VerifiMind PEAS - RefleXion Trinity
Server Details
X-Z-CS AI validation with auditable reasoning. 8 active tools; 5 in maintenance. v0.5.66
- Status
- Healthy
- Uptime
- 98.5% over 71 days
- Last Tested
- Transport
- Streamable HTTP · MCP 2025-11-25
- URL
- Repository
- creator35lwb-web/VerifiMind-PEAS
- GitHub Stars
- 2
- Server Listing
- VerifiMind PEAS
TDQS
Scored across 13 tools
The three consult_agent_* tools are clearly differentiated by persona (CS security, X innovation, Z ethics), but run_full_trinity overlaps heavily with them, differing only in orchestration scope. The six template tools include near-neighbors like get_prompt_template vs export_prompt_template, and the three coordination_* tools are functionally identical in that all simply return a denial.
Most tools follow verb_noun (get_prompt_template, list_prompt_templates, register_custom_template), but the coordination tools invert the pattern (coordination_handoff_create, coordination_team_status) and the template noun alternates between 'template' and 'prompt_template'. Readable overall, but no single predictable convention.
13 tools is a reasonable size for a validation-plus-template-registry server, and each template tool maps to a distinct operation. However, three of the thirteen are permanently disabled no-ops, so the effective working surface is smaller than advertised.
The prompt-template registry covers list/get/register/import/export/stats but has no update or delete, leaving a lifecycle gap. More significantly, the entire coordination subsystem (create/read/status) is contained and non-functional, which removes a stated capability from the surface with no alternative provided.
Available Tools
13 toolsconsult_agent_csConsult Agent CsAInspect
Consult CS Security agent for security validation and Socratic interrogation.
CS Security specializes in:
Security vulnerability assessment
Attack vector identification
Data security review
System integrity analysis
Socratic questioning (challenging assumptions)
BYOK (v0.4.5): Pass llm_provider and api_key to use your own LLM. If only api_key is provided, the provider is auto-detected from the key prefix. Keys are ephemeral (never stored) and garbage collected after the call.
| Name | Required | Description | Default |
|---|---|---|---|
| detail | No | standard | |
| api_key | No | Optional API key for the provider (ephemeral, never stored) | |
| context | No | Optional additional context or background | |
| user_uuid | No | ||
| concept_name | Yes | Short name or title of the concept | |
| llm_provider | No | Optional LLM provider override ('groq', 'anthropic', 'openai', 'gemini', 'mistral', 'ollama', 'mock') | |
| prior_reasoning | No | Optional reasoning from X and Z agents to consider | |
| concept_description | Yes | Detailed description of the concept |
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the behavioral disclosure burden. It explicitly states that keys are ephemeral (never stored, garbage collected) and describes the agent's Socratic nature. It does not detail side effects, but as a consult agent, read-only behavior is implied. The transparency is adequate.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is concise, front-loaded with the primary purpose, and uses a bullet list for specializations and a separate paragraph for BYOK. Every sentence contributes useful information without redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the presence of an output schema and a clear purpose statement, the description covers the essential context. It misses explicit guidance on when to choose this agent over siblings and does not mention rate limits or error scenarios, but these are minor given the output schema and the straightforward nature of a consultation tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 75%, so the schema documents most parameters. The description adds value by explaining the BYOK mechanism, including provider auto-detection and ephemerality, which clarifies the llm_provider and api_key parameters beyond their schema descriptions.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states 'Consult CS Security agent for security validation and Socratic interrogation' and lists specific specializations. The resource (CS Security agent) and action (consult, interrogate) are precise, and the scope differs from sibling agents like consult_agent_x and consult_agent_z.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Provides clear context on the intended use (security validation, Socratic questioning) and the BYOK usage, but does not explicitly state when NOT to use this vs. other agents or mention alternatives. The context is clear, but exclusions are missing.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
consult_agent_xConsult Agent XAInspect
Consult X Intelligent agent for innovation and strategy analysis.
