic actions through the **Exogram Authority Runtime**.
+
+This server enables AI models (like Claude Desktop) to request cryptographic authorization before executing state-changing tools and securely store/retrieve records in the Exogram vault.
+
+## Features
+
+- **Action Evaluation** — Request cryptographic authorization before executing state-changing operations
+- **Audit Ledger** — Commit executed actions to an immutable, tamper-proof audit trail
+- **Encrypted Vault** — Store facts/records with encryption, PII scrubbing, and conflict detection
+- **Semantic Search** — Search stored records using vector similarity
+
+## Tools
+
+| Tool | Description |
+|------|-------------|
+| `exogram_evaluate_action` | Request authorization for a tool call. Returns a token if ALLOWED, or blocks execution if it violates policy constraints. |
+| `exogram_commit_action` | Commit an executed action token to the immutable audit ledger. |
+| `exogram_store_record` | Store a fact/record in the encrypted trust vault (scrubs PII, matches conflicts). |
+| `exogram_search_records` | Search vault records using semantic similarity. |
+
+## Installation
+
+### Using uv (recommended)
+
+```bash
+uv pip install mcp-server-exogram
+```
+
+### Using pip
+
+```bash
+pip install mcp-server-exogram
+```
+
+## Configuration
+
+### Claude Desktop
+
+Add this to your Claude Desktop configuration file:
+
+```json
+{
+  "mcpServers": {
+    "exogram": {
+      "command": "uv",
+      "args": [
+        "run",
+        "--package",
+        "mcp-server-exogram",
+        "mcp-server-exogram"
+      ],
+      "env": {
+        "EXOGRAM_API_URL": "https://api.exogram.ai",
+        "EXOGRAM_BEARER_TOKEN": "<YOUR_EXOGRAM_BEARER_TOKEN>"
+      }
+    }
+  }
+}
+```
+
+### Using uvx
+
+```bash
+EXOGRAM_API_URL=https://api.exogram.ai \
+EXOGRAM_BEARER_TOKEN=your-token \
+uvx mcp-server-exogram
+```
+
+## Environment Variables
+
+| Variable | Required | Default | Description |
+|----------|----------|---------|-------------|
+| `EXOGRAM_BEARER_TOKEN` | Yes | — | Your Exogram API bearer token |
+| `EXOGRAM_API_URL` | No | `https://api.exogram.ai` | Exogram API base URL |
+
+## Development
+
+```bash
+# Clone and setup
+git clone https://github.com/Richard-Ewing/servers.git
+cd servers/src/exogram
+
+# Install dependencies
+uv sync --all-extras --dev
+
+# Run type checking
+uv run pyright
+
+# Run linting
+uv run ruff check .
+
+# Run tests
+uv run pytest tests/
+
+# Build package
+uv build
+```
+
+## License
+
+MIT — see [LICENSE](LICENSE) for details.

src/exogram/pyproject.toml

@@ -0,0 +1,44 @@
+[project]
+name = "mcp-server-exogram"
+version = "0.1.3"
+description = "A Model Context Protocol server providing tools to evaluate, commit, and audit actions through the Exogram Authority Runtime"
+readme = "README.md"
+requires-python = ">=3.10"
+authors = [{ name = "Exogram Team", email = "engineering@exogram.ai" }]
+keywords = ["mcp", "security", "governance", "runtime", "llm"]
+license = { text = "MIT" }
+classifiers = [
+    "Development Status :: 4 - Beta",
+    "Intended Audience :: Developers",
+    "License :: OSI Approved :: MIT License",
+    "Programming Language :: Python :: 3",
+    "Programming Language :: Python :: 3.10",
+    "Programming Language :: Python :: 3.11",
+    "Programming Language :: Python :: 3.12",
+    "Programming Language :: Python :: 3.13",
+]
+dependencies = [
+    "httpx>=0.27",
+    "mcp>=1.1.2",
+    "pydantic>=2.0.0",
+]
+
+[project.urls]
+Homepage = "https://exogram.ai"
+Repository = "https://github.com/Richard-Ewing/servers"
+Issues = "https://github.com/Richard-Ewing/servers/issues"
+Documentation = "https://exogram.ai/docs"
+
+[project.scripts]
+mcp-server-exogram = "mcp_server_exogram:main"
+
+[build-system]
+requires = ["hatchling"]
+build-backend = "hatchling.build"
+
+[dependency-groups]
+dev = ["pyright>=1.1.389", "ruff>=0.7.3", "pytest", "pytest-asyncio"]
+
+[tool.pytest.ini_options]
+pythonpath = ["src"]
+

src/exogram/server.json

@@ -0,0 +1,31 @@
+{
+  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
+  "name": "io.github.Richard-Ewing/exogram",
+  "version": "0.1.3",
+  "description": "Model Context Protocol server for the Exogram Authority Runtime.",
+  "title": "Exogram Authority Runtime",
+  "repository": {
+    "url": "https://github.com/Richard-Ewing/servers",
+    "source": "github"
+  },
+  "packages": [
+    {
+      "registryType": "pypi",
+      "identifier": "mcp-server-exogram",
+      "version": "0.1.3",
+      "transport": {
+        "type": "stdio"
+      },
+      "environmentVariables": [
+        {
+          "name": "EXOGRAM_BEARER_TOKEN",
+          "description": "Your Exogram API bearer token"
+        },
+        {
+          "name": "EXOGRAM_API_URL",
+          "description": "Exogram API base URL"
+        }
+      ]
+    }
+  ]
+}

src/exogram/src/mcp_server_exogram/__init__.py

@@ -0,0 +1,8 @@
+"""Exogram Authority Runtime MCP Server."""
+
+from .server import mcp
+
+def main() -> None:
+    mcp.run()
+
+__all__ = ["main", "mcp"]