Skip to main content
Glama

ONE XI™ & zeroH Public Paid Subscription MCP Suite (zeroh-mcp / onexi-mcp)

Protocol: MCP 2024-11-05 IP Protection: Sovereign Enclave Vaulted License: MIT Client

ONE XI™ & zeroH MCP is the official public Model Context Protocol (MCP) server and Python SDK for ONE XI Technologies by Aalimbooks International (onexi.tech | kutublink.com | warith.io | islamicheritagepress.com/aalimbooks).

It equips AI coding assistants, autonomous agents, and IDEs (Claude Desktop, Antigravity IDE, Cursor, Windsurf, and custom MCP hosts) with 15 deterministic MCP tools spanning open-boundary mathematical verification, ONE XI™ Paid Subscription Cloud MCPs (Quantum Circuit Compilation, 8-Gate Executable Code & HPC Auditing, KutubLink 121.8M-Word Classical Corpus Concordance, and Aalim AI / Wārith.io Scholarly Verification), and the Multi-Rail Sovereign Payment Gateway (Polar.sh + Stripe 3D-Secure, Payoneer, Meezan Bank Corporate IBAN, and Web3 USDT/USDC).

Scope Policy: Public MCP tools cover ONE XI Cloud, ONE XI Quantum Suite, ONE XI 8-Gate HPC Sandbox, KutubLink, and Aalim Books / Wārith.io. Bio/clinical tiers are retained strictly inside the payment gateway (onexi_payment_gateway) for settlement only and are not exposed as public MCP tools yet.


Architectural Highlights & IP Boundary

zeroh-mcp (onexi-mcp) operates across a strict Dual-Tier Split-Enclave & Paid Subscription Architecture:

  1. Tier 1 — Public Open-Boundary Verification & Preview Telemetry (Zero-Config Local Mode):

    • Works out-of-the-box with zero external dependencies.

    • Exact Rational Arithmetic (compute, validate_claim): Evaluates numerical expressions via Python ast and fractions.Fraction to eliminate floating-point drift and catch calculation hallucinations (12 * 12 = 145 $\rightarrow$ REJECTED_HALLUCINATION).

    • Algebraic Substitution Verification (solve_equation, verify_step): Solves equations and verifies every candidate root by exact substitution.

    • Tamper-Evident SHA-256 Step Ledger (verify_step, session_report): Tracks step-by-step reasoning chains and issues a FULLY_PROVEN cryptographic seal only when every active step in the chain is verified.

    • 8-Gate AST Code Auditing, OpenQASM Resource Estimation, Uthmānī Tashkīl / Abjad Auditing & Exact Rational Zakāh / Farāʾiḍ Verification: Runs locally with deterministic cryptographic receipts.

  2. Tier 2 — Paid Subscription Cloud Enclave (ONEXI_API_KEY + ONEXI_API_URL):

    • When configured with an active ONE XI™ Paid Subscription Key (ONEXI_API_KEY or ONEXI_LICENSE_KEY), the server unlocks full cloud enclave execution across onexi_quantum_compiler, onexi_hpc_code_sandbox, onexi_kutublink_turath, and onexi_aalim_scholar.

    • If a paid cloud action is invoked without an active subscription key, the MCP tool automatically returns SUBSCRIPTION_REQUIRED along with a 1-click Polar.sh + Stripe 3D-Secure checkout link, Payoneer B2B portal, Meezan Bank Corporate IBAN, and Web3 USDT/USDC settlement coordinates.

    • All proprietary invariant constants, closed-form equations, compiler passes, and canonical database tensors remain 100% vaulted inside the remote Sovereign Enclave.


