Skip to main content
The Verdikt MCP server lets coding agents open cert windows, post signals, and read gate decisions without leaving the IDE.

Prerequisites

  • API key (vdk_live_…) from Settings → Agent access
  • Workspace ID from Settings → General
  • Node.js 18+

1. Cursor config

Add to ~/.cursor/mcp.json (global) or .cursor/mcp.json (project):
Replace secrets with your values. For local API dev, set VERDIKT_API_URL to http://127.0.0.1:8787. Restart Cursor after saving. First run downloads @useverdikt/mcp from npm — no clone or local path required.
Settings → Agent access includes a pre-filled copy of this config with your workspace ID.

2. Optional agent rule

Copy the agent rule into your project (e.g. .cursor/rules/verdikt.mdc for Cursor, or AGENTS.md / CLAUDE.md for other agents) so the agent calls release_brief when the gate is blocked — not just check_gate in a loop.

Tools available

Agent loop (read action, not exit code alone)

When action is not merge and a human (or you) asks why the release is blocked, call release_brief(release_id) once instead of polling check_gate alone. Read gate_action for exact gate semantics and suggested_verb for coarse next steps (merge | poll | escalate). Use mode: strict when only pure CERTIFIED (no override) should pass.

Typical PR flow

  1. Agent opens or updates a PR.
  2. Apply label verdikt:rc (or create_release with commit SHA + repo metadata).
  3. Integrations auto-pull; agent post_signals only for metrics CI produces locally.
  4. check_gate or check_gate_by_sha — read action.
  5. If not merge, release_brief for blockers and next steps — then fix, poll during collecting, or escalate.
  6. GHA gate workflow + branch protection enforce merge even if the agent misbehaves.

Session tracking

MCP sends X-Verdikt-Agent-Session on every request. Audit events for one agent run share the same session ID in the Verdikt audit trail. release_brief writes a distinct RELEASE_BRIEF_READ audit event (separate from RELEASE_GATE_CHECKED).

Full MCP reference

Tool details, agent loop, and SHA tagging checklist: @useverdikt/mcp on npm (package README).