MCP over stdio

When to use stdio

Choose stdio for a local AI application that can launch a command and exchange MCP messages through standard input and output. There is no MCP network port to expose: the client owns the process lifecycle.

Start AIGP

Configure your MCP-aware client to launch this command from the AIGP repository:

uv run ai-governance-mcp --transport stdio

The command writes protocol messages to stdout. Do not add diagnostic output to stdout; use stderr for local process diagnostics.

Client configuration

Use this generic shape in a desktop client's MCP server configuration:

{
  "mcpServers": {
    "ai-governance": {
      "command": "uv",
      "args": ["run", "ai-governance-mcp", "--transport", "stdio"],
      "cwd": "/path/to/AIGP"
    }
  }
}

After the client starts the process, it initializes MCP, lists tools, and calls the same AIGP tool names used by the HTTP transports.

Identity and security

In Keycloak mode, the local stdio process uses its configured REST credential (a supplied token or the ai-governance-mcp client credentials flow). The resulting service-account subject is the actor evaluated by AIGP tenant membership and RBAC. For a remote user identity, use native Streamable HTTP instead.