Sentinel DV bridges AI agents to hardware verification artifacts through 28 read-only MCP tools covering UVM, cocotb, and SystemVerilog environments. It indexes simulator logs, assertion failures, coverage reports, and waveform summaries into a DuckDB store, then exposes structured queries for test results, failure signatures, regression diffs, and topology discovery. The server enforces path sandboxing, automatic redaction of credentials and IPs, and bounded output sizes. You'd reach for this when debugging silicon verification runs with an LLM, letting Claude query why a testbench failed or compare coverage across regression runs without giving it raw log access or simulator control. Requires a config file pointing to artifact roots and a one-time indexing pass before queries work.
A security-first MCP server for verification intelligence (SystemVerilog/UVM/cocotb)
Sentinel DV is an open-source Model Context Protocol (MCP) server that provides large language models and AI agents with safe, structured, read-only access to verification artifacts—enabling deterministic triage, root-cause analysis, and verification insight without exposing raw logs or granting control of simulators.
*.wave.json and *.vcd via built-in parsers (no raw FSDB/WLF streaming)All through a unified, schema-driven interface with built-in security, redaction, and deterministic outputs.
Sentinel DV follows a strict separation of concerns with security-first principles:
sentinel_dv/
├── server.py # MCP server entrypoint
├── config.py # Security limits, feature flags, governance
├── registry.py # Tool registration and versioning
├── schemas/ # Typed contracts for all data
│ ├── common.py # EvidenceRef, RunRef, base types
│ ├── tests.py # TestCase, TestTopology, UvmTopology
│ ├── failures.py # FailureEvent, FailureSignature
│ ├── assertions.py # AssertionInfo, AssertionFailure
│ ├── coverage.py # CoverageSummary, CoverageMetric
│ ├── regressions.py # RegressionSummary, RunDiff
│ └── versioning.py # Schema version management
├── tools/ # MCP tools (discovery + detail)
│ ├── runs.py # runs.list, runs.diff
│ ├── tests.py # tests.list, tests.get, tests.topology
│ ├── failures.py # failures.list
│ ├── assertions.py # assertions.list/get/failures
│ ├── coverage.py # coverage.list/summary
│ ├── regressions.py # regressions.summary
│ └── wave.py # wave.summary, wave.signals
├── indexing/ # Artifact indexing and querying
│ ├── indexer.py # Build normalized index from artifacts
│ ├── store.py # DuckDB storage interface
│ └── query.py # Filter/sort/pagination
├── adapters/ # Parse verification artifacts
│ ├── uvm_log.py # UVM log parsing
│ ├── cocotb.py # cocotb result parsing
│ ├── assertion_reports.py # Assertion report/log parsing
│ ├── coverage_reports.py # Coverage summary parsing
│ ├── protocol_tags.py # Protocol taxonomy hints (AXI/APB/AHB/...)
│ ├── waveform_summary.py # Precomputed *.wave.json
│ └── vcd_summary.py # VCD → bounded summary (Verilator, etc.)
├── normalization/ # Security and determinism
│ ├── signatures.py # Stable failure signature hashing
│ ├── taxonomy.py # Failure categorization
│ └── redaction.py # Automatic secret/PII redaction
└── utils/ # Common utilities
├── hashing.py
├── time.py
└── bounded_text.py
Design Principles:
PyPI: Use
sentinel-dv>=2.3.0for commercial simulator fixtures (VCS, Questa, Cadence), multi-project demos, 28 MCP tools (v2.0 submission/SVA/replay + v2.1 DV intelligence), assertion/coverage intelligence, and waveform indexing.
Install via uv (uvx) or your MCP client’s registry UI using server name io.github.kiranreddi/sentinel-dv.
Claude Desktop / MCP client (stdio):
{
"mcpServers": {
"sentinel-dv": {
"command": "uvx",
"args": [
"--from",
"sentinel-dv@2.3.0",
"sentinel-dv-server",
"--config",
"/absolute/path/to/config.yaml"
]
}
}
}
Alternatively set SENTINEL_DV_CONFIG to your config path and omit --config.
Before querying: build the artifact index (required once per config):
uvx --from sentinel-dv@2.3.0 sentinel-dv-index --config /absolute/path/to/config.yaml --index-all
# Clone the repository
git clone https://github.com/kiranreddi/sentinel-dv.git
cd sentinel-dv
# Install with development dependencies
pip install -e ".[dev]"
# Or production install (requires >=2.3.0 for all 28 MCP tools)
pip install "sentinel-dv>=2.3.0"
Required: copy config.example.yaml to config.yaml (or set SENTINEL_DV_CONFIG / pass --config). The server does not start without a config file and does not auto-use demo/.
Create a config.yaml:
# Artifact roots (read-only)
artifact_roots:
- /path/to/verification/regressions
- /path/to/uvm/logs
# Index storage
index:
type: duckdb
path: ./sentinel_dv.db
# Adapters (enable/disable)
adapters:
uvm: true
cocotb: true
assertions: true
coverage: true
waveform_summary: true # *.wave.json and *.vcd under artifact_roots
# Security & limits
security:
max_response_bytes: 2097152 # 2MB
max_page_size: 200
max_evidence_refs: 10
max_excerpt_length: 1024
# Redaction
redaction:
enabled: true
patterns:
- AKIA.* # AWS keys
- ghp_.* # GitHub tokens
- Bearer\s+\S+ # Bearer tokens
redact_emails: true
redact_paths: true
# Start the MCP server
python -m sentinel_dv.server --config config.yaml
# Index artifacts (one-time or scheduled)
python -m sentinel_dv.indexing.indexer --config config.yaml --index-all
# Run with Claude Desktop
# Add to Claude config:
{
"mcpServers": {
"sentinel-dv": {
"command": "python",
"args": ["-m", "sentinel_dv.server", "--config", "/path/to/config.yaml"]
}
}
}
With Claude or any MCP client:
"Why did test axi_burst_test fail in the latest regression?"
→ Uses: tests.list, failures.list, tests.topology
"What assertions failed in the AXI agent?"
→ Uses: assertions.failures, assertions.get
"Compare coverage between runs R123 and R124"
→ Uses: runs.diff, coverage.summary
"Show me the failure signatures from the past week"
→ Uses: regressions.summary
wave.* with time windowsdemo/ treeWe welcome contributions! See CONTRIBUTING.md for:
# Install with dev dependencies
pip install -e ".[dev]"
# Run tests
pytest
# Run with coverage
pytest --cov=sentinel_dv --cov-report=html
# Lint and format
ruff check .
black .
mypy sentinel_dv/
*.wave.json + *.vcd (VcdSummaryParser); Verilator demoInspired by:
Apache License 2.0 - see LICENSE for details.
Built with ❤️ for the verification community
SENTINEL_DV_CONFIGPath to config.yaml (alternative to --config)
com.exploit-intel/eip-mcp
dmontgomery40/pentest-mcp
pantheon-security/notebooklm-mcp-secure
cyanheads/pentest-mcp-server
io.github.akhilucky/ai-firewall-mcp