sentarion-mcp
Sentarion MCP is a governed multi-agent orchestration server that combines planning/dispatch, dual-chain memory, and a fail-closed approval gate.
Birth an identity (
sentarion_birth) to earn a soul_id before acting.Dual-chain memory —
remember,recall, andverifywrite to and prove a local chamber plus hosted ArkHive, merged newest-first.Governance gate (
govern) — a zero-LLM, fail-closed two-chamber check that blocks actions unless a verdict is rendered.Plan and dispatch (
orchestrate_and_record) — gate-checked Algernon fan-out planning/dispatch, auto-logged to both chains.Dependency-aware execution (
dispatch_with_dependencies) — run tasks in waves bydepends_on, with{{id}}data flow between tasks.History-primed replanning (
recall_and_replan) — pull prior state and generate a new plan without dispatching.Cost estimation (
cost_estimate) — predict token cost before dispatching.Git worktree sandbox (
worktree) — governed create/list/remove of isolated worktrees so dispatched work never touches the live checkout.Upgrade info (
sentarion_pro) — see what the paid v2 adds while the free tier remains whole.
Provides a governed Git worktree sandbox, allowing creation, listing, and removal of isolated worktrees so dispatched work never touches the live checkout.
Allows Sentarion to run its parallel worker fleet on a local Ollama instance, automatically detected, for free and offline model execution.
Allows Sentarion to use OpenAI models as the provider for its parallel worker fleet, enabling task planning and dispatch with an OpenAI API key.
Click on "Deploy Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@sentarion-mcpEstimate cost and dispatch my agent tasks with the fail-closed policy gate."
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
sentarion-mcp — Give your AI agents rules, memory, and receipts.
Install: pip install sentarion-mcp · Command: sentarion · Apache-2.0 · Hosted endpoint
Sentarion is the open-source MCP control layer for governed multi-agent work. It governs, records, and coordinates agent work across Claude Code, Codex, Cursor, local models, and any MCP-compatible client.
It composes three open-source MCP servers into one governed substrate — it connects to them as an MCP client, it does not reimplement them:
Algernon — fan-out planning/dispatch to cheap parallel workers on your key (or a free local Ollama, auto-detected since 0.2.2)
ArkHive — hosted, tamper-evident audit/memory chain
a local covenant chamber (Humane Intelligence, or the bundled
arkhive-mcppackage when Humane is not installed)
The first minute
Everything below was run, not written, against a clean pip install sentarion-mcp (2026-09-10).
you > sentarion_birth(name="ember", covenant=["truth over comfort"])
sentarion> born_on: ["humane", "arkhive"] # your local chain AND the hosted one; act as actor="ember"
you > remember(actor="ember", action="decided: ship the 27-tool surface", data={"why": "87 was the tax"})
sentarion> humane: immutably recorded · arkhive: immutably recorded
you > verify()
sentarion> humane: INTACT — context provably unbroken
arkhive: INTACT — context provably unbrokenNow play the villain. Open ~/.sentarion/local_chamber.db and change one word of that record by hand
(update blocks set action = replace(action, 'ship', 'cancel') where idx = 0). Then:
you > verify()
sentarion> humane: TAMPERED — 1 broken linksAnd the gate, with nothing configured:
you > govern(action="delete the production database")
sentarion> block — Veto: irreversible -> refuse (inferred_flags: ["irreversible"])
you > govern(action="email all 4,000 customers a discount code")
sentarion> block — Veto: external_send -> refuse
you > govern(action="write a summary file")
sentarion> approveThat is the whole idea. Your AI writes down what it did, reads it back next session, and a silent rewrite
fails verification. Every record is hash-chained to the one before it; the hosted copy is a second witness.
govern reads the obvious risks off the action text (delete / drop / force-push, send to everyone, pay, deploy to
production), blocks them by default and fails closed when no chamber answers; orchestrate_and_record asks it
first, fans work out to cheap workers and puts the receipt on the same chain.
Related MCP server: nano-vm-mcp
Install
pip install sentarion-mcpThen, from any MCP client, run sentarion_doctor. It checks git, Algernon, the local chamber, hosted ArkHive, the fleet provider, Ollama and your API key, reports ready: true when a run will work, and lists one fix per missing piece. It never prints a secret.
