endor-policy

Automate security policy enforcement across Endor Labs development workflows.

2|Updated Feb 4, 2026

Search Tags:#MCP #compliance #policy #security-policy #block-pr #endorctl

Ready to run

npx skills add https://github.com/Endor-Solutions-Architecture/endor-solutions-claude-skills --skill endor-policy

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: endor-policy
Source: https://github.com/Endor-Solutions-Architecture/endor-solutions-claude-skills/tree/main/.claude/skills/endor-policy
Command: npx skills add https://github.com/Endor-Solutions-Architecture/endor-solutions-claude-skills --skill endor-policy

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Create, view, and manage security policies for automated enforcement across software projects, enabling governance rules that block risky changes and ensure compliance.

Core Features & Use Cases

Policy Types: FindingPolicy, ExceptionPolicy, and ActionPolicy for automated enforcement.
Templates: block-critical-reachable, license-compliance, sast-required, no-secrets, sbom-required, dependency-age, max-severity.
Workflow: List existing policies, create new policies, create exceptions, and guide policy creation for collaborators.
Use Case: Block PRs with critical vulnerabilities or licenses that violate constraints; require SAST or SBOM in release pipelines.

Quick Start

Run Endor Labs MCP commands to view or create policies for governance. For example:

List policies: npx -y endorctl api list --resource FindingPolicy -n $ENDOR_NAMESPACE 2>/dev/null
Create policy: npx -y endorctl api create --resource FindingPolicy -n $ENDOR_NAMESPACE 2>/dev/null --data '{ "meta": { "name": "example", "description": "example policy" } }'

Frequently Asked Questions about endor-policy

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I automate security policy enforcement to block pull requests?▼

Automate security policy enforcement by creating FindingPolicy and ActionPolicy rules in Endor Labs to block PRs containing critical vulnerabilities or license violations. You configure these policies to automatically govern development workflows.

How do I set up an exception for a blocked pull request?▼

Set up a pull request exception by creating an ExceptionPolicy using the Endor Labs MCP server. This allows you to override specific governance rules and unblock PRs when justified.

Do I need an Endor MCP server and Node.js to enforce compliance policies?▼

Yes, enforcing compliance policies requires an Endor MCP server, the endorctl CLI, and a Node.js 18+ environment. These components provide the necessary runtime and API access to manage security governance.

What security policy templates are available for CI/CD pipelines?▼

Available security policy templates for CI/CD pipelines include block-critical-reachable, license-compliance, sast-required, no-secrets, sbom-required, dependency-age, and max-severity to enforce governance rules.

How do I list existing security policies in my namespace?▼

List existing security policies by running the endorctl api list command with the FindingPolicy resource and your Endor namespace. This queries the MCP environment to return all active governance rules.

Can I require SAST or SBOM generation in release pipelines using policy templates?▼

Yes, you can require SAST or SBOM generation in release pipelines by applying the sast-required or sbom-required policy templates. These ActionPolicies enforce compliance checks before software releases proceed.