zeroH MCP
Summary: This MCP server exposes 9 tools for deterministic claim and math verification, cryptographic step auditing, enclave token lookup, receipt generation, epistemic consensus, and status checks.
Validate factual, mathematical, or scientific claims with Coherence Index, Confidence Score, and Deterministic Status.
Submit reasoning or math steps to a tamper-evident SHA-256 session ledger.
Seal and audit a reasoning session, returning a SHA-256 Merkle head hash and FULLY_PROVEN only when all active steps are proven.
Compute exact rational fractions and decimals for numeric expressions with zero floating-point drift.
Solve algebraic equations and verify claimed solutions by exact substitution.
Query the Sovereign Enclave canonical ledger for token or root references, requiring an authenticated enclave connection.
Generate cryptographic commitment receipts over verified claims or request R1CS proofs from a connected enclave.
Evaluate multi-agent proposals on a 4-tier BFT epistemic lattice with automatic hallucination veto.
Check server health, active execution tier, and sovereign-vaulted IP protection status.
Click on "Deploy Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@zeroH MCPverify whether 12 * 12 = 145 is correct"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
ONE XI™ & zeroH Public Paid Subscription MCP Suite (zeroh-mcp / onexi-mcp)
ONE XI™ & zeroH MCP is the official public Model Context Protocol (MCP) server and Python SDK for ONE XI Technologies by Aalimbooks International (onexi.tech | kutublink.com | warith.io | islamicheritagepress.com/aalimbooks).
It equips AI coding assistants, autonomous agents, and IDEs (Claude Desktop, Antigravity IDE, Cursor, Windsurf, and custom MCP hosts) with 15 deterministic MCP tools spanning open-boundary mathematical verification, ONE XI™ Paid Subscription Cloud MCPs (Quantum Circuit Compilation, 8-Gate Executable Code & HPC Auditing, KutubLink 121.8M-Word Classical Corpus Concordance, and Aalim AI / Wārith.io Scholarly Verification), and the Multi-Rail Sovereign Payment Gateway (Polar.sh + Stripe 3D-Secure, Payoneer, Meezan Bank Corporate IBAN, and Web3 USDT/USDC).
Scope Policy: Public MCP tools cover ONE XI Cloud, ONE XI Quantum Suite, ONE XI 8-Gate HPC Sandbox, KutubLink, and Aalim Books / Wārith.io. Bio/clinical tiers are retained strictly inside the payment gateway (
onexi_payment_gateway) for settlement only and are not exposed as public MCP tools yet.
Architectural Highlights & IP Boundary
zeroh-mcp (onexi-mcp) operates across a strict Dual-Tier Split-Enclave & Paid Subscription Architecture:
Tier 1 — Public Open-Boundary Verification & Preview Telemetry (Zero-Config Local Mode):
Works out-of-the-box with zero external dependencies.
Exact Rational Arithmetic (
compute,validate_claim): Evaluates numerical expressions via Pythonastandfractions.Fractionto eliminate floating-point drift and catch calculation hallucinations (12 * 12 = 145$\rightarrow$REJECTED_HALLUCINATION).Algebraic Substitution Verification (
solve_equation,verify_step): Solves equations and verifies every candidate root by exact substitution.Tamper-Evident SHA-256 Step Ledger (
verify_step,session_report): Tracks step-by-step reasoning chains and issues aFULLY_PROVENcryptographic seal only when every active step in the chain is verified.8-Gate AST Code Auditing, OpenQASM Resource Estimation, Uthmānī Tashkīl / Abjad Auditing & Exact Rational Zakāh / Farāʾiḍ Verification: Runs locally with deterministic cryptographic receipts.
Tier 2 — Paid Subscription Cloud Enclave (
ONEXI_API_KEY+ONEXI_API_URL):When configured with an active ONE XI™ Paid Subscription Key (
ONEXI_API_KEYorONEXI_LICENSE_KEY), the server unlocks full cloud enclave execution acrossonexi_quantum_compiler,onexi_hpc_code_sandbox,onexi_kutublink_turath, andonexi_aalim_scholar.If a paid cloud action is invoked without an active subscription key, the MCP tool automatically returns
SUBSCRIPTION_REQUIREDalong with a 1-click Polar.sh + Stripe 3D-Secure checkout link, Payoneer B2B portal, Meezan Bank Corporate IBAN, and Web3 USDT/USDC settlement coordinates.All proprietary invariant constants, closed-form equations, compiler passes, and canonical database tensors remain 100% vaulted inside the remote Sovereign Enclave.