The seatbelt — hooks, not hope
An MCP tool only helps when the model decides to call it. sentarion seatbelt wires Claude Code (and Cursor, beta)
hooks that run on every tool call whether the model remembers or not, using the same gate vocabulary and the same
local chain as the server:
sentarion seatbelt install --client claude # hooks + the sentarion MCP server + baseline policy
sentarion seatbelt check --command "rm -rf build" # → ask (baseline) — what would the gate say?
sentarion seatbelt doctor # what is wired, the policies, and a live self-test
sentarion seatbelt recall # the project brief the next session will open withHook | What the seatbelt does |
PreToolUse | matches the command / file path / written content against |
PostToolUse | records every edit and command on the local ArkHive chain (so |
SessionStart | the project brief: files edited, commands run, what failed, decisions recorded with |
Stop | with code edits and no test/build/run since the last edit, sends the agent back once; a wiring policy can also list frontend routes with no backend. |
Policies are plain JSON (decision, tools, match, paths, content_match, reason; see seatbelt.POLICY_SCHEMA).
The baseline asks before the irreversible verbs. The packaged version with five policies, three skills and one-click
installers is the Claude Code Seatbelt Kit.
Quick start
Claude Code (examples/claude_code/)
claude mcp add sentarion -- sentarionor in .mcp.json:
{ "mcpServers": { "sentarion": { "command": "sentarion", "args": [] } } }Codex (examples/codex/) — in ~/.codex/config.toml:
[mcp_servers.sentarion]
command = "sentarion"
args = []Cursor (examples/cursor/) — in .cursor/mcp.json:
{ "mcpServers": { "sentarion": { "command": "sentarion", "args": [] } } }Provider keys come from your environment: set ANTHROPIC_API_KEY (or OPENAI_API_KEY), or leave both out and the fleet runs on your local Ollama if one is running (examples/ollama/). Then say:
"Use sentarion: run sentarion_doctor, birth yourself as Scout, then orchestrate_and_record a plan for X with k=3."
Tools
tool | what it does |
| read-only health check of every dependency, with one plain fix per failing check; never prints secrets |
| canonical, runnable example calls for every capability |
| earn a soul_id before acting (Law 5: born, not configured) |
| dual-chain memory: local chamber + hosted ArkHive, merged newest-first, both provable |
| two-chamber, zero-LLM, fail-closed "may I?" gate |
| gate → Algernon plan+dispatch → auto-logged to both chains; returns a |
| gate → waves by |
| history-primed plan (plan only, no dispatch) |
| rough pre-dispatch cost |
| governed git-worktree sandbox: create / list / remove |
| what the paid v2 upgrade adds to the capability you are using; with an email, requests a trial key |
Governance — real, wired, fail-closed
Two governors, one decision rule: a rendered veto blocks; a chamber that fails to answer never manufactures a
veto; if no chamber renders a verdict, the action is blocked. Every tool that executes work or mutates state
(orchestrate_and_record, dispatch_with_dependencies, worktree create/remove) passes the gate first.
Examples
examples/README.md — index
examples/claude_code/ — register in Claude Code and walk six prompts
examples/codex/ — the same from the Codex CLI
examples/cursor/ — register in Cursor
examples/ollama/ — run the fleet on a local Ollama for free
examples/multi_agent/ —
dispatch_example.py(dependency waves with{{id}}data flow) and the Claude-plans / Codex-builds loopexamples/worktree/ —
worktree_example.py(create / list / remove through the server)
Free vs v2
free, Apache-2.0, forever | Sentarion v2 (paid) |
local MCP server, standard MCP client compatibility | durable jobs and background execution |
Algernon orchestration and dependency dispatch with | phase-gate workflow engine with role enforcement and structured task contracts |
ArkHive integration and the local chamber; remember / recall / verify | signed run manifests and SHA-bound verification evidence |
birth / identity; two-chamber fail-closed governance; the obvious risk flags inferred from the action text | deeper inference (PII, credentials, money, bulk scope), a REVIEW verdict a human can turn into a yes, stored versioned policies, a remote chamber |
worktree create / list / remove | worktree diff / patch / commit, repository leases, repo truth snapshots |
local Ollama fleet; rough cost estimates | budgets and hard ceilings, retries, cache, advanced cost ledger |
single-user usage, basic audit events | adversarial code review, GitHub/CI workflow, team tenancy, hosted history, deployment gates |
Join v2 early access
Trial key + pricing: https://inboxaxe.com/mcp — or, from any client that has Sentarion loaded, call sentarion_pro(email="you@company.com") and a 14-day v2 key is requested for that address. Nothing is sent unless you supply an email.
Changelog
0.4.0
sentarion seatbelt: Claude Code / Cursor hooks (PreToolUse gate, PostToolUse memory, SessionStart brief, Stop gate), JSON policy files with a built-in baseline, install/uninstall/doctor/check/recall/policies CLI, 37 tests. Nothing in the MCP surface changed.
