emem, the verifiable memory protocol for the physical world
Server Details
Shared, verifiable memory for AI agents and robots: signed tokens that resolve and verify offline.
- Status
- Healthy
- Last Tested
- Transport
- Streamable HTTP
- URL
- Repository
- Vortx-AI/emem
- GitHub Stars
- 52
- Server Listing
- emem
Glama MCP Gateway
Connect through Glama MCP Gateway for full control over tool access and complete visibility into every call.
Full call logging
Every tool call is logged with complete inputs and outputs, so you can debug issues and audit what your agents are doing.
Tool access control
Enable or disable individual tools per connector, so you decide what your agents can and cannot do.
Managed credentials
Glama handles OAuth flows, token storage, and automatic rotation, so credentials never expire on your clients.
Usage analytics
See which tools your agents call, how often, and when, so you can understand usage patterns and catch anomalies.
Tool Definition Quality
Average 4.7/5 across 15 of 15 tools scored.
Most tools target clearly distinct resources or actions (locate vs entity vs recall vs verify), but a few boundaries are fuzzy: emem_ask and emem_intent with type:"ask" are effectively the same operation, and echo_verify versus verify_receipt could be confused by name even though they grade different things. Overall, an agent can usually pick correctly with careful reading.
All tools share the emem_ prefix and snake_case, which lends a coherent surface. However, the verb/noun structure is inconsistent: some are verb-first (ask, locate, recall, verify_receipt), some are noun-based (entity, intent, tools), and others are compound noun-verb (entity_resolve, memory_token_resolve). This is readable but not a single predictable pattern.
15 tools is at the upper bound of well-scoped for a complex domain covering spatial grounding, entity identity, citation, verification, and recall. Each tool has a non-trivial role, and the inclusion of a meta-tool (emem_tools) and a convenience dispatcher (emem_intent) doesn't feel like padding. The count matches the protocol's breadth.
The set strongly covers read, cite, resolve, verify, and entity identity operations, but it lacks explicit write/update/delete tools for facts or entities. Users cannot record new observations or modify existing ones; the only way a fact materializes is through recall triggered by the responder. This is a notable gap for a 'memory' protocol, even though the read side is thorough.
Available Tools
16 toolsemem_askAsk a free-text question about a placeAIdempotentInspect
Single-shot free-text answer about a real-world location, backed by signed satellite/elevation/water/built-up receipts. Forwards a place mention plus a question; runs the locate → recall → algorithm chain server-side; returns one packaged envelope.
When to use: Use when the question concerns a specific real-world place and a packaged, citation-bearing answer is preferable to manual primitive composition. Forward the user's question verbatim as q plus the location as place (free text), cell (cell64), or lat+lng. The server resolves the location, classifies the question to a topic, recalls every relevant band (auto-materializing Sentinel-2 / Sentinel-1 / Cop-DEM / JRC GSW / Overture / weather on miss), surfaces the algorithm recipes that compose those bands into named scores, and returns a single envelope with topic_routing, facts, algorithms_for_question, an optional Sentinel-2 RGB scene URL, and a caveats block (grid resolution, revisit cadence). All facts are signed by the responder; the signed receipt (and its content-addressed fact_cids) is surfaced at the envelope ROOT, response.receipt / response.fact_cids, exactly like every other primitive, and is also mirrored under facts_summary.receipt for back-compat. Set include_image: true to bundle the latest cloud-free Sentinel-2 thumbnail. Out-of-scope questions return topic_routing.matched_topic: null plus the full inventory so the caller can route elsewhere.
Example arguments: {"q":"is this neighbourhood flood-prone for a flat purchase","place":"Ashok Nagar, Ranchi"}
| Name | Required | Description | Default |
|---|---|---|---|
| q | Yes | User's natural-language question about the place (e.g. "is this neighbourhood flood-prone"). | |
| lat | No | WGS-84 latitude (paired with `lng`; alternative to `place` / `cell`). | |
| lng | No | WGS-84 longitude (paired with `lat`). | |
| cell | No | cell64 string (alternative to `place`, use when you have one from a prior emem_locate / emem_recall response). Provide this OR `place` OR `lat`+`lng`. | |
| place | No | Free-text place name (e.g. "Mount Fuji", "Ashok Nagar, Ranchi"). REQUIRED unless `cell` or `lat`+`lng` is provided. Extract the noun phrase from the user's turn; the responder geocodes via OSM Nominatim. | |
| query | No | Alias for `q`. | |
| include | No | Opt-in heavy response sections. Default response is slim (~5 KB): answer + algorithm key + fact_cids + caveats. Name specific sections to include them. Ignored when verbose=true (which includes everything). | |
| verbose | No | When true, return the full envelope: per-algorithm formula strings, temporal_recipe blocks, per-fact band_metadata duplicates, and the long _explanation prose. Default (since 2026-05-05) is false so the response fits MCP's 25 KB cap; the signed receipt + fact CIDs + algorithm keys + algorithms_cid are always retained. Pass true to get the full body when debugging. | |
| question | No | Alias for `q`. | |
| include_image | No | Bundle a Sentinel-2 RGB scene URL for the resolved cell. Adds ~1-2 s on first call. |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description goes well beyond the annotations by disclosing the locate → recall → algorithm chain, auto-materialization of satellite/elevation/water bands on miss, the envelope's contents, signed receipts at response root, caveats block, out-of-scope null routing, and include_image latency. This richly supplements the readOnlyHint/idempotentHint/destructiveHint annotations without contradicting them.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is front-loaded with the core purpose and includes a useful example, but it is lengthy and repeats certain ideas such as signed receipts and envelope structure. While well-organized into paragraphs, it could be trimmed without losing essential guidance.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a complex tool with no output schema and 10 parameters, the description is exceptionally complete: it states what the server does, what the response envelope contains, what is signed, how to handle out-of-scope questions, effect of include_image, verbose default, and the trade-offs. An agent has sufficient context to decide when to call it and what to expect in return.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, but the description adds meaningful guidance: forward the user's question verbatim as q, extract the noun phrase for place, choose among place/cell/lat+lng, and understand verbose/include_image trade-offs like the 25 KB MCP cap and 1-2 s latency. This goes beyond the schema's already detailed property descriptions, though some duplication exists.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with a specific verb-plus-resource: 'Single-shot free-text answer about a real-world location, backed by signed satellite/elevation/water/built-up receipts.' It clearly distinguishes emem_ask from sibling tools like emem_locate or emem_recall by framing this as a packaged, question-answering endpoint that composes primitives server-side.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description includes an explicit 'When to use' section stating to use this tool when the question concerns a specific real-world place and a packaged, citation-bearing answer is preferable to manual primitive composition. It also gives input-selection guidance (q plus place/cell/lat-lng) and explains out-of-scope behavior, though it does not explicitly name sibling tools to avoid.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
emem_echo_verifyCheck a value against the fact it cites, before you publish itARead-onlyIdempotentInspect
Grade a value you are about to emit against the signed fact your citation points at. Returns matches and, when it does not, the drift between what you were about to say and what emem holds. This is the step that turns a transcription error into a caught event instead of a silent wrong number: a model that resolves a fact correctly can still retype 0.2411 for 0.241103, and nothing else in the loop notices. Memory algebra: the verify operation (https://emem.dev/docs/model.html).
When to use: Call immediately before publishing, logging, or handing on any value you took from an emem fact, and treat a false matches as a gate rather than a warning. Pair it with value_verbatim from resolve: quote that exact decimal string rather than reformatting the number, then echo-verify what you actually emitted. For a due-diligence or compliance record this is what lets you assert every cited value was echo-verified with a signed check per citation instead of a promise. Accepts a bare cid too, so a damaged citation still grades rather than failing closed.
