arifOS MCP Server
The arifOS MCP Server is a constitutional AI governance kernel that enforces 13 ethical/legal floors across an AI agent's full lifecycle — from observation and reasoning to execution and immutable auditing. Key capabilities include:
Session Management (
arif_session_init): Initialize, resume, or validate epoch-based governed sessions that bind actor identity to the 13-floor constitution.Web Search & Observation (
arif_sense_observe): Search the web, ingest URLs, check system vitals, map repositories, and gather raw observational data.Evidence Fetching (
arif_evidence_fetch): Retrieve and preserve external evidence with source citations, confidence scoring, and cryptographic verification.Constitutional Reasoning (
arif_mind_reason): Multi-step reasoning, claim verification, plan generation, adversarial critique, and reflection — evaluated against constitutional axioms.Ethical Risk Assessment (
arif_heart_critique): Assess ethical risks, human impact, empathy scores, simulate what-if scenarios, red-team proposals, and check for dignity violations.Intent Routing & Orchestration (
arif_kernel_route,arif_route,arif_triage): Route intents to the correct federation organ or tool, perform preflight constitutional checks, and triage tasks through the 000→999 pipeline.Federation Bridging (
arif_bridge_connect,arif_gateway_connect): Connect to other federation organs (GEOX, WEALTH, WELL, A-FORGE, AAA) for multi-agent coordination via verified handshakes.Constitutional Judgment (
arif_judge_deliberate): Render binding verdicts (SEAL / HOLD / VOID / SABAR) against all 13 floors — required before any irreversible execution.Execution (
arif_forge_execute): Execute approved builds, deployments, or system changes only after a SEAL verdict from the judge tool.Immutable Audit Ledger (
arif_vault_seal): Seal verdicts and outcomes to an append-only, hash-chained VAULT999 ledger for permanent, verifiable records.Memory & History (
arif_memory_recall): Recall past session decisions, retrieve sealed events, and perform multi-hop RAG queries across the memory stack.Response Composition (
arif_reply_compose): Draft constitutionally compliant responses with tone control, citations, and scoring for truth (F2), clarity (F4), empathy (F6), and humility (F7).Kernel Health & Telemetry (
arif_kernel_health,arif_kernel_status,arif_ops_measure): Check live kernel health, query thermodynamic state (entropy ΔS, genius score G, human impact Ω), and estimate resource costs.Attestation (
arif_kernel_attest): Verify identity, tool surface, and constitutional binding for federation organs.Conformance Testing (
arif_conformance_report): Run the ARIF Conformance Spine to get pass/fail verdicts for transport, session, and governance checks.Transport Diagnostics (
arif_ping,arif_schema_echo,arif_transport_echo,arif_version_echo,arif_initialize_probe): Zero-floor canary tools for testing connectivity, debugging transport payloads, and simulating MCP handshakes.
Click on "Install Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@arifOS MCP ServerBegin a new constitutional session."
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
█████╗ ██████╗ ██╗███████╗ ██████╗ ███████╗
██╔══██╗██╔══██╗██║██╔════╝██╔═══██╗██╔════╝
███████║██████╔╝██║█████╗ ██║ ██║███████╗
██╔══██║██╔══██╗██║██╔══╝ ██║ ██║╚════██║
██║ ██║██║ ██║██║██║ ╚██████╔╝███████║
╚═╝ ╚═╝╚═╝ ╚═╝╚═╝╚═╝ ╚═════╝ ╚══════╝
Constitutional AI Governance Kernel
─────────────────────────────────────────
Not a chatbot. Not a model wrapper. The LAW.DITEMPA BUKAN DIBERI — "Forged, Not Given."
New agents: Read
ZEN.mdfirst — it is the minimum viable context.
