JidoSeal

jidoseal-mcp

Check a folder of markdown notes against Open Knowledge Format (OKF) v0.2 — from inside Claude Code, Claude Desktop, Cursor, GitHub Copilot, OpenAI Codex, Gemini CLI, Zed, Cline, Continue, JetBrains AI Assistant or a local model, on your own machine.

Pick a folder, scan it. jidoseal-mcp is a local Model Context Protocol server that reads the YAML frontmatter of every *.md file under a folder, reports which tier the knowledge base reaches (Bronze / Silver / Gold), and lists — per file — the exact frontmatter fields missing for the next tier. The scan sends nothing over the network: no file, no file name, no file content. That is JidoSeal's own claim about its engine; below is how to check it.

pip install jidoseal-mcp

claude mcp add jidoseal -- jidoseal-mcp # Claude Code; every other tool is below

Then ask your assistant: *"Scan ~/notes with JidoSeal and tell me what's missing for Silver."*

New: [State of OKF, October 2026](https://github.com/Jidoseal/jidoseal-mcp/blob/main/reports/state-of-okf/2026-10/README.md). All 900 bundles listed on BundleDex, checked against OKF v0.2 on 2026-10-22: conformance, which of the two v0.2 texts each bundle's timestamps follow, trust fields, and a leaderboard, with the method and a page per bundle.

Try it in 60 seconds

Free and local; the scan engine is proprietary; JidoSeal also sells optional certificates.

Pick a folder, scan it. Watch the 76-second run first: Check an OKF v0.2 folder in 60 seconds (free, local). To try it on the three-file sample in this repository:

git clone --depth 1 https://github.com/Jidoseal/jidoseal-mcp && cd jidoseal-mcp/examples/tiers/mixed

pip install jidoseal-mcp claude mcp add jidoseal -- jidoseal-mcp # Claude Code; Cursor, Copilot, Codex, Gemini CLI, Zed and local models are below claude

(claude mcp add registers the server for the folder you run it in, so run it there, or add -s user.) Then ask: *"Scan this folder with JidoSeal. Which tier does it reach, and what does each file need for Silver?"*

The jidoseal_scan result it gets back, from a real run of jidoseal-mcp 0.1.4 (engine 0.1.4) on that folder on 2026-10-22 (UTC), trimmed to the summary and the Silver gaps:

{

"corpus": { "file_count": 3, "tier": "none", "coverage": { "bronze": 66.7, "silver": 33.3, "gold": 33.3 } }, "files": [ { "name": "expenses.md", "tier": "bronze", "present": [ "type", "title" ], "missing": { "silver": [ { "field": "description", "fix": "AUTO" }, { "field": "timestamp", "fix": "AUTO" }, { "field": "owner", "fix": "NEEDS-CLIENT" } ] } }, // gold gaps trimmed { "name": "leave-policy.md", "tier": "gold", "missing": { "silver": [], "gold": [] } }, { "name": "notes.md", "tier": "none", "present": [], "missing": { "silver": [ { "field": "title", "fix": "AUTO" }, { "field": "description", "fix": "AUTO" }, { "field": "timestamp", "fix": "AUTO" }, { "field": "owner", "fix": "NEEDS-CLIENT" } ], // gold gaps trimmed "bronze": [ { "field": "type", "fix": "AUTO", "value": "note", "confidence": "MEDIUM", "inferred": true } ] } } ], "skipped": [], "certified_eligible": false, "score": 44 // … plus audit id, rubric, file hashes, Merkle root and the paths of the two files written under .jidoseal/ }

The folder reaches no tier yet because notes.md has no frontmatter: a corpus's tier is that of its weakest file. AUTO marks a value JidoSeal can propose; NEEDS-CLIENT marks one only you can answer (here, owner).

Independent. OKF is an open specification from Google Cloud. JidoSeal is not affiliated with, sponsored by, or endorsed by Google or ISO. ISO names no fields: the Bronze/Silver/Gold tiers and their fields are defined by JidoSeal, as one way of evidencing selected ISO clauses. A JidoSeal tier or certificate is not an ISO certification.

