Spec Driven Development
MCP Server that facilitates spec-driven development workflows, not just Vibe Coding.
Description from the maker (original English)
Deterministic decision layer for autonomous agents: reproducible PROCEED/REVIEW/SKIP verdicts.
These three are never merged into one score: opinions, measurements and popularity are different things.
We have not written a plain-language summary for this one yet. Below are the facts we read from the registry.
Pick the AI app you use, then copy the settings.
X-API-KeyValues marked secret are keys to your account. Never share them or paste them into a chat.
You need
Which app do you use?
Pick your app above. We remember it, so next time the button says “Install in …”.
This address needs a key in a request header, which the add-connector menu cannot set. Use Claude Code, Cursor or VS Code instead.
Run this in your terminal
claude mcp add --transport http quesen https://web-production-3df26.up.railway.app/mcp --header 'X-API-Key: your-value'Fill in the empty values before running it.
Paste into .cursor/mcp.json in your project, or ~/.cursor/mcp.json
{
"mcpServers": {
"quesen": {
"url": "https://web-production-3df26.up.railway.app/mcp",
"headers": {
"X-API-Key": "your-value"
}
}
}
}Your browser asks to open the app, then the app shows the settings and asks you to confirm. Key values are left empty for you to fill in.
Paste into .vscode/mcp.json in your project
{
"servers": {
"quesen": {
"type": "http",
"url": "https://web-production-3df26.up.railway.app/mcp",
"headers": {
"X-API-Key": "your-value"
}
}
}
}Your browser asks to open the app, then the app shows the settings and asks you to confirm. Key values are left empty for you to fill in.
This address needs a key in a request header, which the add-connector menu cannot set. Use Claude Code, Cursor or VS Code instead.
Your choice stays on this device in a cookie; no account needed.
X-API-Key secret HTTP headerThese settings are generated from the maker’s registry entry. If the README says otherwise, follow the README.
We have not read this server’s tool list yet; we check endpoints in rotation.
We check information anyone can see; we have not read the code. Checks that do not apply are left out of the count. · Checked Nov 7, 2026
The registry name was verified with the GitHub account Shxnque, which owns the repo
We have not read this repo from GitHub yet
We have not read this repo from GitHub yet
Not checked yet; we check endpoints in rotation
Not checked yet; we check endpoints in rotation
Not checked yet; we read the tool list when we check the endpoint
Compared with every active server in this category in the registry. Stars count only when the publisher owns the repo.
It passed 1 of 1 applicable basic checks. We have not read the code. Before adding a key or token, see what access the server asks for and use a key with only the permissions you need.
You need to fill in: X-API-Key
It runs in the maker’s cloud. Connect over the internet with nothing to install, but what you send passes through the maker’s servers.
The GitHub repo last changed –, and the latest version (1.10.2) reached the registry 2 months ago.
Apps that support MCP, such as Claude Desktop, Claude Code, Cursor and VS Code. It connects by URL, so apps that accept remote MCP servers work too, such as ChatGPT in developer mode.
In the same category: Spec Driven Development, Remote Desktop Commander, TF Rooms
Servers in the same category from other makers, sorted by stars.
Reading a card:★ GitHub starsiThree pillars: reviews · checks · usageiUpdated = latest version published to the registryi
MCP Server that facilitates spec-driven development workflows, not just Vibe Coding.
Remote Desktop Commander: use files, terminal and processes on your own computers from any AI app.
Live room availability, rates and stay quotes for 12 New Leaf motels in Twin Falls, Idaho.
Copied from the maker’s repo as written. PopNx MCP has not reviewed or endorsed it. HTML, images and scripts are removed. Links lead off this site.
Quesen is the deterministic decision-and-receipt core for agent actions —
a typed security context in, a
PASS / REVIEW / BLOCK / SKIPverdict out, with
machine reason codes and a receipt you can re-run byte-for-byte and prove.
No model inference is in the scoring path, so the same input always yields the
same verdict. It is built to sit behind injection detection, on top of
agent identity, and to bill per decision (ASP/402).
Unlike log-based governance layers whose audit trail is *their word, kept by
them*, a Quesen receipt is independently verifiable by the caller —
recomputable, and (engine signing enabled) Ed25519-signed. See
docs/architecture-gap-closers.mdand
client-side enforcement + receipt verification in
quesen-sdk≥ 0.5.0.
Production engine signing is live — verify a real signed receipt yourself in
docs/verify-live-receipt.md(no trust in Senueren required).
This repository is the public developer portal. It contains only
documentation, integration guides, examples, registry manifests, and
reference links. No engine source code lives here. Quesen's engine
implementation is sovereign, non-public infrastructure.
Live production
| Surface | URL |
|---|---|
| REST API | https://api.senueren.co.za |
| MCP (Streamable HTTP) | https://api.senueren.co.za/mcp |
| OpenAPI 3.1 | https://api.senueren.co.za/openapi.json |
| Swagger UI | https://api.senueren.co.za/docs |
| Health | https://api.senueren.co.za/health |
| Version | https://api.senueren.co.za/version |
Fastest path — no install, no signup, no card. Self-serve a free sandbox key and run a real deterministic decision against production. Full guide: docs/QUICKSTART.md · try it in the browser at senueren.co.za/try.
