Skip to main content
Glama
TravT

Aegis-Sovereign MCP Server

by TravT

πŸ›‘οΈ Aegis-Sovereign (AS) β€” Air-Gapped Knowledge & Document Intelligence Appliance

Version Architecture Token Savings MCP v2

Aegis-Sovereign (AS) is a 100% air-gapped, single-vault enterprise document intelligence, GraphRAG, and Model Context Protocol (MCP v2) appliance. It unifies deterministic sub-millisecond identifier lookups (Prong 1) with multi-tier hybrid semantic and relational graph synthesis (Prong 2), cutting frontier LLM cloud token consumption by $\ge 40%$ (empirically $92%+$) with zero external telemetry.


πŸ—οΈ Two-Pronged Architecture & Single-Vault Server Topology

flowchart LR
    subgraph Harnesses ["AI Harnesses & NOC UI"]
        AGY["Google Antigravity (agy)"]
        CC["Claude Code / Desktop"]
        CUR["Cursor / Windsurf / Cline"]
        PORTAL["Executive Web Portal\n(http://127.0.0.1:8765)"]
    end

    subgraph Router ["Aegis-Sovereign Core (ADR-40)"]
        IR["Resilient Intent Router\n(Entropy + Grammar Classifier)"]
        P1["Prong 1: Deterministic Fast-Path\n(<0.5ms B-Tree + MAC FTS5)"]
        P2["Prong 2: Cognitive Cascade\n(RRF + GraphRAG + RAPTOR)"]
        STREAM["Zero-Disk Archive Streamer\n(.hdx / .zip / .docx / .xlsx)"]
        IR --> P1
        IR --> P2
        IR --> STREAM
    end

    subgraph Vault ["Unified Server Vault (docs/.aegis_vault/)"]
        RDB[("sovereign_router.db\n49,000+ Records + FTS5")]
        GDB[("sovereign_graph.db\n9,100+ Entities / 20,250+ Edges")]
        DIAG["extracted_diagrams/\nHardware Topology PNGs"]
        SRC["monitored_sources.json\n5 Server Domains"]
    end

    Harnesses <-->|"MCP v2 (stdio) / REST"| Router
    P1 <--> RDB
    P2 <--> RDB
    P2 <--> GDB
    STREAM <--> DIAG

Related MCP server: Works With Agents MCP Server

πŸ“‚ Clean Repository Directory Structure (Aegis-Sovereign)

aegis-sovereign-appliance/
β”œβ”€β”€ core/                        # Core Appliance Engine (ADR-40)
β”‚   β”œβ”€β”€ classifier/              # Deterministic metadata & clearance rules
β”‚   β”œβ”€β”€ containers/              # Zero-disk .hdx, .zip, .docx, .xlsx in-memory streamers
β”‚   β”œβ”€β”€ graph/                   # SQLite WAL Knowledge Graph (GraphStore + purge engine)
β”‚   β”œβ”€β”€ licensing/               # Ed25519 offline cryptographic license verifier
β”‚   β”œβ”€β”€ mcp/                     # 7-Tool Model Context Protocol (MCP v2) stdio server & schemas
β”‚   β”œβ”€β”€ onboarding/              # Autonomous OnboardingRadar corpus scanner
β”‚   β”œβ”€β”€ proxy/                   # Token-budget ContextCondenser (>=40% savings guarantee)
β”‚   β”œβ”€β”€ router/                  # Two-Pronged SovereignQueryRouter (Prong 1 B-Tree/FTS5 + Prong 2)
β”‚   β”œβ”€β”€ search/                  # Hybrid Dense ONNX + Sparse BM25 RRF searcher
β”‚   └── server.py                # Unified HTTP REST API & Web Portal backend (port 8765)
β”œβ”€β”€ web/portal/                  # Executive & NOC Web Management Console (index.html)
β”œβ”€β”€ tools/                       # Administrative, Lifecycle, Purge & Packaging CLIs
β”‚   β”œβ”€β”€ vault_lifecycle.py       # Unified DB consolidation, directory ingestion & prefix purge CLI
β”‚   β”œβ”€β”€ build_release_bundle.py  # Turnkey redistributable bundle & SHA-256 MANIFEST builder
β”‚   β”œβ”€β”€ capsule.py               # Encrypted .sovereign-capsule snapshot manager
β”‚   └── package_update.py        # Air-gapped cryptographic update verifier
β”œβ”€β”€ docs/manuals/                # Complete 15-Manual Operator & Engineering Suite (01–15)
β”œβ”€β”€ benchmarks/                  # Reproducible benchmark runners & empirical reports/
β”‚   └── reports/                 # Markdown & JSON benchmark reports (Huawei 5G, 7-Tool MCP, Scale)
β”œβ”€β”€ tests/                       # Comprehensive Pytest verification suite
β”œβ”€β”€ data/                        # Unified symlinks -> /home/tlima/Enterprise_Hub/docs/.aegis_vault/
└── install.sh                   # 6-stage turnkey installer & preflight health verifier

