Skip to main content
Glama

Brain OS

brainos-hq.com

Tu IA recuerda conversaciones. Aun así olvida el estado del proyecto.

Brain OS proporciona a los agentes estado operativo: decisiones, planes, bloqueos y prioridades que sobreviven entre sesiones.

¿Qué es esto?

Los agentes de IA son potentes dentro de una sesión, pero el trabajo de larga duración tiene más estado que cualquier chat individual: lo que decidiste, lo que está bloqueado, lo que está activo y lo que no debería reabrirse. Brain OS proporciona a los agentes estado operativo, no registros de conversación:

  • Entities — realiza un seguimiento de proyectos, acuerdos e iniciativas con estado, impulso, bloqueos y próximos pasos

  • Decisions — registra qué se decidió, por qué, qué alternativas se rechazaron y cuándo revisarlo

  • Patterns — detecta bloqueos recurrentes, trabajo obsoleto, señales de evitación y convergencia de temas

  • Focus — prioriza en qué trabajar según urgencia, impulso, apalancamiento y obsolescencia

  • Semantic recall — busca en la memoria por significado, no solo por ID

Brain OS es un servidor MCP que funciona con cualquier cliente compatible con MCP: Claude Code, Cursor, Zed, GitHub Copilot, OpenAI Codex, Windsurf o cualquier agente que hable el protocolo.

Related MCP server: usecortex-mcp

Cómo se ve en uso

Antes de que el agente actúe, puede comprobar si una acción propuesta entra en conflicto con una decisión existente:

> decision_check({ proposal: "switch to Postgres for the new service" })

{
  "verdict": "conflict",
  "conflicting_decision": {
    "id": "dec_2026_03_14_db_choice",
    "decision": "Use SQLite for all local-first projects",
    "reason": "Lower ops burden, no infra to run, fits single-user scope",
    "rejected_alternatives": ["Postgres", "DuckDB"],
    "logged_at": "2026-03-14"
  },
  "guidance": "Re-litigating a settled choice. Surface the prior reasoning to the user before proceeding."
}

Esa es la clave: estado estructurado con aplicación, para que los agentes dejen de reabrir preguntas que ya respondiste.

Inicio rápido

Requiere Node.js 20 o superior.

# In your project
npx brain-os init

Esto hace tres cosas:

  1. Crea un directorio .brain/ con tus almacenes de entidades, decisiones y patrones.

  2. Instala comandos de barra en .claude/commands/ para que puedas ejecutar /brain, /brain:focus, /brain:decide, etc. directamente en Claude Code. Los alias simples (/focus, /decide, etc.) se instalan junto a ellos por brevedad.

  3. Coloca archivos de puntero de instrucciones de agente para que cualquier cliente compatible con MCP se comporte de forma coherente: AGENTS.md (canónico, entre herramientas) más archivos de puntero ligeros para Claude Code (CLAUDE.md), GitHub Copilot (.github/copilot-instructions.md), Cursor (.cursor/rules/brain-os.mdc), Zed (.zed/rules.md) y Windsurf (.windsurfrules).

Banderas:

  • npx brain-os init --minimal — instala solo AGENTS.md + CLAUDE.md, omite los otros punteros de cliente (modo repositorio limpio)

  • npx brain-os init --no-commands — omite los comandos de barra (solo servidor MCP)

  • npx brain-os init --no-agent-instructions — omite todos los archivos de puntero de instrucciones de agente

Conectar con Claude Code

claude mcp add brain-os -- npx brain-os serve

Conectar con Cursor / otros clientes MCP

Añade a tu configuración MCP:

{
  "brain-os": {
    "command": "npx",
    "args": ["-y", "brain-os", "serve"]
  }
}

Configurar la búsqueda semántica (opcional)

La herramienta semantic_recall necesita un proveedor de embeddings. Todo lo demás (entity_update, decision_log, plan_*, etc.) funciona sin uno.

Brain OS no instala un SDK de embeddings por defecto. Esto mantiene la instalación principal pequeña y evita arrastrar dependencias nativas de ONNX/Sharp a usuarios que no necesitan búsqueda semántica. Instala el proveedor opcional de OpenAI junto a brain-os y luego añade BRAIN_EMBEDDINGS al entorno de tu servidor MCP:

npm install brain-os openai

Luego configura el proveedor en el entorno de tu servidor MCP:

{
  "brain-os": {
    "command": "npx",
    "args": ["-y", "brain-os", "serve"],
    "env": {
      "BRAIN_EMBEDDINGS": "openai",
      "OPENAI_API_KEY": "${OPENAI_API_KEY}"
    }
  }
}

Modo

Qué hace

Configuración

local

Temporalmente no disponible mientras el proveedor anterior arrastra avisos transitivos de gravedad alta sin resolver.

Usa el recuerdo por palabras clave o el proveedor de OpenAI hasta que se publique un backend local auditado.

openai

Usa text-embedding-3-small a través de la API de OpenAI. Más rápido que local. Cuesta ~0,02 $ por millón de tokens.

Instala openai, establece BRAIN_EMBEDDINGS=openai y luego referencia OPENAI_API_KEY desde el entorno de tu shell.

Si BRAIN_EMBEDDINGS no está establecido, falta el proveedor de OpenAI o se solicita el modo local, semantic_recall devuelve un error de configuración claro. No se produce ninguna instalación silenciosa de proveedor, descarga de modelo ni llamada a la API. Las herramientas principales siguen funcionando con normalidad.

Nunca pegues una clave sk-... en bruto en tu configuración MCP. ~/.claude.json y archivos de configuración MCP similares son texto plano y fáciles de exponer en pantalla o en copias de seguridad. En su lugar, exporta la clave una vez en tu shell y refiérela desde el entorno del proceso MCP.

Herramientas

Herramienta

Descripción

entity_read

Lee el estado operativo de una o todas las entidades rastreadas

entity_update

Actualiza el estado de la entidad: estado, impulso, bloqueos, próximos pasos

decision_log

Registra una decisión estratégica con razonamiento y alternativas

decision_check

Comprueba una acción propuesta contra las decisiones activas: devuelve claro/precaución/conflicto

decision_refresh

Actualiza una decisión existente: incrementa review_date, añade evidencia, cambia el estado. Solo metadatos: no muta el contenido de la decisión.

decision_review

Bandeja de deuda de revisión: agrupa decisiones vencidas (sigue-siendo-cierta / cambiada / archivar / necesita-evidencia) y recomienda una acción para cada una. Solo lectura: propone, tú confirmas. Detecta automáticamente decisiones duplicadas de tipo stub.

context_resolve

Resuelve a qué entidad pertenece el trabajo actual, a partir de mención explícita / alias / archivos / señales léxicas. Determinista y con puntuación de confianza: enruta contexto conocido, nunca adivina la intención.

focus_get

Obtén recomendaciones priorizadas sobre en qué trabajar

project_evidence_scan

Escaneo de solo lectura del estado operativo nativo de un repositorio (STATE.md, FLAGS, HANDOFF, ROADMAP/PLAN/TODO, actividad de git, archivos sucios) para puertas humanas, próximos pasos y no-tocar: fundamenta el enfoque en la realidad del repositorio.

pattern_detect

Analiza patrones en todas las entidades

memory_check

Audita la calidad de la memoria: marca datos obsoletos, contradicciones, ruido

memory_commit

Commit de fin de sesión: guarda todos los cambios de estado

semantic_recall

Busca en la memoria por significado usando lenguaje natural

audit_log

Lee el historial completo de mutaciones: qué cambió, cuándo y quién

wrap_check

Detecta si se han acumulado cambios de estado significativos desde el último wrap

wrap_auto

Wrap de red de seguridad no interactivo: aplica campos de bajo riesgo y prepara cambios de alto riesgo para revisión

plan_set

Establece un plan ordenado para una entidad: el paso 1 se convierte en next_move activo

plan_advance

Completa u omite un paso (requiere evidencia/razón): promueve automáticamente el siguiente

plan_add

Añade pasos a un plan existente

plan_read

Consulta el progreso del plan y el paso actual

risk_assess

Clasifica acciones arriesgadas antes de la ejecución, incluidos los riesgos de publicación pública y operaciones destructivas

action_guard

Aplica plantillas de protección integradas a acciones comunes de alto riesgo antes de continuar

Comandos de barra

brain-os init instala comandos de barra en .claude/commands/ para que el agente tenga un vocabulario claro para trabajar con el estado operativo. Cada comando se instala en dos formas: /brain:* (forma canónica y documentada) y un alias simple (/decide, /focus, etc.) para la brevedad del usuario avanzado. /brain es la raíz del espacio de nombres y se instala una vez.

