MCP server · Security

Gooo service-grant checker

Ask your AI to check whether a proposed permission change keeps one required service request intact.

This is a small local helper that lets your AI check a proposed change to a service grant. A service grant is a rule about which services something is allowed to reach. You give it the old rule and the new rule, and it tells you whether the required service request still survives. It is handy for people who review permission changes and want a second pair of eyes.

What is an MCP server? The 30-second version

On its own, your AI can only chat. An MCP server is a small helper program that gives your AI a new skill or a connection to a service. This helper connects your AI to the Gooo service-grant checker, so the AI can ask it a question and get a real decision back. You do not need to install Gooo itself to use it.

What this MCP server does

You ask your AI something like: does changing this grant from star to mcp star still keep the weather service? The AI passes your question to this helper. The helper runs the existing Gooo generation, which compares the old grant and the new grant against your required request. It returns a decision, the original facts you supplied, and a full proof with source and generation details. You see the answer in the chat, and you can keep the complete result for your records.

What you can do with it

Check whether a proposed grant change preserves one required service request
Compare a before grant and an after grant and get a clear decision
See the original facts and full proof alongside the decision
Check an ordered list of required requests when the server is started with the many-required option
Spot invalid input strings that do not fit the policy's expected format
Keep the complete result for review or audit

Try asking your AI

“Does changing the grant from * to mcp://* still keep the weather service?”
“Check if narrowing this grant to http://* removes the required mcp weather request.”
“Assess this service grant change: before is *, after is mcp://*, required type is mcp, required name is weather.”
“With many-required mode on, check whether this change keeps both the weather and calculator requests.”

What it gives back to you

You get a decision such as ELIGIBLE, REFUSED, or INVALID_INPUT, plus the original facts you supplied and a full proof with source and generation details. The result appears in the chat as structured content and as a JSON text block. If something goes wrong at the transport or execution level, you get an error flag instead of a policy decision.

Before you start

What you need

A reviewed copy of the repository
Go 1.27.3 to build the helper
An MCP host that can launch a local program over stdio

Good to know

It does not authenticate the facts you supply and it does not apply any grant, so treat its decision as a check, not as proof that a change is safe to apply.

Install it with your AI

Add Gooo service-grant checker to your AI, no technical skills needed

You don't install anything by hand. You copy one prompt, paste it into an AI that can work on your computer, and it checks, installs and connects the server for you, asking you when it needs something.

Sign in to get the install prompt

Members get a ready-made prompt that lets the Claude desktop app check Gooo service-grant checker, install it and connect it for them, step by step. You don't need any technical skills: you copy, paste and answer a few questions. Your connected AI can also find and install any of the 4,609 MCP servers here for you.