⚑ Quickstart: Deploy, Ingest, Search & Purge

1. Run the Turn-Key Installer & Smoke Verification

./install.sh

2. Launch the Executive Web Portal & REST API

python3 -m core.server --host 0.0.0.0 --port 8765
# Open http://127.0.0.1:8765/ in your browser

3. Inspect Unified Vault Status, Ingest New Folders, or Purge Data

# Inspect unified database breakdown across all monitored server domains:
python3 -m tools.vault_lifecycle --status

# Ingest a new server directory into sovereign_router.db & sovereign_graph.db:
python3 -m tools.vault_lifecycle --ingest /path/to/directory --domain custom_docs

# Remove / purge a directory or corpus prefix from Router DB, FTS5, and GraphStore:
python3 -m tools.vault_lifecycle --purge "/path/to/directory_or_prefix"

🧰 The 7-Tool Model Context Protocol (MCP v2) Matrix

#

MCP Tool Name

Primary Role

Typical Latency

1

sovereign_route_and_analyze

Classifies query intent (deterministic_direct, compound_fused, hybrid_needle, relational_graph), Shannon entropy, and domain grammar (ALM-*, MML, ADR-*, manage-*).

0.15 ms

2

sovereign_search_vault

Executes Prong 1 B-Tree/FTS5 exact lookup or Prong 2 hybrid retrieval across all 49,000+ unified server records.

0.28 ms

3

sovereign_optimize_context

Condenses multi-document evidence into a token-budgeted context window with provable $\ge 40%$ ($92%+$ empirical) token compression.

0.95 ms

4

sovereign_get_entity_dossier

Traverses sovereign_graph.db (1–3 hops) to return connected alarms, MML commands, KPI counters, ADRs, skills, and hardware diagrams.

0.42 ms

5

sovereign_inspect_archive

Streams nested .zip/.hdx archives in-memory (virtual_uri), relocates corpus prefixes (relocate_prefix), or purges prefixes (purge_prefix).

1.20 ms

6

sovereign_scan_onboarding_radar

Scans filesystem dropzones to classify file formats, detect encrypted archives, and estimate indexing footprint.

3.10 ms

7

sovereign_node_status

Returns real-time health, SIMD profile, database counts, monitored sources, and active Ed25519 license tier.

0.20 ms


πŸ“š Master Operator Manuals (01 – 15)

All 15 operator manuals are available in docs/manuals/:

  1. 01. Deployment Guide

  2. 02. Database Initialization & Vector Store

  3. 03. Connector Matrix & External Integrations

  4. 04. MCP Harness & Agent Configuration

  5. 05. Ingestion & Tagging Runbook

  6. 06. Executive Tuning & Client Knobs

  7. 07. Scaling Topologies & Commercial Playbook

  8. 08. Desktop Workstation & Corporate DLP

  9. 09. Datacenter Supercomputing & Distributed Fabric

  10. 10. Hierarchical Library Retrieval & RAPTOR

  11. 11. Hardware Sizing & Capacity Planning

  12. 12. Sovereign Workstation Tier 1 β€” Architecture Compendium

  13. 13. Deep .HDX Telecom Vendor Package Ingestion

  14. 14. Real-World Corpus Acquisition & Testing Guide

  15. 15. Unified Server Vault, Purge Lifecycle & Multi-Harness Guide

Available Tools

7 tools
sovereign_get_entity_dossierA

Compiles a complete relational knowledge graph dossier for an entity: linked documents, timeline of dates, monetary transactions, and multi-hop cross-references (1 to 5 hops).

