Speclock

Name: Speclock
Author: sgroy10

by sgroy10version 5.5.3i★ –iRuns on your computer

Registry nameio.github.sgroy10/speclock

Install

Overview

Description from the maker (original English)

AI Constraint Engine — enforces CLAUDE.md and .cursorrules as laws. 51 MCP tools.

PopNx MCP’s three pillars

These three are never merged into one score: opinions, measurements and popularity are different things.

User voiceiNo reviews yetReviews open together with accounts in a later step
Our basic checksi1 of 1 passedChecked from public information; code not scanned yet
UsageiNot measured yet★ –

What you can do with it

We have not written a plain-language summary for this one yet. Below are the facts we read from the registry.

Connection: Runs on your computer
Transport: stdio
Category: Other

Install

Pick the AI app you use, then copy the settings.

Before you install

Basic checks: 1 of 1 passed
Runs on your computer with your user’s permissions (files, network, apps).
The registry lists no key to fill in.

You need

npmNode.js installed (for the npx command)

Which app do you use?

ClaudeClaude CodeCursorVS CodeChatGPT

Pick your app above. We remember it, so next time the button says “Install in …”.

Open Claude Desktop → Settings → Developer → Edit Config, and paste this into claude_desktop_config.json

{
  "mcpServers": {
    "speclock": {
      "command": "npx",
      "args": [
        "-y",
        "speclock"
      ]
    }
  }
}

Run this in your terminal

claude mcp add speclock -- npx -y speclock

Open in Cursor

Or copy the settings yourself

Paste into .cursor/mcp.json in your project, or ~/.cursor/mcp.json

{
  "mcpServers": {
    "speclock": {
      "command": "npx",
      "args": [
        "-y",
        "speclock"
      ]
    }
  }
}

Your browser asks to open the app, then the app shows the settings and asks you to confirm. Key values are left empty for you to fill in.

Open in VS Code

Or copy the settings yourself

Paste into .vscode/mcp.json in your project

{
  "servers": {
    "speclock": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "speclock"
      ]
    }
  }
}

Your browser asks to open the app, then the app shows the settings and asks you to confirm. Key values are left empty for you to fill in.

This one runs on your computer, and ChatGPT can only connect to servers on the internet. Pick another app.

Your choice stays on this device in a cookie; no account needed.

These settings are generated from the maker’s registry entry. If the README says otherwise, follow the README.

What it can do

Runs on your computer; the tool list appears in your AI app after you install it.

Basic checksi

We check information anyone can see; we have not read the code. Checks that do not apply are left out of the count. · Checked Nov 6, 2026

✓ Pass
Maker matches the repo
The registry name was verified with the GitHub account sgroy10, which owns the repo
… Not checked yet
Still maintained
We have not read this repo from GitHub yet
… Not checked yet
Has a licence
We have not read this repo from GitHub yet
– Not applicable
Endpoint responds
This one runs on your computer; there is no internet endpoint
– Not applicable
Sign-in with OAuth
Runs on your computer and uses local settings instead
… Not checked yet
No hidden instructions in tool descriptions
Runs on your computer; we can only read tool lists from internet endpoints

Compared with others in Otheri

More stars than 0% of the other 32451 servers in this category
Published to the registry more recently than 6% of the other 32451 servers in this category
Basic checks equal to or better than 100% of the other 32451 servers in this category

Compared with every active server in this category in the registry. Stars count only when the publisher owns the repo.

Common questions

Is Speclock safe?

It passed 1 of 1 applicable basic checks. We have not read the code. Before adding a key or token, see what access the server asks for and use a key with only the permissions you need.

What keys or codes does it need?

The registry does not list a required key, though some servers ask you to sign in on first use.

Does it run on my computer or in the cloud?

It runs on your computer. Your AI app starts it when needed, and data does not pass through the maker’s servers (unless it calls an online service itself).

Is it still maintained?

The GitHub repo last changed –, and the latest version (5.5.3) reached the registry 7 months ago.

Which apps can use it?

Apps that support MCP, such as Claude Desktop, Claude Code, Cursor and VS Code. You also need Node.js on your computer.

What can I use instead?

In the same category: Spec Driven Development, Remote Desktop Commander, Recta

Alternatives

Servers in the same category from other makers, sorted by stars.

Reading a card:★ GitHub starsiThree pillars: reviews · checks · usageiUpdated = latest version published to the registryi

Spec Driven Development

by formulahendry

MCP Server that facilitates spec-driven development workflows, not just Vibe Coding.

Runs on your computer★ 440MITUpdated 14 months ago

Install

Remote Desktop Commander

by desktop-commander

Remote Desktop Commander: use files, terminal and processes on your own computers from any AI app.

Runs in the cloud★ 211Updated yesterday

Install

Recta

by RectaBuild

Cheaper cross-chain stablecoin routes for AI agents; 5 % of the verified saving, nothing if none.

