Ketan-OS MCP Server
Click on "Install Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@Ketan-OS MCP ServerSnapshot the workspace and run the tests with rollback on failure"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
Ketan-OS πͺ (ΰ€ΰ₯ΰ€€ΰ€¨)
The Transactional Runtime for AI Agents
π± Origin & Philosophy
"Aham ΔtmΔ guαΈΔkeΕa sarva-bhΕ«tΔΕaya-sthitaαΈ₯"
β Bhagavad Gita, Chapter 10, Verse 20"I am the Self, O Gudakesha, seated in the hearts of all beings.
I am the beginning, the middle, and the end of all beings."
Ketan (ΰ€ΰ₯ΰ€€ΰ€¨) literally means Banner, Beacon, or Dwelling in Sanskrit β the fixed, unmovable point of reference from which all navigation begins.
AI agents perform complex, multi-step actions across files, commands, and external tools β but they lack transaction semantics. When an agent writes a malformed file, executes a destructive shell command, or acts on stale assumptions, standard agent frameworks have no rollback mechanism.
Ketan-OS provides the transactional substrate for AI agents:
BEGIN β WAL JOURNAL β VERIFY β SANDBOX EXEC β COMMIT / ROLLBACK / COMPENSATEBy wrapping tool execution in content-addressed state snapshotting, durable WAL journal persistence, container sandbox isolation, pre-flight assertion guards, causal execution provenance, and prompt contradiction pruning, Ketan-OS makes agent tool execution safe, reversible, and debuggable.
Related MCP server: uacos
π Core Architectural Subsystems
Subsystem | Component | What Ketan-OS Does |
1. Transactional Workspace Recovery |
| Takes incremental, content-addressed workspace snapshots using SHA-256 blob deduplication ( |
2. Durable Write-Ahead Journal (WAL) |
| Synchronously appends transaction events ( |
3. Execution Sandbox Engines |
| Provides isolated tool execution backends. Enforces strict canonical path confinement locally or runs commands in isolated Docker containers. |
4. System Compensation Drivers |
| Executes registered inverse operations ( |
5. Multi-Layer Pre-Flight Guards |
| Enforces strict workspace canonical path isolation ( |
6. Causal Execution Provenance DAG |
| Records tool calls, checkpoints, failures, and rollbacks into a directed acyclic graph (DAG). On failure, automatically traverses the DAG backwards to explain the execution lineage. |
7. State Belief & Fact Store |
| Tracks factual assertions about workspace state. Uses type coercion ( |
π‘οΈ Side-Effect Reversibility Matrix
Ketan-OS tracks tool operations across three distinct transaction recovery tiers:
System / Target | Reversibility Tier | Recovery Strategy |
Local Workspace Files |
| Automatic content-addressed state rollback via |
Git Repositories |
| Automated workspace restore / branch checkpoint reversion |
PostgreSQL / SQL Databases |
| Inverse transaction query or registered compensation handler |
S3 / Blob Storage |
| Object versioning rollback or compensation handler |
GitHub / AWS / Infrastructure |
| Registered API inverse call (e.g. close issue, delete resource) |
External Network APIs / Email |
| Pre-execution policy check & counterfactual failure hint |
π Formal Ketan-OS Transaction Protocol Specification
Ketan-OS formally defines the execution boundary around agent actions across four authoritative layers:
Component Layer | Persistent Storage | Role & Guarantee |
Write-Ahead Log (WAL) |
| Authoritative Transaction State Log β Synchronous |
Dual-Ledger Index |