También instala:

  • BRAIN_OS_PROTOCOL.md en .claude/brain-os/PROTOCOL.md (proyecto) y ~/.claude/brain-os/PROTOCOL.md (usuario). El protocolo gobierna el enrutamiento de herramientas: cuando un agente ejecuta un comando de barra de Brain OS, primero lee el protocolo y luego llama a entity_read/plan_read/focus_get/etc. como primario. Los archivos de pulso se convierten en respaldo únicamente.

  • Subagente brain-os-mode en .claude/agents/brain-os-mode.md. Cuando el agente principal delega trabajo de Brain OS a un subagente (por ejemplo, la herramienta Task de Claude Code), lo retoma bajo el mismo protocolo — sin riesgo de que los subagentes recurran a la búsqueda genérica de archivos.

  • Hook opcional de guardia de enrutamiento en templates/hooks/brain-os-routing-guard.py. Hook PreToolUse opcional que advierte si se leen archivos de pulso mientras existe un espacio de trabajo .brain/. Las instrucciones de instalación se imprimen con brain-os init.

Comando

Alias

Qué hace

/brain

Escáner de proyecto: visión general de todas las entidades, frescura, decisiones, alertas

/brain:focus

/focus

"¿En qué debería trabajar hoy y por qué?" con evidencia

/brain:decide

/decide

Capturar una decisión estratégica (con verificación de conflictos antes de registrar)

/brain:strategy

/strategy

Socio de pensamiento estratégico: piensa una decisión antes de construir

/brain:wrap

/wrap

Cierre de sesión: actualizar el estado de las entidades, capturar decisiones, detectar cambios de impulso

/brain:patterns

/patterns

Detectar patrones entre entidades: bloqueadores recurrentes, evasión, temas

/brain:retro

/retro

Retrospectiva semanal o mensual: qué se envió, qué se estancó, qué está oculto

/brain:graph

/graph

Mostrar cómo se conectan las entidades, oportunidades de apalancamiento, decisiones compartidas

Instalación idempotente

Volver a ejecutar init es seguro y consciente de reparaciones: los comandos existentes de Brain OS se conservan y se instala cualquier formulario faltante. Si una ruta de comando está ocupada por otra herramienta, esa ruta se omite y se informa — tu archivo nunca se sobrescribe. Puedes instalar Brain OS en un proyecto con comandos /decide o /focus existentes y las formas con espacio de nombres /brain:* seguirán instalándose.

Cómo funciona

Brain OS almacena todo como archivos JSON locales en un directorio .brain/:

.brain/
  entities/     — one file per tracked entity
  decisions/    — decision log
  patterns/     — detected patterns
  config.json   — workspace settings

Sin nube. Sin base de datos. Sin cuenta. Tus datos permanecen en tu máquina.

¿Por qué no hay interfaz de usuario?

La interfaz es el agente. Brain OS se lee y escribe a través de llamadas a herramientas MCP — /brain, /focus, /decide, decision_check, etc. — que se muestran en línea en el cliente que uses (Claude Code, Cursor, etc.). No hay un panel separado que mantener abierto, ni una segunda pestaña para cambiar de contexto, ni un estado de interfaz que pueda desviarse de los archivos subyacentes.

Esta es una decisión de diseño, no una característica faltante. El estado de Brain OS vive al mismo nivel que tu código; el agente ya está ahí, ya está en la conversación, ya es la superficie adecuada para preguntar "¿cuál es la prioridad ahora mismo?". Añadir un panel humano dividiría la atención entre dos interfaces para los mismos datos.

Si quieres una vista visual de un vistazo, .brain/ es JSON plano — renderízalo como quieras. El servidor MCP público se mantiene nativo del agente por diseño.

Equipos y sincronización

Brain OS es de un solo usuario por diseño hoy. Pero como .brain/ son solo archivos JSON locales, los equipos pueden compartir un cerebro a través de cualquier sistema de archivos sincronizado — sin necesidad de cambios de producto:

Enfoque

Pros

Contras

Git — hacer commit de .brain/ al repositorio

Herramientas de diff/merge, historial de versiones, puntos de sincronización intencionales

git pull manual; conflictos de fusión en ediciones simultáneas

Carpeta compartida de Dropbox / Drive

Casi en tiempo real, sin pasos manuales

Las escrituras concurrentes pueden crear archivos de conflicto; embeddings.json se reescribe a menudo

Montaje NFS / SMB / S3

Realmente en tiempo real

Requiere configuración de infraestructura

Esto funciona sin sincronización integrada porque cada llamada a herramienta de Brain OS lee fresco desde el disco — no hay caché en memoria que invalidar. Lo que tu sistema de archivos sincronice, la siguiente llamada a herramienta lo verá. Lo mismo aplica entre herramientas: registra una decisión desde Claude Code el lunes, abre Cursor el martes — mismo cerebro, ambos agentes.

La sincronización nativa cifrada para equipos con semántica de fusión adecuada está en la hoja de ruta. La base local-primero de hoy es lo que hace que esa federación sea aditiva, no una adaptación.

Estado auto-cargado

Cuando un cliente MCP se conecta, Brain OS expone un recurso brain://status con una visión operativa — entidades activas, alertas, prioridad principal y decisiones recientes. El agente comienza cada sesión con contexto, no con amnesia.

Pruebas

Brain OS incluye un conjunto de pruebas de humo en tests/smoke.mjs, conectado a npm test y ejecutado en cada push por .github/workflows/audit.yml. Ejecuta localmente:

npm test

Cobertura actual (regresión + camino feliz):

  • decision_log — colisión de tipos sin supersedencia, supersedes explícito funciona, supersedencia entre entidades rechazada

  • decision_check — la bandera solo de palabras clave permanece como precaución sin embeddings (sin STOPs falsos), comparación semántica asimétrica (faceta rechazada vs elegida)

  • decision_refresh — limpia superseded_by colgante cuando el estado transiciona fuera de superseded

  • plan_advance — sin sobre-promoción cuando ya existe un paso activo

  • entity_update — aplicar diff y registrar cambios, crear entidad faltante, mode_reason requerido al estacionar, las actualizaciones solo de estado se aplican, los saltos de clasificación protegidos son visibles

  • semantic_recall — lanza EmbeddingsNotConfiguredError (no un Error genérico) cuando BRAIN_EMBEDDINGS no está configurado

  • Resolución de almacenamiento — falla cerrado en un cwd sin almacenamiento en lugar de crear silenciosamente un .brain/ vacío

Brechas conocidas (sin cobertura directa aún): puntuación de focus_get, heurísticas de pattern_detect, memory_*, plan_set/add/read, y el recurso brain://status. Ampliar el conjunto está en la hoja de ruta.

Si encuentras un error, por favor abre un issue con la herramienta, entrada y salida — ese es el camino más rápido para una solución.

