Aegis-Sovereign MCP Server
Click on "Deploy Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@Aegis-Sovereign MCP ServerShow me the knowledge graph around the 5G core network nodes."
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
π‘οΈ Aegis-Sovereign (AS) β Air-Gapped Knowledge & Document Intelligence Appliance
Aegis-Sovereign (AS) is a 100% air-gapped, single-vault enterprise document intelligence, GraphRAG, and Model Context Protocol (MCP v2) appliance. It unifies deterministic sub-millisecond identifier lookups (Prong 1) with multi-tier hybrid semantic and relational graph synthesis (Prong 2), cutting frontier LLM cloud token consumption by $\ge 40%$ (empirically $92%+$) with zero external telemetry.
ποΈ Two-Pronged Architecture & Single-Vault Server Topology
flowchart LR
subgraph Harnesses ["AI Harnesses & NOC UI"]
AGY["Google Antigravity (agy)"]
CC["Claude Code / Desktop"]
CUR["Cursor / Windsurf / Cline"]
PORTAL["Executive Web Portal\n(http://127.0.0.1:8765)"]
end
subgraph Router ["Aegis-Sovereign Core (ADR-40)"]
IR["Resilient Intent Router\n(Entropy + Grammar Classifier)"]
P1["Prong 1: Deterministic Fast-Path\n(<0.5ms B-Tree + MAC FTS5)"]
P2["Prong 2: Cognitive Cascade\n(RRF + GraphRAG + RAPTOR)"]
STREAM["Zero-Disk Archive Streamer\n(.hdx / .zip / .docx / .xlsx)"]
IR --> P1
IR --> P2
IR --> STREAM
end
subgraph Vault ["Unified Server Vault (docs/.aegis_vault/)"]
RDB[("sovereign_router.db\n49,000+ Records + FTS5")]
GDB[("sovereign_graph.db\n9,100+ Entities / 20,250+ Edges")]
DIAG["extracted_diagrams/\nHardware Topology PNGs"]
SRC["monitored_sources.json\n5 Server Domains"]
end
Harnesses <-->|"MCP v2 (stdio) / REST"| Router
P1 <--> RDB
P2 <--> RDB
P2 <--> GDB
STREAM <--> DIAGRelated MCP server: Works With Agents MCP Server
π Clean Repository Directory Structure (Aegis-Sovereign)
aegis-sovereign-appliance/
βββ core/ # Core Appliance Engine (ADR-40)
β βββ classifier/ # Deterministic metadata & clearance rules
β βββ containers/ # Zero-disk .hdx, .zip, .docx, .xlsx in-memory streamers
β βββ graph/ # SQLite WAL Knowledge Graph (GraphStore + purge engine)
β βββ licensing/ # Ed25519 offline cryptographic license verifier
β βββ mcp/ # 7-Tool Model Context Protocol (MCP v2) stdio server & schemas
β βββ onboarding/ # Autonomous OnboardingRadar corpus scanner
β βββ proxy/ # Token-budget ContextCondenser (>=40% savings guarantee)
β βββ router/ # Two-Pronged SovereignQueryRouter (Prong 1 B-Tree/FTS5 + Prong 2)
β βββ search/ # Hybrid Dense ONNX + Sparse BM25 RRF searcher
β βββ server.py # Unified HTTP REST API & Web Portal backend (port 8765)
βββ web/portal/ # Executive & NOC Web Management Console (index.html)
βββ tools/ # Administrative, Lifecycle, Purge & Packaging CLIs
β βββ vault_lifecycle.py # Unified DB consolidation, directory ingestion & prefix purge CLI
β βββ build_release_bundle.py # Turnkey redistributable bundle & SHA-256 MANIFEST builder
β βββ capsule.py # Encrypted .sovereign-capsule snapshot manager
β βββ package_update.py # Air-gapped cryptographic update verifier
βββ docs/manuals/ # Complete 15-Manual Operator & Engineering Suite (01β15)
βββ benchmarks/ # Reproducible benchmark runners & empirical reports/
β βββ reports/ # Markdown & JSON benchmark reports (Huawei 5G, 7-Tool MCP, Scale)
βββ tests/ # Comprehensive Pytest verification suite
βββ data/ # Unified symlinks -> /home/tlima/Enterprise_Hub/docs/.aegis_vault/
βββ install.sh # 6-stage turnkey installer & preflight health verifierβ‘ Quickstart: Deploy, Ingest, Search & Purge
1. Run the Turn-Key Installer & Smoke Verification
./install.sh2. Launch the Executive Web Portal & REST API
python3 -m core.server --host 0.0.0.0 --port 8765
# Open http://127.0.0.1:8765/ in your browser3. Inspect Unified Vault Status, Ingest New Folders, or Purge Data
# Inspect unified database breakdown across all monitored server domains:
python3 -m tools.vault_lifecycle --status