Related MCP server: Mcp-Omega-Brain

Self-Serve Public Subscription Plans (onexi.tech)

Tier ID

Plan Name

Price (USD)

Unlocked Public MCP Capabilities

1-Click Checkout

BOOK_15_SINGLE

Single E-Book License

$15

KutubLink Single Classical Edition PDF

Checkout ($15)

BOOK_29_DIGITAL

20-Volume E-Book Collection

$29

KutubLink 20-Volume Classical Bundle

Checkout ($29)

FAST_49_PASS

ONE XI Cloud — Pro Pass

$49 / mo

Developer API, 8-Gate Code Sandbox & Aalim Scholar Cloud

Subscribe ($49/mo)

FAST_99_AUDIT

Pro Compute Pack

$99

High-Throughput Simulation & Quantum Audit Pack

Checkout ($99)

TURATH_150_SPRINT

KutubLink OCR & Corpus Credits

$150

121.8M-Word Classical Corpus Search & Manuscript OCR API

Checkout ($150)

LAB_199_PACK

ONE XI Cloud — Team License

$199 / mo

Multi-Seat Team SaaS, HPC Cloud Sandbox & API License

Subscribe ($199/mo)

CLINICAL_PILOT_250

Batch API Compute Credits

$250

High-Throughput Batch API Compute Credits

Checkout ($250)

BOOK_499_WAQF

Unlimited Cloud & Institutional Seat

$499 / mo

Unlimited ONE XI Cloud + KutubLink Institutional Library Seat

Subscribe ($499/mo)

TURATH_PILOT_1500

KutubLink Enterprise Corpus License

$1,500 / yr

Annual Full-Corpus Concordance & OpenITI/Shamela API

Subscribe ($1,500/yr)

QUANTUM_AUDIT_2500

ONE XI Quantum Compiler SDK

$2,500

Self-Serve Fault-Tolerant Quantum Circuit Compiler SDK

Checkout ($2,500)

CHIRAL_PRO_4950

ONE XI Enterprise Full-Stack License

$4,950 / yr

Annual Enterprise Full-Stack SaaS & SDK License

Subscribe ($4,950/yr)

QUANTUM_SUITE_COMPILER_SEAT_ANNUAL

ONE XI Quantum Suite Compiler Seat

$25,000 / yr

Dedicated Annual Enterprise EDA Quantum Compiler Seat

Subscribe ($25,000/yr)


Quick Start

1. Installation

git clone https://github.com/khurramcr7/zeroH-MCP.git
cd zeroH-MCP
pip install -e .

2. Configure in Claude Desktop / Cursor / Antigravity IDE

Add the following to your MCP configuration file (claude_desktop_config.json, .cursor/mcp.json, or Antigravity MCP settings):

{
  "mcpServers": {
    "onexi-zeroh-mcp": {
      "command": "python",
      "args": ["-m", "zeroh_mcp.server"],
      "env": {
        "ONEXI_API_URL": "https://onexi.tech/api",
        "ONEXI_API_KEY": "your_onexi_subscription_key_here",
        "ZEROH_API_URL": "",
        "ZEROH_API_KEY": ""
      }
    }
  }
}

Exposed MCP Tools (15 Deterministic Tools)

Tool Name

Category

Description

onexi_subscription_gate

ONE XI Paid Subscription

Verifies ONEXI_API_KEY / ONEXI_LICENSE_KEY, lists public paid MCP plans ($15–$25,000), and generates 1-click upgrade checkout links.

onexi_quantum_compiler

ONE XI Quantum Suite

Fault-tolerant quantum circuit resource estimation & cloud compilation (5.4126x invsqrt T-gate reduction, -91.34% 64-bit & -99.49% 2048-bit adder Toffoli depth reduction, -60.17% QROM Toffoli reduction; Merkle Root e8c2800b...).

onexi_hpc_code_sandbox

ONE XI Cloud Sandbox

8-Gate Python AST complexity, security, and SHA-256 code-seal auditing + paid cloud HPC execution ($49/mo / $199/mo / $499/mo).

onexi_kutublink_turath

KutubLink & Aalim Books

Uthmānī Tashkīl & Abjad auditing + paid cloud concordance search across 578 classical works (121,843,480 vocalized words), 8,598 Shamela volumes & 14,107 OpenITI texts.