Comunidad

Licencia

MIT

Available Tools

22 tools
action_guardA
Read-only

Apply the Brain OS policy table to a risk assessment. Takes the output of risk_assess plus the concrete action type and returns a policy decision: allow (proceed), ask (stop and get explicit user confirmation), or block (do not proceed). Pure TypeScript — no LLM call. Policies in order: private_to_public → block; critical risk → block; force-push → ask; npm publish → ask; security boundary → ask; irreversible → ask; high risk → ask; hard-to-reverse external → ask; medium + requires_confirmation → ask; else → allow. Always audit what was decided and why.

ParametersJSON Schema
NameRequiredDescriptionDefault
entity_idNoBrain OS entity this action is associated with.
assessmentYesThe full output of risk_assess.
action_typeYesThe concrete action being guarded, e.g. 'npm publish', 'git push origin main', 'force push', 'write ROADMAP.md'.

TDQS

A4.6/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Beyond the readOnlyHint annotation, the description discloses that the tool is 'Pure TypeScript — no LLM call,' lists the exact policy decision order, and explains the three possible outcomes. The 'Always audit what was decided and why' note adds behavioral context about expected follow-through, significantly enriching the annotation-only safety profile.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is front-loaded with purpose, then efficiently enumerates the entire policy decision table in a compact colon-separated list. Every sentence contributes essential information—purpose, inputs, computational nature, and policy order—with no filler or repetition.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The description covers the core decision logic, output values, and policy ordering, sufficient for an agent to invoke the tool. However, it does not specify the exact return JSON shape (e.g., fields beyond decision/reason), and the 'Always audit' statement is ambiguous as to whether the tool itself logs or the agent must do so. Given no output schema, slightly more explicit return-field documentation would make this fully complete.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

With 100% schema description coverage, the schema already documents the parameters. The description adds meaning by clarifying that assessment must be the full output of risk_assess and by giving concrete examples for action_type ('npm publish', 'git push origin main'). It does not mention entity_id, but the schema covers it, so the incremental value is solid but not maximal.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description opens with a specific action: 'Apply the Brain OS policy table to a risk assessment.' It clearly names the resource (policy table), the input (risk assessment), and the output (allow/ask/block decision). This distinguishes it from sibling risk_assess, which produces the assessment, and decision_check/review tools.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description explicitly states it 'Takes the output of risk_assess plus the concrete action type,' establishing a clear pipeline context and when to use it. It does not explicitly name alternatives or when-not-to-use cases, but the dependency on risk_assess and the detailed policy ordering provide clear usage context.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

audit_logA
Read-only

Read the audit trail of all memory mutations. Use this — not semantic_recall — for recency questions: 'what's the latest update?', 'what changed recently?', 'what was the last thing written?', 'show me the most recent entry.' Pass last_n=1 for the single most recent mutation. semantic_recall is for topic-based search; audit_log is for time-ordered history, integrity checks, and debugging unexpected state.

ParametersJSON Schema
NameRequiredDescriptionDefault
toolNoFilter by tool name (entity_update, decision_log, memory_commit, plan_update)
last_nNoNumber of recent entries to return (default 20)
entity_idNoFilter by entity ID

TDQS

A4.6/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With readOnlyHint already present, the description adds useful context: the tool returns time-ordered history, covers all memory mutations, and serves integrity/debugging purposes. It does not contradict the annotation, but it omits details like ordering direction (e.g., newest first) and the exact shape of returned entries, so it is not fully transparent.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is two sentences, front-loaded with the core purpose, then provides usage guidance and an explicit contrast with a sibling tool. Every sentence earns its place with no redundancy or filler.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a read-only audit log with three optional filters, the description covers purpose, usage scenarios, and differentiation from semantic_recall. It doesn't specify the return format or ordering direction, but given the simplicity of the tool and the presence of readOnlyHint, these are minor gaps. The description is sufficiently complete for an agent to select and invoke it correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The input schema already documents all three parameters with descriptions (100% coverage). The description adds a concrete usage hint for last_n ('Pass last_n=1 for the single most recent mutation'), which goes beyond the schema's generic 'Number of recent entries to return (default 20)' and helps the agent apply the parameter correctly.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states 'Read the audit trail of all memory mutations,' identifying the specific verb (read) and resource. It also explicitly contrasts with semantic_recall, distinguishing its scope and purpose from a key sibling tool.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It gives explicit guidance to 'Use this — not semantic_recall —' for recency questions, provides concrete example queries, and closes with a clear differentiation: semantic_recall for topic search, audit_log for time-ordered history, integrity checks, and debugging. This fully addresses when to use the tool vs. alternatives.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

context_resolveA
Read-only

Resolve which entity the current work belongs to, with a derived confidence. Deterministic — matches explicit signals (passed entity, named mention, active mission, files touched) before weak ones (lexical, single-active); never guesses from cwd. Returns entity_id + confidence + ask_user. Call this BEFORE focus_get/decision_check when the target entity is not already known, then pass the returned entity_id into them. Confidence >= 0.80: proceed silently. 0.50-0.79: proceed but say 'I think this is X'. < 0.50 (ask_user true): ask one short question.

ParametersJSON Schema
NameRequiredDescriptionDefault
user_messageNoWhat the user said they want to do, verbatim. Strongest inferred signal.
files_touchedNoPaths being worked on. Matched by exact path segment against entity id/aliases — assists only, never overrides an explicit mention.
active_mission_idNoEntity id of the active approved mission/task, if any.
explicit_entity_idNoCaller-asserted entity id. Authoritative (confidence 1.0) when it matches a known entity.

TDQS

A4.9/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Goes well beyond the readOnlyHint annotation by disclosing deterministic behavior, matching signal priority order, the explicit prohibition on guessing from cwd, return fields, and confidence-based decision flow. No contradictions with annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Dense but well-organized; every sentence contributes actionable detail—purpose, determinism, orchestration, and thresholds—with no filler or redundancy.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Compensates for the lack of an output schema by describing return fields, confidence thresholds, and required follow-up actions. For a read-only resolution tool, it is fully complete.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema covers all parameters with rich descriptions (100% coverage), so baseline is 3. The description adds signal-priority semantics (explicit vs weak) but does not substantially extend per-parameter details beyond the schema. This extra context justifies a 4.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Clearly states it resolves which entity the current work belongs to with a derived confidence. It also distinguishes itself from sibling tools by referencing focus_get/decision_check and specifying when to call it.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly instructs to call before focus_get/decision_check when the target entity is not already known, and provides confidence thresholds for when to proceed silently, when to communicate uncertainty, and when to ask. This is concrete when-to-use guidance.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

decision_checkA
Read-only

Check a proposed action against all active decisions. Returns 'clear', 'caution', or 'conflict', plus a review_triggered list. Call this BEFORE taking actions that might contradict prior decisions. If status is 'conflict', do NOT proceed without explicit user confirmation to revisit the decision. review_triggered is the opposite signal: the action matches an invalidate_if condition a decision named as a reason to reopen it — surface those decisions to the user for review rather than enforcing them. A decision can be both a conflict and a review trigger (the conflict it anticipated); when so, frame it as a decision review, not a blind violation.