X Intelligent specializes in:
Innovation potential assessment
Strategic value analysis
Market opportunity identification
Competitive positioning
Growth potential evaluation
BYOK (v0.4.5): Pass llm_provider and api_key to use your own LLM. If only api_key is provided, the provider is auto-detected from the key prefix. Keys are ephemeral (never stored) and garbage collected after the call.
| Name | Required | Description | Default |
|---|---|---|---|
| detail | No | standard | |
| api_key | No | Optional API key for the provider (ephemeral, never stored) | |
| context | No | Optional additional context or background | |
| user_uuid | No | ||
| concept_name | Yes | Short name or title of the concept | |
| llm_provider | No | Optional LLM provider override ('groq', 'anthropic', 'openai', 'gemini', 'mistral', 'ollama', 'mock') | |
| concept_description | Yes | Detailed description of the concept |
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the transparency burden. It discloses BYOK behavior: how llm_provider and api_key interact, auto-detection from key prefix, and that keys are ephemeral and garbage-collected. It does not mention side effects, safety profile, or what the agent returns, leaving gaps.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is compact and well-organized: a purpose statement, a bulleted specialization list, and a short BYOK block. Every sentence adds value; no fluff or redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool with an output schema, the description adequately covers purpose and BYOK details. It misses explicit when-to-use guidance relative to sibling agents and does not state expected return behavior, though the output schema partially compensates. Overall adequate but not complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 71% (5/7 parameters have descriptions). The description adds meaningful detail for api_key and llm_provider (auto-detection, ephemeral key lifecycle) not present in the schema. It does not clarify detail, context, or user_uuid beyond what the schema already says.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a clear verb ('Consult') and resource ('X Intelligent agent for innovation and strategy analysis') and lists five specific capability areas. It distinguishes by naming the agent 'X' and its specialization, though it does not explicitly contrast with sibling agents (cs, z).
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The specialization list implies when to use this tool (innovation, strategy, market analysis, etc.), giving clear context. However, there is no explicit 'use when' statement, no alternatives mentioned, and no exclusions or conditions for preferring a sibling agent.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
consult_agent_zConsult Agent ZAInspect
Consult Z Guardian agent for ethical review and Z-Protocol enforcement.
Z Guardian specializes in:
Ethical implications assessment
Privacy and data protection review
Bias and fairness analysis
Social impact evaluation
Z-Protocol compliance verification
Z Guardian has VETO POWER. If veto_triggered is True, the concept should not proceed as it crosses ethical red lines.
BYOK (v0.4.5): Pass llm_provider and api_key to use your own LLM. If only api_key is provided, the provider is auto-detected from the key prefix. Keys are ephemeral (never stored) and garbage collected after the call.
| Name | Required | Description | Default |
|---|---|---|---|
| detail | No | standard | |
| api_key | No | Optional API key for the provider (ephemeral, never stored) | |
| context | No | Optional additional context or background | |
| user_uuid | No | ||
| concept_name | Yes | Short name or title of the concept | |
| llm_provider | No | Optional LLM provider override ('groq', 'anthropic', 'openai', 'gemini', 'mistral', 'ollama', 'mock') | |
| prior_reasoning | No | Optional reasoning from X agent to consider | |
| concept_description | Yes | Detailed description of the concept |
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full behavioral burden. It transparently discloses the veto power and its consequence ('if veto_triggered is True, the concept should not proceed'), the BYOK mechanism (provider auto-detection, ephemeral keys, garbage collection), and the fact that keys are never stored. These are critical behavioral traits an agent must know before calling. It does not, however, describe error handling or response format, but the output schema covers that.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is well-structured: the purpose is front-loaded in the first sentence, followed by a bulleted list of specializations, then the veto power warning, and finally the BYOK details. Each section serves a distinct purpose and there is no redundancy. It is longer than minimal, but the length is justified by the tool's complexity and the need to convey the veto and BYOK behaviors.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool has 8 parameters and an output schema, the description covers the core purpose, veto power, and BYOK, but leaves gaps: it does not explain the meaning of the detail parameter (e.g., 'standard' vs other levels), the role of context or prior_reasoning, or when to prefer this agent over siblings. The output schema covers return values, so that is not an issue, but the lack of routing guidance and parameter semantics for the undocumented parameters makes it only moderately complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 75% (6 of 8 parameters described). The description adds value for llm_provider and api_key by explaining the BYOK behavior (pass both to use own LLM, auto-detection if only key provided, ephemeral storage). However, it does not compensate for the undocumented context, user_uuid, or prior_reasoning parameters, and the detail parameter's possible values remain unexplained. Since coverage is high, the baseline is 3, and the extra BYOK context justifies holding at that level rather than lowering.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with a specific verb-resource pair ('Consult Z Guardian agent for ethical review and Z-Protocol enforcement') and immediately differentiates from sibling agents by naming the specialization areas (ethical implications, privacy, bias, social impact) and the unique veto power. This clearly distinguishes it from consult_agent_cs and consult_agent_x, which presumably serve other review functions.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies the tool should be used when ethical review or Z-Protocol compliance is needed, but it never explicitly states when to choose this agent over consult_agent_cs or consult_agent_x, nor does it list exclusions. The specializations give context but leave the decision to the agent's inference rather than providing clear routing guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
coordination_handoff_createCoordination Handoff CreateAInspect
Create a structured MACP v2.5 handoff record.