0.3.1
sentarion_birthbears the identity on both chains and returnsactor(your birth name, which resolves on each chain). Before, birth landed on the local chamber only, so a stranger's very first hostedrememberwas refused as "not a born soul".A chamber that cannot answer (for example a chain file written by ArkHive 2.x) is now a readable
{error, fix}in the birth reply instead of an "unhandled errors in a TaskGroup" crash.governinfers the obvious risk flags from the action text (irreversible, external_send, financial - the same names v2 uses) and refuses them by default, on both chambers. Before,govern("delete the production database")was approved, and so was the same call withflags=["irreversible"], because no default rule named those triggers.README leads with the first minute, measured.
0.3.0
Server instructions. The MCP
initializeresponse now carries usage guidance (birth first, govern before acting, never invent results,{{id}}data flow, free vs paid).sentarion_doctor. Read-only health check of git, Algernon, the local chamber, hosted ArkHive, fleet provider, Ollama and API key, with one fix per failing check; never prints secrets.sentarion_quickstart. Six canonical, runnable example calls, one per capability.Run summary.
orchestrate_and_recordreturns arunblock withrun_idand timing, a tasks/succeeded/failedsummary, and amemoryoutcome per chain (recorded,not_configured, orerror: <type>) instead of swallowing write failures.Contextual
sentarion_pro. Optionaltopic(worktree, dispatch, govern, memory, review, jobs) returns what v2 adds to the capability you are using; the no-argument and email paths are unchanged.examples/. Claude Code, Codex, Cursor, Ollama, multi-agent dispatch and worktree examples, plus the Claude-plans / Codex-builds workflow.Tests + CI.
tests/with pytest; a GitHub Actions job runs them on Python 3.10 and 3.12 and fails on version drift.Birth fallback fix. The ArkHive birth fallback no longer raises
NameError(tool_textwas not imported).Version unification.
pyproject.toml,sentarion_mcp.__version__andserver.jsonnow agree; built wheels are no longer tracked.
0.2.2 — what changed (found by dogfooding)
Fleet config is explicit. 0.2.1 passed the whole ambient environment to Algernon, so a stale
OPENAI_API_KEYin your shell could silently override your Ollama setup (401). NowSENTARION_FLEET_PROVIDER=anthropic|openai|ollamawins, else a set key, else a local Ollama.Local chamber always exists. Without Humane installed, the bundled
arkhive-mcppackage is the local chamber (own chain at~/.sentarion/local_chamber.db). "humane_not_configured" is gone.Dependencies carry data.
{{t1}}in a dependent prompt is replaced with task t1's result.Hosted birth works (the hosted 0.x server typed
covenantas a string; we retry with one).recall_and_replanno longer sends an argument the hosted recall never accepted.Removed the unused
mcp-agentdependency; added project URLs.
Support this project
Sentarion, Algernon and ArkHive are free, open source, and built on our own hardware. Donate: https://dondatabrain.com · Business suite: https://inboxaxe.com
Available Tools
13 toolscost_estimateA
Predict token cost of an Algernon fan-out BEFORE dispatching.
| Name | Required | Description | Default |
|---|---|---|---|
| k_tasks | Yes | ||
| input_price_per_mtok | Yes | ||
| output_price_per_mtok | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden of behavioral disclosure. 'Predict' combined with 'BEFORE dispatching' strongly implies a non-mutating, side-effect-free calculation, which is useful signal for an agent weighing safety. But it does not explicitly state that the tool does not dispatch or modify state, nor what inputs drive the estimate — whether it is a pure function of the three parameters or incorporates current conversation context.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single 11-word sentence that front-loads the verb and purpose. 'BEFORE dispatching' earns its place by adding workflow positioning that differentiates the tool from its siblings, and there is zero filler or redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a low-complexity tool with three scalar parameters, the description covers core purpose and timing — enough for an agent to decide WHEN to call it. But with no annotations and no output schema, the burden is higher: the 'token cost' framing versus per-million-token price inputs leaves the output ambiguous (estimated tokens, estimated dollars, or both), and the return value is never described.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the description must compensate, and it partly does: 'fan-out' maps to k_tasks and 'token cost' maps to the two price parameters. However, it never defines units (mtok = million tokens), states what k_tasks counts, or explains how the parameters combine to produce the estimate. The self-descriptive parameter names carry much of the remaining interpretive weight.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific verb ('Predict') and resource ('token cost of an Algernon fan-out'), and the 'BEFORE dispatching' marker distinguishes it from operational siblings like dispatch_with_dependencies. An agent can tell this is a planning-stage estimation tool without opening the schema. The only minor weakness is reliance on the undefined domain term 'Algernon fan-out', but the core purpose is unambiguous.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
'BEFORE dispatching' gives explicit temporal context, telling the agent to run this during planning rather than execution, which clearly separates it from dispatch_with_dependencies and orchestrate_and_record. However, it names no alternatives and gives no when-not-to-use conditions or exclusions. Clear context, but the guidance stops short of explicit routing logic.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
dispatch_with_dependenciesB
Run tasks in dependency-ordered waves via Algernon (fan-out/fan-in).