Related MCP server: Mcp-Omega-Brain
Self-Serve Public Subscription Plans (onexi.tech)
Tier ID | Plan Name | Price (USD) | Unlocked Public MCP Capabilities | 1-Click Checkout |
| Single E-Book License |
| KutubLink Single Classical Edition PDF | |
| 20-Volume E-Book Collection |
| KutubLink 20-Volume Classical Bundle | |
| ONE XI Cloud — Pro Pass |
| Developer API, 8-Gate Code Sandbox & Aalim Scholar Cloud | |
| Pro Compute Pack |
| High-Throughput Simulation & Quantum Audit Pack | |
| KutubLink OCR & Corpus Credits |
| 121.8M-Word Classical Corpus Search & Manuscript OCR API | |
| ONE XI Cloud — Team License |
| Multi-Seat Team SaaS, HPC Cloud Sandbox & API License | |
| Batch API Compute Credits |
| High-Throughput Batch API Compute Credits | |
| Unlimited Cloud & Institutional Seat |
| Unlimited ONE XI Cloud + KutubLink Institutional Library Seat | |
| KutubLink Enterprise Corpus License |
| Annual Full-Corpus Concordance & OpenITI/Shamela API | |
| ONE XI Quantum Compiler SDK |
| Self-Serve Fault-Tolerant Quantum Circuit Compiler SDK | |
| ONE XI Enterprise Full-Stack License |
| Annual Enterprise Full-Stack SaaS & SDK License | |
| ONE XI Quantum Suite Compiler Seat |
| Dedicated Annual Enterprise EDA Quantum Compiler Seat |
Quick Start
1. Installation
git clone https://github.com/khurramcr7/zeroH-MCP.git
cd zeroH-MCP
pip install -e .2. Configure in Claude Desktop / Cursor / Antigravity IDE
Add the following to your MCP configuration file (claude_desktop_config.json, .cursor/mcp.json, or Antigravity MCP settings):
{
"mcpServers": {
"onexi-zeroh-mcp": {
"command": "python",
"args": ["-m", "zeroh_mcp.server"],
"env": {
"ONEXI_API_URL": "https://onexi.tech/api",
"ONEXI_API_KEY": "your_onexi_subscription_key_here",
"ZEROH_API_URL": "",
"ZEROH_API_KEY": ""
}
}
}
}Exposed MCP Tools (15 Deterministic Tools)
Tool Name | Category | Description |
| ONE XI Paid Subscription | Verifies |
| ONE XI Quantum Suite | Fault-tolerant quantum circuit resource estimation & cloud compilation ( |
| ONE XI Cloud Sandbox | 8-Gate Python AST complexity, security, and SHA-256 code-seal auditing + paid cloud HPC execution ( |
| KutubLink & Aalim Books | Uthmānī Tashkīl & Abjad auditing + paid cloud concordance search across |
| Aalim AI & Wārith.io | Exact rational Zakāh ($1/40 = 2.5%$) and Farāʾiḍ inheritance verification + paid 7-Gate Translation QA (TQA) & Comparative Scholarly Cloud. |
| Multi-Rail Payment Gateway | Manages all 16 Polar.sh + Stripe 3D-Secure checkout links ( |
| zeroH Guardrail | Intercepts and validates a factual, mathematical, or scientific claim ( |
| zeroH Guardrail | Submits a single reasoning or mathematical step ( |
| zeroH Guardrail | Seals a multi-step reasoning session ( |
| zeroH Guardrail | Computes the exact rational fraction ( |
| zeroH Guardrail | Solves algebraic equations and verifies all solutions by exact substitution. |
| zeroH Enclave | Queries the remote Sovereign Enclave ledger for a canonical token/root tensor. |
| zeroH Enclave | Generates a SHA-256 cryptographic commitment receipt over a verified claim. |
| zeroH BFT Quorum | Evaluates multi-agent proposals on the 4-tier BFT epistemic lattice ( |
| zeroH Enclave | Reports server health, active execution tier, and |
Security & Zero-Leakage Audit
Run the automated IP & Formula Non-Exposure Audit and test suite at any time:
python scripts/security_audit_no_leaks.py
pytest -vSee SECURITY_AND_IP_BOUNDARY.md for full details on how proprietary formulas remain 100% isolated inside the Sovereign Enclave and how Bio divisions are restricted to payment-only settlement.