onexi_aalim_scholar

Aalim AI & Wārith.io

Exact rational Zakāh ($1/40 = 2.5%$) and Farāʾiḍ inheritance verification + paid 7-Gate Translation QA (TQA) & Comparative Scholarly Cloud.

onexi_payment_gateway

Multi-Rail Payment Gateway

Manages all 16 Polar.sh + Stripe 3D-Secure checkout links ($15 to $120,000 USD, including payment-only Bio settlement tiers), Payoneer, Meezan Corporate IBAN, and Web3 USDT/USDC.

validate_claim

zeroH Guardrail

Intercepts and validates a factual, mathematical, or scientific claim (Coherence Index, Confidence Score, Deterministic Status).

verify_step

zeroH Guardrail

Submits a single reasoning or mathematical step (compute, solve, reasoning, interpretation) into the SHA-256 session ledger.

session_report

zeroH Guardrail

Seals a multi-step reasoning session (FULLY_PROVEN only if every active step is proven) and returns the SHA-256 Merkle head hash.

compute

zeroH Guardrail

Computes the exact rational fraction (numerator/denominator) and decimal value of an expression with zero floating-point drift.

solve_equation

zeroH Guardrail

Solves algebraic equations and verifies all solutions by exact substitution.

intercept_token

zeroH Enclave

Queries the remote Sovereign Enclave ledger for a canonical token/root tensor.

zk_verify_receipt

zeroH Enclave

Generates a SHA-256 cryptographic commitment receipt over a verified claim.

epistemic_consensus

zeroH BFT Quorum

Evaluates multi-agent proposals on the 4-tier BFT epistemic lattice (QATI, ZANNI_GHALIB, SHAKK, WAHM).

enclave_status

zeroH Enclave

Reports server health, active execution tier, and SOVEREIGN_VAULTED_SAFE IP protection status.


Security & Zero-Leakage Audit

Run the automated IP & Formula Non-Exposure Audit and test suite at any time:

python scripts/security_audit_no_leaks.py
pytest -v

See SECURITY_AND_IP_BOUNDARY.md for full details on how proprietary formulas remain 100% isolated inside the Sovereign Enclave and how Bio divisions are restricted to payment-only settlement.

Available Tools

9 tools
computeB

Compute the exact rational fraction and decimal value of a numeric expression using zero-drift AST rational arithmetic.

NameRequiredDescriptionDefault
exprYesMathematical expression to evaluate (e.g., '(144 / 12) + 7').

TDQS

B3.4/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations at all, the description carries the full burden, and it does disclose a meaningful trait: 'zero-drift AST rational arithmetic' tells the agent results are exact rather than floating-point. It stops short of covering failure behavior for malformed expressions, operator support, or limits on expression size, which matters for an unannotated evaluation tool.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

A single sentence that front-loads the action and ends with the distinguishing precision claim. Nothing is repeated from the title or name, and there is no filler.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a one-parameter tool with no output schema, the description is nearly sufficient: it explains both what goes in and what comes back (fraction and decimal). The only real gap is error/precision edge-case behavior, which is modest for a tool this simple.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, and the schema's own example ('(144 / 12) + 7') already illustrates the accepted syntax, so the baseline of 3 applies. The description adds the notion that the expression is parsed as an AST and evaluated rationally, but no further syntax rules beyond what the schema provides.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb (compute) and resource (a numeric expression), and goes further by naming the output shape: exact rational fraction plus decimal. It doesn't distinguish itself from the sibling solve_equation, so an agent still has to guess whether an expression with a variable belongs here or there.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description never says when to reach for this versus solve_equation or verify_step, and gives no preconditions on expression syntax. Usage must be inferred purely from the word 'numeric expression,' which is not enough given an overlapping sibling.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

enclave_statusA

Check the health, execution tier, and IP protection status of the zeroH MCP server and Sovereign Enclave bridge.