ParametersJSON Schema
NameRequiredDescriptionDefault
entity_idNoCheck against decisions for a specific entity. Omit to check all.
proposed_actionYesWhat you're about to do — describe the action clearly

TDQS

A4.5/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true, but the description goes far beyond that by explaining the return semantics, the meaning of 'review_triggered' as an opposite signal, and the nuanced case where a decision is both a conflict and a review trigger. This is rich behavioral disclosure that helps an agent act correctly on the result.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is logically structured: state purpose, list return values, provide usage directive, then explain the subtle review_triggered behavior. Every sentence earns its place; no filler or redundant content.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

There is no output schema, so the description must explain return values and interpretation, which it does thoroughly. It covers the three statuses, the review_triggered list, how to handle conflicts, and the dual conflict/review-trigger case. This is complete for the tool's complexity.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, and both parameters ('entity_id' and 'proposed_action') already have clear descriptions in the schema. The tool description does not add parameter-specific detail beyond the schema, so it meets the baseline but does not exceed it.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description opens with a specific verb+resource: 'Check a proposed action against all active decisions.' It clearly states the returned statuses ('clear', 'caution', 'conflict') and the 'review_triggered' list, which distinguishes it from sibling tools like action_guard or memory_check. The purpose is unambiguous and specific.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description explicitly says 'Call this BEFORE taking actions that might contradict prior decisions' and provides a clear conditional: 'If status is conflict, do NOT proceed without explicit user confirmation.' This gives strong when-to-use guidance, though it does not name alternative tools or state when not to use it beyond the conflict case.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

decision_logA

Log a strategic decision so it persists across sessions. Every decision needs a reason, alternatives, and a proof action. Optionally capture the assumptions that make it true and the invalidate_if conditions that should reopen it — these turn a timestamped 'no' into a testable frame the system can reason about later.

ParametersJSON Schema
NameRequiredDescriptionDefault
whyYesThe real reason
typeNo
decisionYesWhat was decided
entity_idYesEntity this decision applies to
supersedesNoDecision IDs this new decision replaces (e.g. ['dec-007']). Only the IDs you explicitly pass will be marked superseded — there is no auto-deduction from type. Each target must belong to the same entity_id.
assumptionsNoThe premises that make this decision true — e.g. ['users want human approval before sending', 'model reliability not yet sufficient for autonomous send']. If these still hold, the decision likely still holds.
review_dateYesYYYY-MM-DD — when to revisit
alternativesNoOptions considered
proof_actionYesOne concrete, observable action that validates this decision — e.g. 'Run npm test and confirm all 41 tests pass'. Placeholders like 'Review in next session', 'TBD', or 'Revisit' are rejected.
invalidate_ifNoCondition-based review triggers ('what would make this false') — e.g. ['users show sustained trust in autonomous drafts', 'target workflow shifts from external email to internal triage']. Distinct from review_date (a time trigger): decision_check matches proposed actions against these to flag the decision for review rather than enforcing it blindly.
chosen_directionNo

TDQS

A4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations only indicate readOnlyHint=false and destructiveHint=false. The description adds useful behavioral context by explaining that logged decisions persist across sessions and that invalidate_if conditions turn a timestamped decision into a testable frame for future reasoning. This goes beyond the bare annotations without contradicting them.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is concise, with three sentences that front-load the core purpose and then elaborate on required and optional inputs. Every sentence contributes meaning, and the structure is efficient.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The description omits mention of several required fields like entity_id and decision, but the schema covers them. However, the inaccurate statement about alternatives being required is a significant gap that could mislead. The description does explain the purpose of assumptions and invalidate_if, but the misinformation lowers completeness.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is high (82%), so baseline is 3. However, the description inaccurately states that 'alternatives' is needed when the schema marks it as optional (required array only includes entity_id, decision, why, proof_action, review_date). This misinformation actively misleads an agent about required parameters, subtracting value rather than adding it.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a specific verb 'Log' and resource 'strategic decision', clearly indicating the tool records persistent decisions. It states the persistence aspect, which distinguishes it from siblings like decision_review and decision_check that likely read or analyze decisions.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides clear context for use: logging strategic decisions for persistence across sessions. It also gives guidance on required elements ('reason, alternatives, and a proof action') and optional ones (assumptions, invalidate_if), though it does not explicitly name alternative tools or state when not to use this tool.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

decision_refreshA

Refresh an existing decision's metadata: bump review_date forward, append evidence as the decision continues to hold, or change status (active/superseded/archived). Use INSTEAD of editing decisions.json directly. Does not mutate decision content — for content changes, log a new decision via decision_log.

ParametersJSON Schema
NameRequiredDescriptionDefault
statusNoNew status. Use 'superseded' only when a replacement decision exists — prefer logging the replacement via decision_log with its `supersedes` parameter instead. Transitioning away from 'superseded' automatically clears the dangling superseded_by pointer.
decision_idYesID of the decision to refresh (e.g. 'dec-002')
review_dateNoNew review date YYYY-MM-DD
add_evidenceNoEvidence note to append (e.g. 'shipped v1, onboarded first users'). Each call appends a dated entry, never overwrites.

TDQS

A4.4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The annotations indicate this is a mutating tool (readOnlyHint=false) but not destructive (destructiveHint=false). The description goes beyond this by clarifying that content is not mutated, only metadata, and that adding evidence appends a dated entry without overwriting. It also discloses a side effect: transitioning away from 'superseded' automatically clears the dangling superseded_by pointer. This provides useful behavioral context beyond the annotations, though it does not cover all possible edge cases (e.g., invalid decision_id).

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is concise and well-structured. It opens with a clear verb and resource, lists the three main actions, and then provides two critical usage notes in separate sentences. Every sentence earns its place, and there is no fluff or repetition of schema content that is already obvious. The length is appropriate for the tool's complexity.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool's moderate complexity (4 parameters, one required, no output schema), the description is mostly complete. It explains the core functions, the distinction from decision_log, and the special superseded status rule. However, it does not mention what the tool returns (e.g., success confirmation or updated decision object) or how errors are handled (e.g., nonexistent decision_id). Since there is no output schema, a brief note on the return value would have been helpful, but the tool remains usable with the information provided.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The input schema describes all four parameters with 100% coverage, so the schema already provides the heavy lifting. The description reinforces the meaning of 'add_evidence' (append, never overwrites) but does not add substantial new meaning beyond the schema. The 'status' parameter's special handling is also documented in the schema, so the description's reference to it is redundant but consistent. As per the baseline rule for high schema coverage, a 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool's purpose: refreshing metadata for an existing decision, listing specific actions (bump review_date, append evidence, change status). It distinguishes itself from related tools like decision_log by explicitly noting it does not mutate decision content, and for content changes, a new decision should be logged. The verb 'Refresh' plus resource 'decision metadata' is specific and unambiguous.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives explicit usage direction: 'Use INSTEAD of editing decisions.json directly' and 'for content changes, log a new decision via decision_log.' It also provides a conditional rule for the 'superseded' status, stating this should only be used when a replacement decision exists and advising to prefer decision_log with the 'supersedes' parameter. This is clear when-to-use and when-not-to-use guidance with specific alternatives.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

decision_reviewA
Read-only

Call this before making new decisions, at session end, or when the user asks if a decision is still valid or what's overdue. Review-debt inbox: buckets overdue decisions into still_true / changed / archive / needs_evidence with a recommended action for each. READ-ONLY — proposes and cites reasons but mutates nothing; confirm, then apply via decision_refresh / decision_log. Auto-detects duplicate stubs. When root_path is provided, matches each decision's invalidate_if conditions against repo scan output.

ParametersJSON Schema
NameRequiredDescriptionDefault
limitNoMax decisions to surface (default 5).
entity_idNoScope to one entity. Omit to review all entities' overdue decisions.
root_pathNoAbsolute path to a project repo. When provided, runs project_evidence_scan and matches invalidate_if conditions against git log and state files. Matched decisions are moved to the 'changed' bucket with the triggering evidence cited.
include_parkedNoInclude decisions on parked/archived entities (default false).