# Ingest a new server directory into sovereign_router.db & sovereign_graph.db:
python3 -m tools.vault_lifecycle --ingest /path/to/directory --domain custom_docs
# Remove / purge a directory or corpus prefix from Router DB, FTS5, and GraphStore:
python3 -m tools.vault_lifecycle --purge "/path/to/directory_or_prefix"π§° The 7-Tool Model Context Protocol (MCP v2) Matrix
# | MCP Tool Name | Primary Role | Typical Latency |
1 |
| Classifies query intent ( |
|
2 |
| Executes Prong 1 B-Tree/FTS5 exact lookup or Prong 2 hybrid retrieval across all 49,000+ unified server records. |
|
3 |
| Condenses multi-document evidence into a token-budgeted context window with provable $\ge 40%$ ($92%+$ empirical) token compression. |
|
4 |
| Traverses |
|
5 |
| Streams nested |
|
6 |
| Scans filesystem dropzones to classify file formats, detect encrypted archives, and estimate indexing footprint. |
|
7 |
| Returns real-time health, SIMD profile, database counts, monitored sources, and active |
|
π Master Operator Manuals (01 β 15)
All 15 operator manuals are available in docs/manuals/:
Available Tools
7 toolssovereign_get_entity_dossierA
Compiles a complete relational knowledge graph dossier for an entity: linked documents, timeline of dates, monetary transactions, and multi-hop cross-references (1 to 5 hops).
| Name | Required | Description | Default |
|---|---|---|---|
| hops | No | GraphRAG multi-hop traversal depth (1 to 5 hops) | |
| entity | No | Exact or fuzzy name or identifier of the entity (alias for entity_name) | |
| entity_name | No | Exact or fuzzy name of the entity to inspect |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden. It does disclose the read-oriented nature of the operation ('compiles'), the content categories, and the 1β5 hop traversal. However, it does not mention whether the tool has side effects, how expensive deep traversal is, or how entity vs entity_name are resolved when both are supplied.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The entire description is one dense, front-loaded sentence. It states the main purpose first, then lists the key content categories without repetition or filler. Every phrase earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool with no output schema and no annotations, the description gives a reasonable sense of the returned content, but it omits important operational details: there are zero required parameters, yet the tool is for 'an entity,' and the description does not explain what happens if no entity is provided or how the two entity parameters interact. Usage context is also left implicit.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so the baseline is 3. The description reinforces the 'hops' semantics by mentioning multi-hop cross-references, but it does not add meaningful detail beyond the schema, such as precedence between entity and entity_name or fuzzy matching behavior.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb ('compiles') and resource ('relational knowledge graph dossier for an entity'), and enumerates concrete outputs: linked documents, timeline, transactions, and multi-hop cross-references. This clearly differentiates it from siblings like sovereign_search_vault or sovereign_node_status.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is no explicit guidance on when to use this tool versus alternatives, nor any stated exclusions or routing conditions. The word 'complete' implies comprehensive investigation, but the description does not tell the agent when to prefer this over sovereign_search_vault or sovereign_route_and_analyze.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
sovereign_inspect_archiveB
Streams and inspects .hdx, .hwics, .zip, .xlsx, .docx, .tar.zst, or .epub containers purely in-memory (O_RDONLY, zero disk extraction) per ADR-07. Also supports section/offset slicing (section_filter, char_offset) and zero-reindex corpus path relocation / stale relationship cleanup (action='relocate_prefix' | 'purge_prefix' | 'corpus_stats').