NameRequiredDescriptionDefault

No parameters

TDQS

A3.7/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden; 'Check' implies a side-effect-free read, but the description never confirms that, nor does it describe latency, network dependencies, or failure modes. It does, usefully, enumerate the three status dimensions reported, which goes beyond the (empty) structured fields.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

A single front-loaded sentence naming the action and the reported dimensions with no filler.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a zero-parameter diagnostic tool with no output schema, naming the three reported dimensions is close to sufficient. It would be ideal to know the return shape or how tier values should be interpreted, but no critical caller information is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The tool takes zero parameters, so the baseline is 4; there is nothing further the description could clarify about inputs.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb ('Check') plus the exact resources reported: health, execution tier, and IP protection status of the zeroH MCP server and Sovereign Enclave bridge. It is clearly distinguishable from sibling compute/verify tools, though it doesn't name any sibling explicitly.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Usage is only implied — an agent can infer this is the diagnostic/status probe to run before or after compute/verify work. There is no explicit 'use when' framing, no exclusions, and no mention of alternatives.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

epistemic_consensusC

Byzantine Fault Tolerant (BFT) Multi-Agent Epistemic Consensus Gate. Evaluates agent proposals across the 4-tier epistemic lattice (QATI, ZANNI_GHALIB, SHAKK, WAHM) with automatic hallucination veto.

NameRequiredDescriptionDefault
agent_idNoIdentifier of the proposing agent.
proposalYesProposed statement or calculation to evaluate.
confidenceNoReported confidence score in [0.0, 1.0].
contradictionNoMeasured contradiction evidence in [0.0, 1.0].

TDQS

C2.6/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations present, the description carries the full disclosure burden. 'Automatic hallucination veto' hints at a rejection capability, but it does not say what triggers the veto, whether the call is pure evaluation or records state, whether results are deterministic, or how a vetoed proposal surfaces. The BFT claim implies multi-agent corroboration but the single-call semantics are left unexplained.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two compact sentences, front-loaded with the tool's identity and followed by what it evaluates. Efficient, though the density of unexplained acronyms makes the brevity partly a liability rather than pure economy.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a decision-gate tool with no output schema and no annotations, the description should explain the shape of the verdict and what each lattice tier implies, since those entries drive interpretation of the result. Neither is provided, leaving an agent unable to reason about the return value or act on a rejection.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the four parameters (agent_id, proposal, confidence, contradiction) are already documented with ranges. The description adds no meaning on top of that, which is the expected baseline when the schema does the work.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose3/5

Does the description clearly state what the tool does and how it differs from similar tools?

The verb+resource are identifiable ('Evaluates agent proposals' via a consensus gate), but the core terms QATI, ZANNI_GHALIB, SHAKK and WAHM are opaque jargon with no gloss, so an agent cannot tell what the tiers mean or how the verdict is formed. It also fails to distinguish itself from the closely related siblings validate_claim and verify_step.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no statement of when this gate should be used instead of validate_claim, verify_step or compute. No prerequisites, no exclusions, and no indication of what a caller should do with the result.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

intercept_tokenC

Query the Sovereign Enclave canonical ledger for a token or root reference. Requires an authenticated Sovereign Enclave connection (ZEROH_API_URL).

NameRequiredDescriptionDefault
tokenYesToken or reference identifier to look up in the Sovereign Enclave.