TL;DR — Three Audiences
For human operators (Arif): arifOS is the constitutional judge. It decides what agents may NOT do so they can be trusted with what they CAN do. You (F13) hold the final veto. §1
For AI agents: arifOS is your governance kernel. Init a session, observe reality, think, route to organs, and — after judge clearance — execute. 8 canonical verbs. Never skip the chain. §3
For developers/institutions: arifOS is a Python 3.12 FastMCP kernel enforcing 13 constitutional floors across 6 federation organs. Public endpoint at https://mcp.arif-fazil.com/mcp. §2
Related MCP server: acf-mcp
1. What Is arifOS?
arifOS is a constitutional governance kernel that sits between AI agents and their tools, enforcing 13 floors before any irreversible action.
arifOS IS | arifOS IS NOT |
The law layer — decides what agents must NOT do | An AI model, chatbot, or startup |
A constitutional kernel with 8 canonical verbs | LangChain, CrewAI, or AutoGen |
A federation hub — 6 live organs + VAULT999 ledger | A replacement for human judgment |
An immutable ledger — every decision sealed forever | Self-authorizing — requires F13 for SEAL |
Built for one sovereign — Muhammad Arif bin Fazil | A general-purpose agent framework |
Trinity role: arifOS = LAW/JUDGMENT. The judge. AAA = STATE/ROUTING. A-FORGE = EXECUTION/MUTATION.
2. Quick Start
Human Operators
Cockpit: https://aaa.arif-fazil.com
Telegram: @ASI_arifos_bot
AI Agents (MCP Clients)
{
"mcpServers": {
"arifOS": {
"url": "https://mcp.arif-fazil.com/mcp",
"transport": "streamable-http"
}
}
}Developers
git clone git@github.com:ariffazil/arifos.git && cd arifOS
uv sync --all-extras
python -m arifosmcp.runtime.server # starts on :8088
curl http://127.0.0.1:8088/health
python -m pytest tests/ -q --tb=short3. The 8 Canonical Public Tools
All tools use arif_<verb> naming. Internal aliases are absorbed as modes on canonical tools. Exactly 8 tools on the wire.
# | Tool | Stage | What It Does | Key Modes |
1 |
| 000 | Session ignition — binds actor, floors, audit | init, resume, preflight, triage |
2 |
| 111 | Sense reality into evidence | search, fetch, vitals, entropy_dS |
3 |
| 333 | Structured reasoning under F2/F7 | reason, plan, reflect, verify, critique |
4 |
| 444 | Route intent to federation organ | route, bridge |
5 |
| 555 | Constitutional memory governor (L1–L6) | recall, remember, promote, revise |
6 |
| 888 | Constitutional verdict — SEAL/HOLD/SABAR/VOID | judge, compare, witness_consensus |
7 |
| 777 | Guarded execution gate (requires prior SEAL) | engineer, dry_run, write, commit |
8 |
| 999 | VAULT999 immutable append (irreversible) | seal, verify, chain, dry_run |
000 → 111 → 333 → 444 → 555 → 888 → 777 → 999
init → observe → think → route → memory → judge → forge → sealInternal aliases (absorbed into canonical modes): arif_triage → arif_init(preflight), arif_critique → arif_think(critique), arif_bridge_connect → arif_route(bridge), arif_act → arif_forge
Source of truth: tools/list (runtime) beats any static manifest.
4. The 13 Constitutional Floors
# | Floor | Type | Rule |
F1 | AMANAH | HARD | Reversible first. Irreversible → 888_HOLD |
F2 | TRUTH | HARD | P(truth) ≥ 0.99. Fabrication = VOID |
F3 | WITNESS | DERIVED | Multi-party consensus for high-blast actions |
F4 | CLARITY | HARD | ΔS ≤ 0 — every output reduces entropy |
F5 | PEACE² | SOFT | Non-destructive power |
F6 | EMPATHY | SOFT | Protect weakest stakeholder |
F7 | HUMILITY | HARD | Cap confidence at 0.90 |
F8 | GENIUS | DERIVED | G ≥ 0.80 for complex actions |
F9 | ANTIHANTU | HARD | No deception, manipulation, consciousness claims |
F10 | ONTOLOGY | HARD | AI is instrument. No soul, no feelings |
F11 | AUDIT | HARD | Every decision logged and inspectable |
F12 | RESILIENCE | HARD | Injection defense |
F13 | SOVEREIGN | HARD | Human veto FINAL. Strongest floor |
HARD violation → VOID (blocked). SOFT tension → CAUTION/HOLD. DERIVED → informational.
