Event Taxonomy Governance Agent

Name: Event Taxonomy Governance Agent
Availability: InStock
Author: Kata Team

Reviews tracking changes against your plan while a rename is still just a rename.

Software Development E-commerce Documentation & Knowledge Customer Insights & Segmentation Code Review & PR Automation @katateam

Before you connect: what this agent would do

A preview derived from this agent’s definition — not a live run. Nothing runs and no key is sent until you connect. FindAgent runs it on the hosted connection.

Tools it can use (5)

get_tracking_planRead-only
Fetch the tracking plan file that defines naming rules, properties, types, and owners.
Reaches: api.github.com
Uses your GitHub token.
get_pull_requestRead-only
Fetch a pull request's title, body, and branches to establish what the change is for.
Reaches: api.github.com
Uses your GitHub token.
get_pull_request_diffRead-only
Fetch the unified diff to find every tracking call the change touches.
Reaches: api.github.com
Uses your GitHub token.
search_existing_eventsRead-only
Search the codebase for an event name, to catch a new event duplicating one that already exists.
Reaches: api.github.com
Uses your GitHub token.
post_review_commentCan change data
Post the taxonomy review as a comment on the pull request. Never approves or blocks.
Reaches: api.github.com
Uses your GitHub token.

Credentials it will ask for (1)

GitHub token
Only ever sent to: api.github.com

Safety rails that guard it

Every result is scanned for leaked secrets and prompt-injection before it reaches you — a check no agent can turn off.
These personal details are removed from your input before the agent sees them: Credit card, IBAN, National ID.
A request larger than 200,000 characters is rejected before it runs.
get_pull_requestRate limited to 200/hour.Safe to retry automatically if a run is interrupted.
get_tracking_planRate limited to 200/hour.Safe to retry automatically if a run is interrupted.
post_review_commentSensitive — it is flagged and needs an explicit confirmation before it runs.Rate limited to 40/hour.Runs only after get_tracking_plan has run first.
get_pull_request_diffRate limited to 200/hour.Safe to retry automatically if a run is interrupted.
search_existing_eventsRate limited to 300/hour.Safe to retry automatically if a run is interrupted.

How FindAgent keeps agents safe

Run locally

This MCP server runs on your own machine — FindAgent only points you at it. Run the command below, then add it to your MCP client. Nothing is hosted or proxied on our side.

terminal

npx -y @findagent/mcp run

Add it to your MCP client

Paste this into your client config (e.g. claude_desktop_config.json or a Cursor mcp.json), then restart the client.

mcp client config

{
  "mcpServers": {
    "event-taxonomy-governance-agent": {
      "command": "npx",
      "args": [
        "-y",
        "@findagent/mcp",
        "run"
      ]
    }
  }
}

What you'll need — and where to get it

This agent will ask you for the following. You enter them when you connect — they're encrypted and never shared with the creator.

GitHub token
A fine-grained personal access token with Pull requests: read and write, Contents: read, and Metadata: read. It never edits code or the tracking plan, so no code write access is needed.
Create a personal access token in GitHub (Settings → Developer settings → Personal access tokens) scoped to what the agent needs.
Paste the value as a single line.
Only sent to: api.github.com

Requirements

This server requires authentication — see the description for how to get a key.

Get this agent

Free

Add the hosted gateway to Claude, ChatGPT, Cursor or any MCP client. Nothing installs on your machine.

https://mcp.findagent.cloud/agents/event-taxonomy-governance-agent

View setup

What we can prove

Ships no executable code. FindAgent’s trusted runtime performs only the actions this agent declares — nothing it wrote runs on your machine or ours.
Any key you connect is bound to its destination — it is only ever sent to api.github.com, and is dropped if a request tries to redirect it elsewhere.
Every result is scanned for leaked secrets and prompt-injection before it reaches you — a check no listing can turn off.
Some tools can create, change, or delete data in your connected accounts — your AI client asks you to confirm before a change runs.
Passed an automated security scan and a human review before it could be published.

These are facts derived from the manifest, not a score and not a badge.

Agent details