TEMPORARILY DISABLED — this tool is contained pending a security repair (incident VM-IR-2026-07-28-COORD-01) and always returns a denial.
Handoff bodies written through this tool were stored in a shared namespace that any unauthenticated caller could read. Nothing is stored or returned while containment is in force. Coordination state belongs in your own repository until private, owner-scoped storage ships.
All arguments are accepted for schema stability and are ignored; no supplied value is stored, logged, or echoed back.
| Name | Required | Description | Default |
|---|---|---|---|
| pending | Yes | ||
| agent_id | Yes | ||
| blockers | Yes | ||
| artifacts | Yes | ||
| completed | Yes | ||
| decisions | Yes | ||
| next_agent | No | ||
| pioneer_key | No | ||
| session_type | Yes |
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden and does so: it discloses that the tool always returns a denial, names the security incident, explains why (unauthenticated shared-namespace reads), and guarantees nothing is stored, logged, or echoed. It also pre-empts the obvious follow-up question about the arguments.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Purpose is front-loaded in one line, then containment status, then the security reason, then the argument caveat. Each block answers a distinct question an agent would have, and no sentence is filler despite the length.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a deliberately disabled mutation tool with 7 required params and an output schema, the description covers everything an agent needs: it will fail, why, and what to do instead. Return-value detail is correctly omitted since an output schema exists.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 0% across 9 parameters, so the description must compensate — and it gives the single most decision-relevant fact: every argument is accepted for schema stability and ignored, none stored or echoed. It does not explain what fields like pioneer_key or session_type would mean once the tool is re-enabled, so it is not fully compensating for the 0% coverage.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The first sentence gives a precise verb+resource+format: 'Create a structured MACP v2.5 handoff record.' That is clearly a write/serialization operation, distinguishable from coordination_handoff_read or coordination_team_status by the write-first framing, though no sibling is named explicitly.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description is unusually explicit about when NOT to use it: it is contained, always returns a denial, and 'Coordination state belongs in your own repository until private, owner-scoped storage ships.' It stops short of naming coordination_handoff_read as the path for reading existing handoffs, so routing among siblings is left partly implicit.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
coordination_handoff_readCoordination Handoff ReadAInspect
Read the most recent coordination handoff record(s).
TEMPORARILY DISABLED — this tool is contained pending a security repair (incident VM-IR-2026-07-28-COORD-01) and always returns a denial.
This read path returned complete handoff bodies from a caller-selected namespace with no authenticated ownership check. It is closed to every caller — with or without a key — while owner-scoped access control is rebuilt. No record body is returned.
All arguments are accepted for schema stability and are ignored.
| Name | Required | Description | Default |
|---|---|---|---|
| count | No | ||
| agent_id | No | ||
| pioneer_key | No |
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden and does so thoroughly: it discloses that every call returns a denial, that no record body is returned, that all arguments are accepted but ignored, and even cites the incident identifier. This is exactly the behavioral context an agent needs to avoid wasting calls or misinterpreting an empty result as data.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The disabled notice is front-loaded in the second sentence, ahead of the security rationale, which is the right ordering for an agent skimming for viability. There is minor redundancy between 'always returns a denial' and 'No record body is returned', and the incident-history sentence is more for human maintainers than for the caller.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
An output schema exists so return shape need not be explained, and the description fully covers the one thing that matters — that every call is denied. Given the tool is non-functional, nothing essential is missing; only a pointer to a working alternative read path would improve it.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0% and three parameters exist, so the description must compensate — and it does, by stating that all arguments are ignored, which makes their individual semantics moot for this version. It does not explain what count, agent_id, or pioneer_key were originally meant to select, but since the tool denies all calls, that omission carries little practical risk.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The first sentence states a specific verb and resource (read the most recent coordination handoff record(s)), and the sibling list makes the create/read distinction obvious without opening schemas. The immediate follow-up nullifies that purpose by declaring the tool disabled, which is honest but means the nominal purpose is never actually realizable.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly says the tool is closed to every caller, with or without a key, so the agent knows there is no condition under which to call it — a strong negative guideline. It stops short of routing the agent to an alternative (e.g., coordination_handoff_create or coordination_team_status), which would be the natural next step in a toolset with sibling coordination tools.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
coordination_team_statusCoordination Team StatusAInspect
Return current team coordination state and session summary.
