
Security News
Lovable’s OJ Rewrites Vite’s Dev Server in Rust as AI Lowers the Cost of Forking Open Source
Lovable’s OJ rewrites Vite’s dev server in Rust, reducing memory use and preview times as AI lowers the cost of open source reimplementation.
@palveron/mcp-server
Advanced tools
Palveron MCP Server — Model Context Protocol integration for AI Governance. Enables LLM tools to enforce governance policies in real time.
Official Palveron MCP Server — Model Context Protocol integration for AI Governance
⚡ Early access. Palveron is launching soon and access is currently invite-gated. This server is fully functional — you just need a
pv_live_key, which comes with an Early Access invite. Join the waitlist → palveron.com/early-access
Run every tool call your MCP-capable client makes — Claude Code, Cursor, any other MCP host — through the Palveron AI Governance Gateway. Policies enforced, PII masked, decisions logged, audit trails anchored.
@palveron/sdk — retry, circuit breaker, typed errors out of the boxnpm install -g @palveron/mcp-server
# or use directly via npx
npx @palveron/mcp-server
The
pv_live_…key in the examples below requires an Early Access invite — request one here. Once you have a key, everything works out of the box.
Add to your claude_desktop_config.json:
{
"mcpServers": {
"palveron": {
"command": "npx",
"args": ["@palveron/mcp-server"],
"env": {
"PALVERON_API_KEY": "pv_live_xxx",
"PALVERON_BASE_URL": "https://gateway.palveron.com"
}
}
}
}
Any MCP-capable host can launch the server via the palveron-mcp binary:
PALVERON_API_KEY=pv_live_xxx palveron-mcp
| Tool | Purpose |
|---|---|
palveron_verify | Gate any prompt before the host sends it to the model. Returns ALLOWED / BLOCKED / MODIFIED plus the sanitized prompt. |
palveron_check_tool_call | Gate a specific tool invocation against the agent's capability model. |
palveron_list_policies | List the project's active guardrails so the host can explain its decisions. |
The server reads its configuration from environment variables. The MCP host sets them; you never put secrets in code.
| Variable | Required | Description |
|---|---|---|
PALVERON_API_KEY | yes | API key (pv_live_…) — comes with an Early Access invite |
PALVERON_BASE_URL | no | Override the gateway endpoint (default: https://gateway.palveron.com) |
PALVERON_TIMEOUT_MS | no | Request timeout in ms (default: 30000) |
MIT — Copyright © 2026 Palveron.
FAQs
Advisory AI-governance checks for MCP hosts and coding agents: policy verdicts, PII-masking results, and audit traces from the Palveron gateway. Enforced, non-bypassable governance for MCP tool calls is provided by the Palveron remote MCP proxy — not by t
The npm package @palveron/mcp-server receives a total of 32 weekly downloads. As such, @palveron/mcp-server popularity was classified as not popular.
We found that @palveron/mcp-server demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Lovable’s OJ rewrites Vite’s dev server in Rust, reducing memory use and preview times as AI lowers the cost of open source reimplementation.

Security News
It has been one year since Shai-Hulud made its first appearance on npm.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.