Side effects and data, in brief

• Reads: the *.md files under the folder you give it (hidden files and folders are skipped), plus /.jidoseal/config.yaml if present. The server refuses a folder that contains a symlink to a directory or to a file outside the folder.
• Writes: /.jidoseal/manifest.json (replaced on each scan) and /.jidoseal/progress.ndjson (appended to). Nothing else; your notes are not modified.
• Trust and changes tools: jidoseal_trust and jidoseal_changes read only and write nothing. jidoseal_changes runs the local git program, with transports disabled, to read the folder's history.
• Network, scan and offer: none, by JidoSeal's own claim about its proprietary engine, not independently audited. The tests below check it on every change.
• Network, checkout (optional, paid): jidoseal_start_checkout runs only with confirm: true. It sends eight fields to jidoseal.com: company, name and email as typed, the tier, a 0–100 score, the corpus's Merkle root, the local scan's id, and one flag saying which Bronze price applies. jidoseal.com copies them into the Stripe Checkout session it creates (the email as the session's customer email, all eight as session metadata), when the session is created, before any payment. No file contents, file names, per-file hashes or paths. No card data passes through this server.
• Engine: the scan engine is the separate jidoseal package, under a proprietary licence. It ships as plain Python source and is pinned here to one version (0.1.4), with its sha256 in ENGINE-SHA256SUMS and an SBOM in sbom.cdx.json. So "nothing leaves your machine" is JidoSeal's own claim: you can check it with the commands under What leaves your machine and the tests in tests/, but it has not been independently audited.

---

What it checks

The scan is deterministic — presence of populated frontmatter fields, no model calls, no scoring by opinion. A field counts only if it has real content (title: with nothing after it earns nothing).

A corpus's tier is the tier of its weakest file. Coverage is the share of files that reach each tier. The full field reference — accepted aliases, what counts as "populated", what is excluded — is in docs/tiers.md.

A minimal Gold-tier file:

---

type: policy title: Leave policy description: How leave accrues and how to request it. timestamp: 2026-09-01 owner: dept:people-ops status: stable review_policy: yearly reviewed_at: 2026-09-01 next_review_at: 2027-09-01

---

Worked examples for each tier, and a mixed folder, are in examples/tiers/.

Tools

Example jidoseal_scan result for examples/tiers/mixed (three files, one Gold, one Bronze, one with no frontmatter):

{

"corpus": { "file_count": 3, "tier": "none", "coverage": { "bronze": 66.7, "silver": 33.3, "gold": 33.3 } }, "score": 44, "certified_eligible": false, "files": [ { "name": "expenses.md", "tier": "bronze", "missing": { "silver": [ { "field": "description", "fix": "AUTO" }, { "field": "timestamp", "fix": "AUTO" }, { "field": "owner", "fix": "NEEDS-CLIENT" } ] } } // … ] }

frontmatter_ok: false on a file means its frontmatter block exists but does not parse; no field write can close its gaps until it is fixed by hand.

Trust before you rely on a document

Ask: *"Before you use ~/notes/policies/leave.md, check it with jidoseal_trust."* or, after an agent has edited your notes, *"Run jidoseal_changes on ~/notes: what did you change, and which verified documents did it leave unconfirmed?"* A jidoseal_trust answer for one file:

{

"verdict": "unverified", "reasons": [ "content changed at 2026-10-01T00:00:00Z, after its latest verification at 2026-06-25T09:00:00Z" ], "okf_conformant": true, "trust_tier": "human-reviewed", "status": "stable", "stale": false, "which_0_2": "2026-08-21" // … plus each timestamp as written and which v0.2 text it follows }

OKF v0.2 changed on 2026-08-21 without a version bump: stale_after, sources[].last_modified and usage_window went from bare dates to datetimes with a UTC offset. Both forms are accepted, and which_0_2 says which one a document uses.

Install and wire it into your tool

Requires Python 3.9+. pip install jidoseal-mcp also installs jidoseal (the scan engine and CLI, pinned to the tested version) and puts a jidoseal-mcp command on your PATH. No account and no API key. The scan itself needs no network — it runs the same offline.

Every tool below launches the same local command, jidoseal-mcp, over stdio. Only the place you write it down differs.

Claude Code