TEMPORARILY DISABLED — this tool is contained pending a security repair (incident VM-IR-2026-07-28-COORD-01) and always returns a denial.
This summary exposed agent identities, pending actions, open blockers, and a timestamped activity index from a caller-selected namespace with no authenticated ownership check — enough to enumerate a namespace before reading it. It is closed to every caller while owner-scoped access control is rebuilt.
All arguments are accepted for schema stability and are ignored.
| Name | Required | Description | Default |
|---|---|---|---|
| pioneer_key | No |
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations present, the description carries the full behavioral burden and does so well: it states the tool always returns a denial, cites the incident and the reason (no authenticated ownership check), explains what the summary used to expose, and says all arguments are ignored. That is exactly the context an agent needs to avoid a wasted or misleading call.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The operational content is front-loaded well enough, but the body spends several sentences on incident narrative ('incident VM-IR-2026-07-28-COORD-01', what the summary used to expose, 'closed to every caller while owner-scoped access control is rebuilt') that partially restates the same point three times. Trimming the incident detail to one clause would preserve all decision-relevant meaning.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
An output schema exists and needn't be explained, and the description covers the one thing that matters for a disabled stub: it always denies. Combined with the argument-ignored note, an agent has everything needed. Only the absence of a suggested working alternative leaves a small gap.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 0% for the single pioneer_key parameter, so the description must compensate — and it does by declaring 'all arguments are accepted for schema stability and are ignored', which fully defines the parameter's effective semantics (none). It does not explain what pioneer_key would normally mean, which is a minor residual gap.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The first sentence names a specific verb and resource (return current team coordination state and session summary), which distinguishes it from the handoff siblings that create/read specific handoffs. It does not explicitly contrast itself against any sibling, which keeps it at 4 rather than 5.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives an unambiguous when-NOT: 'TEMPORARILY DISABLED', 'always returns a denial', 'closed to every caller'. An agent reading this knows not to depend on it. It stops short of naming a working alternative among the siblings (e.g. coordination_handoff_read), which would be needed for a 5.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
export_prompt_templateExport Prompt TemplateCInspect
Export a prompt template to Markdown or JSON format.
v0.4.0 Unified Prompt Templates feature.
| Name | Required | Description | Default |
|---|---|---|---|
| format | No | Export format ('markdown' or 'json') | markdown |
| user_uuid | No | ||
| template_id | Yes | Template to export |
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are present, so the description must carry the full behavioral burden. It only states the output formats and does not disclose side effects, permissions, read-only nature, or error behavior. The tool is likely a read operation but this is not confirmed. This is a significant gap for a tool with no annotation support.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is concise, with two sentences. The version note ('v0.4.0 Unified Prompt Templates feature') adds context but is not essential for invocation. The core purpose is stated upfront, and there is no redundant filler. It is appropriately sized.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description covers the action and format but omits important context such as whether the template must exist, what happens on failure, or any related usage guidance. The presence of an output schema mitigates the lack of return-value explanation, but the missing usage and behavior details leave the description only minimally complete for a simple tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema describes template_id and format, but user_uuid lacks a description (coverage 67%). The description does not add any parameter-specific detail beyond what the schema provides; it repeats the format options already in the schema. It does not clarify the purpose or constraints of user_uuid, so it does not compensate for the missing schema description.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states a specific action ('Export a prompt template') and the target resource, with explicit format options (Markdown or JSON). It distinguishes from siblings like 'get' or 'list' through the verb 'export', though it does not explicitly name alternatives. The purpose is unambiguous.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance is provided on when to use this tool versus siblings such as get_prompt_template or list_prompt_templates. It does not mention scenarios, prerequisites, or why one would choose export over retrieval. The description lacks any usage context.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_prompt_templateGet Prompt TemplateCInspect
Get a specific prompt template by ID.
v0.4.0 Unified Prompt Templates feature.
