diff --git a/.mcpd/README.md b/.mcpd/README.md
new file mode 100644
index 0000000..1cf072e
--- /dev/null
+++ b/.mcpd/README.md
@@ -0,0 +1,5 @@
+# mcpd onboarding
+
+This repository is wired for the `authprobe` service in `clgtm/authprobe`.
+
+The default deploy entrypoint is `src/index.ts` and can be overridden in workflow inputs when needed.
diff --git a/.mcpd/governance.yaml b/.mcpd/governance.yaml
new file mode 100644
index 0000000..1636cc5
--- /dev/null
+++ b/.mcpd/governance.yaml
@@ -0,0 +1,9 @@
+version: v1
+tenant_id: tenant_user_clgtm
+service_id: svc_authprobe
+environment: prod
+tools:
+  - name: authprobe
+    tags:
+      - read
+      - write
diff --git a/.mcpd/service.json b/.mcpd/service.json
new file mode 100644
index 0000000..6fc6e09
--- /dev/null
+++ b/.mcpd/service.json
@@ -0,0 +1,9 @@
+{
+  "entry_point": "src/index.ts",
+  "environment": "prod",
+  "health_check_path": "/health",
+  "name": "authprobe",
+  "repository": "clgtm/authprobe",
+  "runtime": "typescript",
+  "service_id": "svc_authprobe"
+}