agentflow-mcp
agentflow-mcp
Ein MCP-Server für Enterprise-Architektur-Wissen für die agentflow-Demo-Pipeline. Entwickelt mit FastMCP + TypeScript, bereitgestellt auf GCP Cloud Run.
Der Server stellt vier Tools bereit, die einen Architecture Agent und einen Risk Checker Agent auf kuratierten Enterprise-Mustern gründen, anstatt auf generischem LLM-Reasoning:
Tool | Called by | Returns |
| Architecture Agent | Referenzarchitekturmuster, Komponenten, Diagrammdaten |
| Architecture Agent | Plattformempfehlung mit constraint-basiertem Reasoning |
| Risk Checker Agent | Erforderliche Kontrollen, Risiko-Flags, HITL-Auslöser |
| Architecture Agent | Unternehmensidentität, Positionierung, Logo (über Brandfetch + logo.dev) |
Wie es sich einfügt
agentflow pipeline agentflow-mcp
┌──────────────────────┐ ┌───────────────────────┐
│ Qualifier Agent │ │ arch_pattern_lookup │
│ - clarifies the ask │ │ tool_selection_lookup │
└──────┬───────────────┘ │ risk_policy_lookup │
│ handoff │ brand_context_lookup │
┌──────▼───────────────┐ │ │
│ Architect Agent │──── MCP calls ───▶│ Source pack (data/) │
│ - pattern selection │ │ 102 markdown files │
│ - tool selection │◀── JSON response ─│ with YAML frontmatter │
│ - diagram rendering │ │ │
└──────┬───────────────┘ │ Brandfetch + logo.dev │
│ handoff │ (cached, additive) │
┌──────▼───────────────┐ └───────────────────────┘
│ Risk Checker Agent │──── risk_policy_lookup ──▶
│ - HITL gate trigger │◀── risk_flags, HITL ──
└──────────────────────┘Das MCP ist ein Tool-Anbieter, kein Agent-Orchestrator. Agent-Prompts und der Architekturdiagramm-Skill leben im agentflow-Projekt. Das MCP liefert strukturierte Daten; die Agenten interpretieren sie und handeln darauf basierend.
Related MCP server: MCP Architect
Schnellstart
Voraussetzungen
Node.js >= 20
(Optional) Brandfetch-API-Schlüssel und logo.dev-Schlüssel für
brand_context_lookup
Installieren und ausführen
npm install
npm run dev # stdio transport (local dev + MCP Inspector)HTTP-Transport (Cloud Run)
MCP_TRANSPORT=http-stream PORT=8080 npm run dev
# agentflow-mcp listening on http://0.0.0.0:8080/mcpTests ausführen
npm test # 31 unit + integration tests
npm run typecheck # tsc --noEmit
npm run check # biome lint + formatUmgebungsvariablen
Kopieren Sie .env.example in .env und füllen Sie die Schlüssel aus. Nur brand_context_lookup benötigt externe API-Schlüssel – die anderen drei Tools funktionieren offline aus dem Quellpaket.
Variable | Benötigt von | Zweck |
|
| Bearer-Token für die Brandfetch Brand Context API |
|
| Bearer-Token für die logo.dev Brand API |
|
| Publishable-Key für logo.dev-CDN-URLs |
| Server |
|
| Server | HTTP-Port (Standard 8080, verwendet bei |
Wenn API-Schlüssel fehlen, liefert brand_context_lookup für gecachte Domains zwischengespeicherte Antworten oder für ungecachte Domains eine saubere „Nicht verfügbar“-Antwort. Die anderen drei Tools funktionieren normal weiter.
Tools
arch_pattern_lookup
Ordnet eine Enterprise-Anfrage einem kuratierten Referenzarchitekturmuster zu.