Runs in the cloudUpdated today

Install

README from the maker

Open the README

Copied from the maker’s repo as written. PopNx MCP has not reviewed or endorsed it. HTML, images and scripts are removed. Links lead off this site.

Rules files tell AI what not to change. SpecLock enforces them.

Stop Claude Code, Cursor, Codex, Windsurf, and other AI coding tools from crossing project constraints you already wrote in CLAUDE.md , AGENTS.md , and .cursorrules .

Install · See a block · Claude Code plugin · Website · Saves Wall

Why another rules tool? Rules files are context. They can be forgotten, diluted, or overridden during a long coding session. SpecLock turns those rules into checks that run before edits, shell commands, and commits.

See the difference

CLAUDE.md:  Never modify the authentication system.

You: Add social login to the login page.

Without SpecLock Claude: I'll update the auth flow and add an OAuth provider...

With SpecLock (strict mode) SpecLock: BLOCKED — conflicts with "Never modify the authentication system" Match: login → auth → authentication The action was denied before the files changed.

SpecLock uses semantic conflict detection rather than simple keyword matching. It catches indirect actions such as “clean up old patient data,” “streamline checkout,” or “temporarily disable MFA” when they violate an active constraint.

60-second setup

Run this from the project you want to protect:

npx speclock@latest protect          # reads existing AI rule files; advisory by default

npx speclock@latest doctor # confirms rules, hooks, and integration

When the advisory output looks right, enable blocking:

npx speclock@latest protect --strict

No account is required. SpecLock runs locally by default, and advisory mode never blocks a change.

Install as a Claude Code plugin

Inside Claude Code, run:

/plugin marketplace add sgroy10/speclock

/plugin install speclock@speclock-marketplace

Then protect the current project once:

npx speclock@latest protect          # warnings only

npx speclock@latest protect --strict # block confirmed conflicts

The plugin automatically starts SpecLock's MCP server and checks Claude Code Write, Edit, and Bash actions before execution. It includes all 51 MCP tools and works alongside your existing CLAUDE.md.

Install on other coding agents

SpecLock is packaged for multiple agent ecosystems, but the enforcement level depends on what each host exposes:

Platform	Install/discovery path	Protection level
Claude Code	Native marketplace plugin above	Native pre-action checks for `Write`, `Edit`, and `Bash`
Gemini CLI	Install this repository as a Gemini extension	MCP-assisted checks plus project context
Cursor	Agent Plugin / Cursor marketplace package	MCP-assisted checks plus rules
Codex	Repository Codex plugin in `plugins/speclock`	MCP-assisted checks plus `$speclock-guardrails` skill
GitHub Copilot CLI	Add this repository as a plugin marketplace	MCP-assisted checks plus bundled plugin context
Cline	MCP server; curated marketplace submission in progress	MCP-assisted checks
Windsurf	`speclock mcp install windsurf`	MCP-assisted checks plus rules
Any Git client or CI	`speclock protect`	Commit/CI enforcement independent of the coding agent

MCP-assisted means the agent can call SpecLock before acting; it does not guarantee interception. Use speclock protect --strict and CI when a constraint must be enforced regardless of the client.

SpecLock has a different job from memory and skills: memory recalls context, skills provide procedures, and SpecLock verifies planned actions against explicit constraints. It reduces constraint drift; it cannot guarantee factual correctness or make a model hallucination-free.

Repository installs supported by current clients:

gemini extensions install https://github.com/sgroy10/speclock

copilot plugin marketplace add sgroy10/speclock copilot plugin install speclock@speclock-marketplace

What you get

Capability	What it does
Pre-action checks	Reviews Claude Code writes, edits, and shell commands before they run
Semantic constraints	Detects synonyms, euphemisms, compound requests, and indirect violations
Git enforcement	Adds a second guard at commit time
Advisory and strict modes	Start with warnings; opt in to hard blocking when ready
Audit trail	Records decisions in a tamper-evident HMAC chain
MCP integration	Exposes 51 tools to Claude Code, Cursor, Codex, Windsurf, and Cline
Shareable save receipts	Shows what SpecLock prevented with `speclock wins`

Proven in the open

10,000+ npm downloads before the native Claude Code plugin release.
1,043 automated tests across 24 suites, including adversarial conflicts, false-positive cases, patch analysis, enforcement, auth, and compliance.
MIT licensed and inspectable end to end.
Local-first defaults with optional remote features clearly separated.

