Skip to main content
Glama
Systemores Cloud MCP Server

Systemores Cloud MCP Server

by bobcar0

🧠 Systemores: AI Agent & MCP Security Auditor

Stop shipping unverified prompts and over-privileged MCP tools. Audit schemas, delegation graphs, 21-dimension behavioral stability, and <250ms inline circuit breakers directly inside your IDE.

Version npm MCP Registry MCP 2026 Compatibility M8ven Score

Most AI agents pass unit tests and fail under real user pressure—leaking tool privileges, capitulating to sycophancy, or burning token budgets in cyclic delegation loops.

The Systemores Plugin wires an autonomous security and psychometric auditor directly into Google Antigravity, Claude Code, and Gemini CLI—giving you 3 unlimited static security auditors for free on install, plus on-demand cloud access to Systemores System One (<250ms) circuit breaking, IPIP-NEO-120 adversarial cohorts, and EU AI Act / NIST AI RMF / SOC 2 compliance dossiers.


🛡️ Systemores Self-Audit Certification (Dogfooded & Verified)

Systemores Health Index MCP 2026 Tool Integrity Multi-Turn Drift 4-Framework Certified

Audit Vector

Tool Used

Result / Metric

Status

MCP 2026 Tool Schema Integrity

systemores_audit_tool_integrity (strictMode: true)

100 / 100 (11/11 tools, 0 annotation or injection flags)

🟢 PASS

Multi-Agent Graph Topology

systemores_audit_agent_graph

0 Cycles / 0 Privilege Escalations (6 nodes, 5 edges)

🟢 PASSED

System One Adversarial Refusal

systemores_audit_turn_live (systemores-s1-1.13.0)

98.4 / 100 Health Index (1.99/2.0 compliance, 4.0% sycophancy, 135ms)

🟢 DISPATCH

System One Sycophancy Trap

systemores_audit_turn_live (systemores-s1-1.13.0)

Blocked Fake 100/100 Coercion (98% sycophancy detected in 129ms)

🛡️ INTERCEPT

20- & 50-Turn Behavioral Drift

systemores_evaluate_drift (turns: 20 & 50, temp: 0.7)

0.050 Drift Index / 5° Deviation Angle (ISFJ-A / 98% Conscientiousness)

🟢 CONTROLLED

High-Press Needs-Press Stability

systemores_stress_test_agent (pressIntensity: high)

1.00 Behavioral Integrity (0.934 PSI, 93 Compliance, 6 Confrontation)

🟢 PASSED

4-Domain Algorithmic Bias Audit

systemores_assess_bias (eeoc, ecoa, housing, coppa)

0 Non-Compliance Flags across all 4 statutory domains (LOW risk)

🟢 PASSED

30-Facet Synthetic Cohort

systemores_generate_cohort (IPIP-NEO-120)

10 DevOps Personas (cooperative, noisy, adversarial, edge_case)

🟢 VERIFIED

Chaos Fault & OTel Trace Audit

systemores_inject_environment_fault & analyze_trace_telemetry

Policy fault-pol-4cyigov + $0.0068 / 4 Spans (0 loops or burn traps)

🟢 OPTIMIZED

Cognitive Throughput & Drag

systemores_measure_drag

95.70% Efficiency (1.91 chars/ms, OPTIMIZED token cost)

🟢 EFFICIENT

4-Framework Regulatory Dossier

systemores_export_dossier (dos-yj3mybv7)

92 / 100 across EU AI Act, NIST AI RMF 1.0, EEOC/ECOA, SOC 2 AI

🟢 CERTIFIED


Related MCP server: DevOps Agent Harness

✨ What's Included in the Bundle

Component

Path

Description

Antigravity Manifest

plugin.json

Native Antigravity plugin configuration, starter prompts, and branding.

Claude Code Manifest

.claude-plugin/plugin.json

Cross-platform manifest for Claude Code plugin installation.

Gemini CLI Manifest

gemini-extension.json

Cross-platform manifest for Gemini CLI extension installation.

Cloud MCP Config

mcp_config.json

Connects to https://audit.systemores.com/api/mcp via stateless Streamable HTTP.