| Name | Required | Description | Default |
|---|---|---|---|
| tasks_json | Yes | JSON array of {id, prompt, depends_on: [ids]} |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden of behavioral disclosure. It only mentions dependency-ordered waves and fan-out/fan-in, but says nothing about side effects, return behavior, error handling, permissions, or what 'dispatch' actually entails. This is a meaningful transparency gap.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single tight sentence with the core operation front-loaded. It loses a point because 'Algernon' is unexplained jargon, making the sentence not fully self-contained for an unfamiliar agent.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The tool has only one parameter and no nested objects, so complexity is low. But with no output schema and no annotations, the description should explain what the tool returns, whether it waits for completion, and how it differs from dispatch-adjacent sibling tools; it does none of this.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, since the schema already explains tasks_json as a JSON array of {id, prompt, depends_on: [ids]}. The description adds no additional parameter-level meaning, so the baseline of 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb ('Run') and clearly identifies the resource ('tasks in dependency-ordered waves via Algernon') with a distinctive fan-out/fan-in mechanism. It does not explicitly differentiate from sibling tools such as orchestrate_and_record or govern, so it stops short of a 5.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The phrase 'dependency-ordered waves' and 'fan-out/fan-in' imply this tool is for tasks that have dependencies and should be executed in waves. However, it gives no explicit when-to-use or when-not-to-use guidance and does not mention alternatives among the listed siblings.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
governA
Ask the two-chamber gate (Humane + ArkHive) 'may I?' before acting. Rule-based, zero-LLM, fail-closed.
| Name | Required | Description | Default |
|---|---|---|---|
| flags | No | ||
| rules | No | ||
| action | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden, and it does well by disclosing that the tool is rule-based, zero-LLM, and fail-closed. This tells the agent the operation is deterministic and safe to rely on, though it stops short of explaining what the response looks like or what fail-closed yields in practice.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is only two sentences and every word earns its place. It is front-loaded with the core purpose, followed by a compact behavioral qualifier, with no filler or redundant restatement of the tool name.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given three parameters, no schema descriptions, no output schema, and no annotations, the description is not complete enough for an agent to confidently construct calls. It gives a strong conceptual model but omits parameter usage, return format, and what fail-closed means operationally.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the description must compensate, but it does not mention any parameter by name. The action and rules parameters are weakly inferable from 'before acting' and 'rule-based,' but the flags parameter is entirely unexplained, leaving a significant semantic gap.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's purpose: ask the two-chamber gate for permission before acting. It names a specific resource (gate), a specific verb (ask), and the timing (before acting), and it distinguishes this from all siblings by framing it as a pre-action authorization check rather than an execution, estimation, or recall tool.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The phrase 'before acting' provides a clear trigger condition for when to use this tool. It does not explicitly name alternatives or exclusions, but the context of a pre-action gate is sufficiently distinct from the sibling tools.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
orchestrate_and_recordC
Two-chamber-govern-gated plan+dispatch via Algernon, auto-logged to both chains.
| Name | Required | Description | Default |
|---|---|---|---|
| k | Yes | ||
| goal | Yes | ||
| actor | No | ||
| flags | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the behavioral disclosure burden. It does reveal that the tool is governance-gated and auto-logs to both chains, which is useful. However, it never states whether it mutates state, what permissions are required, what happens on failure, or what 'both chains' actually are.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is extremely brief, but brevity is achieved through undefined jargon ('Two-chamber-govern-gated', 'Algernon') rather than clear, front-loaded information. It is under-specified rather than efficiently concise, especially for a tool with four parameters and significant orchestration behavior.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's complexity, four unannotated parameters, no output schema, and no annotation support, this description is far from complete. It omits parameter explanations, usage context, return behavior, side effects beyond logging, and relationships to the sibling tools, leaving an agent without enough information to invoke it correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, and the description adds no meaning for any of the four parameters. The agent cannot infer what 'k' represents, what values 'flags' can take, or how 'actor' relates to the goal, leaving the input schema largely unexplained.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description names a compound operation ('plan+dispatch') and a clear side effect ('auto-logged to both chains'), so it is more than a tautology. However, the key terms 'Two-chamber-govern-gated' and 'Algernon' are opaque, and the description does not differentiate it from siblings like dispatch_with_dependencies or recall_and_replan.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is no explicit statement of when to use this tool versus alternatives. The phrase 'govern-gated' hints at a governance condition, but it does not explain when an agent should select this tool over dispatch_with_dependencies or recall_and_replan, nor does it give any exclusions or prerequisites.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
recallC
Read prior context from BOTH chains and merge it, newest first, so the AI need not re-derive it.