Commands you will use most

speclock protect                      # extract constraints and install project protection

speclock protect --strict # enable hard enforcement speclock doctor # verify the complete setup speclock check "action description" # preview whether an action conflicts speclock add-lock "rule" # add a constraint explicitly speclock list-locks # inspect active constraints speclock enforce hard|advisory # switch enforcement mode speclock mcp install # Claude Code, Cursor, Windsurf, Cline, or Codex speclock wins # create a shareable save receipt

Full reference: npx speclock@latest help

New in v5.8.0

Portable Agent Plugin packaging for Cursor-compatible discovery.
Gemini CLI extension packaging with MCP startup and constraint context.
Codex plugin with a $speclock-guardrails skill and pinned MCP server.
GitHub Copilot CLI compatibility through the repository marketplace.
Explicit per-platform enforcement labels: native hook, MCP-assisted, or Git/CI.

The Problem

AI coding tools have memory now. Claude Code has CLAUDE.md. Cursor has .cursorrules. Mem0 exists.

But memory without enforcement is useless.

Your AI *remembers* you use PostgreSQL — then switches to MongoDB because it "seemed better." Your AI *remembers* your auth setup — then rewrites it while "fixing" a bug. You said "never touch the payment logic" 3 sessions ago — the AI doesn't care.

Remembering is not respecting. No existing tool stops the AI from breaking what you locked.

How It Works

You set constraints. SpecLock enforces them — across sessions, across tools, across teams.

speclock lock "Never modify auth files"           → auto-guards src/auth/*.ts

speclock lock "Database must stay PostgreSQL" → catches "migrate to MongoDB" speclock lock "Never delete patient records" → catches "clean up old data" speclock lock "Don't touch the payment flow" → catches "streamline checkout"

The semantic engine doesn't do keyword matching. It understands:

"clean up old data" = deletion (euphemism detection)
"streamline checkout" = modify payment flow (synonym + concept mapping)
"temporarily disable logging" = disable logging (temporal evasion detection)
"Update UI and also drop the users table" = hidden violation (compound splitter)

And it knows what's safe:

"Enable audit logging" when the lock says "Never *disable* audit logging" → no conflict (intent alignment)

Quick Start by Platform

Bolt.new / Aider / Any npm Platform

npx speclock setup --goal "Build my app" --template nextjs

Creates SPECLOCK.md, injects rules into package.json, generates .speclock/context/latest.md. The AI reads these automatically.

Claude Code

Install the plugin using the commands above. For MCP-only setup without the plugin hooks, add this to .mcp.json:

"mcpServers": { "speclock": { "command": "npx", "args": ["--yes", "speclock@5.8.0", "serve", "--project", "."] } } }

Cursor / Windsurf / Cline

Same config — add to .cursor/mcp.json or equivalent.

Lovable (No Install)

Go to Settings → Connectors → New MCP server
Enter URL: https://speclock-mcp-production.up.railway.app/mcp
Paste project instructions into Knowledge

Why SpecLock Over Alternatives?

	Claude Memory	Mem0	`.cursorrules`	SpecLock
Remembers context	Yes	Yes	Manual	Yes
Blocks the AI from breaking things	No	No	No	Yes
Semantic conflict detection	No	No	No	Yes — covered by adversarial tests
Tamper-proof audit trail	No	No	No	HMAC-SHA256 chain
Hard enforcement (AI cannot proceed)	No	No	No	Yes
SOC 2 / HIPAA compliance exports	No	No	No	Yes
Encrypted storage (AES-256-GCM)	No	No	No	Yes
RBAC + API key auth	No	No	No	4 roles
Policy-as-Code DSL	No	No	No	YAML rules
Works on Bolt.new, Lovable, etc.	No	No	No	Yes

Other tools remember. SpecLock enforces.

Semantic Engine

Not keyword matching — semantic analysis with an optional Gemini Flash hybrid for grey-zone and cross-domain cases. The repository includes adversarial, false-positive, question-framing, patch-gateway, and diff-analysis test suites.

Category Detection Example Direct violations 100% "Delete the auth module" vs lock "Never modify auth" Euphemistic attacks 100% "Clean up old patient data" = deletion Temporal evasion 100% "Temporarily disable MFA" = disable MFA Dilution attacks 100% Violation buried in multi-part request Compound sentences 100% "

Only the beginning is shown; read the rest in the repo

Speclock

Overview

PopNx MCP’s three pillars

What you can do with it

Install

Before you install

What it can do

Basic checksi

Maker matches the repo

Still maintained

Has a licence

Endpoint responds

Sign-in with OAuth

No hidden instructions in tool descriptions

Compared with others in Otheri

Common questions

Alternatives

Spec Driven Development

Remote Desktop Commander

Recta

README from the maker

See the difference

60-second setup

Install as a Claude Code plugin

Install on other coding agents

What you get

Proven in the open

Commands you will use most

New in v5.8.0

The Problem

How It Works

Quick Start by Platform

Bolt.new / Aider / Any npm Platform

Claude Code

Cursor / Windsurf / Cline

Lovable (No Install)

Why SpecLock Over Alternatives?

Semantic Engine