ParametersJSON Schema
NameRequiredDescriptionDefault
hopsNoGraphRAG multi-hop traversal depth (1 to 5 hops)
entityNoExact or fuzzy name or identifier of the entity (alias for entity_name)
entity_nameNoExact or fuzzy name of the entity to inspect

TDQS

A3.5/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the full burden. It does disclose the read-oriented nature of the operation ('compiles'), the content categories, and the 1–5 hop traversal. However, it does not mention whether the tool has side effects, how expensive deep traversal is, or how entity vs entity_name are resolved when both are supplied.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The entire description is one dense, front-loaded sentence. It states the main purpose first, then lists the key content categories without repetition or filler. Every phrase earns its place.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a tool with no output schema and no annotations, the description gives a reasonable sense of the returned content, but it omits important operational details: there are zero required parameters, yet the tool is for 'an entity,' and the description does not explain what happens if no entity is provided or how the two entity parameters interact. Usage context is also left implicit.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline is 3. The description reinforces the 'hops' semantics by mentioning multi-hop cross-references, but it does not add meaningful detail beyond the schema, such as precedence between entity and entity_name or fuzzy matching behavior.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a specific verb ('compiles') and resource ('relational knowledge graph dossier for an entity'), and enumerates concrete outputs: linked documents, timeline, transactions, and multi-hop cross-references. This clearly differentiates it from siblings like sovereign_search_vault or sovereign_node_status.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no explicit guidance on when to use this tool versus alternatives, nor any stated exclusions or routing conditions. The word 'complete' implies comprehensive investigation, but the description does not tell the agent when to prefer this over sovereign_search_vault or sovereign_route_and_analyze.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

sovereign_inspect_archiveB

Streams and inspects .hdx, .hwics, .zip, .xlsx, .docx, .tar.zst, or .epub containers purely in-memory (O_RDONLY, zero disk extraction) per ADR-07. Also supports section/offset slicing (section_filter, char_offset) and zero-reindex corpus path relocation / stale relationship cleanup (action='relocate_prefix' | 'purge_prefix' | 'corpus_stats').

ParametersJSON Schema
NameRequiredDescriptionDefault
queryNoOptional keyword or alarm code filter to match against archive entries
actionNoOperation mode: 'inspect' (default), 'relocate_prefix' (re-point archive:// URIs & rebuild clean graph edges without re-indexing), 'purge_prefix' (delete records & relationships for an old prefix), or 'corpus_stats'inspect
ingestNoWhether to ingest matched archive entries into the knowledge graph
max_charsNoMaximum characters to return from the resolved archive entry
new_prefixNoNew directory/URI prefix to point existing indexed records and graph relationships to (e.g. '/home/tlima/Enterprise_Hub/docs/Hua_Docs')
old_prefixNoOld directory/URI prefix to relocate or purge (e.g. '/tmp/docs_rag_gemini')
char_offsetNoOptional character start offset when reading a long archive entry
virtual_uriNoOptional canonical virtual URI (archive://<archive_path>#<entry_name>) to resolve directly in-memory
archive_pathNoPath to the archive container (.hdx, .hwics, .zip, .tar.zst, .epub) to inspect
section_filterNoOptional section heading filter (e.g. 'Possible Causes', 'Procedure', 'Parameters') to extract that exact section without Python slicing
enrich_deep_alarmsNoWhen relocating Huawei .hwics packages, stream resources/alarms/*.html in-memory from new_prefix to persist full 18k-char Possible Causes & Procedures
artifact_output_dirNoOptional directory path to save extracted PNG diagrams (defaults to dev/aegis-sovereign-appliance/data/extracted_diagrams)
clear_stale_relationshipsNoWhen relocating or purging, clear orphaned/stale GraphStore edges referencing the old path
extract_diagram_to_artifactNoWhen true, extracts embedded PNG signaling ladder / root-alarm diagrams (class='vsd' or direct .png virtual_uri) from the .hwics/.zip container in-memory and saves them to artifact_output_dir

TDQS

B3.2/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description bears the full burden of behavioral disclosure. It does advertise in-memory, O_RDONLY, zero-disk-extraction behavior, which is useful, but this is potentially contradicted by the schema's extract_diagram_to_artifact/artifact_output_dir parameters that write PNGs to disk. It also does not disclose the destructive side effects of purge_prefix or the mutating nature of relocation operations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is two sentences with no fluff. The primary streaming/inspection purpose is front-loaded, followed by secondary modes. It is dense with formats and actions, but every clause contributes information; the structure is efficient for the tool's breadth.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