# 1 · get a free sandbox key
curl -X POST https://api.senueren.co.za/sandbox/keys
curl -X POST https://api.senueren.co.za/validate \ -H "X-API-Key: sk_sandbox_..." \ -H "Content-Type: application/json" \ -d '{"domain_age_days": 1, "engagement_ratio": 0.95, "scam_keyword_count": 4}'
Published. The SDKs are live on PyPI and npm (
quesen-sdk0.5.0/ npm0.5.0;
quesen-langchain,quesen-crewai,quesen-autogen0.3.0). The
base_url+X-API-Key(including the sandbox key above) are identical across all SDKs.
pip install quesen-sdk # PyPI: https://pypi.org/project/quesen-sdk/
from quesen_sdk import QuesenClient
q = QuesenClient(base_url="https://api.senueren.co.za", api_key="YOUR_KEY") # a sandbox key from /sandbox/keys works here
verdict = q.validate(domain_age_days=1, engagement_ratio=0.95, scam_keyword_count=4) if verdict.decision == "SKIP": return # respect the deterministic answer
npm i quesen-sdk # npm: https://www.npmjs.com/package/quesen-sdk
import { QuesenClient } from "quesen-sdk";
const q = new QuesenClient({ baseUrl: "https://api.senueren.co.za", apiKey: process.env.QUESEN_API_KEY, });
const verdict = await q.validate({ domain_age_days: 1, engagement_ratio: 0.95, scam_keyword_count: 4, });
| Framework | Package | Repository |
|---|---|---|
| LangChain / LangGraph | quesen-langchain | Shxnque/quesen-langchain |
| CrewAI | quesen-crewai | Shxnque/quesen-crewai |
| AutoGen v0.4+ | quesen-autogen | Shxnque/quesen-autogen |
| Python (core) | quesen-sdk | Shxnque/quesen-sdk-py |
| JavaScript / TypeScript | quesen-sdk (npm) | Shxnque/quesen-sdk-js |
Quesen exposes five MCP tools over the production endpoint. See docs/mcp.md for the client-config snippet.
Autonomous agents make more decisions per second than any human oversight can audit. When those decisions involve capital — launching a token, opening a position, executing a trade, greenlighting a smart-contract deployment — the marginal cost of a bad decision is fatal.
Quesen answers exactly one question:
*Should the calling agent proceed with this action?*
Inputs are typed. Outputs are one of PROCEED, REVIEW, SKIP, always with a risk_score in [0.0, 1.0], a confidence in [0.0, 1.0], and the exact conflict rules that fired. Same inputs → same output. Every time. Every response embeds engine_version, weights, and thresholds. Fully reproducible. Fully auditable.
Published receipts are independently reproducible from this repo alone — no hosted service or private engine required:
python3 verify/verify_receipts.py # offline, stdlib-only
python3 verify/verify_receipts.py --live # also cross-check the live engine
All six UCP #724 vectors show a byte-for-byte three-way match between the published fixture, the public reference, and the live engine (verify/README.md, verify/three_way_match.json). That doc also states honestly where independent verification stops today (the production ruleset commit_sha is not publicly resolvable; receipts are not yet cryptographically issuer-signed).
The egress/authority decision subset — the part security integrators gate on — is now independently *verdict*-replayable offline too, with zero network:
python3 evaluation/conformance/verify_conformance.py # offline; recomputes decision+reasons+hash
Six cases (OWASP-agentic + LoopX prepared-Effect PASS/REVIEW/BLOCK) recompute byte-for-byte from the public reference evaluator, plus a prod-1→prod-2 integrity-flip check — no signup, key, or hosted call (evaluation/conformance/README.md).
https://api.senueren.co.zaGET /health returns {"status":"ok","engine_version":"1.10.0"}GET /version returns full engine + billing + on-chain flags (ASP/1.0)Quesen is discoverable via Model Context Protocol registries and the standard agent-directory ecosystem. See docs/registries.md for the current state of each submission. Manifests:
smithery.yaml — Smithery.ai (canonical)mcp.json — MCP.so / generic MCP client (canonical).well-known/ai-plugin.json — OpenAI plugin manifest / .well-known/ai-plugin.json autodiscoveryllms.txt — machine-readable summary for LLM crawlersThis is a documentation-only repository. Engine PRs cannot be accepted here. If you have integration-specific feedback, please open an issue or read CONTRIBUTING.md.
SDK contributions belong in the corresponding public SDK repository:
Security issues: please read SECURITY.md before filing publicly.
Follow build updates, agent-governance notes, and Quesen releases on X: [@SenuerenGroup](https://x.com/SenuerenGroup) · web: senueren.co.za · senueren.co.za/quesen.
If a Quesen integration or a merged contribution helped your project, a follow or a note at @SenuerenGroup is always appreciated.
MIT. See LICENSE.