TDQS

A4.7/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The description reinforces readOnlyHint with explicit 'READ-ONLY' and explains it mutates nothing, proposes and cites reasons, and auto-detects duplicate stubs. It also describes conditional behavior with root_path, adding value beyond the annotation.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three sentences, front-loaded with usage triggers, no fluff. Dense but organized, every sentence earns its place.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a read-only review tool with no output schema, the description covers purpose, usage, safety, and conditional behavior. Missing output format is acceptable since no output schema exists and the description gives adequate context.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Input schema covers all 4 parameters with detailed descriptions (100% coverage). The description doesn't add significant new parameter semantics beyond what schema provides; it references root_path but schema already explains it in detail.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool's function: a review-debt inbox that buckets overdue decisions into still_true / changed / archive / needs_evidence with recommended actions. It uses a specific verb ('Call this...') and distinguishes from siblings by focusing on review/analysis rather than mutation or checking.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly states when to call it ('before making new decisions, at session end, or when the user asks if a decision is still valid or what's overdue') and directs follow-up actions via decision_refresh / decision_log, providing clear workflow context and alternatives.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

entity_readA
Read-only

Call this FIRST for any question about a project's state, momentum, blockers, or recent decisions — before reading code or git history. Returns the operational state one or all tracked entities: status, momentum, blockers, decisions, staleness, and next actions. Do not grep files to answer state questions when this tool is available.

ParametersJSON Schema
NameRequiredDescriptionDefault
entity_idNoEntity ID to read. Omit for all entities.

TDQS

A4.5/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations declare readOnlyHint=true, and the description adds the returned data shape (status, momentum, blockers, etc.) and the ability to fetch all entities. This goes beyond the annotation but doesn't cover potential edge cases like staleness or error behavior, but for a read tool the bar is lower.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three focused sentences: usage instruction, core functionality, and an exclusion. Front-loaded and every sentence earns its place with no redundancy.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The tool is simple (one optional param, no output schema). The description fully covers when to use it, what it returns, and how to invoke it (first, before grep), making it complete within its simplicity.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The single parameter entity_id is fully described in the schema ('Entity ID to read. Omit for all entities.'). The description repeats this concept ('one or all tracked entities') without adding new syntax or format details, so baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Clearly states the tool returns operational state for entities, with specific fields (status, momentum, blockers, etc.). The verb 'Returns' and resource scope ('one or all tracked entities') distinguish it from update tools and code-reading alternatives.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly instructs to call this tool FIRST for state questions, before reading code or git history. Provides an exclusion ('Do not grep files') and implicit alternative (code/git reading), making usage unambiguous.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

entity_updateA

Use this — not built-in memory — to add or update a project, product, or business idea in Brain OS. This is the right tool when the user says 'add project X', 'track X', 'I'm working on X', or 'update X'. Creates the entity if it doesn't exist. Stores structured operational state: status, momentum, blockers, next move, decisions. Use after work is done, a decision is made, a blocker changes, or momentum shifts.

ParametersJSON Schema
NameRequiredDescriptionDefault
updatesYesFields to update
entity_idYesEntity to update
context_hintNoPass the user's original message here. Brain OS will verify this message actually refers to entity_id before writing. If it detects the message is about a different project, it rejects the write and tells you which entity_id to use instead. Prevents cross-project contamination.

TDQS

A4.2/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations indicate readOnlyHint=false, so the write nature is known. The description adds valuable behavioral context: it upserts ('Creates the entity if it doesn't exist'), stores structured operational state, and explains the context_hint rejection mechanism that prevents cross-project contamination. This goes beyond the annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is front-loaded with 'Use this' and consists of five sentences, each earning its place: purpose, trigger phrases, upsert behavior, stored fields, and timing. No redundancy or filler.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool's complexity (3 params, nested updates object, no output schema), the description covers purpose, triggers, timing, and an important safety behavior (context_hint validation). It does not describe return values or error handling in general, but the core usage context is complete enough for an agent to select and invoke the tool correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, with each parameter already documented. The description lists field categories (status, momentum, blockers, next move, decisions) which loosely maps to schema properties but adds no new parameter-level meaning beyond what the schema provides. Baseline 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool's verb ('add or update') and resource ('project, product, or business idea in Brain OS'), and distinguishes it from built-in memory. It also provides trigger phrases ('add project X', 'track X') and notes the upsert behavior, making the purpose unambiguous and differentiated.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives explicit when-to-use triggers: user phrases and timing ('after work is done, a decision is made, a blocker changes, or momentum shifts'). It mentions 'not built-in memory' as an alternative but does not explicitly exclude other sibling tools like entity_read or plan_add, so it falls short of full when/where-not guidance.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

focus_getA
Read-only

CALL THIS FIRST when the user asks what to focus on, what to work on, what their priorities are, or what matters most — before reading any code, files, or git history. Brain OS holds decisions, blockers, and momentum signals that cannot be inferred from the codebase. Returns prioritized recommendations based on urgency, momentum, leverage, staleness, and dependencies. follow_through_alerts surfaces active entities that stated a next_move but haven't logged any update in 7+ days — treat these as first-class accountability prompts, same tier as blockers. Pass entity_id to scope focus to a single project.

ParametersJSON Schema
NameRequiredDescriptionDefault
entity_idNoScope focus to a single entity. When set, returns only that entity. Omit for global cross-project priorities.
constraintsNoOptional: 'only 2 hours', 'low energy', etc.
max_resultsNoMax priorities to return (default 3)
suppress_default_guidanceNoSet true to omit the built-in 'Do not reorganize…' / 'Do not start new ideas…' lines from do_not_do. Default false. Env override: BRAIN_FOCUS_OMIT_DEFAULT_GUIDANCE=1.

TDQS

A4.4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The readOnlyHint annotation already declares the tool is read-only. The description adds valuable context about the Brain OS data source, the follow_through_alerts behavior (entities with stale next_move), and how they should be treated as first-class prompts. This goes beyond what the annotation alone conveys.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is efficiently front-loaded with the critical 'CALL THIS FIRST' instruction, followed by concise but rich context about data source, recommendation criteria, and alert handling. Every sentence earns its place with no filler.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a read-only tool with no output schema, the description covers the core purpose, trigger conditions, and a notable behavior (follow_through_alerts). It does not detail the exact response format, but given the full parameter schema and clear output description ('prioritized recommendations'), this is adequate.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the baseline is 3. The description's mention of entity_id ('Pass entity_id to scope focus to a single project') slightly reinforces the schema but adds little new meaning. Other parameters (constraints, max_results, suppress_default_guidance) are not elaborated beyond schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool returns prioritized recommendations based on specific criteria (urgency, momentum, leverage, staleness, dependencies) and distinguishes it from reading code/files/git history. It also explicitly positions it as the first tool to call for focus-related queries.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides explicit trigger phrases ('asks what to focus on, what to work on...') and clear precedence guidance ('CALL THIS FIRST... before reading any code, files, or git history'). It also explains when to pass entity_id, making usage unambiguous.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

memory_checkA
Read-only

Assess quality and reliability of current memory state. Flags stale data, contradictions, overdue decision reviews, unconfirmed patterns, fake-active entities, and noise. Returns signal classification (strong/weak/noise/dangerous) and recommended cleanup actions. Call this before acting on memory to know what to trust.

ParametersJSON Schema
NameRequiredDescriptionDefault
entity_idNoCheck one entity, or omit for full memory audit

TDQS

A4.2/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The description details what the tool flags (stale data, contradictions, overdue reviews, etc.) and what it returns (classification + recommended actions), adding meaningful behavioral context beyond the readOnlyHint annotation. It's consistent with read-only behavior and gives the agent a clear picture of what to expect.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Four sentences, front-loaded with the core purpose, then enumerating flags and returned values, ending with actionable usage guidance. Every sentence contributes information with no filler.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With no output schema, the description compensates by naming the return categories (strong/weak/noise/dangerous) and cleanup actions. The optional parameter scope is covered by the schema. The tool is relatively simple, and the context is sufficiently complete, though more detail on cleanup actions could be added.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The single parameter (entity_id) is fully documented in the schema with 'Check one entity, or omit for full memory audit', so schema coverage is 100%. The description doesn't add parameter-specific meaning beyond this, maintaining the baseline of 3.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a specific verb ('Assess') with a clear resource ('quality and reliability of current memory state') and enumerates distinct outputs (signal classification, cleanup actions). It distinguishes itself from siblings by focusing on trustworthiness of memory rather than reads, writes, or decision checks.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The final sentence gives explicit guidance: 'Call this before acting on memory to know what to trust.' This provides a clear usage context, though it doesn't name alternatives or state when not to use the tool, so it stops short of a 5.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

memory_commitA
Destructive

End-of-session commit. Updates all touched entities, logs decisions, records patterns. Call before ending any work session.