| Checkpoint Index & Turn History β $O(1)$ append-only index mapping |
Workspace State Engine |
| Content-Addressed State Store β Incremental workspace snapshots with JSON manifests and deduplicated file blobs. |
Effect Contract Engine |
| Observable System Mutation Contract β Captures preconditions, postconditions, and compensation conflict detection. |
AGENT TRANSACTION LIFECYCLE
β
βΌ
ββββββββββββββββββββββββββββββββββββ
β WAL Journal (.ketan/journal) β
β TX_BEGIN β TX_EFFECT β COMMIT β
ββββββββββββββββββ¬ββββββββββββββββββ
β
ββββββββββββββββββ΄ββββββββββββββββββ
β Dual-Ledger (.ketan/ledger) β
β Hash-Chained State Commitment β
ββββββββββββββββββ¬ββββββββββββββββββ
β
ββββββββββββββββββ΄ββββββββββββββββββ
β ShadowFS (.ketan/snapshots) β
β Manifest & Blob Storage β
ββββββββββββββββββ¬ββββββββββββββββββ
β
ββββββββββββββββββ΄ββββββββββββββββββ
β Effect Contract Engine β
β Pre/Postcondition Verification β
ββββββββββββββββββββββββββββββββββββποΈ System Architecture
graph TD
subgraph AgentLayer [" π€ Agent Execution Layer "]
LLM["LLM Agent Loop
OpenAI β’ Claude β’ LangGraph β’ AutoGen"]
MCP["π FastMCP Server
Claude Code Integration"]
Wrapper["π‘οΈ KetanAgentWrapper
Tool Call Interceptor"]
LLM -->|Tool Call| Wrapper
MCP -->|Safe Tool Execution| Wrapper
end
subgraph CoreEngine [" πͺ Ketan-OS Transactional Substrate "]
Harness["πͺ KetanHarness
Thread-Safe Coordinator"]
subgraph WALJournal [" Durable WAL Journal "]
Journal["π TransactionJournal
.ketan/journal.jsonl Persistence"]
end
subgraph PreFlight [" Pre-Flight Guard Layer "]
Verifier["π‘οΈ InvariantVerifier
Canonical Path Confinement
Symlink Guard + AST & Safety Rules"]
end
subgraph Sandboxes [" Execution Sandbox Engines "]
Sandbox["π¦ Local / Docker Sandbox Engine
Path Confinement & Container Isolation"]
end
subgraph StorageLedger [" Dual-Ledger Substrate "]
Ledger["π KetanLedger
Checkpoint & Reversibility Registry"]
ShadowFS["πΎ KetanShadowFS
Content-Addressed Workspace Recovery"]
Ledger --> ShadowFS
end
subgraph Cognition [" State Belief Layer "]
Epistemic["π§ EpistemicBeliefEngine
Runtime Fact Store &
Prompt Contradiction Pruning"]
end
subgraph CTGSubsystem [" Causal Provenance Engine "]
CTG["𧬠KetanTraceGraph
Causal Execution Provenance DAG"]
RCA["π Provenance Analyzer
Execution Lineage Explanation"]
CTG --> RCA
end
subgraph TimeTravel [" Transaction Recovery & Compensation "]
Rollback["β±οΈ Rollback Controller
Workspace State Reversion"]
CompDrivers["π System Compensation Drivers
Git & SQL Inverse Actions"]
Counterfactual["π‘ Counterfactual Engine
Diagnostic Hint Injector"]
Rollback --> CompDrivers
CompDrivers --> Counterfactual
end
end
Wrapper -->|"β Intercept"| Harness
Harness -->|"β‘ WAL Record TX_BEGIN"| Journal
Journal -->|"β’ Pre-flight"| Verifier
Verifier -->|"β£ Pre-Flight Pass"| Epistemic
Epistemic -->|"β€ Checkpoint"| ShadowFS
ShadowFS -->|"β₯ Sandbox Exec"| Sandbox
Sandbox -->|"β¦ Execute Tool"| Execution["βοΈ Tool Execution"]
Verifier -.->|Path / Syntax / Safety Fail| Rollback
Execution -->|Crash / Exception| Rollback
Execution -->|Success| Commit["π’ WAL Commit & Record"]
Commit --> CTG
Commit --> Ledger
Rollback -->|"β§ Revert Workspace"| ShadowFS
Rollback -->|"β¨ Execute Compensations"| CompDrivers
Rollback -->|"β© Record Failure Node"| CTG
Counterfactual -->|"βͺ Inject Hint"| LLM
classDef agent fill:#f3e8ff,stroke:#7c3aed,stroke-width:2px,color:#1e1b4b
