Metsuke

SDLC process inspector — Remote MCP Server + GitHub App powered by libverify.

What is Metsuke?

Metsuke is a Remote MCP Server that provides SDLC compliance verification as tools that AI agents (Claude Code, etc.) can invoke. Named after the Edo-period inspector officials (目付), it continuously monitors and evaluates your organization's development processes.

Features

• 28 SDLC Controls: SLSA v1.2 (Source/Build/Dependencies) + SOC2 CC7/CC8
• 9 Policy Presets: default, oss, aiops, soc1, soc2, slsa-l1 through slsa-l4
• GitHub App: Install on your org
• MCP Tools
• Agent Skills

Connect

Remote MCP Server

https://metsuke.plenoai.com/mcp

Claude Code (~/.claude/settings.json)

{
  "mcpServers": {
    "metsuke": {
      "type": "url",
      "url": "https://metsuke.plenoai.com/mcp"
    }
  }
}

or

claude mcp add metsuke --transport http https://metsuke.plenoai.com/mcp

Agent Skills

npx skills add plenoai/metsuke

GitHub App

Install: https://github.com/apps/pleno-metsuke

Self-Hosted Deployment

For enterprises requiring on-premises or private cloud deployment (GHES, air-gapped networks):

docker compose up -d

See docs/self-hosted-guide.md for full instructions including GHES configuration, TLS setup, and backup procedures.

Security

See docs/security-whitepaper.md for:

• Architecture and data flow
• OAuth 2.1 authentication details
• Data handling and retention policies
• Webhook security
• Compliance considerations (SOC2, GDPR, ISMAP)

Build

cargo build --release
nix build .#default     # binary
nix build .#docker      # Docker image
docker build -t metsuke .

License

MIT