Available Tools
9 toolscomputeB
Compute the exact rational fraction and decimal value of a numeric expression using zero-drift AST rational arithmetic.
| Name | Required | Description | Default |
|---|---|---|---|
| expr | Yes | Mathematical expression to evaluate (e.g., '(144 / 12) + 7'). |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations at all, the description carries the full burden, and it does disclose a meaningful trait: 'zero-drift AST rational arithmetic' tells the agent results are exact rather than floating-point. It stops short of covering failure behavior for malformed expressions, operator support, or limits on expression size, which matters for an unannotated evaluation tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single sentence that front-loads the action and ends with the distinguishing precision claim. Nothing is repeated from the title or name, and there is no filler.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a one-parameter tool with no output schema, the description is nearly sufficient: it explains both what goes in and what comes back (fraction and decimal). The only real gap is error/precision edge-case behavior, which is modest for a tool this simple.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, and the schema's own example ('(144 / 12) + 7') already illustrates the accepted syntax, so the baseline of 3 applies. The description adds the notion that the expression is parsed as an AST and evaluated rationally, but no further syntax rules beyond what the schema provides.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb (compute) and resource (a numeric expression), and goes further by naming the output shape: exact rational fraction plus decimal. It doesn't distinguish itself from the sibling solve_equation, so an agent still has to guess whether an expression with a variable belongs here or there.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description never says when to reach for this versus solve_equation or verify_step, and gives no preconditions on expression syntax. Usage must be inferred purely from the word 'numeric expression,' which is not enough given an overlapping sibling.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
enclave_statusA
Check the health, execution tier, and IP protection status of the zeroH MCP server and Sovereign Enclave bridge.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden; 'Check' implies a side-effect-free read, but the description never confirms that, nor does it describe latency, network dependencies, or failure modes. It does, usefully, enumerate the three status dimensions reported, which goes beyond the (empty) structured fields.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single front-loaded sentence naming the action and the reported dimensions with no filler.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a zero-parameter diagnostic tool with no output schema, naming the three reported dimensions is close to sufficient. It would be ideal to know the return shape or how tier values should be interpreted, but no critical caller information is missing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool takes zero parameters, so the baseline is 4; there is nothing further the description could clarify about inputs.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb ('Check') plus the exact resources reported: health, execution tier, and IP protection status of the zeroH MCP server and Sovereign Enclave bridge. It is clearly distinguishable from sibling compute/verify tools, though it doesn't name any sibling explicitly.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Usage is only implied — an agent can infer this is the diagnostic/status probe to run before or after compute/verify work. There is no explicit 'use when' framing, no exclusions, and no mention of alternatives.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
epistemic_consensusC
Byzantine Fault Tolerant (BFT) Multi-Agent Epistemic Consensus Gate. Evaluates agent proposals across the 4-tier epistemic lattice (QATI, ZANNI_GHALIB, SHAKK, WAHM) with automatic hallucination veto.
| Name | Required | Description | Default |
|---|---|---|---|
| agent_id | No | Identifier of the proposing agent. | |
| proposal | Yes | Proposed statement or calculation to evaluate. | |
| confidence | No | Reported confidence score in [0.0, 1.0]. | |
| contradiction | No | Measured contradiction evidence in [0.0, 1.0]. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations present, the description carries the full disclosure burden. 'Automatic hallucination veto' hints at a rejection capability, but it does not say what triggers the veto, whether the call is pure evaluation or records state, whether results are deterministic, or how a vetoed proposal surfaces. The BFT claim implies multi-agent corroboration but the single-call semantics are left unexplained.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two compact sentences, front-loaded with the tool's identity and followed by what it evaluates. Efficient, though the density of unexplained acronyms makes the brevity partly a liability rather than pure economy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a decision-gate tool with no output schema and no annotations, the description should explain the shape of the verdict and what each lattice tier implies, since those entries drive interpretation of the result. Neither is provided, leaving an agent unable to reason about the return value or act on a rejection.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the four parameters (agent_id, proposal, confidence, contradiction) are already documented with ranges. The description adds no meaning on top of that, which is the expected baseline when the schema does the work.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The verb+resource are identifiable ('Evaluates agent proposals' via a consensus gate), but the core terms QATI, ZANNI_GHALIB, SHAKK and WAHM are opaque jargon with no gloss, so an agent cannot tell what the tiers mean or how the verdict is formed. It also fails to distinguish itself from the closely related siblings validate_claim and verify_step.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is no statement of when this gate should be used instead of validate_claim, verify_step or compute. No prerequisites, no exclusions, and no indication of what a caller should do with the result.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
intercept_tokenC
Query the Sovereign Enclave canonical ledger for a token or root reference. Requires an authenticated Sovereign Enclave connection (ZEROH_API_URL).