This is a complex, multi-mode tool with 14 optional parameters, no output schema, and no annotations contrary to behavior. The description omits what the tool returns, which parameters are required for each action (e.g., old_prefix/new_prefix for relocate/purge), and does not flag that some modes mutate the graph or write artifacts to disk. The rich schema helps, but the description alone is insufficient for safe and correct invocation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so baseline is 3. The description adds meaningful semantic context beyond the schema by grouping section_filter and char_offset as 'section/offset slicing' and explaining the relocation/purge actions as 'zero-reindex corpus path relocation / stale relationship cleanup'β€”concepts not obvious from the enum or parameter names alone.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly identifies a specific verb ('inspects') and resource ('archive containers') with an explicit list of formats, and it names the core operations (inspection, slicing, relocation, purge, stats). It does not explicitly differentiate from sibling tools, so it falls short of a 5, but the purpose is unmistakable.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies usage scenarios by listing the supported operations ('section/offset slicing', 'relocate_prefix', 'purge_prefix', 'corpus_stats'), but it gives no explicit guidance on when to use this tool versus alternatives, nor any exclusions or prerequisites. It is adequate but relies on inference.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

sovereign_node_statusA

Inspects health, indexing stats, and operational metrics of the Sovereign Appliance node.

ParametersJSON Schema
NameRequiredDescriptionDefault

No parameters

TDQS

A3.7/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries the full burden. It states the tool inspects and reports metrics, implying a read-only operation, but doesn't disclose potential side effects, rate limits, or whether it requires any prerequisites. It doesn't contradict anything but adds only limited behavioral context beyond the action verb.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single, concise sentence that front-loads the verb and resource, covering the key aspects of health, indexing stats, and operational metrics with no fluff or repetition.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool has no parameters and no output schema, the description adequately covers what the tool does and what it reports. While it could mention return format or typical use cases, the simplicity of the tool means the description is largely sufficient for an agent to invoke it correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The tool has zero parameters, which is fully documented by the empty schema. The description adds value by clarifying the tool's purpose, which compensates for the lack of parameter details. Since there are no parameters to explain, a baseline of 4 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool inspects health, indexing stats, and operational metrics of the node, specifying the resource and purpose. It distinguishes from siblings by focusing on node status rather than scanning, searching, or optimizing, though it doesn't explicitly name a sibling.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies it's for checking node health/status, but gives no explicit guidance on when to use it over siblings like sovereign_inspect_archive. No exclusions or conditions are stated, leaving the agent to infer usage from the tool's name and the sibling list.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

sovereign_optimize_contextA

Pre-filters large archives down to verified evidence chunks with citations. Cuts prompt tokens by 90%+ (guaranteed >= 40%) in a single call, eliminating cloud token waste.

ParametersJSON Schema
NameRequiredDescriptionDefault
queryYesThe query or topic to retrieve and optimize context for
max_chunksNoMaximum number of verified evidence chunks to include (1 to 10)
retrieval_modeNoTuning mode: 'high_precision' (strict top chunks, max compression), 'legal_discovery' (broad recall, exhibits review), or 'exact_entity' (lexical BM25 priority for tax IDs/contracts)high_precision
user_clearanceNoExecutive knob 4: MAC user security clearance levelrestricted
analytical_depthNoExecutive knob 1: Analytical depth tierflash_needle
confidence_floorNoMinimum RRF score threshold to discard low-confidence noise
critical_postureNoExecutive knob 5: Epistemic critical postureneutral
evidence_groundingNoExecutive knob 2: Evidence citation & grounding postureverbatim_footnotes
include_graph_dossierNoAttach relational knowledge graph entities and links to results
include_visual_platesNoExecutive knob 3: Include visual diagram/table plates

TDQS

A3.5/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full behavioral burden. It does disclose that the tool pre-filters, returns cited evidence chunks, and guarantees at least 40% token reduction. It does not, however, disclose read-only status, clearance enforcement behavior, failure modes, or what happens when no verified evidence is found.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences with no filler. The main function is front-loaded, and the performance benefit is stated immediately after. Every phrase earns its place.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a 10-parameter tool with no output schema, the description gives only a high-level view: evidence chunks, citations, and token reduction. Parameter details are covered by the schema, but return structure, enum behavior, and edge cases are left unspecified, which is a notable gap for a tool this complex.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the baseline is 3 even without additional parameter explanation in the tool description. The description adds no parameter-level nuance beyond what the schema already provides.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description names a specific verb and resource: 'pre-filters large archives' into 'verified evidence chunks with citations.' It also conveys a distinct value proposition around token reduction, which separates it from sibling search/inspection tools. However, it does not explicitly name or contrast any sibling tool, so it stops just short of full differentiation.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The token-reduction framing implies use when an agent needs condensed, verified context before consumption. There is no explicit guidance about when not to use this tool or which sibling to prefer instead, so usage rules remain mostly implicit.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

sovereign_route_and_analyzeC

Executes the Two-Pronged Hybrid Retrieval & Resilient Intent Router (ADR-40). Routes deterministic identifiers (<2ms SQLite B-Tree/FTS5 with MAC pushdown) vs multi-tier cognitive queries (hybrid_needle, relational_graph, macro_synthesis, compound_fused) with local NanoRunner synthesis and explicit execution_mode telemetry.