| Name | Required | Description | Default |
|---|---|---|---|
| user_uuid | No | ||
| template_id | Yes | Unique template identifier | |
| include_content | No | Whether to include full template content |
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden of behavioral disclosure. It only restates the get-by-ID semantics and adds an irrelevant version note, without explaining what include_content=false returns, the role of user_uuid, authentication requirements, or side effects. It is not misleading, but it is minimal.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The first sentence is concise and front-loaded, which is good. However, the second line about 'v0.4.0 Unified Prompt Templates feature' is version metadata that does not help an agent select or invoke the tool, adding noise instead of useful content.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
This is a simple 3-parameter read tool and an output schema exists, so return values are covered. Still, the definition leaves user_uuid's role unexplained, provides no usage context relative to siblings, and includes an irrelevant version note. It is adequate for a basic call but not complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The description's 'by ID' maps to template_id, but the schema already documents that parameter. The schema documents include_content, while user_uuid has no description; the description neither clarifies user_uuid's purpose nor explains how include_content=false changes the response. With only 67% schema coverage, the description should compensate for the gap and does not.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states 'Get a specific prompt template by ID,' providing a clear verb, resource, and scope. The 'by ID' qualifier distinguishes it from list_prompt_templates, though it does not explicitly differentiate it from export_prompt_template or other siblings that may also target a specific template.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance is given on when to use this tool versus list_prompt_templates, export_prompt_template, import_template_from_url, or other siblings. The only extra context is a version tag ('v0.4.0 Unified Prompt Templates feature'), which does not help an agent choose this tool over alternatives.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_template_statisticsGet Template StatisticsCInspect
Get statistics about the template registry.
v0.4.0 Unified Prompt Templates feature.
| Name | Required | Description | Default |
|---|---|---|---|
| user_uuid | No |
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are supplied, so the description carries the full burden, yet it discloses nothing beyond the name: no indication of whether results are global or per-user, whether statistics are cached/live, or what permissions are needed. The only additional sentence ('v0.4.0 Unified Prompt Templates feature') is release trivia with zero behavioral content.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
It is short and front-loaded, which is good, but the second line is dead weight rather than earned content, and the brevity comes from omission rather than tightness. A single sentence covering user_uuid scope would have been better.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
An output schema exists, so return values need not be described, but for a tool with an undocumented optional filter and zero annotations the description leaves the agent unable to predict what it is counting or over what scope. This is materially incomplete despite the tool's simplicity.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0% for the single user_uuid parameter, and the description never mentions it. An agent has no way to know that omitting it yields registry-wide statistics while supplying it scopes to one user — the one piece of information the description should have supplied.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The verb+resource ('Get statistics about the template registry') is identifiable, but 'statistics' is never specified (counts? usage? versions?), and the description makes no effort to distinguish this from prompt-template siblings like list_prompt_templates or get_prompt_template. It is closer to a restatement of the tool name than a genuine statement of purpose.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is no guidance on when to call this versus any sibling, no mention of prerequisites, and no indication of what the optional user_uuid does to the returned scope. The trailing version note is packaging metadata, not usage guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
import_template_from_urlImport Template From UrlBInspect
Import a prompt template from a URL (GitHub Gist, raw file, etc.).
v0.4.0 Unified Prompt Templates feature.
Supports:
GitHub Gist URLs
Raw GitHub file URLs
Any HTTPS URL pointing to JSON/YAML template
| Name | Required | Description | Default |
|---|---|---|---|
| url | Yes | URL to import template from | |
| validate | No | Whether to validate template content (default: True) | |
| user_uuid | No |
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are present, so the description must carry the full behavioral disclosure burden. It states the import action and accepted formats but does not mention side effects (creating/overwriting templates), validation behavior beyond the validate parameter, network/auth expectations, or failure modes. An import tool with no safety annotations needs more behavioral context.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is compact and front-loaded with the core verb, followed by a clean bulleted list of supported URL types. The version note is brief and contextual, not harmful, though it adds limited value.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With an output schema present and a moderately simple 3-parameter tool, the description covers accepted input sources well. It falls short on side-effect transparency and leaves user_uuid undefined, so it is adequate but not fully complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 67% with url and validate already documented, and the description adds useful URL-type examples for url. However, user_uuid has no schema description and the description does not explain it, leaving a gap for one of three parameters.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with a specific verb and object ('Import a prompt template from a URL') and immediately narrows the resource to external URLs (GitHub Gist, raw file, HTTPS JSON/YAML). This makes it clearly distinguishable from sibling template tools such as export_prompt_template, get_prompt_template, or register_custom_template.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The supported URL list and 'Unified Prompt Templates feature' note imply this tool is for bringing external templates into the system, but no explicit when-to-use or when-not-to-use guidance is given versus register_custom_template or export_prompt_template. The agent must infer the tool's role from its name and the URL examples.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_prompt_templatesList Prompt TemplatesBInspect
List available prompt templates with optional filtering.
