AgentStack
Browse Sign in
Browse Why AgentStack Sell Docs
Sign in
MCP verified MIT Self-run

Ordo

mcp-ordo-engine-ordo · by Ordo-Engine

Deterministic guardrails for AI agents — the LLM proposes, your rules dispose. A sub-microsecond, JIT-compiled rule engine in Rust, with a visual Studio.

— No reviews yet
0 installs
5 views
0.0% view→install

Install

$ agentstack add mcp-ordo-engine-ordo

✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.

Security review

✓ Passed

No issues found. Passed automated security review. · v0.1.0 How review works →

  • ✓ Prompt-injection patterns
  • ✓ Secret / credential exfiltration
  • ✓ Dangerous shell & filesystem operations
  • ✓ Untrusted network calls
  • ✓ Known-malicious package signatures

What it can access

  • ● Network access Used
  • ✓ Filesystem access No
  • ✓ Shell / process execution No
  • ✓ Environment & secrets No
  • ✓ Dynamic code execution No

From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.

View the full security report →

Verified badge

Passed review? Show it. Paste this badge into your README, it links to the public security report.

AgentStack Verified badge Links to your public security report.
[![AgentStack Verified](https://agentstack.voostack.com/badges/verified.svg)](https://agentstack.voostack.com/security/report/mcp-ordo-engine-ordo)

Reliability & compatibility

✓ Security review passed
0 installs to date
— no reviews yet
● 2mo ago

Declared compatibility

Claude CodeClaude DesktopCursorWindsurf

Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.

Preview Execution monitoring

We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.

How agent discovery & health will work →
Are you the author of Ordo? Claim this listing to set pricing, connect Stripe payouts, and keep 70% of every sale.
Sign up to claim

About

Ordo

The deterministic decision layer for AI agents — the LLM proposes, your rules dispose.

A sub-microsecond, JIT-compiled rule engine in Rust. Give your AI agent guardrails you can test.


An LLM is non-deterministic: ask it the same thing twice and you can get two answers. That's fine for drafting prose and dangerous the moment an agent touches money, data, or a shell. Ordo is the layer that decides — allow / deny / ask — deterministically, from rules that are versioned, tested, and auditable. The agent proposes the action; Ordo disposes.

Guard your coding agent in 5 minutes

The sharpest place to feel this today: put deterministic guardrails on a coding agent. ordo guard hooks into Claude Code, Codex CLI, and Cursor and runs every tool call through the same local policy.

npx @ordo-engine/cli guard init                        # Claude Code (default)
npx @ordo-engine/cli guard init --agent codex,cursor    # …and/or Codex CLI, Cursor

Now your agent is gated. When it reaches for something destructive, Ordo stops it — with a reason:

$ (agent tries) rm -rf ./build
⛔ Denied by policy: Destructive shell command blocked by policy [policy@1.0.0 · DENY]

The policy is a normal Ordo project in .ordo-guard/ — so your guardrails have a test suite:

ordo guard test      # ✔ blocks rm -rf  ✔ asks before git push  ✔ allows read-only git …
ordo guard log       # every decision, timestamped and auditable

Edit .ordo-guard/rulesets/policy.json in plain expressions (tool == 'Bash' && command contains 'terraform destroy'), add a test, ship. → Guard docs


The same engine, everywhere decisions happen

Guardrails are one use of one engine. The same rules — sub-microsecond, JIT-compiled — run as an embedded call, an HTTP/gRPC service, or in the browser via WASM, and a full platform + visual Studio lets business teams author and govern them without touching code.

Engine — sub-microsecond rule execution, JIT-compiled (Cranelift), runs everywhere (HTTP · gRPC · WASM · CLI). Studio — visual flow editor, decision-table editor, trace-driven testing, version history. Platform — org workspace, project hub, server fleet, release center, testing and governance.