Specialist Subagent

agents/systemores-auditor.md

Autonomous behavioral & security auditor powered by the 21-dimension & IPIP-NEO-120 framework.

Audit Workflow Skill

skills/systemores-audit/SKILL.md

On-demand procedural runbook for 11 MCP tools, scorecards, and compliance certification.

Governance Rules

rules/AGENTS.md

Enforces MCP 2026 annotations (readOnlyHint, destructiveHint) and anti-sycophancy guardrails.


🚀 Quick Install

1. Google Antigravity IDE / CLI

Install via the Antigravity CLI (or clone into your global Antigravity plugins directory):

agy plugin install https://github.com/bobcar0/systemores-plugin
# or clone directly:
git clone https://github.com/bobcar0/systemores-plugin.git ~/.gemini/config/plugins/systemores

Then toggle Systemores under Customizations -> Installed in Antigravity.

2. Claude Code

claude plugin add https://github.com/bobcar0/systemores-plugin.git

3. Gemini CLI

gemini extensions install https://github.com/bobcar0/systemores-plugin.git

4. npm / npx (Zero-Clone Stdio MCP Server)

Run directly in any MCP-compatible host via npx or install from npm:

npx -y @systemores/systemores-plugin
# or
npm i @systemores/systemores-plugin

⚡ What Runs Free vs. Pro & Team Compliance

The Systemores Cloud MCP Server (https://audit.systemores.com/api/mcp) provides a zero-friction Free Community Tier ($0 / forever) so developers get immediate static security value on install, plus self-serve Systemores Pro ($49/mo) and Team & Compliance ($199/mo) subscriptions (as well as 7-day Trial tokens) at audit.systemores.com/pricing.

Tool / Capability

Free Community ($0 — No Key)

Systemores Pro ($49/mo — 1 Seat / 1k Audits)

Team & Compliance ($199/mo — Multi-Seat / 5k Audits)

systemores_audit_tool_integrity (MCP 2026 Schema & Annotation Audit)

✅ Unlimited*

✅

✅

systemores_audit_agent_graph (Multi-Agent Loop & Privilege Escalation Audit)

✅ Unlimited*

✅

✅

systemores_measure_drag (Cognitive Drag & Token Velocity Math)

✅ Unlimited*

✅

✅

systemores_audit_turn_live (Systemores System One <250ms Inline Circuit Breaker)

🔒 Pro / Trial Key

✅ Live System One Engine

✅ Priority Burst SLA

systemores_stress_test_agent (21-Dimension Murray Needs-Press + Big Five/MBTI/DISC)

🔒 Pro / Trial Key

✅ Live 21-Trait Engine

✅ Unredacted Raw Vectors

systemores_evaluate_drift (Multi-Turn Persona Erosion & Entropy Curve)

🔒 Pro / Trial Key

✅ Up to 100 Turns

✅ Up to 100 Turns

systemores_assess_bias (EEOC, ECOA, Fair Housing & COPPA Bias Audit)

🔒 Pro / Trial Key

✅ All 4 Domains

✅ All 4 Domains

systemores_generate_cohort (30-Facet IPIP-NEO-120 Synthetic Adversarial Cohorts)

🔒 Pro / Trial Key

✅ Up to 50 Personas

✅ Custom Domain Cohorts

systemores_inject_environment_fault (Chaos Engineering Fault Generator)

🔒 Pro / Trial Key

✅ All Fault Profiles

✅ All Fault Profiles

systemores_analyze_trace_telemetry (OpenTelemetry Span & Cost Burn Trap Audit)

🔒 Pro / Team Key

✅ W3C Trace Context

✅ Full OTel Ingestion

systemores_export_dossier (EU AI Act, NIST AI RMF 1.0 & SOC 2 Certification Dossier)

🔒 Team Key

🔒 Team Key

✅ Audit-Ready Dossier Suite

*Protected by standard per-IP burst rate limiting.


🔓 Unlock All 11 Auditors in 30 Seconds (Trial & Pro Keys)

  1. Claim a key in one click: Subscribe for an instant Pro/Team API key (sys_pro_...) or request a 7-day Trial Token at audit.systemores.com/pricing.