v0.4.0 Unified Prompt Templates feature.
| Name | Required | Description | Default |
|---|---|---|---|
| tags | No | Comma-separated tags to filter by (e.g., 'genesis:phase-1,default') | |
| agent_id | No | Filter by agent (X, Z, CS, or 'all') | |
| category | No | Filter by category (startup, security, ethics, etc.) | |
| user_uuid | No |
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden of behavioral disclosure, but it only restates the operation: listing templates with optional filtering. It does not explain filter combination semantics, pagination, whether the result is limited to accessible templates, or any side effects.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The core sentence is concise and front-loaded: 'List available prompt templates with optional filtering.' The version note is marginally useful context but is not necessary for invoking the tool, so it slightly prevents a perfect score.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
This is a minimally viable definition for a simple optional-filter list tool, especially since an output schema exists. However, it lacks usage guidance, does not explain how filters interact, and leaves user_uuid semantically undocumented.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 75%, but the description adds no parameter-level meaning beyond 'optional filtering.' The user_uuid parameter is not described in the schema and the description does not compensate, leaving a real gap in understanding how to use that filter.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb ('List') and resource ('prompt templates'), and notes optional filtering. This clearly distinguishes it from siblings like get_prompt_template, export_prompt_template, and register_custom_template, which have different operations.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives no explicit guidance on when to use this tool versus alternatives such as get_prompt_template or get_template_statistics. It does not state any exclusions, prerequisites, or conditions for choosing this tool over a sibling.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
register_custom_templateRegister Custom TemplateCInspect
Register a new custom prompt template.
v0.4.0 Unified Prompt Templates feature.
| Name | Required | Description | Default |
|---|---|---|---|
| name | Yes | Template display name | |
| tags | No | Comma-separated tags | |
| content | Yes | Template content with {variable} placeholders | |
| agent_id | Yes | Target agent (X, Z, CS, or 'all') | |
| category | No | Template category (default: 'custom') | custom |
| user_uuid | No | ||
| description | No | Template description |
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full behavioral disclosure burden, but it only repeats the registering action and adds a version label. It does not disclose persistence, uniqueness constraints, overwrite behavior, permissions, or side effects.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The main action is front-loaded in a single clear sentence. The trailing version note is short but adds little actionable value, so it does not fully earn its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description leaves an agent without guidance on when to register versus import, what constraints govern registration such as uniqueness or name conflicts, or what happens on success. The schema covers parameter meanings well, but the behavioral and usage context is still too thin.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 86%, so the input schema already documents most parameters; the baseline of 3 applies. The description adds no parameter-level meaning beyond the word 'custom', which loosely maps to the default category.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific verb ('Register') and resource ('a new custom prompt template'), making the create intent clear. It does not explicitly differentiate from import_template_from_url, which could also introduce a template, so it does not earn a 5.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No when-to-use guidance is provided. The version note 'v0.4.0 Unified Prompt Templates feature' gives context but does not explain when to choose this tool over import_template_from_url or the read/list siblings.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
run_full_trinityRun Full TrinityAInspect
Run complete X → Z → CS Trinity validation with Chain of Thought.
This tool orchestrates all three agents in sequence:
X Intelligent analyzes innovation and strategy
Z Guardian reviews ethics (sees X's reasoning)
CS Security validates security (sees X and Z reasoning)
Results are synthesized into a unified assessment
Each agent sees the reasoning of previous agents, enabling true collaborative analysis with full transparency.
BYOK (v0.4.5): Pass llm_provider/api_key for all agents, or use per-agent overrides (x_provider/x_api_key, z_provider/z_api_key, cs_provider/cs_api_key). Per-agent params take priority over global. Keys are ephemeral (never stored) and garbage collected after the call.