ParametersJSON Schema
NameRequiredDescriptionDefault
decisions_madeNo
session_summaryYesBrief summary of what happened
entities_touchedYesEntity IDs worked on
momentum_changesNo
patterns_noticedNo

TDQS

A3.9/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare destructiveHint=true and readOnlyHint=false. The description adds context about updating all touched entities and logging/recording, but does not elaborate on side effects like whether updates are irreversible or how momentum_changes are applied. It does not contradict annotations, and the extra end-of-session framing is useful.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is two sentences, front-loads the core verb ('End-of-session commit'), and packs all key behaviors without padding. Every word earns its place.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a commit tool with 5 parameters and no output schema, the description covers the trigger and main effects but omits momentum_changes and does not explain the destructive implications beyond the annotation. It is adequate but missing important operational detail.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is only 40%, but the description partially compensates by mapping 'logs decisions' to decisions_made and 'records patterns' to patterns_noticed. It does not mention momentum_changes, which remains undocumented both in schema and description, leaving a gap for that parameter.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description opens with 'End-of-session commit', a specific verb+resource pair, and enumerates concrete actions: 'Updates all touched entities, logs decisions, records patterns'. This clearly distinguishes it from sibling tools like decision_log, entity_update, and pattern_detect by positioning it as a consolidated commit operation.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description explicitly instructs 'Call before ending any work session', providing a clear trigger context. It does not mention alternatives or exclusions, but the usage condition is direct and actionable.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

pattern_detectA
Read-only

Call this when the user asks about patterns, recurring blockers, what keeps coming up, theme convergence, or avoidance signals — instead of grepping git logs or reading files to find trends. Analyzes patterns across all tracked entities and returns detected signals with entity context.

ParametersJSON Schema
NameRequiredDescriptionDefault
scopeNo'recent' for 7 days, 'deep' for full, or a specific theme

TDQS

A4.3/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true, so the safety profile is covered. The description adds that the tool analyzes 'all tracked entities' and returns 'detected signals with entity context,' which is useful but does not detail output format, pagination, or potential performance implications. This is similar to the reference example where annotations carry the main burden.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is two sentences, front-loaded with the most important usage trigger, and ends with a concise statement of behavior and output. Every word earns its place with no redundancy or filler.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the low complexity (one optional parameter, no output schema), the description is complete enough for an agent to select and invoke the tool. It covers when to use, what it does, and what it returns. The schema covers parameter details, and annotations cover safety.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The schema provides 100% coverage for the single 'scope' parameter, including its options ('recent', 'deep', or a specific theme). The description does not add further parameter-specific meaning, which is acceptable given the high schema coverage. Baseline 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool's purpose: it analyzes patterns across tracked entities and returns detected signals with entity context. It also explicitly lists trigger conditions (patterns, recurring blockers, theme convergence, avoidance signals), distinguishing it from generic file grepping or log reading.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description opens with explicit 'Call this when...' guidance listing specific user intents that should trigger this tool, and explicitly says to use it 'instead of grepping git logs or reading files to find trends.' This clearly communicates when to use it versus the alternative manual approaches.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

plan_addA

Add steps to an existing plan. Use when new work is discovered mid-plan. Steps can be added at the end or immediately after the current active step.

ParametersJSON Schema
NameRequiredDescriptionDefault
stepsYesSteps to add
positionNoWhere to insert: 'end' (default) or 'after_current'
entity_idYesEntity to add steps to

TDQS

A4.4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=false and destructiveHint=false, consistent with the mutation described. The description adds value by explaining insertion positions ('at the end or immediately after the current active step'), offering behavioral detail beyond the annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences deliver purpose, usage context, and positional behavior without redundancy. Every phrase earns its place, and the structure is front-loaded with the core action.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With simple 3-parameter schema, helpful annotations, and clear usage context, the description is nearly complete. It doesn't mention return values or side effects, but for a low-complexity mutation tool with strong schema support, this is a minor gap rather than a critical omission.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so baseline is 3. The description adds meaning beyond the schema by clarifying the 'after_current' position means 'immediately after the current active step', which is not fully explicit in the schema's enum description.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool's action: 'Add steps to an existing plan' with the specific resource (plan) and target (steps). It also distinguishes from siblings by noting mid-plan usage and positioning options, which differentiates it from plan_set and plan_advance.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Provides a clear usage context: 'Use when new work is discovered mid-plan.' It implies a specific scenario but does not explicitly name alternatives or say when not to use, though the sibling list and context make the distinction intuitive.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

plan_advanceA

Complete or skip the current plan step. Requires evidence (for complete) or reason (for skip). Automatically promotes the next pending step to active and updates next_move. Enforces continuity — you cannot skip without explaining why.

ParametersJSON Schema
NameRequiredDescriptionDefault
actionYesComplete (with evidence) or skip (with reason)
reasonNoRequired for skip — why this step is being skipped
step_idYesStep ID to complete or skip (e.g. 'step-001')
evidenceNoRequired for complete — what proved this step is done
entity_idYesEntity whose plan to advance

TDQS

A4.6/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The description discloses multiple behavioral traits beyond the annotations, including the mandatory evidence/reason requirements, automatic promotion of the next pending step, updates to next_move, and the 'cannot skip without reason' constraint. This gives a comprehensive view of the tool's side effects and validation rules.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description consists of two concise, front-loaded sentences. Every sentence contributes meaningful information: one states the core action and prerequisites, the other explains the automatic behavior and enforcement. There is no redundancy or filler.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a mutation tool with no output schema, this description sufficiently covers purpose, conditions, and side effects. It handles the main use cases and explains the state transition. Minor gaps exist, such as behavior when there is no pending next step, but these are not critical for primary usage.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline is 3. The description adds value by clarifying the conditional dependency between action and evidence/reason, which is not fully captured in the schema. This helps the agent understand which fields are required in which scenarios.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool's function: 'Complete or skip the current plan step.' This specificity distinguishes it from sibling tools like plan_add (which adds steps) and plan_read (which reads plans). The verb-resource pairing is precise.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides clear context for when to use 'complete' vs 'skip' by requiring evidence or reason respectively. It also explains the automatic promotion of the next step and the continuity enforcement. While it doesn't explicitly name alternative tools, the guidance is sufficient to infer appropriate usage.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

plan_readA
Read-only

Read the current plan for an entity. Shows all steps, their status, the active step, and overall progress.

ParametersJSON Schema
NameRequiredDescriptionDefault
entity_idYesEntity to read the plan for

TDQS

A4.3/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint: true, so the safety profile is known. The description adds valuable behavioral detail about return content (all steps, status, active step, overall progress), which is especially important since no output schema exists.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two concise sentences with no filler. The core action and its scope are front-loaded in the first sentence, and the second sentence enumerates the output contents efficiently.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a read-only, single-parameter tool with no output schema, the description fully covers what the tool does and what it returns. There are no missing prerequisites or side effects to disclose given the readOnly hint.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The single parameter entity_id is fully described in the schema with a clear description. The tool description does not add extra semantics, but none are needed for such an obvious parameter. Schema coverage is 100%, so baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Description uses a specific verb 'Read' with resource 'current plan for an entity', and lists what is shown (steps, status, active step, progress). This clearly distinguishes it from sibling plan mutation tools like plan_set or plan_advance.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The read-only purpose is clearly stated, making it obvious when to use this tool. It does not explicitly name alternatives or exclusions, but the context is unambiguous enough for an agent to select it for reading a plan.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

plan_setA
Destructive

Set an ordered plan for an entity. Replaces any existing plan. Step 1 becomes the active next_move. Use when committing to a sequence of work — not for brainstorming. Each step should be a concrete, completable action.