Eingabe:
{
"industry": "media_agency",
"data_stack": ["BigQuery", "Snowflake"],
"cloud": "GCP",
"constraints": ["SAML SSO", "EU data residency", "cross-client governance"],
"latency": "batch"
}Ausgabe:
{
"pattern_id": "media_agency_audience_measurement",
"architecture_summary": "...",
"recommended_components": ["BigQuery", "Snowflake", "SAML SSO", "GCP EU Region"],
"data_zones": ["bronze", "silver", "gold"],
"integration_notes": ["..."],
"confidence": 0.87,
"diagram_data": {
"components": [{ "name": "BigQuery", "type": "database", "sublabel": "...", "zone": "gold" }],
"connections": [{ "from": "Users", "to": "SAML SSO", "label": "OAuth 2.0", "style": "dashed" }],
"boundaries": [{ "label": "GCP EU Region", "type": "region" }]
},
"source_references": [{ "path": "data/patterns/...", "title": "...", "source_url": "..." }]
}Matching-Logik: Deterministisch, regelbasiert – Branchen-Übereinstimmung (40 %) → Datenlack-Überlappung (30 %) → Constraint-Abdeckung (30 %). Kuratierte Übereinstimmungen (Konfidenz >= 0.85) enthalten diagram_data und Quellreferenzen. Schwache Übereinstimmungen fallen auf ein generisches Enterprise-AI-POC-Muster mit Konfidenz < 0.5 zurück.
tool_selection_lookup
Empfiehlt eine Plattform anhand von Workload, Datenlack, Constraints und throughLatzenz.
Eingabe:
{
"use_case": "AI-powered patient insights",
"data_stack": ["Databricks"],
"constraints": ["HIPAA", "PHI", "US data residency"],
"latency": "batch"
}Ausgabe:
{
"recommended_platform": "Databricks",
"cloud_fit": "Azure or AWS",
"reasoning": "Strong lakehouse fit for healthcare AI with HIPAA-compliant governance...",
"alternatives": [{ "platform": "Snowflake", "rationale": "..." }, { "platform": "BigQuery", "rationale": "..." }]
}risk_policy_lookup
Liefert branchenspezifische Risiko- und Governance-Prüfungen, einschließlich HITL-Auslösern für regulierte Daten.
Eingabe:
{
"industry": "healthcare",
"data_classification": ["PHI", "PII"],
"region": "US",
"deployment": "cloud",
"constraints": ["HIPAA"]
}Ausgabe:
{
"required_controls": ["RBAC", "audit logs", "data lineage", "SAML SSO"],
"risk_flags": ["prompt leakage", "overbroad analyst access"],
"hitl_required": true,
"review_reason": "PHI access requires human approval before final architecture signoff"
}HITL wird für regulierte Datentypen (PHI, PII, regulierte Finanzdaten) ausgelöst – mit einer menschenlesbaren review_reason.
brand_context_lookup
Ruft umfassenden Unternehmenskontext von Brandfetch und ein Logo von logo.dev ab – mit mehrschichtigem aufgebautem Caching.
Eingabe:
{
"domain": "havas.com"
}Ausgabe:
{
"company_name": "Havas",
"domain": "havas.com",
"industry_hint": "media_agency",
"description": "...",
"tags": ["advertising", "marketing", "media"],
"positioning": { "value_proposition": "...", "target_audience": "...", "products_and_services": "..." },
"brand": { "voice": "...", "style": "..." },
"logo_url": "https://...",
"confidence": 0.85
}Caching-Ebenen: (1) Brandfetch cachedOnly=true für sofortige Cache-Only-Abfragen, (2) lokaler Datei-Cache mit TTL. Wiederholte Abfragen liefern gecachte Daten, ohne das API-Kontingent zu verbrauchen. Der Wechsel zu „not found“ ist elegant, wenn APIs nicht erreichbar sind.