TDQS

C2.6/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the full behavioral burden. It does disclose one valuable operational fact — an authenticated Sovereign Enclave connection via ZEROH_API_URL is required — and "Query" weakly implies a read. But it says nothing about whether the token is consumed/intercepted (as the name suggests), whether lookups are logged, what happens when a token is not found, or what the call returns. For a tool whose name implies a potentially sensitive operation, this is a significant gap.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two compact sentences with the operation front-loaded and the prerequisite trailing. No filler, though the second sentence is a prerequisite buried at the end when it could be stated as a gate before invocation.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With no annotations and no output schema, the description is the only source of behavioral information, and it omits what a lookup returns, whether the operation is side-effecting, and error behavior for an unknown token. Given the name implies interception, the omission of any statement about side effects is a real gap for a one-parameter tool.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100% with a single required `token` parameter, so the schema already defines it as a token or reference identifier. The description adds no format, encoding, or validity constraints (e.g., whether root references use a different syntax than tokens), so it neither compensates nor detracts. Baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose3/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a concrete verb and resource ("Query the Sovereign Enclave canonical ledger for a token or root reference"), but the tool name `intercept_token` implies interception of a token rather than a ledger lookup, which creates genuine ambiguity about what actually happens. The vendor-specific jargon ("Sovereign Enclave canonical ledger") doesn't help an agent map this to a familiar operation. It is not tautological, but the name/description mismatch keeps it below a 4.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no indication of when to use this tool versus siblings such as `enclave_status`, `validate_claim`, or `zk_verify_receipt`, all of which touch the same enclave domain. No prerequisites beyond the connection URL, no exclusions, no stated outcome. The agent must infer everything about selection.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

session_reportA

Seal and audit all steps submitted in a reasoning session. Returns FULLY_PROVEN only if every active step was deterministically proven, along with the SHA-256 Merkle head hash.

NameRequiredDescriptionDefault
sessionYesSession identifier to seal and report.

TDQS

A3.7/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full behavioral burden. It discloses the key output condition (FULLY_PROVEN only if every active step is deterministically proven) and the SHA-256 Merkle head hash, but it does not state whether sealing is irreversible, what permissions are needed, or what happens if the session is not fully proven.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is two sentences, front-loaded with the core action and immediately followed by the critical output condition and hash. Every sentence adds relevant information without redundancy.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The tool has no annotations and no output schema, so the description must convey behavioral and return details. It covers the primary success condition and one returned artifact, but leaves gaps around other possible return states, error behavior, side effects of sealing, and authentication requirements.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The input schema has 100% description coverage for the single 'session' parameter, so the schema already explains its meaning. The description does not add syntax, format, or validation details beyond what the schema provides, making the baseline 3 appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description gives a specific verb and resource: 'Seal and audit all steps submitted in a reasoning session.' It implies a distinction from step-level tools like verify_step by emphasizing all steps in a session, but it does not explicitly name or contrast with any sibling tool.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides a clear context for use: finalizing/auditing a reasoning session after steps have been submitted, with the precondition that FULLY_PROVEN requires every active step to be proven. It does not explicitly state when not to use it or name alternative tools for related operations.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

solve_equationB

Solve an algebraic equation and verify every solution by exact substitution.

NameRequiredDescriptionDefault
claimedNoOptional list of claimed solutions to check by substitution.
unknownNoVariable symbol to solve for (default: 'x').
equationYesAlgebraic equation (e.g., 'x**2 - 5*x + 6 = 0').

TDQS

B3.3/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the burden. It does disclose a meaningful behavioral trait: solutions are checked by exact substitution, not numerically. However, it says nothing about behavior on unsolvable/ambiguous equations, error cases, or what the verification result looks like.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

A single front-loaded sentence with no filler; the core action and the verification guarantee both earn their place.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With no output schema and no annotations, the description should say more about the return shape (solutions plus per-solution verification outcome) and failure modes. As-is it is adequate to call but leaves an agent guessing about the result structure.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, with equation, unknown, and claimed all documented in the schema. The description's 'verify every solution' hints at the claimed parameter but adds no format, default, or constraint details beyond what the schema already provides.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb+resource ('Solve an algebraic equation') plus an added behavior ('verify every solution by exact substitution'). It is clear enough to distinguish from siblings like verify_step or compute, but it never explicitly names or contrasts with them.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no explicit when-to-use or when-not-to-use guidance, and no mention of alternatives such as compute or verify_step. The dual solve+verify phrasing implies a use case, but the agent must infer it.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

validate_claimA

Intercept and validate a factual, mathematical, or scientific claim before presenting it. Returns Coherence Index (0.0-1.0), Confidence Score (0%-100%), and Deterministic Status (VERIFIED_COMPUTED_PASS, REJECTED_HALLUCINATION, BOUNDARY_BREACH, or NEEDS_REVIEW).

