MCP API Reference


OntoRamp exposes eleven tools across three MCP plugins: Knowledge Graph (governance and compliance search), Governance Evaluator (maturity gap analysis and document validation), and Projection Engine (governance assessment and domain-level findings). All tools are available via the MCP SSE transport. This page documents every tool's parameters and response shape.

Authentication

Every request requires an API key. Pass it as a query parameter on the SSE connection URL or in the Authorization header as a Bearer token.

# SSE connection (query parameter)
https://mcp.ontoramp.com/{plugin}/sse?api_key=YOUR_API_KEY

# HTTP header alternative
Authorization: Bearer YOUR_API_KEY

Replace {plugin} with one of: knowledge-graph, governance-evaluator, projection-engine.


Knowledge Graph

semantic_search

Search governance and compliance knowledge by meaning. Use for SOC 2 readiness research, ISO 27001 control mapping, architecture maturity analysis, and AI governance assessment.

PARAMETERS

query*
stringNatural language search query.
domain
stringFilter by governance domain (e.g. "governance", "security").
limit
numberMaximum results to return. Default 10, max 50.
threshold
numberMinimum similarity score (0–1). Default 0.3.

RESPONSE

{
  "results": [
    {
      "chunk_id": "uuid",
      "content": "...",
      "similarity": 0.87,
      "domain": "governance",
      "source_path": "...",
      "document_title": "..."
    }
  ],
  "total": 10,
  "query_embedding_ms": 42
}

keyword_search

Search for specific framework requirements, named controls, and regulatory terminology. Exact-match search across 10,800+ governance knowledge artifacts.

PARAMETERS

query*
stringSearch terms. Supports PostgreSQL tsquery operators (&, |, !).
domain
stringFilter by governance domain.
limit
numberMaximum results. Default 10, max 50.

RESPONSE

{
  "results": [
    {
      "chunk_id": "uuid",
      "content": "...",
      "rank": 0.92,
      "domain": "governance",
      "source_path": "...",
      "headline": "...matched <b>term</b>..."
    }
  ],
  "total": 10
}

hybrid_search

Combined semantic and keyword search for highest-relevance results. Use for compliance gap assessment, governance maturity analysis, and cross-framework research.

PARAMETERS

query*
stringNatural language search query.
domain
stringFilter by governance domain.
limit
numberMaximum results. Default 10, max 50.
semantic_weight
numberWeight for semantic results (0–1). Default 0.6.

RESPONSE

{
  "results": [
    {
      "chunk_id": "uuid",
      "content": "...",
      "rrf_score": 0.034,
      "semantic_rank": 2,
      "keyword_rank": 5,
      "domain": "governance"
    }
  ],
  "total": 10
}

entity_search

Search 10,000+ governance entities — policies, controls, standards, frameworks, roles, and patterns. Find specific governance structures and their relationships.

PARAMETERS

query*
stringEntity name or description to search for.
entity_type
stringFilter by type: organization, policy, process, technology, role, framework, standard.
limit
numberMaximum results. Default 10, max 50.

RESPONSE

{
  "entities": [
    {
      "entity_id": "uuid",
      "name": "Data Governance Board",
      "entity_type": "organization",
      "similarity": 0.91,
      "chunk_count": 12,
      "linked_chunks": ["uuid", "uuid"]
    }
  ],
  "total": 10
}

edge_traversal

Trace governance dependencies and control relationships. Follow connections like governs, constrains, implements, and audits across the governance landscape.

PARAMETERS

start_node*
stringChunk ID or entity ID to start traversal from.
hops
numberMaximum traversal depth. Default 2, max 5.
edge_types
string[]Filter by edge type: governs, informs, constrains, implements, audits, delegates, escalates, depends_on.

RESPONSE

{
  "nodes": [
    {
      "id": "uuid",
      "type": "chunk | entity",
      "label": "...",
      "domain": "governance"
    }
  ],
  "edges": [
    {
      "source": "uuid",
      "target": "uuid",
      "type": "governs",
      "weight": 0.85
    }
  ],
  "depth_reached": 2
}

Governance Evaluator

get_maturity_gap

Assess governance maturity gaps across 7 domains. Returns structured gap analysis with control coverage, identified weaknesses, and remediation priorities. Use for SOC 2 readiness, ISO 27001 gap analysis, NIST CSF assessment, and digital transformation readiness.

PARAMETERS

target_tier
stringTarget maturity tier: S1–S5. Default S3 (Harmonized).
domains
string[]Limit analysis to specific domains. Default all seven.

