Speclock

Name: Speclock
Author: sgroy10

@sgroy10

关于 Speclock

AI Constraint Engine — enforces CLAUDE.md, .cursorrules, AGENTS.md rules as laws. 51 MCP tools, 991 tests. Official MCP Registry. npx speclock protect

#constraint-engine #code-quality #developer-tools #claude-code #cursor #mcp #security #pre-commit

基本信息

分类

其他

许可证

MIT

运行时

node

传输方式

stdio

发布者

sgroy10

提交者

Sandeep Roy

配置

使用下面的配置,将此服务器添加到你的 MCP 客户端。

{
  "mcpServers": {
    "speclock": {
      "command": "npx",
      "args": [
        "-y",
        "speclock",
        "serve"
      ]
    }
  }
}

工具

未检测到工具

工具是从 README 中自动提取的。维护者可以在 ## Tools 标题下列出工具,即可填充这部分内容。

概览

What is Speclock?

Speclock is an AI constraint engine that enforces project rules across every AI coding session. It stops AI assistants from breaking constraints you have defined, such as "never touch the auth system" or "database must stay PostgreSQL."

How to use Speclock?

Install in your project with npx speclock protect, wire up MCP for supported clients using speclock mcp install <client> (e.g., claude-code, cursor, windsurf, cline, codex), then verify with speclock doctor. Default mode is advisory (warnings only); hard enforcement is enabled with --strict or SPECLOCK_STRICT=1.

Key features of Speclock

Semantic conflict detection (100/100 score, 0% false positives)
Hard enforcement mode that blocks AI from proceeding
Pre‑commit hooks and MCP integration for all major AI tools
Tamper‑proof audit trail with HMAC‑SHA256 chain
SOC 2 / HIPAA compliance exports
Encrypted storage (AES‑256‑GCM) and RBAC with API key auth
Policy‑as‑Code DSL using YAML rules

Use cases of Speclock

Prevent AI from modifying auth, payment, or patient‑record files
Enforce database technology choices across sessions (e.g., PostgreSQL only)
Block deletion or disabling of critical systems (e.g., patient data, audit logging)
Protect regulatory‑sensitive workflows that require SOC 2 or HIPAA compliance
Extend guardrails to no‑install platforms like Lovable or Bolt.new

FAQ from Speclock

How is Speclock different from Claude Memory, Mem0, or .cursorrules?

Those tools only remember context but do not block the AI from violating constraints. Speclock enforces rules with semantic detection, hard enforcement, and a tamper‑proof audit trail.

What enforcement modes does Speclock offer?

Advisory mode (default) issues warnings letting the AI decide; hard mode (--strict) blocks the AI from proceeding when a violation is detected.

Does Speclock work with all AI coding tools?

Speclock supports Claude Code, Cursor, Windsurf, Cline, Codex, and also works on npm-based platforms like Bolt.new, Aider, and Lovable (via URL‑based MCP).

How does the semantic engine work?

It uses Gemini Flash hybrid for universal domain coverage, understanding synonyms, euphemisms, temporal evasion, and compound sentences — not just keyword matching.

What are the installation requirements?

Node.js and npm are required. Install with npx speclock protect or add the MCP configuration manually. No persistent backend is needed; data stays local unless you opt into the public Saves Wall.