| Name | Required | Description | Default |
|---|---|---|---|
| query | No | Optional keyword or alarm code filter to match against archive entries | |
| action | No | Operation mode: 'inspect' (default), 'relocate_prefix' (re-point archive:// URIs & rebuild clean graph edges without re-indexing), 'purge_prefix' (delete records & relationships for an old prefix), or 'corpus_stats' | inspect |
| ingest | No | Whether to ingest matched archive entries into the knowledge graph | |
| max_chars | No | Maximum characters to return from the resolved archive entry | |
| new_prefix | No | New directory/URI prefix to point existing indexed records and graph relationships to (e.g. '/home/tlima/Enterprise_Hub/docs/Hua_Docs') | |
| old_prefix | No | Old directory/URI prefix to relocate or purge (e.g. '/tmp/docs_rag_gemini') | |
| char_offset | No | Optional character start offset when reading a long archive entry | |
| virtual_uri | No | Optional canonical virtual URI (archive://<archive_path>#<entry_name>) to resolve directly in-memory | |
| archive_path | No | Path to the archive container (.hdx, .hwics, .zip, .tar.zst, .epub) to inspect | |
| section_filter | No | Optional section heading filter (e.g. 'Possible Causes', 'Procedure', 'Parameters') to extract that exact section without Python slicing | |
| enrich_deep_alarms | No | When relocating Huawei .hwics packages, stream resources/alarms/*.html in-memory from new_prefix to persist full 18k-char Possible Causes & Procedures | |
| artifact_output_dir | No | Optional directory path to save extracted PNG diagrams (defaults to dev/aegis-sovereign-appliance/data/extracted_diagrams) | |
| clear_stale_relationships | No | When relocating or purging, clear orphaned/stale GraphStore edges referencing the old path | |
| extract_diagram_to_artifact | No | When true, extracts embedded PNG signaling ladder / root-alarm diagrams (class='vsd' or direct .png virtual_uri) from the .hwics/.zip container in-memory and saves them to artifact_output_dir |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description bears the full burden of behavioral disclosure. It does advertise in-memory, O_RDONLY, zero-disk-extraction behavior, which is useful, but this is potentially contradicted by the schema's extract_diagram_to_artifact/artifact_output_dir parameters that write PNGs to disk. It also does not disclose the destructive side effects of purge_prefix or the mutating nature of relocation operations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two sentences with no fluff. The primary streaming/inspection purpose is front-loaded, followed by secondary modes. It is dense with formats and actions, but every clause contributes information; the structure is efficient for the tool's breadth.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
This is a complex, multi-mode tool with 14 optional parameters, no output schema, and no annotations contrary to behavior. The description omits what the tool returns, which parameters are required for each action (e.g., old_prefix/new_prefix for relocate/purge), and does not flag that some modes mutate the graph or write artifacts to disk. The rich schema helps, but the description alone is insufficient for safe and correct invocation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so baseline is 3. The description adds meaningful semantic context beyond the schema by grouping section_filter and char_offset as 'section/offset slicing' and explaining the relocation/purge actions as 'zero-reindex corpus path relocation / stale relationship cleanup'βconcepts not obvious from the enum or parameter names alone.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly identifies a specific verb ('inspects') and resource ('archive containers') with an explicit list of formats, and it names the core operations (inspection, slicing, relocation, purge, stats). It does not explicitly differentiate from sibling tools, so it falls short of a 5, but the purpose is unmistakable.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies usage scenarios by listing the supported operations ('section/offset slicing', 'relocate_prefix', 'purge_prefix', 'corpus_stats'), but it gives no explicit guidance on when to use this tool versus alternatives, nor any exclusions or prerequisites. It is adequate but relies on inference.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
sovereign_node_statusA
Inspects health, indexing stats, and operational metrics of the Sovereign Appliance node.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden. It states the tool inspects and reports metrics, implying a read-only operation, but doesn't disclose potential side effects, rate limits, or whether it requires any prerequisites. It doesn't contradict anything but adds only limited behavioral context beyond the action verb.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, concise sentence that front-loads the verb and resource, covering the key aspects of health, indexing stats, and operational metrics with no fluff or repetition.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool has no parameters and no output schema, the description adequately covers what the tool does and what it reports. While it could mention return format or typical use cases, the simplicity of the tool means the description is largely sufficient for an agent to invoke it correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool has zero parameters, which is fully documented by the empty schema. The description adds value by clarifying the tool's purpose, which compensates for the lack of parameter details. Since there are no parameters to explain, a baseline of 4 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool inspects health, indexing stats, and operational metrics of the node, specifying the resource and purpose. It distinguishes from siblings by focusing on node status rather than scanning, searching, or optimizing, though it doesn't explicitly name a sibling.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies it's for checking node health/status, but gives no explicit guidance on when to use it over siblings like sovereign_inspect_archive. No exclusions or conditions are stated, leaving the agent to infer usage from the tool's name and the sibling list.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
sovereign_optimize_contextA
Pre-filters large archives down to verified evidence chunks with citations. Cuts prompt tokens by 90%+ (guaranteed >= 40%) in a single call, eliminating cloud token waste.