Example arguments: {"token":"emem:fact:defi.zb572.xoso.zb1ec:2p6sz3pv45ndkyqstir4nd6bjnzx63rrcb4pnhgahsnb2oczh5aq","claimed_value":"-0.0558"}
| Name | Required | Description | Default |
|---|---|---|---|
| token | Yes | The citation you used. Any form resolve accepts, including a bare cid, which answers with `degraded: true`: a bare cid asserts no location, so the cell-binding check is skipped and the grade covers the value only. A cid that is not 52 characters is refused as a damaged citation rather than as a missing one, and must not be retried. | |
| strict | No | Require BYTE-IDENTICAL equality. Default false, which also accepts a numerically equal value spelled differently (0.50 for 0.5). It changes exactly one outcome: the numerically-equal-but-respelled case, which passes by default and becomes `drift: "reformatted"` here. `rounded` and `wrong` already fail either way, so `strict` never turns a pass into a pass. It is also inert when `claimed_value` came in as a JSON number, because the respelling then happened in the JSON parser, before this tool saw it. | |
| claimed_value | Yes | The value you are about to publish, as a string or a number. Send it as a STRING, character for character as you will emit it. A JSON number is stringified before the comparison, so `0.50` arrives as `0.5` and `0.2411000` as `0.2411` (measured against the live responder): the trailing digits this check exists to defend are gone before it runs. Quote `value_verbatim` from resolve as a string and echo the exact characters you will publish. |
Output Schema
| Name | Required | Description |
|---|---|---|
| drift | No | The difference between what you wrote and what emem holds, when they disagree. Explicit null on an exact match: the key is always present, so branch on its value rather than on whether it exists. Declaring this `string` alone was a live schema violation on every matching call, which is how it was found. |
| token | Yes | The citation you passed, echoed back exactly as sent. |
| matches | Yes | Whether what you were about to publish agrees with the signed fact. Treat false as a gate, not a warning. |
| receipt | No | |
| degraded | No | True when a bare cid was passed and the cell binding could not be checked. |
| fact_cid | No | |
| claimed_value | Yes | Echoed back, so a log line carries both sides of the comparison. |
| canonical_token | No | The token in its canonical spelling, whatever form you passed. |
| offline_verify_at | No | Where to re-run this check without trusting this responder. |
| resolved_value_verbatim | No | The fact's value as the exact decimal string it was signed as. Quote this rather than reformatting it. |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the readOnlyHint/idempotentHint annotations, the description discloses critical runtime behavior: it returns matches and drift on mismatch, bare cids produce `degraded: true` and skip cell-binding, damaged cids are refused, and strict mode alters only the respelled-number case. It also warns that JSON numbers lose trailing digits during stringification—a vital nuance not inferable from annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is front-loaded with the core purpose, then moves to usage context, edge cases, and an example. Every sentence adds operational value—there is no fluff, no repetition of annotations, and the structure makes it easy to scan for key instructions.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool with 3 parameters, an output schema, and strong annotations, this description is thoroughly complete. It covers return values (matches/drift), citation validation nuances, strict-mode semantics, and concrete use cases. The link to the underlying verify operation and the example arguments round it out, leaving no critical operational gap.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Despite 100% schema coverage, the description significantly deepens each parameter's meaning. For `claimed_value` it explains why to send a string ('character for character as you will emit it') and what happens if a number is sent; for `token` it explains bare cid and damaged cid behaviors; for `strict` it precisely scopes the sole outcome change. This far exceeds the schema's basic descriptions.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with a precise operational statement: 'Grade a value you are about to emit against the signed fact your citation points at.' It specifies the verb (grade), the resource (signed fact), and the context (pre-publish validation), and it clearly distinguishes itself from sibling tools like emem_verify_receipt by being the pre-emission check rather than a receipt lookup.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The 'When to use' section explicitly directs: 'Call immediately before publishing, logging, or handing on any value you took from an emem fact' and instructs to treat a false matches as a gate. It also names the complementary tool `value_verbatim` from resolve, providing an alternative and pairing strategy. This is explicit and actionable guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
emem_entityMint or get a canonical object identityAIdempotentInspect
Give a real-world object (a bridge, a farm plot, a river, a named place) a single, shared, content-addressed identity that any agent resolves the same way. Returns an entity_token (emem:entity:<entity_cid>) plus a signed receipt that attests how the reference resolved. Two agents that name the same object mint the SAME entity_cid; when a stable external id (Overture GERS / OSM) is known it dominates identity, so divergent labels for one real object still collapse to one id. This is the object-level antidote to referential drift: 'the damaged bridge near the river' becomes one canonical thing every model reasons about, not a phrase each model re-interprets.
When to use: Call when a conversation refers to a THING and you want a stable handle to it that survives summarization and travels between agents/turns/LLMs, before it drifts into 'that infrastructure issue'. Anchor it with place, a cell, or lat+lng. Hand the returned emem:entity: token to any other agent; they dereference the identical object. Recall/ask at the entity's cell64 for signed facts about it. Pick the right sibling: emem_entity MINTS or returns the identity for a thing you can anchor to a place; emem_entity_resolve takes a fuzzy phrase and finds an identity someone ALREADY registered, so reach for it when you suspect the thing is known and you only have words for it; emem_entity_link asserts that two spellings you already hold mean one object. Do NOT call this for an observation, which is a fact and belongs in emem_recall or emem_memory_token, and do not call it to name a place itself, which is emem_locate: an entity is a THING AT a place, not the place.
Example arguments: {"label":"Golden Gate Bridge","kind":"bridge","place":"Golden Gate Bridge, San Francisco"}
| Name | Required | Description | Default |
|---|---|---|---|
| lat | No | Latitude anchoring the object to a place, paired with lng. The identity is hashed from this anchor, so two agents anchoring the same object differently mint different entities. | |
| lng | No | Longitude, paired with lat. | |
| cell | No | cell64 to anchor the object directly (no geocode). | |
| kind | No | Object class: bridge, river, farm_plot, building, admin_division, place, custom, ... Defaults to "place". | |
| label | Yes | Human name of the object, e.g. "Golden Gate Bridge", "the north dam". Required. | |
| place | No | Free-text place to anchor the object (geocoded). Provide place OR cell OR lat+lng. | |
| parent | No | Optional parent entity_cid (containment). | |
| external_ids | No | Stable ids that drive convergence. Caller-supplied values win over geocoder-derived ones. |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations (idempotentHint=true, readOnlyHint=false) are complemented by description details: the same entity_cid is minted for the same object, external IDs dominate identity resolution, and a signed receipt is returned. This adds meaningful behavioral context beyond the annotations without any contradiction.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is lengthy but well-structured: purpose first, then usage guidance, exclusions, and an example. Every paragraph earns its place given the tool's complexity and many siblings; it is verbose but not wasteful.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description covers return values, how to reference the entity later, sibling distinctions, and anchoring constraints, all for a complex tool with 8 parameters and no output schema. It is exceptionally complete for an agent to select and invoke correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so parameters are already well-defined. The description adds value by explaining the relationship between anchoring parameters (place/cell/lat+lng) and noting that caller-supplied external_ids win over geocoder-derived ones, plus a concrete example. This enriches beyond the schema baseline.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb+resource ('Give a real-world object a single, shared, content-addressed identity') and clearly states the return value (entity_token plus signed receipt). It explicitly differentiates from siblings like emem_entity_resolve and emem_entity_link, making the tool's unique scope unambiguous.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The 'When to use' paragraph gives explicit context (conversations referencing a THING) and directly names alternatives (emem_entity_resolve for already-registered identities, emem_entity_link for linking existing spellings), plus clear 'Do NOT call' exclusions for observations and places. This is exemplary usage guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
emem_entity_linkAttest that a phrasing/id denotes an existing objectAIdempotentInspect
Record a signed equivalence: bind an alternate label or a stable external id (GERS / OSM / Wikidata) to an existing canonical object so future emem_entity_resolve calls on that phrasing converge to the same entity_cid. Builds the shared reference graph that keeps different agents' vocabularies pointing at one identity.
When to use: Call when you learn that two phrasings denote the same object ('the north dam' == an existing entity), or to attach an authoritative external id to an object minted from free text.
Example arguments: {"entity_token":"emem:entity:0a1b2c3d4e5f60718293","alias":"the north dam"}
| Name | Required | Description | Default |
|---|---|---|---|
| alias | No | An alternate label/phrasing that should resolve to this object. | |
| entity_cid | No | The canonical object to attach an equivalence to. Provide entity_cid OR entity_token. | |
| entity_token | No | A `emem:entity:<entity_cid>` handle for the same. | |
| external_ids | No | Stable ids to bind to this object. |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=false, idempotentHint=true, and destructiveHint=false, establishing the operation as a non-destructive mutation. The description adds meaningful context beyond the annotations, explaining that it 'Builds the shared reference graph' and ensures future `emem_entity_resolve` calls converge. No contradiction with annotations; the added context about graph construction and long-term effect is valuable.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is well-structured with a clear headline, a 'When to use' paragraph, and a concrete example. It is front-loaded with the core purpose, and every sentence serves a distinct role: definition, usage context, and illustration. No filler or redundancy; appropriately sized for the tool's complexity.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool with a nested object and no output schema, the description covers the purpose, usage scenarios, example arguments, and how it relates to the resolve tool. It does not describe return values, but since this is a mutation tool without an output schema, that is not a significant gap. It could be more explicit about idempotency or signing, but annotations fill some gaps, making it adequately complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so the baseline is 3. The description adds value by naming the specific external id types (GERS / OSM / Wikidata) that map to the nested `external_ids` parameter, and the example arguments demonstrate the intended structure for `entity_token` and `alias`. The description clarifies that `alias` is an alternate label, which reinforces but also goes slightly beyond the schema's brief descriptions.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's purpose with a specific verb-resource pair: 'Record a signed equivalence: bind an alternate label or a stable external id ... to an existing canonical object.' It explicitly mentions the consumer tool `emem_entity_resolve`, distinguishing this from sibling tools by explaining how it feeds the resolve process. The title and description align well.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides a dedicated 'When to use' section with concrete scenarios ('when you learn that two phrasings denote the same object' or 'to attach an authoritative external id'). It clearly sets the context but does not explicitly state when NOT to use it or name alternative tools for exclusion. This matches the 'clear context, no exclusions' level.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
emem_entity_resolveResolve a phrase (or emem:entity: token) to a canonical objectARead-onlyIdempotentInspect
Converge a fuzzy phrasing onto the canonical object other agents already minted, so everyone co-refers to the same identity instead of re-minting divergent ones. Pass text (e.g. "the collapsed span at the ford") to get ranked existing candidates; pass near to narrow to a place; or pass an emem:entity: token to dereference it directly to the signed entity body. Read-only.
When to use: Call BEFORE minting when another agent may already have registered the object, or when you receive a emem:entity: token and want the object behind it. This is how two agents avoid referential drift: resolve first, mint only if nothing matches.
