Best for
- Teams using multiple AI coding assistants
- Organizations wanting to enforce API compatibility
- Compliance workflows needing verifiable audit trails of AI changes
D
Delimit MCP Server
Community
The merge gate for AI-written code, with signed, replayable attestation.
GitHub source repository ↗
48FMRS · D
Delimit MCP server provides a comprehensive AI governance toolkit, suitable for teams wanting to enforce policies and maintain audit trails across multiple models. It has a generous free tier and a rich feature set, but requires careful permission and risk management.
Delimit is an MCP server that provides a governance chain for AI-assisted coding. It wraps various AI coding assistants (like Claude Code, Codex, Cursor, and Gemini CLI), runs gate checks, records changes, and signs replayable receipts for every merge. It offers API governance tools such as lint and diff detection of 28 change types (including 17 breaking changes), semantic version classification, multi-model deliberation, persistent memory and task ledger, and governance features like security audit and evidence collection.
Tools
delimit_scan
Scans project to discover OpenAPI specs, frameworks, security issues, and tests.
delimit_init
Initializes merge gate configuration and policy presets.
delimit_lint
Checks spec changes for breaking changes.
delimit_diff
Compares two OpenAPI specs showing structural differences.
delimit_semver
Determines semantic version change type (MAJOR/MINOR/PATCH/NONE).
delimit_impact
Scans dependency manifests to assess impact scope of changes.
delimit_deliberate
Runs multi-model deliberation between AI models to reach consensus.
delimit_memory_store
Stores persistent memories (context and decisions).
delimit_memory_search
Semantic memory search across sessions.
delimit_recall
Recalls saved memories locally or with filters.
delimit_ledger_add
Adds task or item to shared ledger.
delimit_ledger_context
Gets top open items by priority at session start.
delimit_ledger_done
Closes a task item with a note, optionally capturing PR URL as proof.
Setup
Install the CLI globally via npm:
npx delimit-cli initThis sets up the merge gate configuration. No account or API keys required. For a quick zero-config check:
npx delimit-cli checkFit and risk
Not for
- Users not using AI coding tools
- Teams seeking a full CI/CD replacement rather than a governance layer
Required permissions
- Read repository files (for scanning, linting, diffing)
- Write to local .git directory and .delimit directory (for hooks, configs, memory)
- Execute commands (e.g., tests, security audit)
- Network access (for model deliberation, cloud sync if enabled)
Risks and side effects
- The server can execute code (e.g., tests, security audit), which could pose security risks.
- Credentials or sensitive data could be stored in memory or ledger; ensure proper access control.
- If cloud sync is enabled, event data may be sent to external services (user-provided Supabase).
Troubleshooting
- If the server does not start, check that Node.js is installed and version is sufficient.
- Run `npx delimit-cli doctor` for diagnostics.
- For tool call failures, ensure you are in the correct repository directory.
Use cases
Protect APIs from breaking changes before merge
Maintain context and decisions across models and sessions
Resolve difficult governance judgment calls via multi-model deliberation
Generate signed, replayable audit trails for compliance
Supported clients
Claude DesktopFull support
CodexFull support
CursorFull support
Gemini CLIFull support