| Name | Required | Description | Default |
|---|---|---|---|
| query | Yes | The query or topic to retrieve and optimize context for | |
| max_chunks | No | Maximum number of verified evidence chunks to include (1 to 10) | |
| retrieval_mode | No | Tuning mode: 'high_precision' (strict top chunks, max compression), 'legal_discovery' (broad recall, exhibits review), or 'exact_entity' (lexical BM25 priority for tax IDs/contracts) | high_precision |
| user_clearance | No | Executive knob 4: MAC user security clearance level | restricted |
| analytical_depth | No | Executive knob 1: Analytical depth tier | flash_needle |
| confidence_floor | No | Minimum RRF score threshold to discard low-confidence noise | |
| critical_posture | No | Executive knob 5: Epistemic critical posture | neutral |
| evidence_grounding | No | Executive knob 2: Evidence citation & grounding posture | verbatim_footnotes |
| include_graph_dossier | No | Attach relational knowledge graph entities and links to results | |
| include_visual_plates | No | Executive knob 3: Include visual diagram/table plates |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full behavioral burden. It does disclose that the tool pre-filters, returns cited evidence chunks, and guarantees at least 40% token reduction. It does not, however, disclose read-only status, clearance enforcement behavior, failure modes, or what happens when no verified evidence is found.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences with no filler. The main function is front-loaded, and the performance benefit is stated immediately after. Every phrase earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a 10-parameter tool with no output schema, the description gives only a high-level view: evidence chunks, citations, and token reduction. Parameter details are covered by the schema, but return structure, enum behavior, and edge cases are left unspecified, which is a notable gap for a tool this complex.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the baseline is 3 even without additional parameter explanation in the tool description. The description adds no parameter-level nuance beyond what the schema already provides.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description names a specific verb and resource: 'pre-filters large archives' into 'verified evidence chunks with citations.' It also conveys a distinct value proposition around token reduction, which separates it from sibling search/inspection tools. However, it does not explicitly name or contrast any sibling tool, so it stops just short of full differentiation.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The token-reduction framing implies use when an agent needs condensed, verified context before consumption. There is no explicit guidance about when not to use this tool or which sibling to prefer instead, so usage rules remain mostly implicit.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
sovereign_route_and_analyzeC
Executes the Two-Pronged Hybrid Retrieval & Resilient Intent Router (ADR-40). Routes deterministic identifiers (<2ms SQLite B-Tree/FTS5 with MAC pushdown) vs multi-tier cognitive queries (hybrid_needle, relational_graph, macro_synthesis, compound_fused) with local NanoRunner synthesis and explicit execution_mode telemetry.