| Name | Required | Description | Default |
|---|---|---|---|
| token | Yes | Token or reference identifier to look up in the Sovereign Enclave. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full behavioral burden. It does disclose one valuable operational fact — an authenticated Sovereign Enclave connection via ZEROH_API_URL is required — and "Query" weakly implies a read. But it says nothing about whether the token is consumed/intercepted (as the name suggests), whether lookups are logged, what happens when a token is not found, or what the call returns. For a tool whose name implies a potentially sensitive operation, this is a significant gap.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two compact sentences with the operation front-loaded and the prerequisite trailing. No filler, though the second sentence is a prerequisite buried at the end when it could be stated as a gate before invocation.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With no annotations and no output schema, the description is the only source of behavioral information, and it omits what a lookup returns, whether the operation is side-effecting, and error behavior for an unknown token. Given the name implies interception, the omission of any statement about side effects is a real gap for a one-parameter tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100% with a single required `token` parameter, so the schema already defines it as a token or reference identifier. The description adds no format, encoding, or validity constraints (e.g., whether root references use a different syntax than tokens), so it neither compensates nor detracts. Baseline 3 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a concrete verb and resource ("Query the Sovereign Enclave canonical ledger for a token or root reference"), but the tool name `intercept_token` implies interception of a token rather than a ledger lookup, which creates genuine ambiguity about what actually happens. The vendor-specific jargon ("Sovereign Enclave canonical ledger") doesn't help an agent map this to a familiar operation. It is not tautological, but the name/description mismatch keeps it below a 4.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is no indication of when to use this tool versus siblings such as `enclave_status`, `validate_claim`, or `zk_verify_receipt`, all of which touch the same enclave domain. No prerequisites beyond the connection URL, no exclusions, no stated outcome. The agent must infer everything about selection.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
session_reportA
Seal and audit all steps submitted in a reasoning session. Returns FULLY_PROVEN only if every active step was deterministically proven, along with the SHA-256 Merkle head hash.
| Name | Required | Description | Default |
|---|---|---|---|
| session | Yes | Session identifier to seal and report. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full behavioral burden. It discloses the key output condition (FULLY_PROVEN only if every active step is deterministically proven) and the SHA-256 Merkle head hash, but it does not state whether sealing is irreversible, what permissions are needed, or what happens if the session is not fully proven.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two sentences, front-loaded with the core action and immediately followed by the critical output condition and hash. Every sentence adds relevant information without redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The tool has no annotations and no output schema, so the description must convey behavioral and return details. It covers the primary success condition and one returned artifact, but leaves gaps around other possible return states, error behavior, side effects of sealing, and authentication requirements.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema has 100% description coverage for the single 'session' parameter, so the schema already explains its meaning. The description does not add syntax, format, or validation details beyond what the schema provides, making the baseline 3 appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description gives a specific verb and resource: 'Seal and audit all steps submitted in a reasoning session.' It implies a distinction from step-level tools like verify_step by emphasizing all steps in a session, but it does not explicitly name or contrast with any sibling tool.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides a clear context for use: finalizing/auditing a reasoning session after steps have been submitted, with the precondition that FULLY_PROVEN requires every active step to be proven. It does not explicitly state when not to use it or name alternative tools for related operations.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
solve_equationB
Solve an algebraic equation and verify every solution by exact substitution.