Quellpaket
Das Verzeichnis data/ enthält 102 Markdown-Dateien mit strukturiertem YAML-Frontmatter, organisiert nach:
data/
├── industry/ # Industry-specific architecture notes
├── vendors/ # Vendor documentation (GCP, AWS, Azure, Snowflake, Databricks)
└── patterns/ # Curated reference architecture patterns (4 demo scenarios)Frontmatter-Felder: type, title, source_url, vendor, industry, data_stack, cloud, constraints, compliance, region, data_zones, latency, pattern_id, architecture_summary, recommended_components, integration_notes, confidence_baseline, diagram_data.
Das Quellpaket wird beim Serverstart in einen In-Memory-Index geladen, keyed.based. auf Branche, Daten-Stack, Constraints und pattern_id.
Demo-Szenarien
Szenario | Branche | Pattern ID |
Medienagentur-Zielgruppenmessung |
|
|
Healthcare-Patienteneinblicke |
|
|
Retail-Lakehouse-Personalisierung |
|
|
FSI-Governance-Copilot |
|
|
Deployment
Docker
docker build -t agentflow-mcp .
docker run -p 8080:8080 agentflow-mcpGCP Cloud Run
gcloud run deploy agentflow-mcp \
--source . \
--region run.googleapis.com \
--port 8080 \
--set-env-vars "MCP_TRANSPORT=http-stream" \
--set-secrets "BRANDFETCH_API_KEY=brandfetch-api-key:latest,LOGO_DEV_SECRET_KEY=logo-dev-secret-key:latest,LOGO_DEV_PUBLISHABLE_KEY=logo-dev-publishable-key:latest"Die vollständige Service-Konfiguration ist in cloud-run.yaml zu sehen.
Google App Engine
Führt den Build-Schritt: Kompilieren Sie zuerst lokal und stellen erst dann bereit:
npm run build # compile src/ -> dist/
# (Optional) Warm brand cache for demo domains before deploy
npx tsx scripts/brand-cache-warm.ts
gcloud app deploy # deploys with dist/ and data/ includedapp.yaml setzt MCP_TRANSPORT=http-stream und herunterunterskaliert bei Nichtauslastung auf null (kostet in einer Demo niedriger). App Engine setzt PORT automatisch – der Server liest es bereits.
Für Geheimnisse nutzen Sie den Secret Manager:
# Create secrets
gcloud secrets create brandfetch-api-key --data-file=<(echo -n "$BRANDFETCH_API_KEY")
gcloud secrets create logo-dev-secret-key --data-file=<(echo -n "$LOGO_DEV_SECRET_KEY")
gcloud secrets create logo-dev-publishable-key --data-file=<(echo -n "$LOGO_DEV_PUBLISHABLE_KEY")
# Reference them in app.yaml (uncomment the includes: section)Die vollständigen Konfigurations in app.yaml und .gcloudignore.
Scripts
Scripts | Zweck |
| Prüft alle Markdown-Dateien in |
| Generiert Frontmatter für die Quellpaket-Dateien |
| Überprüft, dass alle vier über die MCP-Tool-Sammlung erkennbar sind |
| Pre-populiert den Brand-Cache für die vier Demo-Domains |
npx tsx scripts/validate-source-pack.ts # validate source pack
npx tsx scripts/mcp-list-check.ts # verify tool discovery
npx tsx scripts/brand-cache-warm.ts # warm brand cacheTesten mit dem MCP Inspector
npx @modelcontextprotocol/inspector npm run devDadurch wird die Oberfläche des MCP Inspector gestartet, in der Sie Tools interaktiv aufrufen und die Antworten verifizieren können.