Example arguments: {"text":"the golden gate bridge","near":"San Francisco"}
| Name | Required | Description | Default |
|---|---|---|---|
| k | No | Max candidates (default 10). | |
| near | No | Optional place/cell to narrow to objects anchored nearby. | |
| text | No | Fuzzy phrasing to resolve to an existing canonical object (e.g. "the damaged bridge near the river"). | |
| label | No | Alias for `text`. | |
| token | No | A `emem:entity:<entity_cid>` handle to dereference directly to its signed object (bypasses the text search). |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, idempotentHint=true, destructiveHint=false. The description adds behavioral specifics: returns 'ranked existing candidates' for text input, 'narrow to a place' with near, and 'dereference it directly to the signed entity body' for a token. This goes beyond the structured safety hints by explaining the two execution paths and their outputs.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is organized into three paragraphs: purpose/modes, when-to-use, and an example. Each section has a distinct function and avoids redundant detail. The only slight redundancy is 'Read-only,' which duplicates the readOnlyHint annotation, but it does not bloat the description.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Despite lacking an output schema, the description clearly states what callers can expect: ranked candidate objects for text searches and the signed entity body for token dereference. The usage guidance and examples cover the main invocation patterns. The tool's complexity (two modes, 5 optional parameters) is adequately addressed.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema provides 100% coverage of all five parameters, so the baseline is 3. The description adds meaningful usage semantics by explaining how text, near, and token interact: text triggers fuzzy search, near narrows by location, and token bypasses the search for direct dereference. It also gives a concrete example. However, it does not explain the k (max candidates) parameter, which remains schema-only.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific verb ('Converge'/'Resolve') and resource ('canonical object'), and explains the two modes: fuzzy text resolution and direct token dereference. This distinguishes it from siblings like emem_entity (minting) and emem_memory_token_resolve (general memory tokens).
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The 'When to use' section explicitly instructs to call before minting when another agent may have registered the object, or when receiving an emem:entity: token. It also states 'resolve first, mint only if nothing matches,' providing a clear when-not and alternative.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
emem_find_similark-NN over the corpus by embeddingARead-onlyIdempotentInspect
k-NN over the corpus by cell embedding or inline vector. Returns neighbours ordered nearest-first, each with cell64, score and the band scanned, plus a signed receipt over the vectors read. Scoring is mode: cosine is exact fp32; hamming is a sign-bit popcount that scans far more cells for the same budget; hamming_then_rerank does both. k is 1..1000, default 10. It ranks what the corpus already holds and materialises nothing, so an empty result means nobody has attested a vector nearby, not that nowhere resembles the key.
When to use: Call when the user asks 'find places like X', 'where else looks like this', or hands an embedding to find neighbours. key is either a cell64 or inline:[x,y,...]. Default band is geotessera (128-D Tessera foundation embedding); pass band: "geotessera.multi_year" for the 1152-D 9-vintage (2017–2025) fusion.
Example arguments: {"key":"damO.zb000.xUti.zde78","k":10}
| Name | Required | Description | Default |
|---|---|---|---|
| k | No | How many neighbours to return. | |
| key | Yes | cell64 (look up that cell's vector) or 'inline:[x,y,...]' literal vector | |
| band | No | vector band to scan (default: 128-D Tessera foundation embedding). For mode=hamming/hamming_then_rerank you can pass either the cosine band (e.g. 'geotessera') or its binary sibling ('geotessera.bin128'), the responder picks the right one. | geotessera |
| cell | No | Alias for `key`. | |
| mode | No | Scoring mode. cosine = fp32 over full vector (precise, ~256 B/cell scan). hamming = sign-bit popcount over the binary sibling band (~16 B/cell, ~1000× faster, ~65% recall@10). hamming_then_rerank = triage with Hamming on 4·k candidates then re-rank by cosine, matches cosine precision at ~16× less work. | cosine |
| scope | No | Multi-tenant scope `{user_id, agent_id, run_id, org_id}`. Setting it bypasses the ANN index entirely, because that index carries no scope column, and runs the brute-force scan instead: the tenant filter is honoured truthfully, and the call is slower. | |
| cell64 | No | Alias for `key`. | |
| filter | No | Claim-algebra predicate evaluated against every candidate before ranking. A cell with no fact for the filter's band is DROPPED rather than treated as false, so 'places like X where NDVI > 0.5' never silently includes cells with no NDVI. | |
| as_of_tslot | No | Bi-temporal valid-time bound. Applied to candidate cells BEFORE cosine scoring, a cell with no fact whose tslot ≤ as_of_tslot under the scoring band is dropped from the candidate pool (undecidable→drop). When set, the Lance ANN fast-path is bypassed (the index has no signed_at column); brute-force k-NN runs instead so as_of is honoured truthfully. | |
| as_of_signed_at | No | Bi-temporal transaction-time bound (RFC 3339). Also applied to candidates BEFORE cosine. Same Lance-bypass note as as_of_tslot. |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the readOnly/openWorld/idempotent annotations, the description adds substantial behavioral detail: it returns a signed receipt over vectors read, explains scoring mode performance tradeoffs, and clarifies that an empty result means no nearby attested vector rather than absence of resemblance. It also states the tool 'materialises nothing', reinforcing the read-only nature. These disclosures provide valuable operational context not inferable from annotations alone.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Despite its length, every sentence provides distinct value: core function, return shape, mode logic, k range, empty-result semantics, use-case triggers, key/band details, and an example. The 'When to use' section is clearly demarcated and front-loaded enough that the agent immediately grasps the tool's purpose. There is no redundancy or filler.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description covers the primary use case thoroughly: what it does, how to invoke it, what results look like, and how to interpret empty outputs. It also includes a concrete example. However, given the tool's complexity (10 parameters, nested objects, optional advanced filtering/time-travel), the description does not mention the existence of `scope`, `filter`, `as_of_tslot`, or `as_of_signed_at`, leaving the agent to discover those capabilities only through the schema. Also, with no output schema, the description's return-field summary is helpful but not exhaustive.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so the baseline is 3, but the description enriches key parameters: it explains the `key` formats (cell64 or inline), the `band` options including the default and the multi_year variant, and the performance semantics of `mode` (cosine vs hamming vs hamming_then_rerank). It also gives the `k` range/default. This goes beyond the schema's terse descriptions, though it does not cover every parameter (scope, filter, as_of are left to schema).
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with 'k-NN over the corpus by cell embedding or inline vector', which is a specific verb+resource statement that clearly identifies the tool's function. It further distinguishes from siblings by stating it returns 'neighbours' ordered by similarity and explicitly frames 'find places like X' as the use case. The title 'k-NN over the corpus by embedding' reinforces this without ambiguity.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description includes a dedicated 'When to use' section with concrete user intents ('find places like X', 'where else looks like this', 'hands an embedding'). It gives clear context but does not explicitly name alternative tools or state when NOT to use this tool, so it falls short of full exclusions/alternatives guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
emem_guard_verdictCheck whether the citations in a draft actually verifyARead-onlyIdempotentInspect
Run emem-guard's policy pipeline over text you are about to send, against this responder's corpus. Finds every emem: citation, resolves each one, and returns allow or deny with a machine-readable reason: EMEM-GUARD DENY <CODE> token=<token|-> fix=<fix> leaf=<leaf|->. Codes are PROV_SIG (signature did not verify), PROV_BYTES (resolved to different content than claimed), PROV_DRIFT (reading has moved past its band threshold), CLAIM_UNGROUNDED (a measurable claim with no citation, opt-in via claim_gating). fix is the actionable half: refresh_token, remove_reference, contact_admin, cite_observation. ADVISORY: nothing is blocked, and a citation this responder does not hold is never a denial, because it is indistinguishable from one minted elsewhere. Memory algebra: the verify operation (https://emem.dev/docs/model.html).
When to use: Call it on your own draft before you assert something, or on a tool result before you reason on it, to catch a citation that does not resolve while you can still fix it. Set claim_gating:true to also be told which measurable claims carry no citation at all and which emem band would answer them. Checking a payload some other framework produced (a CloudEvent, an OPA input, an OpenAI moderations body, another server's tool call)? Send it as-is and name its shape, because the default reader only sees texts/messages and a check that read nothing still answers allow. To ENFORCE this rather than consult it, run your own node: emem_guard_selfhost returns the procedure, and it works across Anthropic Inference hooks, Claude Code hooks, MCP tool calls, OpenAI-shaped clients, CloudEvents and OPA-style policy clients.