| Name | Required | Description | Default |
|---|---|---|---|
| claimed | No | Optional list of claimed solutions to check by substitution. | |
| unknown | No | Variable symbol to solve for (default: 'x'). | |
| equation | Yes | Algebraic equation (e.g., 'x**2 - 5*x + 6 = 0'). |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the burden. It does disclose a meaningful behavioral trait: solutions are checked by exact substitution, not numerically. However, it says nothing about behavior on unsolvable/ambiguous equations, error cases, or what the verification result looks like.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single front-loaded sentence with no filler; the core action and the verification guarantee both earn their place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With no output schema and no annotations, the description should say more about the return shape (solutions plus per-solution verification outcome) and failure modes. As-is it is adequate to call but leaves an agent guessing about the result structure.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, with equation, unknown, and claimed all documented in the schema. The description's 'verify every solution' hints at the claimed parameter but adds no format, default, or constraint details beyond what the schema already provides.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb+resource ('Solve an algebraic equation') plus an added behavior ('verify every solution by exact substitution'). It is clear enough to distinguish from siblings like verify_step or compute, but it never explicitly names or contrasts with them.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is no explicit when-to-use or when-not-to-use guidance, and no mention of alternatives such as compute or verify_step. The dual solve+verify phrasing implies a use case, but the agent must infer it.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
validate_claimA
Intercept and validate a factual, mathematical, or scientific claim before presenting it. Returns Coherence Index (0.0-1.0), Confidence Score (0%-100%), and Deterministic Status (VERIFIED_COMPUTED_PASS, REJECTED_HALLUCINATION, BOUNDARY_BREACH, or NEEDS_REVIEW).
| Name | Required | Description | Default |
|---|---|---|---|
| claim | Yes | The text proposition, calculation, or claim to validate. | |
| context | No | Validation domain or context (default: 'general_domain'). |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden and does disclose the return surface: Coherence Index, Confidence Score, and the four Deterministic Status values. It does not state that this is a non-destructive/read-only operation or name any cost, latency, or side effects, which is the remaining gap.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two tight sentences with the action front-loaded and the return values enumerated after. Every clause carries information, though the status enum list is dense and could be structured more readably.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a two-parameter tool with no output schema, the description supplies the missing return-value detail, which is exactly its job. An agent has enough to call it and interpret results, though the absence of any safety/behavior profile is a modest gap.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so both parameters are already documented, making 3 the baseline. The description adds no semantics for 'claim' or 'context' beyond what the schema states.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb+resource: 'intercept and validate a factual, mathematical, or scientific claim' with the scoping condition 'before presenting it.' It is distinguishable from siblings like compute or solve_equation, though it never explicitly contrasts itself with verify_step or epistemic_consensus.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The phrase 'before presenting it' implies the usage moment (pre-output gating), but there is no explicit when-not guidance and no routing to alternatives such as verify_step or epistemic_consensus, which appear to overlap in purpose.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
verify_stepA
Submit a single reasoning or mathematical step to the tamper-evident SHA-256 session ledger before stating it. Supported step kinds: 'compute' {expr, value}, 'solve' {equation, claimed: {x: val}}, 'reasoning' {text}, 'interpretation' {text}.
| Name | Required | Description | Default |
|---|---|---|---|
| step | Yes | Step object containing 'kind' and kind-specific parameters. | |
| session | Yes | Session identifier for the multi-step reasoning chain. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full behavioral burden. It discloses that the ledger is tamper-evident and SHA-256 based and that steps must be submitted before being stated, which is genuine context. It is silent on failure semantics (does a mismatched 'compute' value get rejected or merely recorded?), on whether sessions must pre-exist, and on the return value.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two short sentences: the action and its ordering constraint first, then a compact enumeration of the supported step kinds. Every clause carries information; nothing is padding.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a nested-object tool with no annotations and no output schema, the description should close more gaps than it does. Step payload shapes are covered well, but failure behavior, session prerequisites, and whether verification actually gates the call remain unstated.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so baseline is 3, but the description goes beyond the schema: the schema only says 'Step object containing kind and kind-specific parameters', while the description enumerates the four kinds and their exact payload shapes. That is material added meaning, though it is not structured as a real enum.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb and resource: submit a single reasoning/math step to a tamper-evident SHA-256 session ledger. That is far more informative than the bare name 'verify_step'. It does not explicitly contrast itself with the compute or solve_equation siblings, even though its 'compute'/'solve' step kinds appear to overlap with them.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
'before stating it' gives a real timing rule: log the step before you assert it. Beyond that, there is no when-not guidance, no statement of how this differs from calling compute or solve_equation directly, and no note on what to do when a step fails verification.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
zk_verify_receiptC
Generate a cryptographic commitment receipt over a verified claim (or request an R1CS proof from a connected Sovereign Enclave).
