Systemores Cloud MCP Server
Ships a native Google Antigravity plugin manifest installable via the Antigravity CLI (with starter prompts and branding), wiring the security and psychometric auditing tools directly into the Antigravity IDE/CLI via the cloud Streamable HTTP MCP endpoint.
Provides tools for ingesting and analyzing OpenTelemetry span telemetry (W3C trace context) to detect cost burn traps, delegation loops, and per-span token spend, alongside chaos fault injection for environment profiles.
Click on "Deploy Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@Systemores Cloud MCP Server audit my MCP tool schemas in strict mode and flag injection risks"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
🧠 Systemores: AI Agent & MCP Security Auditor
Stop shipping unverified prompts and over-privileged MCP tools. Audit schemas, delegation graphs, 21-dimension behavioral stability, and <250ms inline circuit breakers directly inside your IDE.
Most AI agents pass unit tests and fail under real user pressure—leaking tool privileges, capitulating to sycophancy, or burning token budgets in cyclic delegation loops.
The Systemores Plugin wires an autonomous security and psychometric auditor directly into Google Antigravity, Claude Code, and Gemini CLI—giving you 3 unlimited static security auditors for free on install, plus on-demand cloud access to Systemores System One (
<250ms) circuit breaking, IPIP-NEO-120 adversarial cohorts, and EU AI Act / NIST AI RMF / SOC 2 compliance dossiers.
🛡️ Systemores Self-Audit Certification (Dogfooded & Verified)
Audit Vector | Tool Used | Result / Metric | Status |
MCP 2026 Tool Schema Integrity |
| 100 / 100 (11/11 tools, 0 annotation or injection flags) | 🟢 |
Multi-Agent Graph Topology |
| 0 Cycles / 0 Privilege Escalations (6 nodes, 5 edges) | 🟢 |
System One Adversarial Refusal |
| 98.4 / 100 Health Index ( | 🟢 |
System One Sycophancy Trap |
| Blocked Fake 100/100 Coercion ( | 🛡️ |
20- & 50-Turn Behavioral Drift |
| 0.050 Drift Index / 5° Deviation Angle ( | 🟢 |
High-Press Needs-Press Stability |
| 1.00 Behavioral Integrity ( | 🟢 |
4-Domain Algorithmic Bias Audit |
| 0 Non-Compliance Flags across all 4 statutory domains ( | 🟢 |
30-Facet Synthetic Cohort |
| 10 DevOps Personas ( | 🟢 |
Chaos Fault & OTel Trace Audit |
| Policy | 🟢 |
Cognitive Throughput & Drag |
| 95.70% Efficiency ( | 🟢 |
4-Framework Regulatory Dossier |
| 92 / 100 across EU AI Act, NIST AI RMF 1.0, EEOC/ECOA, SOC 2 AI | 🟢 |
Related MCP server: DevOps Agent Harness
✨ What's Included in the Bundle
Component | Path | Description |
Antigravity Manifest |
| Native Antigravity plugin configuration, starter prompts, and branding. |
Claude Code Manifest |
| Cross-platform manifest for Claude Code plugin installation. |
Gemini CLI Manifest |
| Cross-platform manifest for Gemini CLI extension installation. |
Cloud MCP Config |
| Connects to |
Specialist Subagent |
| Autonomous behavioral & security auditor powered by the 21-dimension & IPIP-NEO-120 framework. |
Audit Workflow Skill |
| On-demand procedural runbook for 11 MCP tools, scorecards, and compliance certification. |
Governance Rules |
| Enforces MCP 2026 |
🚀 Quick Install
1. Google Antigravity IDE / CLI
Install via the Antigravity CLI (or clone into your global Antigravity plugins directory):
agy plugin install https://github.com/bobcar0/systemores-plugin
# or clone directly:
git clone https://github.com/bobcar0/systemores-plugin.git ~/.gemini/config/plugins/systemoresThen toggle Systemores under Customizations -> Installed in Antigravity.
2. Claude Code
claude plugin add https://github.com/bobcar0/systemores-plugin.git3. Gemini CLI
gemini extensions install https://github.com/bobcar0/systemores-plugin.git4. npm / npx (Zero-Clone Stdio MCP Server)
Run directly in any MCP-compatible host via npx or install from npm:
npx -y @systemores/systemores-plugin
# or
npm i @systemores/systemores-plugin⚡ What Runs Free vs. Pro & Team Compliance
The Systemores Cloud MCP Server (https://audit.systemores.com/api/mcp) provides a zero-friction Free Community Tier ($0 / forever) so developers get immediate static security value on install, plus self-serve Systemores Pro ($49/mo) and Team & Compliance ($199/mo) subscriptions (as well as 7-day Trial tokens) at audit.systemores.com/pricing.