Example arguments: {"texts":["Elevation there is 918 m per emem:fact:defi.zb493.xuqA.zcb5f:yqbolgeoycqkvj3zkxukb4bjw4odhpwvfzqo3fbgwf4spk45zala"]}
| Name | Required | Description | Default |
|---|---|---|---|
| agent | No | Optional free-text label for who is asking. Advisory only, never a trust boundary. | |
| shape | No | Which envelope YOUR payload is in, so you never have to reshape it to ask the question: send the body your own framework produced and name its shape. native reads `texts`/`messages`; `mcp` reads a JSON-RPC tools/call or tool result; `openai` reads a moderations (`input`) or chat-completions body; `cloudevent` reads a CloudEvents 1.0 structured event; `policy` reads {input}. It matters: a CloudEvent whose citation sits at data.text is invisible to the native reader, and a check that read nothing answers `allow`, so confirm `citations_found` matches what you sent. Unrecognised values fall back to native rather than erroring. This selects how the body is READ only — the verdict always comes back in this tool's declared output shape, because a tool that declares an outputSchema owes conforming structuredContent. To get the ANSWER translated into the same envelope too (an OPA `result:{allow,deny}`, an MCP CallToolResult to substitute on a deny), call POST /v1/guard/verdict?shape=… directly. | native |
| texts | No | Free text to check. Any number of pieces, in any order: a draft answer, a tool result, a whole turn. | |
| messages | No | A chat-completions-shaped transcript, read for its text. Accepted so the same body works against a self-hosted emem-guard node and against any OpenAI-shaped client. Each item is {role, content} where content is a string or an array of blocks. | |
| claim_gating | No | Also flag measurable physical-world claims that carry NO citation (deny code CLAIM_UNGROUNDED, fix cite_observation). Off by default: it reports on the absence of a citation rather than on a failed check. The verdict names the sentence, the magnitude, and the emem band that would answer it. |
Output Schema
| Name | Required | Description |
|---|---|---|
| fix | No | The actionable half: what to change and retry. |
| code | No | Present only on a deny. |
| claim | No | On CLAIM_UNGROUNDED: the sentence, magnitude, quantity, anchor, and source_band. source_band is a recallable band key, or null when this responder observes no band in that quantity. |
| action | Yes | NOT a clearance. `allow` means no rule fired, which on a transcript that cited nothing is silence rather than approval. Branch on citations_found and receipt.fact_cids. |
| checked | Yes | How many were actually resolved, bounded by the verdict budget. |
| receipt | Yes | ed25519 receipt. `fact_cids` lists what actually resolved and is the field that separates a real citation from an invented one. |
| advisory | Yes | True on the hosted route, where nothing is blocked. Run your own node to enforce. |
| citations_found | Yes | How many emem: tokens were found in the text. Compare with receipt.fact_cids: a well-formed token that resolved to nothing counts here and not there. |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description discloses several non-obvious behaviors beyond the annotations: it is advisory ("nothing is blocked"), never denies on unrecognized citations (open-world stance), returns allow if no content is read, and explains shape fallback behavior. These details meaningfully augment the readOnly/idempotent hints and help set correct expectations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is longer than typical but well-structured: opening purpose, denial-code reference, advisory note, memory-algebra link, when-to-use, enforcement alternative, and example. Each section earns its place, though the URL and some repetition around claim_gating/shape could be trimmed. It is not bloated or rambling, but it also isn't as tight as a two-sentence description.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's complexity (multiple denial codes, fix actions, shape-based reading, advisory semantics) and the presence of an output schema, the description covers all necessary context: what the tool does, when to use it, what its limitations are, and how to invoke it with different frameworks. Nothing critical seems missing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema already has 100% parameter coverage with thorough descriptions for each parameter (shape, texts, messages, claim_gating). The tool description adds a concrete example argument and some context about shape behavior, but it largely restates what the schema already provides (e.g., claim_gating details, fallback to native). Since the schema does the heavy lifting, a score of 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with a specific verb+resource: "Run emem-guard's policy pipeline over text you are about to send, against this responder's corpus." It clearly explains what is checked (emem:citations), what is returned (allow/deny with a machine-readable reason), and even lists the denial codes and fix actions. This distinguishes it from sibling tools like emem_verify_receipt and emem_echo_verify by focusing on pre-send draft verification against the responder's corpus.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is an explicit "When to use" section stating to call it on your own draft or tool result before asserting/reasoning. It also names an alternative for enforcement (emem_guard_selfhost) and cautions about shape handling for non-native payloads. This is exactly the kind of guidance needed to choose this tool over siblings.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
emem_intentIntent-routed plannerAIdempotentInspect
Say what you want in one typed object and get the answer, without choosing a primitive. type is a tagged union: it selects the intent AND decides which other fields are read, so send only the fields its row needs. The plan is EXECUTED in the same call, so you receive the result (the resolved cell64, the similarity, the delta, the verdict), not a list of calls to make yourself.
type | needs | optional | answers where_is | description | | cell64 for a named place what_is_here | cell OR place | description | what is attested at a location is_like | a, b | | cosine similarity of two cells did_change | cell, band, window | | delta for one band over [start,end] tslots find_like | key | k, filter | nearest cells by embedding confirm | claim, cell | | verdict plus the signed facts behind it ask | description | place/cell/lat+lng | free-text question, packaged answer
An unknown or missing type returns a structured needs_intent_type envelope naming the seven values rather than a hard error, so you can correct it on the next turn.
When to use: Call when the user's question maps cleanly onto one of the seven rows above and you would rather state the goal than pick a primitive. Reach past it for anything else: a specific band at a cell is emem_recall, a region is emem_recall_polygon, and a free-text place question with no obvious primitive is emem_ask directly (type:"ask" here just forwards to it). window takes tslots, not dates: get valid ones from emem_trajectory first. A tool this router names but tools/list does not show is NOT a dead end: every one of the 107 dispatches by name at /mcp and /mcp/full, so call emem_trajectory or emem_recall_polygon directly. The core list is 16 to keep the per-request catalog small, not to fence the rest off; emem_tools enumerates them.
Example arguments: {"type":"did_change","cell":"damO.zb000.xUti.zde78","band":"indices.ndvi","window":[20245,20620]}
| Name | Required | Description | Default |
|---|---|---|---|
| a | No | is_like only: cell64 of the first place in the pair. | |
| b | No | is_like only: cell64 of the second place. The answer is a cosine similarity in [-1,1] over the two cells' embeddings. | |
| k | No | find_like only: how many neighbours to return. Defaults to the primitive's own default when omitted. | |
| key | No | find_like only: cell64 to search from. Neighbours are ranked by embedding cosine against this cell. | |
| lat | No | ask only: latitude, paired with `lng`, when you want to pin the location by coordinate rather than by name or cell64. | |
| lng | No | ask only: longitude, paired with `lat`. | |
| band | No | did_change only: which band to test, e.g. "indices.ndvi". One band per call; the answer is a delta over `window`, not a whole-cell diff. | |
| cell | No | cell64 address, e.g. "damO.zb000.xUti.zde78". Required by did_change and confirm. Optional for what_is_here and ask: supply it to skip geocoding, omit it and give `place` instead. | |
| type | Yes | Which question you are asking, and therefore which other fields apply. where_is: name a place, get its cell64 (needs `description`). what_is_here: summarise a location (needs `cell`, OR `place`/`description` to resolve it first). is_like: pairwise similarity (needs `a` and `b`). did_change: did one band move over a time window (needs `cell`, `band`, `window`). find_like: nearest neighbours to a known cell (needs `key`; optional `k`, `filter`). confirm: is a claim true at a cell (needs `claim` and `cell`). ask: free-text question about a place, runs locate + topic-route + recall server-side (needs `description`; optional `place`/`cell`/`lat`+`lng` to pin the location). | |
| claim | No | confirm only: the claim to test at `cell`, e.g. {"band":"indices.ndvi","op":"gt","value":0.4}. The answer is a verdict plus the signed facts it rests on. | |
| place | No | Free-text place name for what_is_here and ask when you have a name but no cell64, e.g. "Ashok Nagar, Ranchi". The responder geocodes it. Ignored when `cell` is present. | |
| filter | No | find_like only: optional claim constraining which cells may be returned. Same object as `claim` below, same ops, same required fields. | |
| window | No | did_change only: exactly two tslots, [start, end], band-tempo-relative integers from the emem epoch (NOT unix seconds or a date string). Get valid tslots for a cell from emem_trajectory. | |
| description | No | where_is: the place to resolve, e.g. "Mount Everest". ask: the user's question, forwarded verbatim. what_is_here: optional free text used as the question and, if `place` is absent, as the place. Ignored by the other intents. |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the annotations (readOnlyHint:false, idempotentHint:true, openWorldHint:true), the description discloses that the plan is EXECUTED in the same call, that unknown/missing type yields a needs_intent_type envelope rather than a hard error, and that every named tool dispatches by name at /mcp and /mcp/full even if not shown in tools/list. No contradiction with annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Although long, every sentence earns its place: the table condenses seven intents, the 'When to use' paragraph removes ambiguity, and the example anchors the schema. The structure (table, when-to-use, example) makes it scannable despite the length.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With no output schema, the description compensates by stating the return envelope ('the resolved cell64, the similarity, the delta, the verdict') and the error shape (needs_intent_type). It also covers edge cases (unknown type, hidden tools, tslot source), making it fully self-sufficient for a complex 14-parameter tagged union.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so the baseline is 3, but the description adds a compact table mapping each intent to required/optional fields and answer shape, clarifies that fields for other intents are ignored (tagged union), and gives a concrete example. It also explains tslot semantics (band-tempo-relative, from emem_trajectory) beyond the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with a crystal-clear statement: 'Say what you want in one typed object and get the answer, without choosing a primitive.' It then distinguishes the tagged-union dispatcher from sibling primitives by naming exact alternatives (emem_recall, emem_recall_polygon, emem_ask) and gives the scope of each intent row in the table.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is an explicit 'When to use' section: 'Call when the user's question maps cleanly onto one of the seven rows above and you would rather state the goal than pick a primitive. Reach past it for anything else.' It names the alternatives, explains the unknown-type behavior (structured needs_intent_type envelope), and gives concrete guidance about tslots and hidden tools.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
emem_locateResolve place to cell64 + band inventoryARead-onlyIdempotentInspect
Mint the canonical, vendor-neutral address (cell64) for a real-world place: the shared spatial identity every agent resolves to identically, so two models refer to the same ground instead of two descriptions of it. Also returns the topic-grouped inventory of bands and algorithms recallable there. For a first-class OBJECT identity (a bridge, a plot, a named place) rather than a raw cell, use emem_entity. Send EITHER lat+lng as numbers OR a free-text place; coordinates win when both arrive. q, query and name are all accepted spellings of place. A key this schema does not declare is reported in _unrecognised_arguments, so a typo answers about somewhere else rather than erroring.