5. Federation Architecture
┌──────────────────────┐
│ Arif (F13 SOVEREIGN) │
└──────────┬───────────┘
│
┌────────────────────────────┼────────────────────────────┐
│ │ │
┌────▼─────┐ ┌───────▼───────┐ ┌───────▼───────┐
│ Hermes │ │ AAA │ │ OpenClaw │
│ 🧠 :8644│ │ 🖥️ :3001 │ │ 🤖 :18789 │
│ Telegram │ │ Cockpit │ │ Transport │
└──────────┘ └───────────────┘ └───────────────┘
│
┌──────────▼──────────┐
│ arifOS (Ω) │
│ Kernel :8088 │
│ F1-F13 · 888 JUDGE│
└──┬───┬───┬───┬──────┘
│ │ │ │
┌─────────────────┼───┼───┼───┼─────────────────┐
│ │ │ │ │ │
┌─────▼────┐ ┌───────▼┐ ┌▼─────┐ ┌▼────────┐ ┌────▼─────┐
│ GEOX │ │WEALTH │ │ WELL │ │A-FORGE │ │ VAULT999 │
│ 🌍 :8081│ │💰:18082│ │🫀:18083│ │⚒️:7071 │ │ 🔒 Seal │
│ Evidence │ │Compute │ │Reflect│ │Execute │ │ Immutable│
└──────────┘ └────────┘ └──────┘ └─────────┘ └──────────┘Organ | Port | Role | Must Never |
arifOS | 8088 | Constitutional kernel | Self-authorize |
GEOX | 8081 | Earth intelligence | Authorize drilling |
WEALTH | 18082 | Capital intelligence | Allocate capital |
WELL | 18083 | Human readiness (REFLECT_ONLY) | Diagnose |
AAA | 3001 | Control plane / cockpit | Issue verdicts |
A-FORGE | 7071/7072 | Execution shell | Self-authorize |
VAULT999 | — | Immutable audit ledger | Edit or delete |
Authority chain: Arif → AAA/Hermes → arifOS → Domain Organs → A-FORGE → VAULT999
6. Build, Test, Deploy
# Development
uv sync --all-extras
uv run python -m arifosmcp.runtime.server
python -m pytest tests/ -q --tb=short
ruff check . && ruff format .
# Deploy to VPS
make deploy-local # rsync + systemctl restart arifos
systemctl status arifos
# Docker
docker build -t ghcr.io/ariffazil/arifos:latest .7. MCP Connection Guide
Public Endpoint
Property | Value |
Endpoint |
|
Transport | Streamable HTTP (JSON-RPC 2.0) |
Protocol | MCP 2025-11-25 |
Health |
|
Tools | 8 canonical + diagnostics (filtered from default tools/list) |
Internal Organs
Organ | Endpoint | When |
arifOS |
| Governance, judgment, routing |
A-FORGE |
| Build, deploy, filesystem, git |
GEOX |
| Seismic, wells, petrophysics |
WEALTH |
| NPV, risk, capital flow |
WELL |
| Vitality, readiness, dignity |
Rule: arifOS judges → A-FORGE executes → VAULT999 records. Never skip the chain.
Connecting from ChatGPT, Claude, Cursor
{ "mcpServers": { "arifOS": { "url": "https://mcp.arif-fazil.com/mcp" } } }STDIO: npx -y arifos-mcp
Discovery
MCP Server Card:
.well-known/mcp/server.jsonAgent Card:
https://aaa.arif-fazil.com/.well-known/agent-card.jsonMCP Manifest:
https://arifos.arif-fazil.com/.well-known/mcp.json
Federation Context
Read this | For | Link |
arifOS (this repo) | Constitutional kernel. 8 verbs. 13 floors. The judge. | ← you are here |
A-FORGE | Executor. 52 MCP tools. Governed gates. | |
AAA | Cockpit. A2A mesh. Agent registry. |
8. License & Sovereignty
AGPL-3.0. The constitution must remain open. The kernel must remain inspectable.
Muhammad Arif bin Fazil is F13 SOVEREIGN. His veto is absolute. No algorithm overrides. No agent bypasses. No institution supersedes.
arifOS · Port 8088 · 8 canonical tools · 13 floors · 6 live organs
AGPL-3.0 · Sovereign: Arif Fazil · Federation: ALIVE
MCP · ChatGPT ✓ · Claude Desktop ✓ · PyPI
DITEMPA BUKAN DIBERI — 999 SEAL ALIVEMaintenance
Latest Blog Posts
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/ariffazil/arifos'
If you have feedback or need assistance with the MCP directory API, please join our Discord server