classDef core fill:#e0f2fe,stroke:#0284c7,stroke-width:2px,color:#0c4a6e
classDef storage fill:#d1fae5,stroke:#059669,stroke-width:2px,color:#064e3b
classDef rollback fill:#ffe4e6,stroke:#e11d48,stroke-width:2px,color:#881337
classDef ctg fill:#fef3c7,stroke:#d97706,stroke-width:2px,color:#78350f
classDef exec fill:#f0fdf4,stroke:#16a34a,stroke-width:2px,color:#14532d
class LLM,Wrapper,MCP agent
class Harness,Verifier,Epistemic,Journal,Sandbox core
class Ledger,ShadowFS storage
class Rollback,CompDrivers,Counterfactual rollback
class CTG,RCA ctg
class Execution,Commit execβ‘ Quickstart
from ketan import KetanHarness, KetanAgentWrapper
# 1. Initialize Ketan-OS for your project workspace
harness = KetanHarness(workspace_dir="./my_project")
wrapper = KetanAgentWrapper(harness)
# 2. Wrap any tool with transactional protection
def write_code(args):
with open(args["filepath"], "w") as f:
f.write(args["content"])
return "File written"
safe_write = wrapper.wrap_tool("write_file", write_code)
# 3. Execute β Ketan-OS handles snapshot, pre-flight, rollback automatically
result = safe_write(
tool_args={"filepath": "main.py", "content": "def run():\n return 42\n"},
prompt_stack=[{"role": "user", "content": "Create main function"}]
)
print(result)
# β {"success": True, "result": "File written", "hint": ""}
# If content had a syntax error β {"success": False, "hint": "Fix SyntaxError on line 1..."}
# β workspace auto-rolled back cleanlyπ Claude Code FastMCP Integration
Ketan-OS ships a ready-to-use FastMCP server that gives Claude Code native tools for safe, transactional, auditable agentic coding.
1. Install
git clone https://github.com/umang-algo/ketan-os.git
cd ketan-os
uv pip install -e .2. Configure Claude Code
Add to ~/.claude/claude.json:
{
"mcpServers": {
"ketan-os": {
"command": "python",
"args": ["-m", "ketan.mcp.server", "--workspace", "/absolute/path/to/your/project"]
}
}
}π§ͺ Running Tests & Benchmarks
# Run unit test suite
uv run pytest tests/
# Run performance benchmark suite
uv run python examples/benchmark_ketan_performance.pyπ License
MIT License. Copyright (c) 2026 umang-algo.
Maintenance
Related MCP Servers
- AlicenseAqualityBmaintenanceGoverned Kubernetes operations for AI agents with 15 MCP tools, audit logging, policy engine, and safety features.55MIT
- AlicenseNot gradedqualityBmaintenanceLocal-first code intelligence and safety layer for AI coding agents. MCP server exposes dependency graph, impact analysis, and AST-compressed repo context, backed by typed local memory, patch-scope safety gates, and git-independent transaction rollback.1MIT
- FlicenseBqualityCmaintenanceMCP server for file checkpointing and undo, enabling AI agents to safely read, write, and edit files with full snapshot history and revert capabilities.10

AgentsGateofficial
AlicenseNot gradedqualityAmaintenanceEnables AI agents to securely call MCP tools with risk scoring, checkpoints, rollback, and approval workflows.134MIT
Related MCP Connectors
Cross-agent artifact workspace with provenance across Claude Code, Codex, Cursor, LangGraph.
MCP-native Trust Infrastructure for AI Agents. Persistent encrypted memory with Trust Quotient.
Deterministic reasoning stack for AI agents: simulate, decide & compute, plus cross-domain tools.
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/umang-algo/ketan-os'
If you have feedback or need assistance with the MCP directory API, please join our Discord server