When to use: Use whenever the input refers to a real-world location and the next step needs the cell64 identifier or wants to know which bands are available before recalling. The response carries data_at_this_cell with three sub-fields: live_bands_by_topic (every band recallable here, grouped by topic such as flood_water_event_window, vegetation_condition, built_up_human_geography), algorithms_for_topic (composition recipes that fuse those bands into named scores), and declared_but_no_materializer_at_this_responder (cube slots reserved without a live connector). For the single-shot path that runs the full chain server-side and returns one packaged answer, use emem_ask instead.
Example arguments: {"place":"Mount Everest"}
| Name | Required | Description | Default |
|---|---|---|---|
| q | No | Alias for `place`, accepted because OSM/Mapbox/Google Geocoding all use `q`. Provide either this or `place` (or `lat`+`lng`). | |
| lat | No | WGS-84 latitude in degrees, paired with `lng`. REQUIRED with `lng` unless `place`/`q` is provided. | |
| lng | No | WGS-84 longitude in degrees, paired with `lat`. REQUIRED with `lat` unless `place`/`q` is provided. | |
| name | No | Alias for `place`. | |
| place | No | Free-text place name (e.g. 'Mount Everest', 'Tokyo'). REQUIRED unless `lat`+`lng` is provided. Aliases also accepted: `q`, `query`, `name`. | |
| query | No | Alias for `place`. |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond annotations (readOnly, idempotent, openWorld), the description discloses additional behaviors: coordinates win over place text when both arrive, aliases q/query/name are accepted, and unknown arguments are reported in `_unrecognised_arguments` rather than erroring. It also outlines the response's three sub-fields, which is valuable given no output schema.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is somewhat long but well-structured: core purpose front-loaded, then alternatives, then parameter semantics, then when-to-use and response shape, ending with an example. No redundant sentences, though it could be tightened slightly without losing clarity.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With no output schema, the description carries the full burden of explaining return values, and it does so in detail: live_bands_by_topic, algorithms_for_topic, and declared_but_no_materializer_at_this_responder. It also covers alias handling, coordinate precedence, and error-avoidance behavior, making it complete for a tool with 6 parameters and two input modes.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% with per-parameter descriptions, but the tool description adds richer semantics: it clarifies that lat/lng are paired and required together, that place/q/query/name are interchangeable aliases, and that coordinates take precedence when both are supplied. This goes beyond the schema's isolated field descriptions.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a clear verb+resource: 'Mint the canonical, vendor-neutral address (cell64) for a real-world place' and also 'returns the topic-grouped inventory of bands and algorithms recallable there.' It explicitly differentiates from siblings by directing object-identity lookups to emem_entity and single-shot chain calls to emem_ask.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicit 'When to use' section says 'Use whenever the input refers to a real-world location and the next step needs the cell64 identifier or wants to know which bands are available before recalling.' It also names concrete exclusions: use emem_entity for object identity, and emem_ask for the packaged chain.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
emem_memory_bundleCompose a signed multi-fact memory bundleAInspect
Compose N (cell, band, tslot?) triples into ONE signed envelope. Each triple runs through the standard auto-materialize recall path; the resulting fact_cids are bundled into a content-addressed envelope and the responder signs over the full receipt. The composed bundle_token is emem:bundle:<bundle_cid>, a single rebindable string that cites the whole set. Memory algebra: the merge operation (https://emem.dev/docs/model.html).
When to use: Call when the agent wants to cite multiple (place, band, vintage) facts as one handle. The bundle stays verifiable offline via /v1/verify_receipt (the receipt covers all cited fact_cids and cells). Use this instead of N separate emem_memory_token composers when the citation is conceptually one thing (e.g. "the EUDR-relevant baseline for these 8 plots at 2020-12-31"). Caps at 256 triples per call, and the response reports members and resolved so a bundle that only partly resolved is visible without walking every citation.
Example arguments: {"triples":[{"cell":"defi.zb4d9.pefa.zf619","band":"copdem30m.elevation_mean"},{"cell":"defi.zb493.xoso.zcb6a","band":"indices.ndvi"}],"purpose":"audit baseline 2026"}
| Name | Required | Description | Default |
|---|---|---|---|
| scope | No | Multi-tenant scope `{user_id, agent_id, run_id, org_id}`, applied to EVERY triple's underlying recall so the whole bundle cites only facts written under that four-tuple. | |
| purpose | No | Optional human-readable purpose string. Included in the bundle_cid preimage so the same triples + different purposes produce distinct CIDs. | |
| triples | Yes | One to 256 (cell, band, tslot?) triples to bundle. Each entry is recalled through the standard auto-materialize path; the bundle envelope cites every resulting fact_cid. 257 or more is a typed 400: the token is O(1) in size for any N, but covering N facts costs ceil(N/256) calls, so plan round trips rather than meeting the cap mid-run. |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations provide readOnlyHint=false and destructiveHint=false, but the description goes far beyond them. It discloses that the responder signs over the full receipt, the bundle_token format, offline verifiability via /v1/verify_receipt, partial-resolution visibility via members/resolved, and CID preimage behavior with purpose. This is rich behavioral context crucial for an agent invoking the tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is structured with a clear opening, a 'When to use' section, and an example. It is longer than average, but the complexity of the tool merits detail. The 'Memory algebra: merge operation' link is somewhat cryptic and not integrated, slightly reducing conciseness, but overall every major sentence earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given no output schema, the description explains expected response fields (members and resolved) and verification via verify_receipt. It covers scope application, partial resolution, limits, and alternative tools. For a complex nested-object tool with no output schema, this description is unusually complete and actionable.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, with each parameter (scope, purpose, triples) already well described including the 256 cap and typed-400 failure. The description adds a practical example arguments block but does not materially introduce new parameter semantics beyond the schema. Baseline 3 is appropriate because the schema does the heavy lifting.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with a specific verb+resource: 'Compose N (cell, band, tslot?) triples into ONE signed envelope.' It clearly distinguishes from siblings by explicitly stating to use this 'instead of N separate emem_memory_token composers' when the citation is conceptually one thing. The title and body both reinforce a distinct, well-scoped purpose.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
A dedicated 'When to use' section explicitly states: 'Call when the agent wants to cite multiple (place, band, vintage) facts as one handle.' It also names the alternative (N separate emem_memory_token composers) and provides a concrete example ('EUDR-relevant baseline for these 8 plots'). It adds practical constraints like the 256-triple cap and round-trip planning advice.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
emem_memory_contradictionsScan for multi-attester disagreementARead-onlyIdempotentInspect
Surface where the corpus DISAGREES with itself (algebra: competing evidence). When two or more independent sources signed different values for the same place + band + time, this returns that disagreement with a 0–1 severity score and citations to every disputed fact, instead of silently picking one value and hiding the conflict. The opposite of a confident single answer: it tells you when not to trust one. Read the SCOPE before quoting a zero: by default this asks only whether two DISTINCT attesters disagree, so one responder answering an address from two different upstreams is not counted until you pass include_same_attester_sources: true.
When to use: Call this when trust matters before you rely on a number, 'is there disagreement about X', 'do the sources corroborate this', 'audit this claim', or 'find contradictory observations in region Y'. Use it to decide whether a fact is well-corroborated or contested. Narrow with cell_prefix (e.g. "defi.zb5") for a region and band for one family; min_severity filters out trivial differences. Severity is per band kind: scalar = spread over the band's range, vector = 1 − mean cosine, categorical = 1 − mode share. On a single-responder deployment add include_same_attester_sources: true: the likeliest real disagreement there is one signer answering from two different providers, and the default scope cannot report it. Each record names its disagreement_scope — multi_attester is two witnesses, same_attester_provider_substitution is one witness that changed instruments. The receipt cites every disputed CID, follow up with emem_diff to quantify a pair, or (with the refinement loop on) read the emitted disagrees_with edge via emem_edges_recall.