| Name | Required | Description | Default |
|---|---|---|---|
| actor | No | ||
| limit | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description discloses that the tool reads from both chains, merges them, and orders newest first, which is useful behavioral context. With no annotations provided, the description carries the burden, and it does not mention side effects, return format, or edge cases, but 'read' suggests a non-destructive operation.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single sentence with the verb and core behavior front-loaded. It contains no wasted words, though it leaves key terms like 'BOTH chains' undefined, which slightly reduces clarity.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The definition omits parameter semantics, return behavior, and what 'chains' refers to, and there is no output schema to compensate. Given its role as a context-retrieval tool with optional parameters, the description is too sparse to fully support correct invocation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, and the description provides no explanation of the 'actor' or 'limit' parameters. Since there are two parameters and neither is clarified, the description fails to compensate for the missing schema documentation.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool reads and merges prior context from both chains and orders it newest first. It names a specific verb and resource, but does not explicitly distinguish it from sibling tools like recall_and_replan or remember.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The phrase 'so the AI need not re-derive it' implies the tool should be used when prior context is needed to avoid recomputing it. However, there is no explicit when-to-use guidance, no exclusions, and no comparison to alternatives such as recall_and_replan.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
recall_and_replanC
Recall prior state from both chains, feed it into a new Algernon plan.
| Name | Required | Description | Default |
|---|---|---|---|
| k | Yes | ||
| query | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden of disclosing behavior. It states that prior state is recalled and fed into a new plan, but it does not disclose whether this modifies or replaces anything, whether it is a read-only operation, what side effects occur, or what the output looks like.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single sentence with no filler and the primary action comes first, which is efficient. However, it relies on unexplained domain jargon and is so brief that it sacrifices clarity, making it only adequate structure-wise.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description communicates the basic operation but is far from complete for a tool with two required parameters, no output schema, and no annotations. It lacks parameter mapping, expected inputs, output behavior, and prerequisites, leaving an agent without enough information to invoke the tool confidently.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the description must explain the two required parameters, query and k. It does not mention either parameter at all. An agent cannot determine what values to pass, especially k, which has no reasonable default meaning from its name or the description.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb, 'Recall', with a clear resource, 'prior state from both chains', and an action, 'feed it into a new Algernon plan'. It is not a tautology and conveys a distinct recall-and-replan purpose, though terms like 'both chains' and 'Algernon plan' are unexplained.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance is given about when to use this tool versus sibling tools such as recall, remember, govern, or orchestrate_and_record. The intended use is only implied by the description, not stated, and there are no exclusion conditions or alternatives mentioned.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
rememberB
Write a tamper-evident record to BOTH chains at once (local Humane + hosted ArkHive). actor = the actor sentarion_birth returned (your birth name); each chain refuses an actor it has not born.
| Name | Required | Description | Default |
|---|---|---|---|
| data | No | ||
| actor | Yes | ||
| action | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations the description carries the full burden. It discloses meaningful traits: writes to BOTH chains concurrently, records are tamper-evident, and unknown actors are rejected. However it says nothing about reversibility, idempotency, rate limits, or failure behavior for a mutation tool that touches two external systems.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences, front-loaded with the core purpose followed by the actor constraint. No filler, though the inline backtick phrasing is slightly awkward.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a dual-chain, tamper-evident write with a nested `data` object and no output schema or annotations, the description covers purpose and the actor precondition but omits the shape/format of `action` and `data` and what the caller gets back. Adequate but with clear gaps.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the description must compensate for all three parameters. It only explains `actor` (the birth name from sentarion_birth), a genuinely useful clarification, while `action` and `data` (the nested payload) remain entirely undocumented.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb (Write) and resource (tamper-evident record) and specifies the dual destination (local Humane + hosted ArkHive), which is more than a generic write. It contrasts implicitly with read-side siblings like recall, though it does not name an alternative explicitly.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Gives a real precondition: actor must be the value sentarion_birth returned, and chains 'refuse an actor it has not born'. This implies the birth tool must run first, but there is no explicit when-to-use vs when-not guidance or named alternative (e.g., orchestrate_and_record).