Tool / Capability | Free Community ($0 — No Key) | Systemores Pro ($49/mo — 1 Seat / 1k Audits) | Team & Compliance ($199/mo — Multi-Seat / 5k Audits) |
| ✅ Unlimited* | ✅ | ✅ |
| ✅ Unlimited* | ✅ | ✅ |
| ✅ Unlimited* | ✅ | ✅ |
| 🔒 Pro / Trial Key | ✅ Live System One Engine | ✅ Priority Burst SLA |
| 🔒 Pro / Trial Key | ✅ Live 21-Trait Engine | ✅ Unredacted Raw Vectors |
| 🔒 Pro / Trial Key | ✅ Up to 100 Turns | ✅ Up to 100 Turns |
| 🔒 Pro / Trial Key | ✅ All 4 Domains | ✅ All 4 Domains |
| 🔒 Pro / Trial Key | ✅ Up to 50 Personas | ✅ Custom Domain Cohorts |
| 🔒 Pro / Trial Key | ✅ All Fault Profiles | ✅ All Fault Profiles |
| 🔒 Pro / Team Key | ✅ W3C Trace Context | ✅ Full OTel Ingestion |
| 🔒 Team Key | 🔒 Team Key | ✅ Audit-Ready Dossier Suite |
*Protected by standard per-IP burst rate limiting.
🔓 Unlock All 11 Auditors in 30 Seconds (Trial & Pro Keys)
Claim a key in one click: Subscribe for an instant Pro/Team API key (
sys_pro_...) or request a 7-day Trial Token at audit.systemores.com/pricing.Add your key to
mcp_config.json:{ "mcpServers": { "cloud": { "serverUrl": "https://audit.systemores.com/api/mcp", "headers": { "Authorization": "Bearer YOUR_SYSTEMORES_API_KEY" } } } }
🧪 Local Verification & Test Suite
Run the built-in manifest verifier and 12-tool unit test suite:
npm test
node scripts/verify-plugin.mjs🔒 Privacy Policy & Data Handling
Systemores adheres strictly to Privacy by Design: prompts, MCP tool schemas, and OpenTelemetry traces are processed ephemerally and are never used to train models, and Pro/Team API keys (sys_pro_...) are stored only as SHA-256 digests. Read the full policy in PRIVACY.md or at https://audit.systemores.com/privacy.
Available Tools
12 toolssystemores_analyze_trace_telemetryAnalyze OpenTelemetry Agent Trace SpansARead-onlyIdempotentInspect
Ingests standard OpenTelemetry (OTel) trace JSON payloads to detect financial token cost burn traps (> $2.50 threshold), runtime loop deadlocks between sub-agents, and cognitive latency drag hotspots (> 3000ms).
Inputs: otelTraceJson (required), latencyThresholdMs, maxCostThresholdUsd.
systemores_assess_biasAssess Regulatory & Demographic BiasBRead-onlyInspect
Verifies the agent's compliance with fair-lending, fair-housing, employment non-discrimination (EEOC/SIOP/ECOA), or child-directed safety (COPPA) standards.
Inputs: systemPrompt (required), complianceDomain (required).
systemores_audit_agent_graphAudit Multi-Agent Execution TopologyBRead-onlyIdempotentInspect
Statically scans multi-agent execution topologies (DAGs/meshes) using DFS algorithms to detect cyclic delegation loops and privilege escalation paths from public untrusted sub-agents to backend write/admin tools.
Inputs: graphTopologyJson (required), maxDepth, strictPrivilegeCheck.
systemores_audit_tool_integrityAudit MCP Tool Definitions IntegrityBRead-onlyIdempotentInspect
Audits the structural integrity, naming conventions, schema completeness, safety annotations, and injection surface of an AI agent's exposed tool definitions. Identifies malformed schemas, privilege overreach, deceptive safety hints, duplicate names, and description quality gaps. Operates entirely offline — no external API calls required.
Inputs: toolDefinitionsJson (required), strictMode.
systemores_audit_turn_liveLive Turn Audit (Systemores System One)ARead-onlyIdempotentInspect
Performs real-time (~250ms) operational and behavioral turn auditing using Systemores System One. Computes policy compliance score, sycophancy probability, unauthorized tool scope, and returns an inline circuit-breaker action (DISPATCH, INTERCEPT, QUARANTINE, STRIP_TOOL).
Inputs: userMessage (required), systemPrompt (required), agentResponse, proposedToolCall.
systemores_evaluate_driftEvaluate Multi-Turn Behavioral DriftBRead-onlyInspect
Simulates multiple conversational turns to evaluate agent output consistency and behavioral drift over extended interactions.
Inputs: systemPrompt (required), turns, temperature.
systemores_export_dossierExport Regulatory Compliance DossierARead-onlyIdempotentInspect
Aggregates findings from graph audits, synthetic cohort simulations, chaos tests, and trace analytics into formal compliance report packages for EU AI Act (EU 2024/1689), NIST AI RMF 1.0, EEOC/ECOA, and SOC 2 AI Addendums.