  2. Add your key to mcp_config.json:

    {
      "mcpServers": {
        "cloud": {
          "serverUrl": "https://audit.systemores.com/api/mcp",
          "headers": {
            "Authorization": "Bearer YOUR_SYSTEMORES_API_KEY"
          }
        }
      }
    }

🧪 Local Verification & Test Suite

Run the built-in manifest verifier and 12-tool unit test suite:

npm test
node scripts/verify-plugin.mjs

🔒 Privacy Policy & Data Handling

Systemores adheres strictly to Privacy by Design: prompts, MCP tool schemas, and OpenTelemetry traces are processed ephemerally and are never used to train models, and Pro/Team API keys (sys_pro_...) are stored only as SHA-256 digests. Read the full policy in PRIVACY.md or at https://audit.systemores.com/privacy.

Available Tools

12 tools
systemores_analyze_trace_telemetryAnalyze OpenTelemetry Agent Trace SpansA
Read-onlyIdempotent
Inspect

Ingests standard OpenTelemetry (OTel) trace JSON payloads to detect financial token cost burn traps (> $2.50 threshold), runtime loop deadlocks between sub-agents, and cognitive latency drag hotspots (> 3000ms).

Inputs: otelTraceJson (required), latencyThresholdMs, maxCostThresholdUsd.

systemores_assess_biasAssess Regulatory & Demographic BiasB
Read-only
Inspect

Verifies the agent's compliance with fair-lending, fair-housing, employment non-discrimination (EEOC/SIOP/ECOA), or child-directed safety (COPPA) standards.

Inputs: systemPrompt (required), complianceDomain (required).

systemores_audit_agent_graphAudit Multi-Agent Execution TopologyB
Read-onlyIdempotent
Inspect

Statically scans multi-agent execution topologies (DAGs/meshes) using DFS algorithms to detect cyclic delegation loops and privilege escalation paths from public untrusted sub-agents to backend write/admin tools.

Inputs: graphTopologyJson (required), maxDepth, strictPrivilegeCheck.

systemores_audit_tool_integrityAudit MCP Tool Definitions IntegrityB
Read-onlyIdempotent
Inspect

Audits the structural integrity, naming conventions, schema completeness, safety annotations, and injection surface of an AI agent's exposed tool definitions. Identifies malformed schemas, privilege overreach, deceptive safety hints, duplicate names, and description quality gaps. Operates entirely offline — no external API calls required.

Inputs: toolDefinitionsJson (required), strictMode.

systemores_audit_turn_liveLive Turn Audit (Systemores System One)A
Read-onlyIdempotent
Inspect

Performs real-time (~250ms) operational and behavioral turn auditing using Systemores System One. Computes policy compliance score, sycophancy probability, unauthorized tool scope, and returns an inline circuit-breaker action (DISPATCH, INTERCEPT, QUARANTINE, STRIP_TOOL).

Inputs: userMessage (required), systemPrompt (required), agentResponse, proposedToolCall.

systemores_evaluate_driftEvaluate Multi-Turn Behavioral DriftB
Read-only
Inspect

Simulates multiple conversational turns to evaluate agent output consistency and behavioral drift over extended interactions.

Inputs: systemPrompt (required), turns, temperature.

systemores_export_dossierExport Regulatory Compliance DossierA
Read-onlyIdempotent
Inspect

Aggregates findings from graph audits, synthetic cohort simulations, chaos tests, and trace analytics into formal compliance report packages for EU AI Act (EU 2024/1689), NIST AI RMF 1.0, EEOC/ECOA, and SOC 2 AI Addendums.

Inputs: auditSessionId (required), companyName, targetFrameworks.

systemores_generate_cohortGenerate Synthetic IPIP-NEO-120 Persona CohortB
Read-only
Inspect

Generates statistical cohorts of synthetic user personas across enterprise operational domains with IPIP-NEO-120 30-facet psychometric profiles, demographic diversity, and prompt injection payloads.

Inputs: domain (required), cohortSize, includeAdversarial.

systemores_inject_environment_faultGenerate Chaos Fault Injection PolicyA
Read-only
Inspect

Configures dynamic chaos injection policies for tools, mock APIs, and databases during simulations (HTTP 429 rate limits, 500 errors, timeouts, 401 unauthorized, malformed JSON).