Projektstruktur
agentflow-mcp/
├── src/
│ ├── index.ts # MCP server entry point (stdio + http-stream)
│ ├── tools/
│ │ ├── archPatternLookup.ts # Pattern matching + confidence scoring
│ │ ├── toolSelectionLookup.ts # Platform recommendation
│ │ ├── riskPolicyLookup.ts # Risk/governance checks + HITL
│ │ └── brandContextLookup.ts # Brandfetch + logo.dev with caching
│ ├── data/
│ │ ├── loader.ts # Source pack parser + in-memory index
│ │ ├── brandfetchClient.ts # Brandfetch Brand Context API client
│ │ ├── logoDevClient.ts # logo.dev Brand API client
│ │ └── brandCache.ts # Local file cache with TTL
│ └── types/
│ ├── source.ts # Source pack entry types
│ ├── arch-pattern.ts # arch_pattern_lookup types
│ ├── tool-selection.ts # tool_selection_lookup types
│ ├── risk-policy.ts # risk_policy_lookup types
│ └── brand-context.ts # brand_context_lookup types
├── data/ # Source pack (102 markdown files)
│ ├── industry/
│ ├── vendors/
│ └── patterns/
├── tests/ # Unit + integration tests
├── docs/ # PRD, MCP overview
├── scripts/ # Validation + cache warming scripts
├── openspec/ # OpenSpec specs (4 capabilities)
│ ├── specs/ # Main specs (synced from archived change)
│ └── changes/archive/ # Archived change proposals
├── Dockerfile # Multi-stage build for Cloud Run
├── cloud-run.yaml # Cloud Run service config
└── package.jsonTech-Stack
Laufzeitumgebung: Node.js >= 20
MCP-Framework: FastMCP v4
Sprache: TypeScript (strict)
Validierung: Zod v4
Linting/Formatierung: Biome
Testausführung: Node.js-eigener Test Runner
Deployment: Docker + GCP Cloud Run
OpenSpec
Dieses Projekt verwendet OpenSpec für die
spezifikationsgesteuerte Entwicklung. Die vier Tool-Fähigkeiten sind unter openspec/specs/ beschrieben:
arch-pattern-lookup(7 requirements)brand-context-lookup(6 requirements)risk-policy-lookup(4 requirements)tool-selection-lookup(5 requirements)
Validieren Sie die Specs mit:
openspec validate --specs
openspec doctorLizenz
MIT
Available Tools
4 toolsarch_pattern_lookupA
Match an enterprise ask (industry, data stack, cloud, constraints) to a curated reference architecture pattern with components, data zones, integration notes, confidence, and diagram-ready data.
| Name | Required | Description | Default |
|---|---|---|---|
| cloud | No | Cloud preference, e.g. GCP, AWS, Azure | |
| latency | No | Latency expectation: batch or real-time | |
| industry | Yes | Industry code, e.g. media_agency, healthcare, retail, financial_services | |
| data_stack | Yes | Candidate platforms/tools, e.g. ["BigQuery", "Snowflake"] | |
| constraints | Yes | Governance/compliance constraints, e.g. ["SAML SSO", "EU data residency"] |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the burden of explaining behavior. It discloses that the result is a curated, confidence-scored pattern rather than an unranked list. It does not detail no-match behaviors or side-effect safety, but the lookup-oriented naming and output-focused description make behavior reasonably transparent.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is one information-dense sentence with no filler. It front-loads the core matching behavior, then lists the key outputs. It is compact and scannable, though the full list of outputs makes the sentence slightly long.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a lookup-oriented tool with no output schema and no annotations, the description adequately explains what inputs shape the match and what the caller receives. It does not cover edge cases like no matching pattern, confidence representation, or return structure, preventing a 5.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
All five parameters are already described in the schema with 100% coverage, so a baseline 2 is appropriate. The description only lightly reinforces the input dimensions and does not add material relationships or format details beyond the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb, 'Match', and a resource, 'reference architecture pattern', and identifies the output categories it returns. This clearly distinguishes it from sibling lookup tools like brand_context_lookup and tool_selection_lookup, which target different lookups.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description clearly frames the use case: matching an enterprise ask with industry, data stack, cloud, and constraints to a reference architecture. It does not explicitly exclude or compare against sibling tools, but the intended context is clear enough for an agent to select it appropriately.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
brand_context_lookupA
Retrieve company brand context (name, description, tags, positioning, brand voice/style, logo URL) for a resolved domain, from Brandfetch plus logo.dev. Serves cached data when the sources are unavailable. Resolve partial company names to a domain before calling.