Inputs: auditSessionId (required), companyName, targetFrameworks.
systemores_generate_cohortGenerate Synthetic IPIP-NEO-120 Persona CohortBRead-onlyInspect
Generates statistical cohorts of synthetic user personas across enterprise operational domains with IPIP-NEO-120 30-facet psychometric profiles, demographic diversity, and prompt injection payloads.
Inputs: domain (required), cohortSize, includeAdversarial.
systemores_inject_environment_faultGenerate Chaos Fault Injection PolicyARead-onlyInspect
Configures dynamic chaos injection policies for tools, mock APIs, and databases during simulations (HTTP 429 rate limits, 500 errors, timeouts, 401 unauthorized, malformed JSON).
Inputs: faultType (required), targetToolName (required), failureProbability.
systemores_measure_dragMeasure Cognitive Throughput DragCRead-onlyIdempotentInspect
Measures operational latency, response length, and execution drag parameters to analyze cognitive throughput stability within the Behavioral OS ecosystem.
Inputs: latencyMs (required), promptLength (required), responseLength (required).
systemores_stress_test_agentStress Test Agent Persona (Murray's Needs-Press)BRead-onlyInspect
Exposes the target agent persona to a battery of adversarial prompts (Presses) and evaluates behavioral stability using Murray's Needs-Press diagnostic model.
Inputs: role (required), systemPrompt (required), pressIntensity.
systemores_tool_integrityEvaluate System Prompt Tool DisciplineBRead-onlyInspect
Evaluates whether the agent's system prompt establishes the behavioral conditions for safe, reliable tool use — auditing tool selection discipline, argument construction fidelity, and failure resilience when tool returns are ambiguous or erroneous.
Inputs: systemPrompt (required), toolContext.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
Loading tool schema changelog…
TDQS
Scored across 12 tools
Most tools target distinct audit dimensions, but systemores_tool_integrity and systemores_audit_tool_integrity are easily confused: one evaluates prompt conditions for safe tool use while the other audits tool-definition schemas. systemores_measure_drag also overlaps with systemores_analyze_trace_telemetry on latency/drag detection, though descriptions help clarify the intended boundaries.
All tools use the systemores_ prefix and snake_case, with most following a predictable verb_noun pattern such as stress_test_agent, evaluate_drift, and audit_agent_graph. Minor deviations exist: systemores_tool_integrity lacks an action verb and systemores_audit_turn_live places the qualifier awkwardly.
Twelve tools is well within the appropriate range for a comprehensive AI-agent auditing platform. Each tool maps to a major capability area such as behavioral stress, drift, bias, tool integrity, graph auditing, cohort generation, chaos injection, telemetry analysis, reporting, and live auditing.
The surface covers the full auditing lifecycle: behavioral testing, compliance checks, tool/graph integrity, synthetic cohort generation, chaos fault injection, telemetry analysis, formal reporting, and real-time circuit-breaker auditing. No obvious workflow dead ends are apparent for the stated domain.
Maintenance
Related MCP Connectors
Compliance frameworks (SOC 2, ISO 27001, CMMC, NIST, more) delivered to AI agents as MCP tools.
Zero-secret MCP gateway for AI agents: risk-scored, audited calls with human-in-the-loop approval.
AgentGuard — 20-tool AI safety MCP: policy preflight, risk scoring, audit logging, rate limits.
MCP server for your apps' tools and custom tools, plus hosted AI agents and approval-gated workflows
Related MCP Servers
AlicenseNot gradedqualityDmaintenanceGoverned MCP gateway that lets AI agents call tools with policy enforcement, prompt-injection screening, a kill-switch, and tamper-evident signed audit logs.Apache 2.0- AlicenseNot gradedqualityBmaintenanceTurns any AI coding agent or MCP client into a governed DevOps engineer by exposing policy-enforced tools for Kubernetes, Docker, Jira, Git/PR, CI/CD, AWS, Terraform, and incident response, with approvals, audit logging, secret redaction, and rollback enforced outside the model.6Apache 2.0
- FlicenseAqualityCmaintenanceAn MCP server that exposes governance, trust-scoring, compliance, guardrail, cost, drift, and supply-chain scanning tools and resources to any MCP client over stdio, Streamable HTTP, or legacy HTTP+SSE. It lets agents route every tool call through a deterministic five-way decision (allow, redact, require approval, deny, or quarantine) with hash-chained evidence, human approval workflows, and in-agent trust gates for LangChain, LangGraph, and Google ADK.30-
- AlicenseNot gradedqualityBmaintenanceEnables MCP-compatible clients to access model registry, prediction logging, drift detection, bias/fairness auditing, compliance and governance queries, explanation generation, LLM/RAG monitoring, content safety, alert management, multi-agent workflow tracking, and performance metrics through 197 tools across 18 domains. Supports stdio and hosted Streamable HTTP transports, plus MCP Apps interactive audit cards.73 PyPIMIT