Example arguments: {"cell_prefix":"damO","band":"indices.ndvi","min_severity":0.2}
| Name | Required | Description | Default |
|---|---|---|---|
| band | No | Band key filter (e.g. `indices.ndvi`). Omit to include all bands. | |
| limit | No | Max contradictions to return. | |
| cell_prefix | No | Bytewise prefix on cell64 (e.g. `defi.zb5f9`). Omit to scan the whole corpus up to the scan cap. | |
| min_severity | No | Severity floor in [0, 1]. 0 = report every disagreement, 1 = only flagrant. Severity scoring is per band kind: scalar (max-min over band range), vector (1 - mean cosine), categorical (1 - mode share). | |
| window_unix_s | No | [lo, hi] inclusive Unix-seconds filter on attestations' signed_at, all disagreeing attestations must fall in the window. | |
| include_same_attester_sources | No | Also report keys where ONE attester answered the same address from two different upstreams. Default false, which scans only for disagreement between two or more DISTINCT attesters — so on a single-responder corpus a zero here means the narrower question was answered, not that nothing disagrees. Set true and a key qualifies when the facts differ in `derivation.fn_key` or in their `sources[].scheme` set; the same provider re-signed is a refresh, not a disagreement, and stays excluded. Each record carries `disagreement_scope` and a `providers[]` list naming what changed. |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the annotations (readOnlyHint, idempotentHint, destructiveHint=false), the description discloses critical behavioral nuances: the default scope excludes same-attester sources, the zero result means something specific, severity is computed differently per band kind, and single-responder deployments need a different flag. This adds substantial context not present in annotations, and there is no contradiction.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is long but well-structured: purpose first, then usage, then an example. Every sentence adds meaningful information or useful nuance, and it never repeats empty phrases. The text is front-loaded with the core behavior and includes a punchy summary ('The opposite of a confident single answer') that efficiently communicates intent.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given no output schema, the description adequately describes return values (severity, citations, `disagreement_scope`, providers) and covers edge cases (single-responder deployments, same-attester sources). It also references follow-up tools, making the description complete for a tool with this complexity and parameter count.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema already covers 100% of parameters with rich descriptions, so the baseline is 3. The description adds extra value by giving example arguments (`{"cell_prefix":"damO",...}`), explaining how `cell_prefix` and `band` narrow the scan, and providing a conditional usage note for `include_same_attester_sources`. While some param details overlap with schema, the example and contextual guidance push it above baseline.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with a crystal-clear verb+resource: 'Surface where the corpus DISAGREES with itself', then elaborates with return details (0-1 severity score, citations) and contrasts with the opposite behavior ('instead of silently picking one value'). This fully differentiates it from sibling tools like emem_recall or emem_ask, which answer with a single confident value.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
An explicit 'When to use' section lists concrete triggers ('trust matters', 'is there disagreement', 'audit this claim') and even states the alternative follow-ups ('emem_diff', 'emem_edges_recall'). It also warns against misinterpreting a zero result and instructs when to set `include_same_attester_sources: true`, leaving no doubt about proper invocation context.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
emem_memory_tokenCompose a memory_token citation handleARead-onlyIdempotentInspect
Mint a citation handle, emem:fact:<cell64>:<fact_cid> (or :<state_cid>), that any agent or LLM resolves to the byte-identical signed object. The antidote to referential drift on the value side: hand this one string to another agent instead of re-describing the fact. Validates both components are non-empty and free of the : separator. Memory algebra: the cite operation (https://emem.dev/docs/model.html).
When to use: Call when the agent wants a single rebindable string to cite a place plus an attested fact across messages, threads, agents, or tools, without re-fetching or re-describing it. Pair with emem_verify_receipt on the receiving end to check the signed payload. To cite an OBJECT rather than a single reading, use emem_entity's emem:entity: token. FOR MANY FACTS, USE emem_memory_bundle INSTEAD, and this is a measured cost rather than a style preference. Measured over 131 scalar facts at 12 places across 57 bands: a token is 84 characters and 51 LLM tokens, while the signed value it points at averages 10.9 characters and 5.4 LLM tokens. So N individual tokens cost roughly 9.5x the CONTEXT of simply pasting the N numbers (7.7x by characters; the gap is BPE fragmenting a base32 cid, and LLM tokens are the unit that bills a window), and an N-token prompt hits the context wall SOONER than the plain values would. A bundle is 38 characters and 23 LLM tokens at ANY N up to 256 and resolves in one round trip: it beats individual tokens from N=1 and beats pasting the plain values from N>=5. Individual tokens are for citing ONE fact you must be able to verify later; they are the wrong tool for carrying a set.
Example arguments: {"cell":"defi.zb493.xoso.zcb6a","fact_cid":"cxjiu7l54ujzrpnekp24n4534yojpue4mprddbvevnqtti3lh5bq"}
| Name | Required | Description | Default |
|---|---|---|---|
| band | No | Optional band key. When set, the minted citation carries the band's tamper-provenance block (class, deterministic, tamper_evidence, trust_rank) so the receiving agent sees the trust class without a resolve round-trip. | |
| cell | Yes | cell64, neither component may contain `:`. | |
| fact_cid | Yes | 52-char base32-nopad-lowercase content-id of the fact (full 32-byte blake3). | |
| observed_on | No | The fact's source capture date (YYYY-MM-DD) as `/v1/recall` reports it in `sources[].captured_at`. Supplied together with `band` it additionally mints the self-describing `descriptor_token`. A wrong date forges nothing: resolve binds the date to the signed fact and answers 409 on a mismatch. |
Output Schema
| Name | Required | Description |
|---|---|---|
| cell | Yes | |
| docs | No | |
| grammar | No | The token grammar, so the form can be parsed rather than pattern-matched. |
| fact_cid | Yes | |
| cell_token | No | The address alone, when you mean the place rather than an observation of it. |
| memory_token | Yes | The citation to paste: emem:fact:<cell64>:<fact_cid>. Copy it verbatim; a hand-assembled token that is one character wrong still reads as a citation and resolves to nothing. |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, idempotentHint=true, and destructiveHint=false. The description adds substantial behavioral context beyond that, including the token format `emem:fact:<cell64>:<fact_cid>`, validation rules (non-empty, no `:` separator), the resolution guarantees, and the measured cost/context tradeoff. This significantly exceeds the annotation baseline and contains no contradictions.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is front-loaded with a clear purpose statement and then structured into 'When to use', cost analysis, and example sections. It is longer than many tool descriptions, but every part serves a decision-making or usage purpose. The cost analysis is quite detailed and could be trimmed slightly, but it is directly relevant to choosing between this tool and emem_memory_bundle, so it earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description is exceptionally complete: it explains the purpose, when to use, when not to use, alternatives, cost characteristics, validation behavior, pairing with emem_verify_receipt, and provides an example. Since an output schema exists, the absence of return-value details is acceptable. There are no significant gaps for an agent to misuse this tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema already provides 100% coverage with descriptions for all four parameters, so the baseline is 3. The description adds value with a concrete example argument set and clarifies how the parameters compose into the token structure. It also mentions the validation constraint on components. It doesn't deeply expand each parameter beyond the schema, but it reinforces and exemplified them well.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with a precise verb and resource: 'Mint a citation handle... that any agent or LLM resolves to the byte-identical signed object.' It clearly distinguishes from siblings by naming emem_entity and emem_memory_bundle as alternatives for different use cases, so the agent knows exactly what this tool does and how it differs.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The 'When to use' section is explicit and detailed: 'Call when the agent wants a single rebindable string to cite a place plus an attested fact...' It also provides alternative tools for objects (emem_entity) and many facts (emem_memory_bundle), plus a strong when-not-to-use warning: 'wrong tool for carrying a set.' This gives clear decision rules.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
emem_memory_token_resolveDereference a memory_token in one round-tripARead-onlyIdempotentInspect
Parse a emem:fact:<cell64>:<fact_cid> citation handle and return the reading it cites. value, unit, band and kind are on the response at the TOP level, alongside the full signed fact body they were lifted from. Saves the agent from string-splitting the token and chaining GET /v1/facts/<cid> manually. Memory algebra: the resolve operation (https://emem.dev/docs/model.html).
When to use: Call when an agent receives a memory_token from another agent (or out of a previous turn) and wants the value behind it. Read value for the reading and unit for what it is measured in; both are always present, and an explicit null means the fact genuinely has none (kind: "absence" has no value, and most index bands including NDVI are dimensionless) rather than that the field is missing. For a scalar, quote value_verbatim instead: it is the same number as the exact decimal string it was signed as, and re-typing a JSON number is where measured precision loss comes from. The response also carries the parsed cell + fact_cid, the full fact body, and the stable fact_url an agent can hand to any other peer. 404 with a typed code if the responder doesn't hold the cid; try /v1/fetch with the cid then, or paste the token at a mirror.