| Name | Required | Description | Default |
|---|---|---|---|
| detail | No | Reasoning verbosity (v0.5.44) — "standard" (default) returns the auditable `reasoning` block (per-step reasoning, ethics scoring breakdown + framework citations, Socratic questions, threat assessment) alongside the scores; "full" adds per-step evidence and the heaviest structured fields (12-dimension matrix, 6-stage record, MACP assessment); "summary" omits the reasoning block for the smallest payload. The block is additive — existing response fields are unchanged at every level. | standard |
| api_key | No | Optional global API key for all agents (ephemeral, never stored) | |
| context | No | Optional additional context or background | |
| user_uuid | No | ||
| x_api_key | No | Optional API key override for X agent only | |
| z_api_key | No | Optional API key override for Z agent only | |
| cs_api_key | No | Optional API key override for CS agent only | |
| x_provider | No | Optional provider override for X agent only | |
| z_provider | No | Optional provider override for Z agent only | |
| cs_provider | No | Optional provider override for CS agent only | |
| concept_name | Yes | Short name or title of the concept | |
| llm_provider | No | Optional global LLM provider for all agents | |
| save_to_history | No | Whether to save the full result to validation history (default: False). The store is shared and instance-local, retains at most the 20 newest opt-in results, evicts oldest entries on every read/write, and clears when the instance is replaced. It has no fixed time-retention guarantee. Leave False for private or sensitive concepts. During security maintenance a separately supplied user_uuid has no effect: no UUID-keyed validation history is written for it. | |
| concept_description | Yes | Detailed description of the concept |
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the burden of behavioral disclosure. It discloses the sequential flow, the fact that each agent sees previous reasoning, and the ephemeral nature of keys. The save_to_history parameter is well-documented in the schema, and the description adds clarity on storage limits and privacy considerations, which is valuable.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is well-structured with clear enumeration of steps and a separate paragraph for BYOK details. It front-loads the core purpose, then details the orchestration, and finally addresses key usage details. It is slightly longer than necessary but each sentence contributes to understanding the tool's behavior and key nuances.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's complexity (multi-agent orchestration, 14 parameters, output schema present), the description is quite complete. It explains the flow, transparency, and key parameter behaviors. However, it could optionally mention what the unified assessment looks like or any prerequisites, but the output schema likely covers return values. Overall, it is adequate for an agent to call the tool correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is high (93%), so the baseline is 3. The description adds context for the BYOK parameters (priority rules, ephemeral handling) and mentions the detail parameter's behavior, but does not elaborate on every parameter. The schema descriptions already provide sufficient meaning for most parameters, so the description adds marginal value beyond that.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's purpose: running a complete three-agent validation (X, Z, CS) with Chain of Thought, and orchestrates all three agents in sequence. It distinguishes itself from sibling tools like consult_agent_x/z/cs by emphasizing the full pipeline and the reasoning transparency between agents.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explains the orchestration flow and the BYOK details, including priority rules and ephemeral key handling. However, it does not explicitly state when to use this tool versus the single-agent consult tools, leaving that inference to the agent. It could have mentioned that for single-agent consultations, one should use consult_agent_x/z/cs instead.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
1 tool update
- Changed
run_full_trinity1 field changed- changed
Input schema / properties / save_to_history / descriptionPrevious value: -"Whether to save the full result to validation history\n(default: False). The store is shared and instance-local, retains at\nmost the 20 newest opt-in results, evicts oldest entries on every\nread/write, and clears when the instance is replaced. It has no fixed\ntime-retention guarantee. Leave False for private or sensitive concepts.\nIf user_uuid is supplied separately, pseudonymous validation metadata\nmay still be written to UUID-keyed Firestore history (see Privacy v2.5)."New value: +"Whether to save the full result to validation history\n(default: False). The store is shared and instance-local, retains at\nmost the 20 newest opt-in results, evicts oldest entries on every\nread/write, and clears when the instance is replaced. It has no fixed\ntime-retention guarantee. Leave False for private or sensitive concepts.\nDuring security maintenance a separately supplied user_uuid has no\neffect: no UUID-keyed validation history is written for it."
1 tool update
- Changed
run_full_trinity1 field changed- changed
Input schema / properties / save_to_history / descriptionPrevious value: -"Whether to save result to validation history (default: False).\nHistory is a single shared store on this server instance; leaving this\nFalse prevents the full concept/result from being written there. If\nuser_uuid is supplied separately, pseudonymous validation metadata may\nstill be written to UUID-keyed Firestore history (see Privacy v2.4)."New value: +"Whether to save the full result to validation history\n(default: False). The store is shared and instance-local, retains at\nmost the 20 newest opt-in results, evicts oldest entries on every\nread/write, and clears when the instance is replaced. It has no fixed\ntime-retention guarantee. Leave False for private or sensitive concepts.\nIf user_uuid is supplied separately, pseudonymous validation metadata\nmay still be written to UUID-keyed Firestore history (see Privacy v2.5)."