ParametersJSON Schema
NameRequiredDescriptionDefault
limitNoMaximum number of verified records to return (1 to 20)
queryYesThe user query, exact identifier (CPF/CNPJ/Lote/ANVISA/CID-10/3GPP/Hex), or analytical question
synthesizeNoWhether to run local NanoRunner synthesis and attach fast_summary with execution_mode telemetry
user_clearanceNoMAC security clearance level of the callerrestricted

TDQS

C2.4/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries full burden for behavioral disclosure. It mentions 'NanoRunner synthesis' and 'execution_mode telemetry' but does not explain what side effects, permissions, or performance characteristics exist. It does not state whether this tool is read-only or has implications for data retrieval, error handling, or security beyond the user_clearance parameter. The description is vague about what happens when a query is routed, whether synthesis is optional, or if any state changes occur.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness2/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single, dense sentence stuffed with jargon and internal references (ADR-40, NanoRunner, MAC pushdown) that are meaningless to an agent without prior context. It lacks front-loading of the tool's core purpose; the keyword 'Routes' appears mid-sentence. Conciseness is sacrificed for technical flair, making it hard to parse quickly.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool's complexity (routing, multiple retrieval types, synthesis, telemetry), the description is inadequate. It does not explain the two-pronged routing logic in practical terms, when to set synthesize=false, or how user_clearance affects results. With no output schema, the description should clarify what the agent can expect in return, but it only mentions 'fast_summary with execution_mode telemetry' without details. The external context signals (siblings) are not leveraged, so the description is incomplete for correct invocation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the schema already documents all four parameters (query, limit, synthesize, user_clearance) with descriptions. The tool description adds some context by mentioning 'explicit execution_mode telemetry' and 'NanoRunner synthesis', which hints at the synthesize parameter's purpose. However, it does not elaborate on query types beyond listing them, and the user_clearance parameter's role in 'MAC pushdown' is only mentioned in passing. The description adds minimal value beyond the schema, so baseline 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose3/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb and resource ('Executes... Retrieval & Resilient Intent Router'), but uses jargon ('Two-Pronged Hybrid Retrieval', 'MAC pushdown', 'multi-tier cognitive queries') that obscures what the tool actually does. It distinguishes itself from siblings only by naming internal components, not by describing its practical function. An agent could infer it routes and analyzes queries, but the description is dense and not immediately clear.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no explicit guidance on when to use this tool versus siblings like sovereign_search_vault or sovereign_get_entity_dossier. The description mentions routing deterministic identifiers vs cognitive queries but doesn't tell the agent which type of query should be directed here versus a sibling. The tool's role in the overall workflow is implied but not stated, leaving the agent to guess.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

sovereign_scan_onboarding_radarA

Runs the ADR-08 60-Second Auto-Discovery Onboarding Radar (os.scandir, strictly read-only) to discover, classify, and rank domain knowledge directories (fiscal_nfe, medical_clinical, legal_contracts, engineering_manuals, general_knowledge).

ParametersJSON Schema
NameRequiredDescriptionDefault
root_pathsYesList of root directory paths to scan
max_scan_secondsNoMaximum time budget in seconds for the read-only scan (up to 60.0s)

TDQS

A3.9/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The description explicitly discloses that the scan is 'strictly read-only' and uses os.scandir, which is valuable behavioral context beyond the schema. It also mentions a time budget (max_scan_seconds) and the 60-second radar concept, giving the agent a sense of bounded execution. However, it does not describe what happens on timeout or whether results are persisted.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single sentence that packs the tool's purpose, method, and scope efficiently. It is front-loaded with the action and resource. Slightly dense with the ADR-08 reference and directory list, but nothing is wasted.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a read-only discovery tool with 100% schema coverage, the description is largely complete. It explains what the tool does, how it does it (os.scandir), and its safety profile (read-only). It lacks explicit output/return format details, but since there is no output schema, a brief note on what the ranked results look like would have made it fully complete.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the schema already documents both parameters. The description adds the 'strictly read-only' and '60-second' context but does not add new meaning about the parameters themselves. Baseline 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description names a specific verb ('Runs'), a specific resource ('ADR-08 60-Second Auto-Discovery Onboarding Radar'), and the exact outcome: discover, classify, and rank domain knowledge directories. It also lists the target directory categories, which distinguishes it from sibling tools like sovereign_search_vault or sovereign_inspect_archive.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies this is an onboarding/discovery scan for domain knowledge directories, but it does not explicitly state when to use it versus alternatives like sovereign_search_vault or sovereign_optimize_context. The context is clear enough for an agent to infer the use case, but no explicit when/when-not guidance is provided.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