| Name | Required | Description | Default |
|---|---|---|---|
| domain | Yes | Resolved company domain, e.g. "havas.com" |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are present, so the description carries the burden. It adds useful behavioral context: the tool sources from Brandfetch plus logo.dev, and serves cached data when sources are unavailable. It could say more about return behavior or failure handling, but this is solid disclosure for a simple retrieval tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three short sentences with no wasted words. The main purpose is front-loaded, parameters/sources/usage-prerequisite are each given their own concise sentence.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description is sufficient for a simple one-parameter read tool. It names the output fields, the source, the fallback cache behavior, and the required input format. A minor gap is the lack of any statement about what happens when no brand context exists for the domain.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so baseline is 3. The description adds meaning by emphasizing that the domain must be a resolved company domain rather than a partial name, which goes beyond the schema's simple 'string' definition.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb ('Retrieve'), a clear resource ('company brand context'), and enumerates the exact fields returned. It also specifies the source and input requirement ('resolved domain'), which clearly separates it from the sibling tools by topic.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It gives a clear prerequisite: resolve partial company names to a domain before calling. It does not explicitly name alternatives or state when not to use it, but the domain-required condition provides sufficiently clear usage context.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
risk_policy_lookupA
Return required controls, risk flags, and human-in-the-loop triggers for an architecture based on industry, data classification (PHI, PII, regulated financial data), region, deployment model, and governance constraints.
| Name | Required | Description | Default |
|---|---|---|---|
| region | Yes | Data region, e.g. US or EU | |
| industry | Yes | Industry, e.g. healthcare, financial_services, media_agency, retail | |
| deployment | Yes | Deployment model: cloud, on-prem, or hybrid | |
| constraints | No | Governance constraints from the architecture brief, e.g. ["cross-client governance", "EU data residency"] | |
| data_classification | Yes | Data classifications in scope, e.g. ["PHI", "PII"], ["regulated financial data"], ["non-sensitive"] |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
There are no annotations, so the description carries the full burden. It surfaces that the tool computes/returns policy-derived values and maps inputs to outputs, which is genuinely informative, but it doesn't say whether the data is static, whether lookups can return empty/no-match results, or whether governance constraints are validated at runtime. 3 is fair.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
One dense sentence with a heavy enumerative tail, but every phrase contributes. Front-loads the return value ('required controls, risk flags...') before diving into the lookup axes. Slightly long but not bloated; the enumeration is useful.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a lookup tool with 5 params, 100% schema coverage, and no output schema, the description covers the key decision context (what it returns and on what basis). It doesn't state the output shape, but with no output schema that gap is mostly acceptable, though adding 'returns a list of policy items' would make it complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema already documents every parameter with 100% coverage, so the baseline is 3 per the rubric. The description clarifies the semantic intent behind the parameters as a group (industry/classification/region/deployment drive policy), but adds no individual parameter details beyond the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb ('Return') and a specific resource ('required controls, risk flags, and human-in-the-loop triggers for an architecture') and enumerates the dimensions the lookup is based on, clearly distinguishing it from sibling lookup tools such as brand_context_lookup or arch_pattern_lookup. The scope is explicit enough that an agent can tell when to reach for this tool instead of the others.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description clearly implies this tool is for policy/risk-oriented lookups and lists the exact inputs that drive the lookup, which gives strong context on when to use it. The only thing missing is an explicit 'use this instead of X when...' statement, but the sibling names (brand_context_lookup, arch_pattern_lookup) are distinguishable from the plain wording.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
tool_selection_lookupA
Recommend a data platform based on use case, data stack, constraints (HIPAA, PII, data residency, SSO/SAML), and latency needs — with cloud fit, reasoning, and alternatives.