| Name | Required | Description | Default |
|---|---|---|---|
| claim | Yes | Claim text to bind into a cryptographic verification receipt. | |
| authority | No | Verification authority label (default: 'zeroH_Public_Verifier'). |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden. It hints at an external dependency ('connected Sovereign Enclave'), which is useful, but does not say whether the receipt is persisted, whether the enclave path is fallback or opt-in, what happens when no enclave is connected, or what permissions or latency are involved.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single front-loaded sentence with the primary action first and the alternate mode in parentheses. No waste, though the jargon density ('R1CS', 'Sovereign Enclave') without explanation slightly reduces immediate comprehension.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
No output schema and no annotations, so the description must explain what comes back (a receipt string? a proof blob? an ID) and how the enclave mode differs. Instead it leaves the return shape, failure modes, and mode-selection unaddressed for a tool whose output an agent likely needs to act on.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so both parameters are already documented, including the default authority label. The description adds only the 'bind into a receipt' framing, which is marginal beyond the schema; baseline 3 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb and artifact: generate a cryptographic commitment receipt bound to a claim, with a parenthetical alternate mode (R1CS proof via Sovereign Enclave). This distinguishes it reasonably from validate_claim and verify_step, though 'over a verified claim' is ambiguous about whether the claim must already be verified elsewhere.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance on when to call this versus validate_claim or verify_step, no prerequisites stated (must the claim be pre-validated?), and no explanation of how to choose between the default receipt path and the enclave R1CS proof path. The agent must infer everything.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
9 tool updates
v1.0.0- First observed
compute - First observed
enclave_status - First observed
epistemic_consensus - First observed
intercept_token - First observed
session_report - First observed
solve_equation - First observed
validate_claim - First observed
verify_step - First observed
zk_verify_receipt
TDQS
Scored across 9 tools
The tools split into recognizable clusters (validate_claim / verify_step / session_report form a pipeline; compute and solve_equation are clearly distinct math operations), but several tools sit in an overlapping 'verify things' space. validate_claim, epistemic_consensus, and zk_verify_receipt all evaluate or attest a claim, and an agent could plausibly pick the wrong one without careful reading. intercept_token and enclave_status are also both enclave-facing lookups that could be confused.
All names use snake_case, which is good, but the verb conventions are mixed: verb_noun (validate_claim, verify_step, solve_equation, intercept_token), bare verb (compute), noun_noun (session_report, enclave_status, epistemic_consensus), and a prefixed form (zk_verify_receipt). It stays readable, but there is no single predictable pattern to infer a new tool's name from.
Nine tools is a well-scoped set for an epistemic-verification server, with each tool covering a discrete capability (arithmetic, solving, step logging, session sealing, receipt, consensus, health). Two tools (intercept_token, zk_verify_receipt) depend on an optional Sovereign Enclave connection, which makes them conditional rather than redundant.
The core lifecycle is covered end-to-end: validate a claim, log individual steps, seal and audit the session, then emit a cryptographic receipt, plus math primitives and a health check. Minor gaps exist — no way to list/clear session steps or start/reset a session, and no batch validation — but agents can work around these.
Maintenance
Related MCP Connectors
Deterministic signed verification of numeric & financial claims for AI agents & spreadsheets.
Tamper-evident proof creation and verification for AI agents via MCP, A2A, and REST.
Verified memory for AI agents. Signed assertions, billing attestation, session continuity.
One-stop claim verification for AI agents: verdicts with confidence, evidence, signed receipts.
Related MCP Servers
- AlicenseAqualityDmaintenanceEnables AI agents to sign decisions with post-quantum cryptographic proofs and maintain secure audit trails for compliance. It provides tools for stamping events, verifying chain integrity, and exporting audit data across industries like finance and healthcare.473 npmMIT
- AlicenseAqualityCmaintenanceAI agent provenance, trust, and auditability layer. VERITAS multi-gate scoring, Cortex approval gates, S.E.A.L. hash-chain audit ledger, and semantic RAG with cryptographic provenance tracking for every decision an agent makes.275MIT
- AlicenseAqualityBmaintenanceAppend-only evidence receipts for AI records: seal, verify, cite, chain-check, anchor status. A seal proves a record existed at a time, not that its contents are true. Five tools over stdio with npx -y apex-psi-mcp — no account, no key, verification free forever.569 npm1MIT
- AlicenseNot gradedqualityBmaintenanceEnables AI agents to verify proposed actions through federated adversarial consensus among multiple LLMs, providing Ed25519-signed attestations to prevent hallucinations, unverified counterparties, and compliance risks before execution.2MIT