sovereign_search_vaultB

Direct hybrid dense + sparse vector search across the sovereign vault.

ParametersJSON Schema
NameRequiredDescriptionDefault
limitNoNumber of results to return (1 to 20)
queryYesThe search query
retrieval_modeNohigh_precision

TDQS

B3.1/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the full burden. It discloses the hybrid dense + sparse retrieval approach, which is useful, but it doesn't state whether this is read-only, whether it requires special permissions, what the result format is, or any rate limits or side effects. For a search tool, the lack of return format and scope details is a gap.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

One sentence, front-loaded with the core action and method. It's concise and to the point, though it could add a bit more context without becoming bloated.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a search tool with no output schema and no annotations, the description is thin. It doesn't describe what results look like, how to interpret retrieval_mode, or any constraints. The sibling tools suggest a broader system, but this description doesn't position the tool within that system.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 67% (query and limit are described, retrieval_mode is not). The description adds the 'hybrid dense + sparse' context, which helps understand the query semantics, but it doesn't explain the retrieval_mode values or how limit behaves beyond the schema. Baseline 3 is appropriate since the schema covers most parameters.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb ('search') and resource ('sovereign vault') and mentions the hybrid dense + sparse vector approach, which distinguishes it from sibling tools like sovereign_get_entity_dossier or sovereign_inspect_archive. However, it doesn't explicitly name a sibling or clarify what 'sovereign vault' contains, so it's clear but not fully differentiated.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies this is the tool for direct vector search across the vault, and the retrieval_mode enum hints at use cases (high_precision, legal_discovery, exact_entity). But there's no explicit when-to-use vs alternatives, no exclusions, and no mention of when to prefer a sibling tool like sovereign_route_and_analyze or sovereign_scan_onboarding_radar.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

  1. 7 tool updatesv1.0.0
    • First observedsovereign_get_entity_dossier
    • First observedsovereign_inspect_archive
    • First observedsovereign_node_status
    • First observedsovereign_optimize_context
    • First observedsovereign_route_and_analyze
    • First observedsovereign_scan_onboarding_radar
    • First observedsovereign_search_vault

TDQS

B3.1/5.0

Scored across 7 tools

Disambiguation3/5

Most tools target distinct operations (scan, status, optimize, search, dossier, route, inspect), but sovereign_optimize_context, sovereign_search_vault, and sovereign_route_and_analyze all involve retrieval/analysis and could be confused for similar high-level queries. The descriptions help, but the boundaries between 'optimize context', 'search vault', and 'route and analyze' are not immediately crisp.

Naming Consistency4/5

All tools share the 'sovereign_' prefix and use verb_noun or verb_phrase patterns (scan_onboarding_radar, node_status, optimize_context, search_vault, get_entity_dossier, route_and_analyze, inspect_archive). Minor inconsistency: 'sovereign_node_status' lacks a verb, while others have explicit verbs, but overall the pattern is predictable.

Tool Count4/5

Seven tools is a reasonable count for a specialized knowledge-management/retrieval server. The scope is broad (onboarding, search, routing, archive inspection, entity dossiers), but each tool covers a distinct capability without feeling bloated.

Completeness3/5

The server covers discovery, search, retrieval, routing, archive inspection, and node health, but lacks obvious lifecycle operations like adding/updating/deleting documents or managing the vault corpus. The inspect_archive tool has some maintenance actions (relocate_prefix, purge_prefix), but there is no clear ingest/write tool, leaving a notable gap for a knowledge vault server.

Maintenance

ActivityMaintained
ResponsivenessNo issues

Related MCP Connectors

Related MCP Servers

  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables AI agents to securely discover, invoke, and manage tools through a hardened MCP endpoint with protections like injection detection, circuit breakers, retry backoff, response caching, context-window limiting, and state snapshots.
    1 npm
    MIT