Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
No arguments | |||
Capabilities
Features and capabilities supported by this server
| Capability | Details |
|---|---|
| tools | {
"listChanged": true
} |
| prompts | {
"listChanged": true
} |
| resources | {
"listChanged": true
} |
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| aga_server_info | Get AGA server info, public keys, portal state, and framework alignment. |
| get_server_info | Get AGA server info (alias for aga_server_info). |
| aga_init_chain | Initialize continuity chain with genesis event. (Claim 3a) |
| init_chain | Initialize continuity chain (alias for aga_init_chain). (Claim 3a) |
| aga_create_artifact | Attest subject, generate sealed Policy Artifact, load into portal. Accepts content or pre-computed hashes. (Claims 1a-1d) |
| aga_measure_subject | Measure subject state, compare to sealed reference. Generates signed receipt. (Claims 1e-1g) |
| aga_verify_artifact | Verify an artifact signature against an issuer public key. |
| aga_start_monitoring | Start or restart behavioral monitoring with a new baseline. |
| aga_get_portal_state | Get current portal state, loaded artifact info, and enforcement status. |
| aga_trigger_measurement | Trigger a measurement of subject content and generate a receipt. |
| aga_generate_receipt | Generate a signed measurement receipt manually. |
| aga_export_bundle | Package artifact + receipts + Merkle proofs for offline verification. (Claim 9) |
| aga_verify_bundle | Verify evidence bundle offline - 4-step verification. (Section J) |
| aga_disclose_claim | Request disclosure of a claim. Auto-substitutes if sensitivity denied. (Claim 2) |
| aga_get_chain | Get continuity chain events with optional verification and filtering. (Claim 3c) |
| aga_quarantine_status | Get quarantine state and forensic capture status. (Claim 5) |
| aga_revoke_artifact | Revoke an active policy artifact mid-session. Supports TERMINATED or SAFE_STATE transition. (NCCoE Phase 3b) |
| aga_set_verification_tier | Set the verification tier (BRONZE, SILVER, GOLD). |
| aga_demonstrate_lifecycle | Execute full AGA lifecycle demo: attest → measure → drift → revoke → bundle → verify. |
| aga_measure_behavior | Measure behavioral patterns or record tool invocation. (NIST-2025-0035) |
| aga_delegate_to_subagent | Derive constrained policy artifact for sub-agent. Scope only diminishes. (NCCoE) |
| aga_rotate_keys | Rotate a keypair (issuer, portal, or chain). Old key should be revoked. |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
| nccoe-demo | NCCoE AI Agent Identity and Authorization - Full 4-phase demo with behavioral drift detection |
| governance-report | Generate a session governance summary report |
| drift-analysis | Analyze drift events and recommend remediation |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
| protocol-specification | AGA Protocol Specification v2.0.0 with SPIFFE integration and framework alignment |
| sample-bundle | Pre-generated cryptographically signed evidence bundle |
| crypto-primitives | AGA cryptographic primitives documentation |
| patent-claims | USPTO 19/433,835 patent claims mapped to 20 tools |