RESPONSE

{
  "current_tier": "S2",
  "target_tier": "S3",
  "overall_gap": 0.34,
  "domain_scores": [
    {
      "domain": "governance",
      "current": 0.72,
      "target": 0.85,
      "gap": 0.13,
      "top_gaps": ["Decision authority mapping", "Escalation path coverage"]
    }
  ],
  "recommended_actions": ["..."]
}

lint_document

Validate any governance document against known frameworks and standards. Checks control coverage, domain alignment, and vocabulary consistency. Use for audit readiness assessment, policy review, and compliance documentation validation.

PARAMETERS

content*
stringDocument text to analyze (max 10,000 characters).
check_entities
booleanCheck entity coverage against the knowledge graph. Default true.
check_vocabulary
booleanCheck vocabulary consistency. Default true.

RESPONSE

{
  "entity_coverage": {
    "found": 14,
    "known": 11,
    "unknown": 3,
    "coverage_ratio": 0.79
  },
  "domain_alignment": {
    "primary": "governance",
    "secondary": "security",
    "confidence": 0.88
  },
  "vocabulary_issues": [
    {
      "term": "data steward",
      "suggestion": "Data Governance Steward",
      "reason": "Canonical entity name in knowledge graph"
    }
  ]
}

generate_brief

Generate evidence-linked governance briefs with full source citations. Use for board readiness reports, technology due diligence summaries, and compliance documentation.

PARAMETERS

topic*
stringTopic or question to generate a brief for.
domains
string[]Limit evidence to specific domains.
max_sources
numberMaximum source chunks to cite. Default 8, max 20.

RESPONSE

{
  "brief": "...",
  "sources": [
    {
      "chunk_id": "uuid",
      "excerpt": "...",
      "domain": "governance",
      "document_title": "...",
      "relevance": 0.91
    }
  ],
  "domains_covered": ["governance", "security"],
  "confidence": 0.84
}

Projection Engine

get_simulation_status

Check governance assessment progress and results. Returns domain-level maturity scores, overall posture, and assessment completion status.

PARAMETERS

run_id
stringSpecific run ID to query. Omit for latest run.
include_domains
booleanInclude per-domain score breakdown. Default true.

RESPONSE

{
  "run_id": "uuid",
  "status": "complete",
  "overall_score": 78.5,
  "ladder_position": "Structured Governance",
  "coherence": "stable",
  "domain_scores": {
    "identity": 82.0,
    "structure": 76.4,
    "governance": 88.1,
    "execution": 79.3,
    "market": 65.0
  },
  "created_at": "2026-04-06T10:00:00Z"
}

get_decision_packets

Retrieve domain-level governance assessment findings with evidence, rationale, and confidence levels. Each finding includes specific gaps and recommended actions.

PARAMETERS

run_id*
stringThe projection run ID to retrieve packets for.
domain
stringFilter to a specific domain. Omit for all domains.

RESPONSE

{
  "packets": [
    {
      "domain": "governance",
      "verdict": "APPROVE",
      "confidence": 0.917,
      "score": 91.7,
      "rationale": "...",
      "evidence_refs": ["chunk_uuid", "chunk_uuid"],
      "flags": []
    }
  ],
  "run_id": "uuid",
  "total_packets": 6
}

run_projection

Run a new governance maturity assessment. Evaluates your governance landscape and produces domain-level findings with remediation priorities.

PARAMETERS

gate
stringGate identifier for the projection. Default uses latest gate.
scenario
stringOptional scenario description for contextual evaluation.

RESPONSE

{
  "run_id": "uuid",
  "status": "pending",
  "gate": "latest",
  "estimated_duration_ms": 3000,
  "message": "Projection queued. Poll get_simulation_status for results."
}

Rate limits

PluginFreeStarterProfessional
Knowledge Graph25 queries/month250/month1,250/month
Governance Evaluator10 evaluations/month100/month500/month
Projection Engine3 projections/month30/month150/month

Rate limit headers (X-RateLimit-Limit, X-RateLimit-Remaining, X-RateLimit-Reset) are included in every response.


Error codes

401Missing or invalid API key.
403API key does not have access to the requested plugin.
429Rate limit exceeded. Check X-RateLimit-Reset header for reset time.
422Invalid parameters. Check the error.details field for specifics.
500Internal server error. Retry with exponential backoff.
503Service temporarily unavailable. The projection engine may be under load.