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
sentarion_birthC
Earn an identity (Humane Law 5: born, not configured) before acting - on BOTH chains, the local chamber and hosted ArkHive. Returns actor (your birth name; it resolves to this identity on each chain) plus each chain's soul_id. Never crashes: a chamber that cannot answer is reported with a fix.
| Name | Required | Description | Default |
|---|---|---|---|
| name | Yes | ||
| covenant | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden. It does disclose return values (actor plus each chain's soul_id) and error behavior ('Never crashes: a chamber that cannot answer is reported with a fix'), which is genuinely useful. However, it omits whether the call is idempotent, whether it mutates persistent state, what permissions it needs, or what happens on repeat invocation — significant gaps for an identity-creating tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three tight sentences: purpose first, then return values, then reliability. Little waste, though the parenthetical jargon ('Humane Law 5: born, not configured') and chain branding add words without adding decision-relevant information.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
There is no output schema, no annotations, and zero schema description coverage on two required parameters, including an unexplained required array. For an operation that mints identity across two chains, the description is too thin — it should define the covenant input and the mutation/idempotency semantics.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0% and neither parameter is explained in the description. The word 'name' appears only to describe the returned actor ('your birth name'), not the required input, and the required `covenant` string array is never mentioned at all — an agent has no idea what to supply.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description conveys that this is an identity-creation/setup operation that must run before other actions, and it names the two targets (local chamber and hosted ArkHive). However, the framing is heavily metaphorical ('Earn an identity', 'Humane Law 5: born, not configured'), and without opening the schema an agent cannot tell whether this registers, mints, or merely fetches an identity. It does not differentiate itself from siblings such as sentarion_pro, sentarion_quickstart, or sentarion_doctor.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The phrase 'before acting' gives an implied precondition (call this prior to other operations), which is real usage guidance. But there are no explicit alternatives, no when-not-to-call, and no statement of what happens if identity already exists or which of the sibling setup tools (quickstart, pro) to prefer.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
sentarion_doctorA
Check that everything Sentarion needs is present and reachable (git, Algernon, local chamber, hosted ArkHive, fleet provider, Ollama, API key) and say exactly what to fix. Read-only; never prints secrets.
| Name | Required | Description | Default |
|---|---|---|---|
| timeout_s | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden and does disclose two important traits: the operation is read-only and it never prints secrets (relevant since it checks an API key). It stops short of saying whether checks hit the network, how long they take, or what happens when a component is unreachable.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
One dense sentence listing the checked components followed by a short safety clause; the purpose is front-loaded and there is no filler. Every clause adds information an agent can act on.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
There is no output schema and no annotations, so the description must carry the whole load. It does describe the intended output ('say exactly what to fix') and the safety profile, but omits the undocumented timeout_s and gives no sense of result shape or failure reporting for a seven-component check.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 0%: the single parameter timeout_s has no description in the schema, and the tool description never mentions it, so an agent gets no guidance on its meaning, unit, or whether it applies per-check or overall. The default of 3 is the only signal available.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb ('Check') plus an explicit resource ('everything Sentarion needs'), and enumerates the concrete dependencies verified (git, Algernon, chamber, ArkHive, fleet provider, Ollama, API key). This lets an agent separate it from siblings like verify, worktree, or sentarion_quickstart without opening a schema.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Usage is only implied: the diagnostic framing ('say exactly what to fix') suggests running it when something is broken or before setup, but no explicit when-to-use, ordering relative to sentarion_quickstart/sentarion_birth, or exclusions are stated. Adequate but leaves the routing decision to inference.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
sentarion_proC
Sentarion v2 — the paid upgrade: in-process (no per-call subprocesses), concurrent two-chamber gate with inferred risk flags + stored policies, {{id}} data-flow dispatch, signed audit manifests, adversarial multi-agent code review, worktree sandbox with diffs, real cost estimates, progress + background jobs. Free 0.x stays whole. Details + trial key: https://inboxaxe.com/mcp
| Name | Required | Description | Default |
|---|---|---|---|
| No | optional — supply it to receive a free 14-day v2 trial key | ||