NameRequiredDescriptionDefault
claimYesThe text proposition, calculation, or claim to validate.
contextNoValidation domain or context (default: 'general_domain').

TDQS

A3.7/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden and does disclose the return surface: Coherence Index, Confidence Score, and the four Deterministic Status values. It does not state that this is a non-destructive/read-only operation or name any cost, latency, or side effects, which is the remaining gap.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two tight sentences with the action front-loaded and the return values enumerated after. Every clause carries information, though the status enum list is dense and could be structured more readably.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a two-parameter tool with no output schema, the description supplies the missing return-value detail, which is exactly its job. An agent has enough to call it and interpret results, though the absence of any safety/behavior profile is a modest gap.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so both parameters are already documented, making 3 the baseline. The description adds no semantics for 'claim' or 'context' beyond what the schema states.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb+resource: 'intercept and validate a factual, mathematical, or scientific claim' with the scoping condition 'before presenting it.' It is distinguishable from siblings like compute or solve_equation, though it never explicitly contrasts itself with verify_step or epistemic_consensus.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The phrase 'before presenting it' implies the usage moment (pre-output gating), but there is no explicit when-not guidance and no routing to alternatives such as verify_step or epistemic_consensus, which appear to overlap in purpose.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

verify_stepA

Submit a single reasoning or mathematical step to the tamper-evident SHA-256 session ledger before stating it. Supported step kinds: 'compute' {expr, value}, 'solve' {equation, claimed: {x: val}}, 'reasoning' {text}, 'interpretation' {text}.

NameRequiredDescriptionDefault
stepYesStep object containing 'kind' and kind-specific parameters.
sessionYesSession identifier for the multi-step reasoning chain.

TDQS

A3.6/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full behavioral burden. It discloses that the ledger is tamper-evident and SHA-256 based and that steps must be submitted before being stated, which is genuine context. It is silent on failure semantics (does a mismatched 'compute' value get rejected or merely recorded?), on whether sessions must pre-exist, and on the return value.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two short sentences: the action and its ordering constraint first, then a compact enumeration of the supported step kinds. Every clause carries information; nothing is padding.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a nested-object tool with no annotations and no output schema, the description should close more gaps than it does. Step payload shapes are covered well, but failure behavior, session prerequisites, and whether verification actually gates the call remain unstated.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so baseline is 3, but the description goes beyond the schema: the schema only says 'Step object containing kind and kind-specific parameters', while the description enumerates the four kinds and their exact payload shapes. That is material added meaning, though it is not structured as a real enum.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource: submit a single reasoning/math step to a tamper-evident SHA-256 session ledger. That is far more informative than the bare name 'verify_step'. It does not explicitly contrast itself with the compute or solve_equation siblings, even though its 'compute'/'solve' step kinds appear to overlap with them.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

'before stating it' gives a real timing rule: log the step before you assert it. Beyond that, there is no when-not guidance, no statement of how this differs from calling compute or solve_equation directly, and no note on what to do when a step fails verification.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

zk_verify_receiptC

Generate a cryptographic commitment receipt over a verified claim (or request an R1CS proof from a connected Sovereign Enclave).

NameRequiredDescriptionDefault
claimYesClaim text to bind into a cryptographic verification receipt.
authorityNoVerification authority label (default: 'zeroH_Public_Verifier').