1 tool update
- Changed
run_full_trinity1 field changed- changed
Input schema / properties / save_to_history / descriptionPrevious value: -"Whether to save result to validation history (default: False).\nHistory is a single shared store on this server instance; leaving this\nFalse keeps your concept private to your own call (v0.5.43 privacy fix)."New value: +"Whether to save result to validation history (default: False).\nHistory is a single shared store on this server instance; leaving this\nFalse prevents the full concept/result from being written there. If\nuser_uuid is supplied separately, pseudonymous validation metadata may\nstill be written to UUID-keyed Firestore history (see Privacy v2.4)."
3 tool updates
- Changed
coordination_handoff_create9 fields changed- removed
Input schema / properties / agent_id / descriptionRemoved value: -"Identifier for the agent creating this handoff (e.g. \"RNA\", \"cursor\")." - removed
Input schema / properties / artifacts / descriptionRemoved value: -"List of artifact paths or descriptions created." - removed
Input schema / properties / blockers / descriptionRemoved value: -"List of current blockers (empty list if none)." - removed
Input schema / properties / completed / descriptionRemoved value: -"List of completed items this session." - removed
Input schema / properties / decisions / descriptionRemoved value: -"List of decisions made (each as a string)." - removed
Input schema / properties / next_agent / descriptionRemoved value: -"Recommended next agent ID (optional)." - removed
Input schema / properties / pending / descriptionRemoved value: -"List of pending items for the next agent." - removed
Input schema / properties / pioneer_key / descriptionRemoved value: -"Optional access key. If provided, your handoffs are namespaced\nprivately under this key. If omitted, handoffs go to the shared\n\"anonymous\" namespace." - removed
Input schema / properties / session_type / descriptionRemoved value: -"Type of session (e.g. \"development\", \"research\", \"review\")."
- Changed
coordination_handoff_read3 fields changed- removed
Input schema / properties / agent_id / descriptionRemoved value: -"Filter to handoffs from this agent only (optional)." - removed
Input schema / properties / count / descriptionRemoved value: -"Number of records to return (default: 1, max: 50)." - removed
Input schema / properties / pioneer_key / descriptionRemoved value: -"Optional access key. If omitted, reads from the shared\n\"anonymous\" namespace."
- Changed
coordination_team_status1 field changed- removed
Input schema / properties / pioneer_key / descriptionRemoved value: -"Optional access key. If omitted, reads from the shared\n\"anonymous\" namespace."
13 tool updates
- First observed
consult_agent_cs - First observed
consult_agent_x - First observed
consult_agent_z - First observed
coordination_handoff_create - First observed
coordination_handoff_read - First observed
coordination_team_status - First observed
export_prompt_template - First observed
get_prompt_template - First observed
get_template_statistics - First observed
import_template_from_url - First observed
list_prompt_templates - First observed
register_custom_template - First observed
run_full_trinity
Related MCP Connectors
Evidence-backed x402 web verification for AI agents, with auditable decisions for every condition.
Read-only search of 2,189 AI agent tools (MCP servers, x402 APIs) with daily automated trust scores.
33 tools that make AI write, implement, and verify intent against explicit, testable constraints.
AI-operated. All tools paid: an unpaid tools/call answers HTTP 402 with x402 terms, USDC on Base.
Related MCP Servers
AlicenseNot gradedqualityCmaintenance62 live, cryptographically signed data tools for AI agents and robots: weather, natural hazards, flights, shipping, space, CVEs, sanctions, software versions, sea ice and more. Every datapoint carries source, licence, timestamp and an Ed25519 signature.7 npmMIT- AlicenseAqualityCmaintenanceValidate AI claims against live data: check endpoints, count competitors, and test hypotheses. Includes free and paid tools via x402.16MIT
- AlicenseNot gradedqualityAmaintenanceCryptographic AI governance and compliance attestation. 75 tools across 80 regulatory frameworks including EU AI Act, NIST AI RMF, NERC CIP, 3GPP R19, OWASP MCP Top 10, CMMC, and SR 11-7. Full OWASP MCP Top 10 coverage. Witness Middleware for zero-code transport-layer compliance. Runtime containment attestation. Distillation provenance. Incident lifecycle chains.125 npmApache 2.0
- AlicenseAqualityCmaintenancePolicy-gated MCP execution for AI agents—ShadeGuard, x402, signed receipts, no custody. 16 tools, 18 chains.182MIT
Glama MCP Gateway
Add one secure layer between your agents and this server.