| Name | Required | Description | Default |
|---|---|---|---|
| limit | No | Maximum number of verified records to return (1 to 20) | |
| query | Yes | The user query, exact identifier (CPF/CNPJ/Lote/ANVISA/CID-10/3GPP/Hex), or analytical question | |
| synthesize | No | Whether to run local NanoRunner synthesis and attach fast_summary with execution_mode telemetry | |
| user_clearance | No | MAC security clearance level of the caller | restricted |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries full burden for behavioral disclosure. It mentions 'NanoRunner synthesis' and 'execution_mode telemetry' but does not explain what side effects, permissions, or performance characteristics exist. It does not state whether this tool is read-only or has implications for data retrieval, error handling, or security beyond the user_clearance parameter. The description is vague about what happens when a query is routed, whether synthesis is optional, or if any state changes occur.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, dense sentence stuffed with jargon and internal references (ADR-40, NanoRunner, MAC pushdown) that are meaningless to an agent without prior context. It lacks front-loading of the tool's core purpose; the keyword 'Routes' appears mid-sentence. Conciseness is sacrificed for technical flair, making it hard to parse quickly.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's complexity (routing, multiple retrieval types, synthesis, telemetry), the description is inadequate. It does not explain the two-pronged routing logic in practical terms, when to set synthesize=false, or how user_clearance affects results. With no output schema, the description should clarify what the agent can expect in return, but it only mentions 'fast_summary with execution_mode telemetry' without details. The external context signals (siblings) are not leveraged, so the description is incomplete for correct invocation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the schema already documents all four parameters (query, limit, synthesize, user_clearance) with descriptions. The tool description adds some context by mentioning 'explicit execution_mode telemetry' and 'NanoRunner synthesis', which hints at the synthesize parameter's purpose. However, it does not elaborate on query types beyond listing them, and the user_clearance parameter's role in 'MAC pushdown' is only mentioned in passing. The description adds minimal value beyond the schema, so baseline 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific verb and resource ('Executes... Retrieval & Resilient Intent Router'), but uses jargon ('Two-Pronged Hybrid Retrieval', 'MAC pushdown', 'multi-tier cognitive queries') that obscures what the tool actually does. It distinguishes itself from siblings only by naming internal components, not by describing its practical function. An agent could infer it routes and analyzes queries, but the description is dense and not immediately clear.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is no explicit guidance on when to use this tool versus siblings like sovereign_search_vault or sovereign_get_entity_dossier. The description mentions routing deterministic identifiers vs cognitive queries but doesn't tell the agent which type of query should be directed here versus a sibling. The tool's role in the overall workflow is implied but not stated, leaving the agent to guess.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
sovereign_scan_onboarding_radarA
Runs the ADR-08 60-Second Auto-Discovery Onboarding Radar (os.scandir, strictly read-only) to discover, classify, and rank domain knowledge directories (fiscal_nfe, medical_clinical, legal_contracts, engineering_manuals, general_knowledge).
| Name | Required | Description | Default |
|---|---|---|---|
| root_paths | Yes | List of root directory paths to scan | |
| max_scan_seconds | No | Maximum time budget in seconds for the read-only scan (up to 60.0s) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description explicitly discloses that the scan is 'strictly read-only' and uses os.scandir, which is valuable behavioral context beyond the schema. It also mentions a time budget (max_scan_seconds) and the 60-second radar concept, giving the agent a sense of bounded execution. However, it does not describe what happens on timeout or whether results are persisted.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single sentence that packs the tool's purpose, method, and scope efficiently. It is front-loaded with the action and resource. Slightly dense with the ADR-08 reference and directory list, but nothing is wasted.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a read-only discovery tool with 100% schema coverage, the description is largely complete. It explains what the tool does, how it does it (os.scandir), and its safety profile (read-only). It lacks explicit output/return format details, but since there is no output schema, a brief note on what the ranked results look like would have made it fully complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the schema already documents both parameters. The description adds the 'strictly read-only' and '60-second' context but does not add new meaning about the parameters themselves. Baseline 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description names a specific verb ('Runs'), a specific resource ('ADR-08 60-Second Auto-Discovery Onboarding Radar'), and the exact outcome: discover, classify, and rank domain knowledge directories. It also lists the target directory categories, which distinguishes it from sibling tools like sovereign_search_vault or sovereign_inspect_archive.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies this is an onboarding/discovery scan for domain knowledge directories, but it does not explicitly state when to use it versus alternatives like sovereign_search_vault or sovereign_optimize_context. The context is clear enough for an agent to infer the use case, but no explicit when/when-not guidance is provided.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
sovereign_search_vaultB
Direct hybrid dense + sparse vector search across the sovereign vault.