| topic | No | optional — what v2 adds to the capability you are using right now |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full behavioral burden. It advertises v2 capabilities such as in-process execution, audit manifests, and background jobs, but does not disclose what happens on invocation: side effects, permissions, payment obligations, data handling, rate limits, or return behavior. The feature list is not a substitute for operational transparency.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a long, promotional feature dump followed by fragments. It front-loads the product name but buries any actionable purpose at the end, and most claims are difficult for an agent to map to invocation behavior. It is not structured for quick tool selection.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With no output schema and no annotations, the description should clarify return values and side effects. Instead, it does not explain what the topic enum changes, whether email triggers external communication, or what 'Details + trial key' means operationally. It is too incomplete for confident invocation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, and both optional parameters are already documented in the schema. The description repeats the trial-key and topic context but adds no syntax, format, or behavioral meaning beyond what the schema already provides. Baseline 3 is appropriate when the schema does the heavy lifting.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with 'Sentarion v2 — the paid upgrade' and then lists features, but it never states a specific action the tool performs. It does not say whether calling it returns a trial key, activates v2, shows details, or checks status. This leaves the tool's purpose vague and largely tautological with the product name.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is no explicit guidance on when to use this tool versus its many siblings. 'Free 0.x stays whole' hints at a paid/free distinction, but it does not identify alternatives or conditions for selection. Optional email and topic parameters imply trial-key/interest use cases, but the agent is left to infer them.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
sentarion_quickstartC
Canonical, runnable examples for every Sentarion capability: plan a feature, fan out research, dispatch with dependencies, use a worktree, remember a result, replan from memory.
| Name | Required | Description | Default |
|---|---|---|---|
| topic | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full disclosure burden. It does not say whether 'runnable examples' are returned as text, executed server-side, or have side effects, nor whether the call is safe/read-only. This is a meaningful gap for a zero-annotation tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single front-loaded sentence enumerating the capabilities, with no filler. Efficient, though the enumeration is essentially restating the enum options rather than adding information.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With no output schema, no annotations, and an optional param whose default behavior is unstated, the description does not explain the return shape (text? example objects?) or default selection. For a discoverability/quickstart tool, that leaves key questions unanswered.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0% and the single 'topic' param has no documentation. The description merely repeats the six enum values verbatim, adding no semantics about what each topic yields or what happens if 'topic' is omitted (it is optional). Marginal value over the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description identifies the resource (canonical runnable examples) and enumerates the capabilities covered, which partly distinguishes it from siblings like recall or worktree. However, there is no clear verb — it is ambiguous whether the tool returns documentation, executes examples, or scaffolds code. An agent cannot confidently tell what it gets back.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is no guidance on when to call this versus the many concrete siblings (orchestrate_and_record, dispatch_with_dependencies, recall_and_replan). It never says 'use this first to learn the API' or 'use this instead of X', so routing relies entirely on the agent inferring from the name.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
verifyA
Prove BOTH audit chains (local Humane + hosted ArkHive) are unbroken.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description discloses that the tool proves unbroken-ness of both chains, implying a verification/read-only behavior. Without annotations, it carries the burden, but it doesn't disclose what happens on failure (e.g., error vs. false return), whether it is purely read-only, or if it triggers any repair/recovery actions. It's adequate but incomplete.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single sentence, direct, and front-loads the action. It wastes no words and conveys the essential scope. Slight minus for being terse but effective.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a zero-parameter verification tool with no output schema, the description states what it proves but doesn't specify the success/failure return semantics, how the result is presented, or whether it makes any changes. Given the tool's simplicity, this is a minor gap, making it adequately complete but not fully comprehensive.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool has zero parameters and the schema is empty. The description doesn't need to explain parameters; baseline 4 for zero params is appropriate. It also accurately reflects the tool's scope.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb ('Prove') and names the exact resource/scope ('BOTH audit chains (local Humane + hosted ArkHive)'), making it clear this tool verifies chain integrity. It doesn't explicitly distinguish from siblings, but no sibling name overlaps with audit verification, so it's sufficiently clear.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies the tool should be used when there is a need to confirm both audit chains are unbroken, which provides adequate context. However, it doesn't explicitly state when not to use it, mention any prerequisites, or name alternative tools for related but different checks.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
worktreeA
Git-worktree sandbox skill: run dispatched work in an isolated worktree so it never touches the live checkout. action=create|list|remove. create/remove are two-chamber-governed; list is read-only.