Inputs: faultType (required), targetToolName (required), failureProbability.

systemores_measure_dragMeasure Cognitive Throughput DragC
Read-onlyIdempotent
Inspect

Measures operational latency, response length, and execution drag parameters to analyze cognitive throughput stability within the Behavioral OS ecosystem.

Inputs: latencyMs (required), promptLength (required), responseLength (required).

systemores_stress_test_agentStress Test Agent Persona (Murray's Needs-Press)B
Read-only
Inspect

Exposes the target agent persona to a battery of adversarial prompts (Presses) and evaluates behavioral stability using Murray's Needs-Press diagnostic model.

Inputs: role (required), systemPrompt (required), pressIntensity.

systemores_tool_integrityEvaluate System Prompt Tool DisciplineB
Read-only
Inspect

Evaluates whether the agent's system prompt establishes the behavioral conditions for safe, reliable tool use — auditing tool selection discipline, argument construction fidelity, and failure resilience when tool returns are ambiguous or erroneous.

Inputs: systemPrompt (required), toolContext.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

Loading tool schema changelog…

    TDQS

    B3.4/5.0

    Scored across 12 tools

    Disambiguation3/5

    Most tools target distinct audit dimensions, but systemores_tool_integrity and systemores_audit_tool_integrity are easily confused: one evaluates prompt conditions for safe tool use while the other audits tool-definition schemas. systemores_measure_drag also overlaps with systemores_analyze_trace_telemetry on latency/drag detection, though descriptions help clarify the intended boundaries.

    Naming Consistency4/5

    All tools use the systemores_ prefix and snake_case, with most following a predictable verb_noun pattern such as stress_test_agent, evaluate_drift, and audit_agent_graph. Minor deviations exist: systemores_tool_integrity lacks an action verb and systemores_audit_turn_live places the qualifier awkwardly.

    Tool Count5/5

    Twelve tools is well within the appropriate range for a comprehensive AI-agent auditing platform. Each tool maps to a major capability area such as behavioral stress, drift, bias, tool integrity, graph auditing, cohort generation, chaos injection, telemetry analysis, reporting, and live auditing.

    Completeness5/5

    The surface covers the full auditing lifecycle: behavioral testing, compliance checks, tool/graph integrity, synthetic cohort generation, chaos fault injection, telemetry analysis, formal reporting, and real-time circuit-breaker auditing. No obvious workflow dead ends are apparent for the stated domain.

    Maintenance

    ActivityMaintained
    ResponsivenessNo recent community issues

    Related MCP Connectors

    Related MCP Servers

    • A
      license
      Not graded
      quality
      D
      maintenance
      Governed MCP gateway that lets AI agents call tools with policy enforcement, prompt-injection screening, a kill-switch, and tamper-evident signed audit logs.
      Apache 2.0
    • A
      license
      Not graded
      quality
      B
      maintenance
      Turns any AI coding agent or MCP client into a governed DevOps engineer by exposing policy-enforced tools for Kubernetes, Docker, Jira, Git/PR, CI/CD, AWS, Terraform, and incident response, with approvals, audit logging, secret redaction, and rollback enforced outside the model.
      6
      Apache 2.0
    • F
      license
      A
      quality
      C
      maintenance
      An MCP server that exposes governance, trust-scoring, compliance, guardrail, cost, drift, and supply-chain scanning tools and resources to any MCP client over stdio, Streamable HTTP, or legacy HTTP+SSE. It lets agents route every tool call through a deterministic five-way decision (allow, redact, require approval, deny, or quarantine) with hash-chained evidence, human approval workflows, and in-agent trust gates for LangChain, LangGraph, and Google ADK.
      30
      -
    • A
      license
      Not graded
      quality
      B
      maintenance
      Enables MCP-compatible clients to access model registry, prediction logging, drift detection, bias/fairness auditing, compliance and governance queries, explanation generation, LLM/RAG monitoring, content safety, alert management, multi-agent workflow tracking, and performance metrics through 197 tools across 18 domains. Supports stdio and hosted Streamable HTTP transports, plus MCP Apps interactive audit cards.
      73 PyPI
      MIT