| Name | Required | Description | Default |
|---|---|---|---|
| latency | No | Latency need: batch or real-time | |
| use_case | Yes | What the enterprise wants to build, e.g. "AI-powered patient insights" | |
| data_stack | Yes | Platforms/tools in play or under consideration | |
| constraints | Yes | Governance/compliance constraints |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations exist, so the description carries the burden. It discloses that the tool will return 'cloud fit, reasoning, and alternatives,' which gives some behavioral shape, but it does not clarify whether it performs external calls, returns mock versus curated answers, or has any side effects. It describes inputs/outputs but not deeper behavior.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single, dense sentence lists all inputs and outputs without waste. It front-loads the verb and target, and every phrase earns its place. The semi-colon-separated output list is clear to parse.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description is sufficient for an agent to prepare the required fields and know what kind of response to expect (recommendation with cloud fit, reasoning, alternatives). Since there is no output schema, describing the response at this level helps. It could add the expected result shape or a mention of staleness provenance, but this is minor.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the baseline is 3. The description adds meaning by expanding 'constraints' with examples (HIPAA, PII, data residency, SSO/SAML) and by flagging latency as an additional decision factor. This goes beyond the literal schema descriptions and helps an agent populate parameters accurately.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description names a concrete verb, 'Recommend', and a specific resource, 'data platform', and enumerates the decision inputs and outputs (cloud fit, reasoning, alternatives). This clearly differentiates the tool from siblings like arch_pattern_lookup and risk_policy_lookup, which concern different domains.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explicitly frames when to use this tool: when the agent needs a data platform recommendation given use case, data stack, and constraints. It doesn't explicitly mention alternative tools or exclusions, but the context is clear enough. Sibling names also make the separation obvious.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
4 tool updates
v0.1.0- First observed
arch_pattern_lookup - First observed
brand_context_lookup - First observed
risk_policy_lookup - First observed
tool_selection_lookup
TDQS
Scored across 4 tools
Each tool targets a distinct outcome: architecture pattern, brand info, platform recommendation, and risk controls. There is some conceptual overlap between architecture patterns and tool/risk recommendations, but the descriptions make their outputs clear enough to avoid major misselection.
All tool names follow the same clear `entity_lookup` pattern in lowercase snake_case: arch_pattern_lookup, brand_context_lookup, tool_selection_lookup, risk_policy_lookup. This makes the server feel uniform and predictable.
With only 4 focused lookup tools, the server is tightly scoped and does not introduce redundancy. Each tool serves a distinct functional need, making this an appropriate small toolset.
The server covers the major lookup categories it appears designed for: architecture, brand, platform, and policy. It is slightly limited by the lack of any listing or browsing endpoint for available patterns/platforms, but for a retrieval-oriented tool set the core coverage is strong.
Maintenance
Related MCP Connectors
Shared business knowledge, tools and skills for AI agents, with citations and approval controls.
Shared, permission-aware company context for AI agents, with provenance, approvals and audit.
Cloud or self-hosted knowledge for AI agents: hybrid search, reranking, GraphRAG, scoped MCP tools.
Your company's brain for AI agents. Cited, permission-aware knowledge across every system.
Related MCP Servers
AlicenseAqualityCmaintenanceProvides a persistent memory and governance layer that allows AI coding agents to query documented architecture rules and validate code against team standards. It enables agents to verify compliance across categories like security and testing before suggesting changes to ensure consistency across development sessions.317MIT- AlicenseNot gradedqualityDmaintenanceProvides comprehensive architectural expertise through specialized agents, resources, and tools for generating, evaluating, and modifying architectural designs.777 npmISC
- AlicenseNot gradedqualityBmaintenanceEnables AI agents to query organizational architecture and governance constraints, returning evidence-grounded answers from documented structures.MIT
- AlicenseNot gradedqualityAmaintenanceProvides AI coding agents with an embedded knowledge graph and architecture governance tools, enabling blast radius analysis, compliance checks, and smart context extraction from codebases.Apache 2.0