ParametersJSON Schema
NameRequiredDescriptionDefault
stepsYesOrdered list of concrete steps. First step becomes active immediately.
entity_idYesEntity to set the plan for

TDQS

A4.3/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The description discloses key behavioral traits beyond annotations: 'Replaces any existing plan' (destructive behavior) and 'Step 1 becomes the active next_move' (activation semantics). These add value above the destructiveHint annotation, which only flags destructiveness generically.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Four short sentences, each carrying essential information: purpose, replacement behavior, activation rule, and usage guideline. No fluff or repetition. Exceptionally well-structured for quick agent comprehension.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the simplicity of the tool (2 parameters, no output schema), the description covers all necessary aspects: what it does, when to use it, how it affects existing state, and what constitutes valid input. The addition of a quality guideline for steps (concrete, completable) makes it fully self-contained for correct invocation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% and already describes steps as 'Ordered list of concrete steps. First step becomes active immediately.' The description adds 'Each step should be a concrete, completable action,' which is a slight refinement but largely redundant with the schema. No significant new meaning is provided.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool 'Set an ordered plan for an entity' and explicitly notes it 'Replaces any existing plan', which distinguishes it from sibling tools like plan_add. The verb+resource+scope is specific and actionable.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Provides explicit usage context: 'Use when committing to a sequence of work — not for brainstorming.' This gives a clear when-to-use signal and an exclusion. It does not name alternative tools explicitly, but the context implies this is for finalizing a plan rather than exploring ideas.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

project_evidence_scanA
Read-only

Read-only scan of a repo's native operating state (STATE.md, FLAGS*, HANDOFF*, ROADMAP.md, PLAN*.md, TODO.md, AGENTS.md + recent git activity / dirty files). Returns evidence — human gates, blockers, next moves, do-not-touch, safe parallel work — surfaced as exact lines. Call AFTER context_resolve and BEFORE building a focus answer. Mutates nothing and does no inference: it returns ALL candidate signals; deciding the focus is the agent's job. This is NOT context_resolve — do not use it to pick which project you're in.

ParametersJSON Schema
NameRequiredDescriptionDefault
entity_idNoOptional Brain OS entity this repo maps to (echoed back; does not affect the scan).
root_pathYesAbsolute path to the repo/project root to scan.

TDQS

A4.7/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Beyond the readOnlyHint annotation, the description adds that it 'Mutates nothing and does no inference: it returns ALL candidate signals,' clarifying the tool's non-destructive, non-interpretive behavior. It also details the output format ('surfaced as exact lines'), giving a clear behavioral contract.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is concise yet information-dense. Each sentence earns its place: purpose, output content, usage timing, non-mutation guarantee, and sibling distinction. It is front-loaded with the core function and avoids redundancy.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Despite having no output schema, the description explains what the tool returns (evidence categories, exact lines) and the scope of files scanned. Combined with usage timing and behavioral guarantees, it fully equips an agent to select and invoke the tool correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline is 3. The description adds no parameter-specific guidance beyond what the schema already states; it merely implies that root_path is the target repo. Since the schema fully documents both parameters, the description needs no further elaboration.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a specific verb ('scan') and resource ('a repo's native operating state'), enumerates exact file patterns, and explicitly distinguishes itself from sibling context_resolve by stating 'This is NOT context_resolve.' This makes the tool's purpose unmistakable and separate from alternatives.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Provides explicit sequencing: 'Call AFTER context_resolve and BEFORE building a focus answer,' and an explicit exclusion: 'do not use it to pick which project you're in.' This gives clear when-to-use and when-not-to-use guidance, superior to most tool descriptions.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

risk_assessA
Read-only

Assess the risk of a proposed action before executing it. Runs a pre-filter (returns low/skipped immediately for clearly safe actions) then applies signal detection for: private→public boundary crossings, destructive operations, release/publish actions, external communication, and security-sensitive file access. Call this BEFORE any action in the trigger set: publish, push, force-push, git tag, deploy, delete tracked files, external API writes, billing, roadmap/private state movement. Returns risk_level (low/medium/high/critical), boundary_crossed, reversibility, and risk_reasons. Pass the result to action_guard to get a policy decision (allow/ask/block).

ParametersJSON Schema
NameRequiredDescriptionDefault
diffNoGit diff or content diff of the proposed change.
entity_idNoBrain OS entity this action is associated with.
git_statusNoOutput of git status, if relevant.
package_infoNopackage.json metadata for release actions.
files_touchedNoFile paths the action will read or write.
proposed_actionYesThe action about to be taken — describe it clearly, e.g. 'npm publish brain-os@0.9.0' or 'write ROADMAP.md to public repo'.
target_visibilityNoWhether the target destination is public-facing. Pass 'public' when writing to a public repo or publishing to a registry.

TDQS

A4.6/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The description discloses behavior beyond the readOnlyHint annotation: it mentions a pre-filter that returns low/skipped for safe actions, then applies signal detection across five risk categories, and lists the return fields (risk_level, boundary_crossed, reversibility, risk_reasons). This provides a clear picture of the tool's internal processing.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is four sentences, each earning its place: purpose, process, usage trigger, and output/handoff. It is front-loaded with the core purpose and contains no redundant text.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a tool with 7 parameters, a nested object, and no output schema, the description covers purpose, usage triggers, process, return fields, and the next step to action_guard. It does not explicitly connect parameters like package_info or diff to the detection logic, but the schema covers those details.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the baseline is 3. The description references 'proposed action' and target categories, but does not add parameter-specific details beyond what the schema already provides (e.g., how diff or package_info are used).

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states 'Assess the risk of a proposed action before executing it' with a specific verb and resource. It goes on to list the detection categories and the explicit trigger set, distinguishing it from sibling tools like action_guard.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It provides explicit when-to-use guidance: 'Call this BEFORE any action in the trigger set: publish, push, force-push, git tag, deploy...' and instructs the next step: 'Pass the result to action_guard to get a policy decision.' This clearly positions the tool relative to alternatives.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

semantic_recallA
Read-only

Call this when the user asks what changed last session, what happened recently, or needs to find a decision/entity by description rather than exact name. Searches memory by meaning using semantic similarity. Use BEFORE reading git log or commit history for session-level context questions.

ParametersJSON Schema
NameRequiredDescriptionDefault
queryYesNatural language query — e.g. 'that decision about pricing' or 'projects related to memory systems'
max_resultsNoMax results to return (default 5)
source_kindNoFilter by type. Omit to search everything.