Why Ordo?

| | Ordo | OPA | Drools | json-rules-engine | |---|---|---|---|---| | JIT compilation | ✅ Cranelift | ❌ | ❌ | ❌ | | Testable agent guardrails | ✅ ordo guard | ⚠️ policy-only | ❌ | ❌ | | Authoring model | Visual flow + decision table | Rego policy code | DRL / DMN + Business Central | JSON rule DSL | | Built-in web workbench | ✅ Studio | Playground / APIs | ✅ Business Central | ❌ | | Browser / Wasm target | ✅ Native | ✅ Policy-to-Wasm | ❌ | ✅ Browser JS | | Deployment | Single binary or hosted platform | Binary, sidecar, or service | JVM app, KIE Server, Business Central | JS library for Node/browser |

Comparison focuses on first-party documented authoring and deployment capabilities rather than cross-project benchmark claims.


More ways to run it

Author rules as files (local, offline)

npx @ordo-engine/cli init my-rules && cd my-rules
ordo validate && ordo test           # sub-second, no network
ordo trace loan-approval --input '{"amount":5000}'

Try Studio (visual, 5 minutes)

docker compose up          # platform + engine + studio
# open http://localhost:5173

Or use the hosted Live Playground — no install needed.

Engine as a service

docker run -d -p 8080:8080 ghcr.io/pama-lee/ordo:latest

# Create a rule
curl -X POST http://localhost:8080/api/v1/rulesets \
  -H "Content-Type: application/json" \
  -d @examples/discount.json

# Execute
curl -X POST http://localhost:8080/api/v1/rulesets/discount/execute \
  -d '{"input": {"user": {"vip": true}}}'
# → {"code": "VIP", "message": "20% discount"}

Embed the editor

npm install @ordo-engine/editor-vue    # Vue 3
npm install @ordo-engine/editor-react  # React

Call from your app

go get github.com/pama-lee/ordo-go     # Go
pip install ordo-sdk                    # Python
# Java (Maven): com.ordoengine:ordo-sdk-java

Platform Features

Rule Authoring

  • Flow editor — drag-and-drop decision trees with live WASM execution
  • Decision table — spreadsheet-style multi-condition rules
  • Templates — ship pre-built rule sets (e.g. ecommerce-coupon) that teams clone in one click

Platform Workspace

  • Organization and project hub — manage orgs, projects, members, roles, and project workspaces from one dashboard
  • Server fleet — register connected Ordo servers, group them by environment, and target release rollouts by instance
  • Release center — create release requests, track staged rollouts, approvals, retries, and rollback history

Governance

  • Fact catalog — register every input field with type, source, latency, and null policy
  • Decision contracts — typed input/output schemas per ruleset; generate test skeletons automatically
  • Version history — full snapshot log per ruleset; roll back with one click
  • Test and diagnostics — run platform-local draft tests, inspect expected/actual diffs, replay execution paths, and review decision-table hits

Engine

  • 1.63 µs interpreter · 50–80 ns JIT (Cranelift) · 54k QPS HTTP single-thread
  • Multi-tenancy, WAL crash recovery, hot reload, NATS JetStream sync
  • Data Filter API — push rule logic into SQL / MongoDB $match / JSON predicates
  • Compiled .ordo binary format with ED25519 signature for rule protection

Project Structure

ordo/
├── crates/
│   ├── ordo-core/       # Rule engine + JIT compiler
│   ├── ordo-server/     # HTTP/gRPC API server
│   ├── ordo-platform/   # Org/project/template/testing management layer
│   ├── ordo-cli/        # CLI — guard, init, validate, test, trace, mcp
│   ├── ordo-wasm/       # WebAssembly bindings
│   ├── ordo-proto/      # gRPC definitions
│   └── ordo-derive/     # TypedContext derive macro
├── ordo-editor/
│   ├── packages/        # @ordo-engine/editor-{core,vue,react,wasm}
│   └── apps/
│       ├── studio/      # Platform Studio (Vue 3 + TDesign)
│       ├── playground/  # Live demo
│       └── docs/        # VitePress documentation
├── sdk/                 # Official Go / Python / Java client SDKs
└── scripts/             # sync-version.sh, benchmarks

License

MIT — see [LICENSE](LICENSE).

Built with Rust · Discord · Docs

Source & license

This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code.

Install and usage instructions live in the source repository linked above.

Reviews

No reviews yet, be the first.

Versions

  • v0.1.0 Imported from the upstream source.