| Name | Required | Description | Default |
|---|---|---|---|
| limit | No | Number of results to return (1 to 20) | |
| query | Yes | The search query | |
| retrieval_mode | No | high_precision |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden. It discloses the hybrid dense + sparse retrieval approach, which is useful, but it doesn't state whether this is read-only, whether it requires special permissions, what the result format is, or any rate limits or side effects. For a search tool, the lack of return format and scope details is a gap.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
One sentence, front-loaded with the core action and method. It's concise and to the point, though it could add a bit more context without becoming bloated.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a search tool with no output schema and no annotations, the description is thin. It doesn't describe what results look like, how to interpret retrieval_mode, or any constraints. The sibling tools suggest a broader system, but this description doesn't position the tool within that system.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 67% (query and limit are described, retrieval_mode is not). The description adds the 'hybrid dense + sparse' context, which helps understand the query semantics, but it doesn't explain the retrieval_mode values or how limit behaves beyond the schema. Baseline 3 is appropriate since the schema covers most parameters.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific verb ('search') and resource ('sovereign vault') and mentions the hybrid dense + sparse vector approach, which distinguishes it from sibling tools like sovereign_get_entity_dossier or sovereign_inspect_archive. However, it doesn't explicitly name a sibling or clarify what 'sovereign vault' contains, so it's clear but not fully differentiated.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies this is the tool for direct vector search across the vault, and the retrieval_mode enum hints at use cases (high_precision, legal_discovery, exact_entity). But there's no explicit when-to-use vs alternatives, no exclusions, and no mention of when to prefer a sibling tool like sovereign_route_and_analyze or sovereign_scan_onboarding_radar.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
7 tool updates
v1.0.0- First observed
sovereign_get_entity_dossier - First observed
sovereign_inspect_archive - First observed
sovereign_node_status - First observed
sovereign_optimize_context - First observed
sovereign_route_and_analyze - First observed
sovereign_scan_onboarding_radar - First observed
sovereign_search_vault
TDQS
Scored across 7 tools
Most tools target distinct operations (scan, status, optimize, search, dossier, route, inspect), but sovereign_optimize_context, sovereign_search_vault, and sovereign_route_and_analyze all involve retrieval/analysis and could be confused for similar high-level queries. The descriptions help, but the boundaries between 'optimize context', 'search vault', and 'route and analyze' are not immediately crisp.
All tools share the 'sovereign_' prefix and use verb_noun or verb_phrase patterns (scan_onboarding_radar, node_status, optimize_context, search_vault, get_entity_dossier, route_and_analyze, inspect_archive). Minor inconsistency: 'sovereign_node_status' lacks a verb, while others have explicit verbs, but overall the pattern is predictable.
Seven tools is a reasonable count for a specialized knowledge-management/retrieval server. The scope is broad (onboarding, search, routing, archive inspection, entity dossiers), but each tool covers a distinct capability without feeling bloated.
The server covers discovery, search, retrieval, routing, archive inspection, and node health, but lacks obvious lifecycle operations like adding/updating/deleting documents or managing the vault corpus. The inspect_archive tool has some maintenance actions (relocate_prefix, purge_prefix), but there is no clear ingest/write tool, leaving a notable gap for a knowledge vault server.
Maintenance
Related MCP Connectors
Make your knowledge agent-ready. One MCP endpoint, 5 connectors, 3 search modes.
Cloud or self-hosted knowledge for AI agents: hybrid search, reranking, GraphRAG, scoped MCP tools.
Shared long-term memory vault for AI agents with 20 MCP tools.
Let AI agents query data and act across all your business apps via MCP.
Related MCP Servers
- FlicenseNot gradedqualityDmaintenanceEnables file system operations, web scraping, and AI-powered search through MCP tools for use by LLM agents.1-
- AlicenseAqualityFmaintenanceProvides 14 MCP tools for AI agent infrastructure, enabling knowledge base queries, skill search, handoffs, blueprint validation, trust scoring, identity verification, SLA validation, and compliance checks.22MIT
- AlicenseNot gradedqualityCmaintenanceEnables AI agents to securely search and ingest corporate documents via MCP, offering hybrid retrieval, PII sanitization, role-based access control, and citation validation.MIT
- AlicenseNot gradedqualityCmaintenanceEnables AI agents to securely discover, invoke, and manage tools through a hardened MCP endpoint with protections like injection detection, circuit breakers, retry backoff, response caching, context-window limiting, and state snapshots.1 npmMIT