TDQS

A4.5/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true, so the read-only safety is covered. The description adds meaningful behavioral context beyond that: it explains the semantic search mechanism and the fact that it matches by description rather than exact name. This goes beyond the minimal annotation baseline, though it doesn't disclose result format or failure behavior.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three sentences, front-loaded with trigger conditions, followed by the core functionality and a usage directive. Every sentence earns its place with no redundancy or fluff.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a read-only search tool with well-described parameters and no output schema, the description provides complete selection and invocation context: it tells the agent when to use it, what it does, and how to order it relative to git log. No critical gaps for an agent to call it correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%: query has an example, max_results and source_kind have clear descriptions. The tool description does not add parameter-specific meaning, so the baseline of 3 is appropriate per the rubric.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool's purpose: 'Searches memory by meaning using semantic similarity.' It also specifies concrete use cases (what changed last session, recent events, finding by description) and distinguishes from exact-name search and git log, differentiating it from sibling tools like entity_read.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Provides explicit when-to-use triggers ('when the user asks what changed last session...') and a strong guideline: 'Use BEFORE reading git log or commit history for session-level context questions.' This clearly guides the agent on tool selection and ordering relative to alternatives.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

wrap_autoA

Tier 2 of auto-wrap: persist a session wrap WITHOUT interactive review, when context is about to be lost (compaction, session end) or the user declined to review. Use the normal interactive /wrap when the user is present and reviewing — only reach for this as a safety net. The agent supplies the synthesized wrap; this tool applies LOW-RISK fields (next_move, open_questions, evidence_of_progress) immediately and STAGES high-risk changes (status, mode, blocked, decisions) as an unconfirmed record for /start to surface and the user to confirm. Always logs a session_wrapped marker. Never put a status change or a decision in pending_review expecting it to take effect now — staged items are proposals, not writes.

ParametersJSON Schema
NameRequiredDescriptionDefault
summaryYesOne-line synthesized summary of what happened this session.
triggerNoWhat triggered it: precompact | sessionend | manual-no-review.
entity_idYesEntity being wrapped.
next_moveNoLOW-RISK, applied now — the concrete next action.
session_idNoHost session id, when known.
open_questionsNoLOW-RISK, merged now — unresolved threads.
pending_reviewNoHIGH-RISK — staged for review, NOT applied. Surfaced at next /start for confirm/edit/discard.
evidence_of_progressNoLOW-RISK, appended now — what actually shipped or moved.

TDQS

A4.9/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations only say readOnlyHint=false, so the description carries the full burden of behavioral disclosure. It discloses that low-risk fields are applied immediately, high-risk changes are staged as unconfirmed records, a session_wrapped marker is always logged, and staged items are proposals not writes. This is consistent with readOnlyHint=false.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Four dense sentences, each earning its place: trigger/context, alternative, risk-tier behavior, logging, and a caution. The prose is front-loaded with 'Tier 2' and 'safety net' and contains no filler or redundant restatement.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For an 8-parameter, nested tool with only readOnlyHint=false and no output schema, this description covers purpose, trigger conditions, side-effect behavior, risk classification, and a critical caveat. It leaves no major gap in deciding whether and how to invoke the tool.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline is 3, and the description reinforces the low-risk/high-risk split already present in schema descriptions. It adds crucial meaning by warning that pending_review is never effective immediately, clarifying how to set those fields, while not significantly altering parameter semantics beyond that.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description explicitly frames wrap_auto as 'Tier 2 of auto-wrap' for persisting a session wrap without review, clearly naming the verb (persist, apply, stage) and resource (session wrap). It distinguishes itself from the interactive /wrap sibling by positioning it as a safety net, so an agent can tell what this tool uniquely does.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It states when to use the tool ('context is about to be lost (compaction, session end) or the user declined to review') and explicitly says to use the normal interactive /wrap when the user is present and reviewing. This provides both inclusion and exclusion criteria, plus a clear warning against treating pending_review as immediately effective.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

wrap_checkA
Read-only

Check how much state-changing work has accumulated since the last wrap. Read-only — never mutates. Tier 1 of auto-wrap: call this when the user signals they are wrapping up or ending a session, or periodically during a long session, to decide whether to proactively offer a /wrap before context is lost to compaction or session end. Returns unwrapped_count, the projects touched, and recommend_wrap. When recommend_wrap is true, offer to wrap; do not auto-wrap silently from this tool.

ParametersJSON Schema
NameRequiredDescriptionDefault
thresholdNoUnwrapped-mutation count at/above which a wrap is recommended. Default 5.
session_idNoScope the check to one session's activity. Omit to check the whole audit tail.

TDQS

A4.5/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint: true, and the description reinforces this with 'never mutates.' It adds valuable behavioral context beyond the annotation, such as returning unwrapped_count and recommend_wrap, and instructing the agent to offer a wrap rather than act silently. Minor gap: no mention of error conditions or edge cases, but the core behavior is fully disclosed.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is compact (~75 words) with front-loaded purpose and no fluff. Every sentence contributes either usage timing, return values, or an explicit behavioral rule. It is structured logically: what it does, when to use it, what it returns, and how to act on the result.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Despite having no output schema, the description fully documents return values (unwrapped_count, projects touched, recommend_wrap) and the recommended action. It also covers usage timing and the read-only nature. Given the tool's relative simplicity and strong annotations, the description is complete enough for an agent to select and invoke it correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, with both threshold and session_id having clear descriptions in the schema. The tool description itself does not add extra parameter meaning beyond the schema, but it hints at the threshold's purpose via 'recommend_wrap' logic. Baseline 3 is appropriate because the schema carries the full load.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description begins with a specific verb and resource: 'Check how much state-changing work has accumulated since the last wrap.' It clearly differentiates from the sibling tool 'wrap_auto' by positioning itself as the read-only check (Tier 1) that decides whether to offer a wrap, not perform it.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly states when to call: 'when the user signals they are wrapping up or ending a session, or periodically during a long session.' It also provides a clear exclusion: 'do not auto-wrap silently from this tool,' and implies alternative behavior by mentioning the auto-wrap tier.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections. Dates show when Glama detected each change.

  1. 22 tool updatesv0.1.0
    • First observedaction_guard
    • First observedaudit_log
    • First observedcontext_resolve
    • First observeddecision_check
    • First observeddecision_log
    • First observeddecision_refresh
    • First observeddecision_review
    • First observedentity_read
    • First observedentity_update
    • First observedfocus_get
    • First observedmemory_check
    • First observedmemory_commit
    • First observedpattern_detect
    • First observedplan_add
    • First observedplan_advance
    • First observedplan_read
    • First observedplan_set
    • First observedproject_evidence_scan
    • First observedrisk_assess
    • First observedsemantic_recall
    • First observedwrap_auto
    • First observedwrap_check

TDQS

A4.2/5.0
Disambiguation5/5

Every tool targets a distinct resource-action combination (e.g., entity_read vs entity_update, decision_log vs decision_check, plan_set vs plan_add). Overlapping areas such as semantic_recall vs audit_log and wrap_check vs wrap_auto are clearly differentiated by their descriptions.

Naming Consistency4/5

The majority of tools follow a consistent noun_verb pattern (plan_add, decision_check, entity_read). A few names like wrap_auto, semantic_recall, and audit_log deviate slightly from this pattern, but the overall convention remains predictable and readable.

Tool Count3/5

With 22 tools, the set is on the heavy side, falling within the 16-25 borderline range. While each tool serves a meaningful purpose, the number exceeds the ideal 3-15 range for a well-scoped server.

Completeness4/5

The surface covers the core domain well: entity CRUD (via entity_read/update), decision lifecycle (log, check, review, refresh), plan management (set, add, advance, read), risk assessment, and memory operations. Minor gaps like explicit entity deletion or plan step editing are workable through entity_update and plan_set, so there are no critical dead ends.

Maintenance

ActivityMaintained
ResponsivenessUnresponsive

Related MCP Connectors

Related MCP Servers

  • F
    license
    Not graded
    quality
    D
    maintenance
    Enables persistent storage and retrieval of decisions, settings, and operational rules across chat sessions, maintaining context continuity and decision consistency for long-term development projects through structured memory management.
    -
  • A
    license
    Not graded
    quality
    C
    maintenance
    Project memory and scoping engine for AI coding agents. It gives any agent persistent project state, bounded work packages, and cross-session continuity.
    6
    MIT

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/brainOS-HQ/brain-os'

If you have feedback or need assistance with the MCP directory API, please join our Discord server