DEVELOPER WORKFLOW

MCP Verify GitHub Action

Use the MCP Verify Action to check a server report or policy during pull requests. It is designed for repos that add MCP configs, connector manifests, agent tool settings, or server references.

Workflow example

name: MCP Verify
on:
  pull_request:
  workflow_dispatch:
jobs:
  verify-mcp:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: bmiller1009/claim-risk-score/actions/mcp-verify-check@v1
        with:
          server: io.sentinelsignal/scoring
          min-score: "70"
          require-allow: "true"

What it checks

Policy allow
Fails when the Verify policy says the server should be blocked.
Score threshold
Fails when display_score or current_score is below the configured minimum.
Evidence URL
Prints the policy/report URL so reviewers can inspect the current snapshot.