| Name | Required | Description | Default |
|---|---|---|---|
| base | No | create: base ref (default HEAD) | |
| path | No | create: explicit worktree dir (optional) | |
| force | No | remove: allow uncommitted changes | |
| action | Yes | ||
| branch | No | create: new branch name | |
| repo_path | Yes | path to the git repo | |
| delete_branch | No | remove: also delete this branch | |
| worktree_path | No | remove: worktree dir to remove |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description must carry the behavioral burden. It discloses important traits: isolation from the live checkout, read-only list behavior, and that create/remove are governed. However, 'two-chamber-governed' is unexplained jargon, and details about side effects, branch deletion, or force behavior are absent.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is compact and front-loads the key behavior (isolated worktree) before listing actions. The two sentences contain no filler. However, the phrase 'two-chamber-governed' is opaque and could be clearer without adding length.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The tool has 8 parameters, no output schema, and no annotations. The description gives a good high-level summary and names the actions, but does not explain per-action parameters, return values, or the actual 'two-chamber-governed' mechanism. The rich schema compensates partly, but not fully.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is high at 88%, so the parameters are already well documented in the input schema. The description adds only the action enum grouping, no additional meaning about base, branch, force, delete_branch, or worktree_path. The high coverage keeps this at baseline 3.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly identifies the tool's purpose: it runs dispatched work in an isolated Git-worktree sandbox, and explicitly enumerates the three actions (create, list, remove). This is a specific verb+resource statement that distinguishes it from the unrelated sibling tools.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides clear context for when to use the tool—when you need to run work in isolation and avoid touching the live checkout. It also distinguishes read-only usage (list) from governed mutations (create/remove). It does not name alternative tools or explicit exclusions, but the usage context is sufficiently clear.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
3 tool updates
v0.2.2- Added
sentarion_doctor - Changed
sentarion_pro2 fields changed- added
Input schema / properties / emailAdded value: +{ + "description": "optional — supply it to receive a free 14-day v2 trial key", + "type": "string" +} - added
Input schema / properties / topicAdded value: +{ + "description": "optional — what v2 adds to the capability you are using right now", + "enum": [ + "worktree", + "dispatch", + "govern", + "memory", + "review", + "jobs" + ], + "type": "string" +}
- Added
sentarion_quickstart
11 tool updates
v0.2.1- First observed
cost_estimate - First observed
dispatch_with_dependencies - First observed
govern - First observed
orchestrate_and_record - First observed
recall - First observed
recall_and_replan - First observed
remember - First observed
sentarion_birth - First observed
sentarion_pro - First observed
verify - First observed
worktree
TDQS
Scored across 13 tools
Most tools target distinct Sentarion concepts, but several boundaries blur: govern vs. orchestrate_and_record vs. dispatch_with_dependencies overlap around gated orchestration, recall vs. recall_and_replan differ only by replanning, and verify vs. sentarion_doctor both diagnose chain/system health. Descriptions help, but an agent could still hesitate between several pairs.
All names are snake_case and readable, but the convention is mixed: some are bare verbs (govern, recall, verify, remember), some are verb_noun compounds, and several use a sentarion_ prefix while others do not. The pattern is not predictable across the set.
13 tools is a reasonable size for a governance, audit, and orchestration server. However, sentarion_pro and sentarion_quickstart are informational/promotional rather than core operational tools, slightly inflating the effective surface.
The core lifecycle is well covered: birth/identity, govern, plan/dispatch, remember, recall, verify, worktree sandboxing, and diagnostics. Minor gaps remain, such as policy management, audit log query/export beyond recall, and task cancellation/status operations that are only hinted at in sentarion_pro.
Maintenance
Related MCP Connectors
Multi-agent governance: task orchestration, compliance, decision validation, and ML predictions.
Control plane for autonomous software labor. Agents claim objectives over MCP with audit trail.
Pre-execution governance for AI agents. Deterministic PASS/FAIL/REVIEW verdicts, replayable proof.
Agent-native collaboration network: orchestrate a team of long-running agents from any MCP client.
Related MCP Servers
- FlicenseNot gradedqualityAmaintenanceProvides a trust and governance layer for AI agents, enabling secure API access, credential vaulting, paid execution with human approval, and automatic call resume.5 npm2-
- AlicenseAqualityAmaintenanceGoverned agent execution gateway for LLM workflows, providing deterministic FSM-based execution, audit trails, and idempotency guarantees via MCP.5MIT
- AlicenseNot gradedqualityFmaintenanceOrchestrates persistent task graphs and enforces approval policies for MCP-driven agent workflows, coordinating with Agents Gateway for execution.MIT
- AlicenseNot gradedqualityBmaintenanceEnables autonomous multi-agent orchestration using directed acyclic graph workflows to interact with external developer infrastructure such as Git, Postgres, and Docker through safety-gated MCP servers.Apache 2.0