Example arguments: {"token":"emem:fact:defi.zb493.xoso.zcb6a:cxjiu7l54ujzrpnekp24n4534yojpue4mprddbvevnqtti3lh5bq"}
| Name | Required | Description | Default |
|---|---|---|---|
| token | Yes | A `emem:fact:<cell64>:<fact_cid>` citation handle to dereference. |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint, idempotentHint, and destructiveHint. The description adds substantial context: response fields at TOP level, explicit null semantics for absence/dimensionless values, the precision caveat for value_verbatim, typed 404 behavior, and the stable fact_url. This is far beyond the annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Although the description is long, it is densely informative and well-structured: purpose, response semantics, when-to-use, edge cases (null, precision), error handling, and an example. No filler; every sentence earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple one-parameter tool with no output schema, the description covers the full context: response shape, null handling, precision loss, error codes, fallback routes, and a worked example. It leaves no important gap for an agent selecting or invoking this tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema describes the single token parameter with 100% coverage, so baseline is 3. The description adds a concrete example argument, explains the token format components (cell64, fact_cid), and details how the parameter is parsed and what response semantics follow, enriching the schema description meaningfully.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool 'Parse a emem:fact:... citation handle and return the reading it cites' with a specific verb and resource. It also contrasts with manually chaining GET /v1/facts/<cid>, distinguishing it from sibling tools like emem_memory_token.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides an explicit 'When to use' section: 'Call when an agent receives a memory_token from another agent... and wants the value behind it.' It also gives fallback advice for 404s (try /v1/fetch or a mirror). However, it does not explicitly name sibling alternatives for when not to use, so it falls just short of a 5.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
emem_recallRecall facts at a cell (auto-materializes on miss)AIdempotentInspect
Read the signed facts at a canonical address (cell64); auto-materializes on a miss for any band with a registered materializer. A fact_cid names one signed attestation, so a recalled fact is citeable and re-verifiable rather than a paraphrase: resolving it anywhere returns those exact bytes. It is NOT a fingerprint of the observation. The digest covers the responder's key and the moment it signed, so two responders that measure the same thing mint different fact_cids and a cid resolves only at the responder that signed it; use emem_entity for identity that crosses responders. Pass deterministic:true (or a provenance class list) to keep only facts recomputable from the cited raw source, with no model or human in the loop. In the memory algebra this is ensure(cell, bands), not get: state what must exist and the responder reuses or materializes.
When to use: Call after emem_locate (or with a known cell64). Returns every Primary fact stored at that (cell, band, tslot). IMPORTANT: if the cell has no fact yet for a requested band AND that band has has_materializer=true (per emem_coverage_matrix / emem_materializers), the responder fetches the upstream value, signs it under its identity, persists it, and returns it in the same response (slower on the first call while the upstream is fetched; fast once cached). So for any wired band you can recall ANY cell on Earth without seeding, just pass bands: [<band>]. The response carries materialize_notes listing what was just fetched. Empty result with no notes means the band has no materializer at this responder.
Example arguments: {"cell":"damO.zb000.xUti.zde78","bands":["weather.temperature_2m","copdem30m.elevation_mean"]}
| Name | Required | Description | Default |
|---|---|---|---|
| lat | No | Explicit latitude, an alternative to `cell`; paired with `lng`. | |
| lng | No | Explicit longitude, paired with `lat`. | |
| band | No | optional single band key, convenience alias for bands:[band]. Use when you want exactly one band (e.g. 'geotessera.2020', 'modis.ndvi_mean') and would otherwise have to wrap it in an array. Both `band` and `bands` are accepted; if both are given they are merged. | |
| cell | Yes | cell64 string, e.g. 'damO.zb000.xUti.zde78' | |
| bands | No | optional band keys to filter, e.g. ['indices.ndvi','geotessera'] | |
| place | No | Free-text place name, an alternative to `cell`. | |
| scope | No | Optional multi-tenant scope {user_id, agent_id, run_id, org_id}. When at least one field is set, the recall is FILTERED to facts written under the same four-tuple (a recall scoped to {user_id:'u1'} sees only u1's facts, never another tenant's and never globally-written facts) AND the signed receipt binds the scope. Omit (or send {}) for the global, pre-v0.0.8 recall. | |
| tslot | No | optional time slot (band-tempo-relative integer offset from emem epoch) | |
| cell64 | No | Alias for `cell`. | |
| include | No | Opt-in response expansion. include:['provenance'] attaches each fact's tamper-provenance class, which is what `deterministic` and the `provenance` filter select ON: without it you can filter by class and never be told which class a returned fact is. include:['freshness'] attaches an advisory per-fact freshness block: a Q(Δt) staleness score from the band's physics decay kernel (the same one /v1/temporal_route ranks bands with), so an agent learns how stale each reading is in the call that returns it. Advisory only; it does NOT enter the receipt. include:['edges'] attaches each fact's typed temporal edges and threads their CIDs into the receipt. Absent leaves the response byte-identical to the pre-v0.0.9 recall. | |
| provenance | No | Tamper-provenance filter: return only facts whose band's provenance class is in this list. `attested_execution` is a device reading trusted through its verified OS execution trace and platform attestation (not recomputable). Applied BEFORE the receipt is signed, so the receipt covers exactly the returned facts; `bands_already_attested_at_cell` stays unfiltered so you still see what else exists at the cell. | |
| as_of_tslot | No | Bi-temporal valid-time bound. Returns the latest fact per (cell,band) whose tslot ≤ as_of_tslot, answers `what did this place look like AS OF date X`. Conflicts with an explicit `tslot` when as_of_tslot < tslot (rejected with code:`invalid_temporal_bound`). | |
| deterministic | No | Sugar over `provenance`: true keeps only facts any third party can recompute from the cited raw source (direct_sensor + deterministic_index); false keeps the rest (attested_execution + model_output + human_curated + unclassified). Composable with `provenance` (intersection). | |
| as_of_signed_at | No | Bi-temporal transaction-time bound. RFC 3339 string. Returns only facts whose `signed_at` ≤ as_of_signed_at, answers `what did emem KNOW as of system-date Y`. Malformed strings are rejected with code:`invalid_signed_at_format`. |
Output Schema
| Name | Required | Description |
|---|---|---|
| facts | Yes | Signed facts at the cell, ordered per fact_order. |
| receipt | Yes | ed25519 receipt over the returned fact_cids. Verify offline; select the rule from its preimage_version. Store and forward it byte-for-byte: preimage_version 2 binds every field it covers, including merkle_proof, so a reshaped receipt reports signature_valid:false on data nobody tampered with. |
| fact_order | Yes | The ordering contract for facts, e.g. tslot_ascending. Stated rather than implied so nothing depends on position by accident. |
| current_by_band | No | Per band, the fact_cid with the highest tslot: the current reading. Unslotted facts are excluded, since tslot 0 means undated rather than oldest. |
| materialize_notes | No | |
| bands_already_attested_at_cell | No | What else is readable here without materialising, so an empty result can be told apart from a wrong band name. |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description goes well beyond annotations by detailing auto-materialization, the fact_cid semantics (not a fingerprint, responder-specific), digest coverage, the deterministic/provenance filters, scoping behavior, and the materialize_notes response field. This is rich, non-obvious behavioral context.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is quite long but well-structured with clear sections ('When to use', 'IMPORTANT', example), and it front-loads the core purpose. Every sentence earns its place given the tool's complexity, though it could be trimmed slightly without losing meaning.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a 14-parameter tool with an output schema, the description covers all critical contextual aspects: return behavior (materialize_notes), error conditions (in schema but explained elsewhere), scope rules, temporal bounds, and response expansion options. It leaves no obvious gaps.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so the baseline is 3. The description adds value by explaining the interaction of deterministic with provenance, the 'IMPORTANT' note about band materializers enabling recall of any cell, and the example arguments which illustrate real parameter combinations.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's action ('Read the signed facts at a canonical address (cell64)') and its resource, while also noting the auto-materialization behavior. It distinguishes itself from siblings by explicitly referencing emem_entity for crossing responders, and the title and description align.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Provides explicit 'When to use' guidance: 'Call after emem_locate (or with a known cell64)'. It also contrasts with alternatives ('use emem_entity for identity that crosses responders') and explains the memory algebra semantics ('ensure(cell, bands), not get').
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
emem_toolsWhat tools exist here, and when to reach for eachARead-onlyIdempotentInspect
The map of emem's tool surface, and the only tool you need to find the rest. Returns the working loop in the order you walk it (name a thing, ground it, cite it, resolve it, verify it, check for drift), then every other tool grouped by the question it answers, each with its one-line trigger. Pass name to get one tool's full input schema and a runnable example, so you can use a tool without loading all of the descriptors into context. This endpoint advertises the core loop only; the Earth-observation, search, embedding and log tools are catalogued here and remain callable by name.
When to use: Call this FIRST when you do not know which emem tool answers the question, or when you need a capability you cannot see in your tool list. This responder advertises a small core loop by default rather than its full catalog, so a tool being absent from your list does not mean it is absent from the server. Pass q to search by topic (ndvi, cloud, flood, verify), name for one tool's exact schema, or no arguments for the whole map. If you want the full catalog registered as callable tools instead, reconnect to the /mcp/full endpoint; for a one-shot answer without picking a primitive at all, use emem_ask.