TDQS

C2.9/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden. It hints at an external dependency ('connected Sovereign Enclave'), which is useful, but does not say whether the receipt is persisted, whether the enclave path is fallback or opt-in, what happens when no enclave is connected, or what permissions or latency are involved.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

A single front-loaded sentence with the primary action first and the alternate mode in parentheses. No waste, though the jargon density ('R1CS', 'Sovereign Enclave') without explanation slightly reduces immediate comprehension.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

No output schema and no annotations, so the description must explain what comes back (a receipt string? a proof blob? an ID) and how the enclave mode differs. Instead it leaves the return shape, failure modes, and mode-selection unaddressed for a tool whose output an agent likely needs to act on.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so both parameters are already documented, including the default authority label. The description adds only the 'bind into a receipt' framing, which is marginal beyond the schema; baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and artifact: generate a cryptographic commitment receipt bound to a claim, with a parenthetical alternate mode (R1CS proof via Sovereign Enclave). This distinguishes it reasonably from validate_claim and verify_step, though 'over a verified claim' is ambiguous about whether the claim must already be verified elsewhere.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance on when to call this versus validate_claim or verify_step, no prerequisites stated (must the claim be pre-validated?), and no explanation of how to choose between the default receipt path and the enclave R1CS proof path. The agent must infer everything.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

  1. 9 tool updatesv1.0.0
    • First observedcompute
    • First observedenclave_status
    • First observedepistemic_consensus
    • First observedintercept_token
    • First observedsession_report
    • First observedsolve_equation
    • First observedvalidate_claim
    • First observedverify_step
    • First observedzk_verify_receipt

TDQS

B3.1/5.0

Scored across 9 tools

Disambiguation3/5

The tools split into recognizable clusters (validate_claim / verify_step / session_report form a pipeline; compute and solve_equation are clearly distinct math operations), but several tools sit in an overlapping 'verify things' space. validate_claim, epistemic_consensus, and zk_verify_receipt all evaluate or attest a claim, and an agent could plausibly pick the wrong one without careful reading. intercept_token and enclave_status are also both enclave-facing lookups that could be confused.

Naming Consistency3/5

All names use snake_case, which is good, but the verb conventions are mixed: verb_noun (validate_claim, verify_step, solve_equation, intercept_token), bare verb (compute), noun_noun (session_report, enclave_status, epistemic_consensus), and a prefixed form (zk_verify_receipt). It stays readable, but there is no single predictable pattern to infer a new tool's name from.

Tool Count4/5

Nine tools is a well-scoped set for an epistemic-verification server, with each tool covering a discrete capability (arithmetic, solving, step logging, session sealing, receipt, consensus, health). Two tools (intercept_token, zk_verify_receipt) depend on an optional Sovereign Enclave connection, which makes them conditional rather than redundant.

Completeness4/5

The core lifecycle is covered end-to-end: validate a claim, log individual steps, seal and audit the session, then emit a cryptographic receipt, plus math primitives and a health check. Minor gaps exist — no way to list/clear session steps or start/reset a session, and no batch validation — but agents can work around these.

Maintenance

ActivityMaintained
ResponsivenessNo recent community issues

Related MCP Connectors

Related MCP Servers

  • A
    license
    A
    quality
    D
    maintenance
    Enables AI agents to sign decisions with post-quantum cryptographic proofs and maintain secure audit trails for compliance. It provides tools for stamping events, verifying chain integrity, and exporting audit data across industries like finance and healthcare.
    4
    73 npm
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    AI agent provenance, trust, and auditability layer. VERITAS multi-gate scoring, Cortex approval gates, S.E.A.L. hash-chain audit ledger, and semantic RAG with cryptographic provenance tracking for every decision an agent makes.
    27
    5
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Append-only evidence receipts for AI records: seal, verify, cite, chain-check, anchor status. A seal proves a record existed at a time, not that its contents are true. Five tools over stdio with npx -y apex-psi-mcp — no account, no key, verification free forever.
    5
    69 npm
    1
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables AI agents to verify proposed actions through federated adversarial consensus among multiple LLMs, providing Ed25519-signed attestations to prevent hallucinations, unverified counterparties, and compliance risks before execution.
    2
    MIT