Example arguments: {"q":"ndvi"}
| Name | Required | Description | Default |
|---|---|---|---|
| q | No | Free-text filter over tool names, titles and trigger text, e.g. `ndvi`, `cloud`, `flood`, `verify`, `token`. Plain lowercased substring over name + title + description + trigger text, not fuzzy and not stemmed: `ndvi` hits, `vegetation index` only hits tools that spell that phrase. Combines with `shape`/`bundle`/`category`/`tier` as AND, so an over-narrow combination answers with an empty catalog rather than an error. | |
| name | No | Return the full descriptor for exactly this tool (input schema, runnable example, annotations), e.g. `emem_ndvi`. Use this when you already know the name and want its schema without loading the whole catalog. It SHORT-CIRCUITS: when `name` is set every other argument here is ignored, so `{name, q}` is not a search within one tool. A name this responder does not carry is not an error status, you get a body with `did_you_mean` holding up to five names that share a substring with what you asked for. | |
| tier | No | Which slice to list. Defaults to `all`, so this tool shows the whole surface even when the endpoint advertises only the core loop, and an `extended` tool you find here is callable by name through tools/call whether or not your host listed it. Pass `core` to see only what a default connection advertises. | |
| shape | No | Filter by what the answer looks like, which is usually the real question. `scalar` is one number at one address; `raster` is a gridded field over an area; `timeseries` is a value per timestep; `vector` is a learned embedding; `identity` is a canonical name for a thing; `token` is a citation handle; `proof` checks one. | |
| bundle | No | Filter by the job you are doing. Call with no arguments first to see each bundle and its size. | |
| category | No | Filter to one category. This is about the shape of the job, NOT about safety: 13 tools outside `write` declare `readOnlyHint: false` because reading a cold address can materialise or mint as a side effect, so `category: "read"` is not a safe-tools filter. Read each result's `annotations.readOnlyHint` for that. |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description goes beyond the annotations by explaining key behaviors: the endpoint advertises only the core loop by default, tool absence from a list does not mean absence from the server, name short-circuits and ignores other arguments, and unknown names return did_you_mean rather than an error. These are important non-obvious traits that help avoid misuse.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is longer than typical but well-structured with clear sections ('When to use', 'Example arguments') and every sentence carries meaningful behavioral or usage nuance. It's dense but not bloated, though some redundancy with the schema could be trimmed.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the absence of an output schema, the description thoroughly explains what returns are expected (working loop, grouped tools, one-line triggers, full schema with name). It also covers edge cases like the did_you_mean response and tier behavior, making the tool effectively self-documenting.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% and each parameter already has a detailed description, including enums and nuances (e.g., name's short-circuit behavior, category not being a safety filter). The description adds little beyond summarizing which argument to use when, so the baseline of 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool is a map of emem's tool surface, returning the working loop and all other tools grouped by the question they answer. It distinguishes itself from siblings by being the discovery tool, and explicitly names emem_ask as an alternative for one-shot answers.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides explicit guidance: 'Call this FIRST when you do not know which emem tool answers the question, or when you need a capability you cannot see in your tool list.' It also explains when to use q, name, or no arguments, and notes alternatives like reconnecting to /mcp/full or using emem_ask.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
emem_verify_receiptServer-side ed25519 receipt verifierARead-onlyIdempotentInspect
Verify a signed receipt envelope server-side: rebuilds the canonical preimage under the rule the receipt's OWN preimage_version names (v2, current: tagged length-prefixed segments plus a segment binding the inclusion proof; v1: the same without that segment; absent/0: the legacy request_id | served_at | primitive | cells, | fact_cids, concatenation), runs ed25519 over the embedded pubkey + signature, and returns {valid, reason, failure_detail, signature_valid, merkle_proof_valid, signer_pubkey_b32, preimage_blake3_hex}. A RECEIPT IS BYTE-FOR-BYTE OR NOTHING: v2 binds the proof so it cannot be stripped in transit, and the cost of that is that any reshaping — dropping a field, re-keying it, summarising it — invalidates the signature by design and looks exactly like tampering. Use when the in-browser /verify path is blocked (CDN offline, agent runtime has no crypto) or when you want a server-side audit of a third-party receipt. Memory algebra: the verify operation (https://emem.dev/docs/model.html).
When to use: Pass a receipt object EXACTLY as returned by the read primitive, whole and unmodified (signature can be byte[] or sig_b32; pubkey can be byte[] or responder_pubkey_b32, the verifier tolerates those two spellings and nothing else). Do not omit merkle_proof, and do not reshape any field: under preimage_version 2 that returns signature_valid: false on data nobody tampered with. Exactly two omissions reach this failure rather than a 400: merkle_proof and preimage_version (whose absence deserialises to 0 and silently selects the v0 rule, so the inclusion proof still walks while the signature reads as forged). When this responder holds the cited fact it can tell reshaping from tampering and says so — reason: receipt_reshaped_after_signing with a failure_detail naming the field, instead of signature_invalid — but it never accepts such a receipt, and an offline verifier has no way to make that distinction at all. Optionally override pubkey_b32 to assert verification against a specific signer. Returns 200 with valid: false when the signature fails, never 4xx for a structurally-well-formed bad signature.
Example arguments: {"receipt":{"primitive":"recall","served_at":"2026-05-14T12:00:00Z","request_id":"req-1","cells":["damO.zb000.xUti.zde78"],"fact_cids":["qbq2dy7adyuvozs7s3gqg5jnpkcwq2duegltjyhbxsivuqbpjofq"],"signature":[1,2,3],"responder_pubkey":[4,5,6]}}
| Name | Required | Description | Default |
|---|---|---|---|
| facts | No | The fact value(s) you intend to rely on. Each is content-addressed and checked for membership in the receipt's `fact_cids`, so a genuine receipt presented beside a tampered fact answers `valid:false` / `fact_mismatch`. Omit it and only the signature is checked, which a doctored fact survives. | |
| receipt | Yes | The signed receipt envelope (as returned by any read primitive). Must carry primitive/served_at/request_id/cells/fact_cids and either `signature` byte[] + `responder_pubkey` byte[] or their b32 string forms. | |
| pubkey_b32 | No | Optional explicit responder pubkey (base32). When omitted, uses the receipt's embedded pubkey/responder fields. | |
| current_responder_epoch | No | The responder key epoch you currently trust, from `/v1/manifests`. Produces an advisory `key_epoch_advisory` comparison against the receipt's epoch; a mismatch is reported, never rejected. |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the read-only and idempotent hints, the description discloses crucial behavioral details: the byte-for-byte verification rule, preimage_version handling (v2/v1/absent), the distinction between reshaping and tampering with specific failure reasons, the 200-with-valid:false behavior for bad signatures versus 4xx, and the effect of omitting merkle_proof or preimage_version. This richness significantly exceeds the annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is long but well-structured with clear paragraphs and a logical flow from purpose to usage to example. While some points are repeated (e.g., byte-for-byte warning appears twice), each section adds substantial value, and the length is justified by the complexity of the verification semantics. It is slightly verbose but not wasteful.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
This tool has no output schema, so the description must explain return values, and it does: it lists all seven fields in the response object. It also covers failure modes, edge cases (omitted fields), the effect of optional parameters, and even includes an example. For a complex tool with nested objects and no output schema, the description is outstandingly complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Although the schema already covers all parameters, the description adds critical semantics: the two accepted spellings for signature and pubkey, the prohibition on omitting merkle_proof, the advisory nature of current_responder_epoch, and how the facts parameter behaves with a doctored fact. This goes well beyond the schema descriptions and materially aids correct invocation.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with 'Verify a signed receipt envelope server-side', which is a specific verb+resource statement that clearly identifies the tool's function. It also details the verification algorithm and distinguishes itself from in-browser verification alternatives, making the purpose unambiguous.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explicitly states when to use this tool: 'Use when the in-browser /verify path is blocked... or when you want a server-side audit of a third-party receipt.' It also provides detailed 'When to use' instructions about passing the receipt exactly as returned. However, it does not explicitly name an alternative tool or provide a 'when not to use' exclusion, so it falls just short of a 5.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Claim this connector by publishing a /.well-known/glama.json file on your server's domain with the following structure:
{
"$schema": "https://glama.ai/mcp/schemas/connector.json",
"maintainers": [{ "email": "your-email@example.com" }]
}The email address must match the email associated with your Glama account. Once published, Glama will automatically detect and verify the file within a few minutes.
Control your server's listing on Glama, including description and metadata
Access analytics and receive server usage reports
Get monitoring and health status updates for your server
Feature your server to boost visibility and reach more users
For users:
Full audit trail – every tool call is logged with inputs and outputs for compliance and debugging
Granular tool control – enable or disable individual tools per connector to limit what your AI agents can do
Centralized credential management – store and rotate API keys and OAuth tokens in one place
Change alerts – get notified when a connector changes its schema, adds or removes tools, or updates tool definitions, so nothing breaks silently
For server owners:
Proven adoption – public usage metrics on your listing show real-world traction and build trust with prospective users
Tool-level analytics – see which tools are being used most, helping you prioritize development and documentation
Direct user feedback – users can report issues and suggest improvements through the listing, giving you a channel you would not have otherwise
The connector status is unhealthy when Glama is unable to successfully connect to the server. This can happen for several reasons:
The server is experiencing an outage
The URL of the server is wrong
Credentials required to access the server are missing or invalid
If you are the owner of this MCP connector and would like to make modifications to the listing, including providing test credentials for accessing the server, please contact support@glama.ai.
Discussions
No comments yet. Be the first to start the discussion!
Related MCP Servers
- Alicense-qualityBmaintenanceVerifiable action receipts for AI agents — agents sign claims locally, an independent witness countersigns and timestamps, anyone can verify offline.15MIT
- Flicense-qualityAmaintenanceLocal-first memory for AI agents with evidence-backed recall, deterministic trust verdicts, self-inspection, and a tamper-evident audit history.3
- Alicense-qualityAmaintenanceLocal-first, encrypted memory for AI agents, with cryptographic forgetting.3Apache 2.0
- Alicense-qualityBmaintenanceVerified memory for AI agents — agents propose memories that are quarantined until verified against evidence, and recall() returns only trusted, fresh, and in-scope facts, preventing poisoned or hallucinated data from spreading.141MIT
Your Connectors
Sign in to create a connector for this server.