agentbus
AgentBus
基于 SQLite 的 MCP 事件总线与控制面,专为异构智能体集群打造。
当 Cursor、Claude、Antigravity 和终端智能体(如 Hermes)共享同一工作区时,它们通常通过脆弱的追加式文件(log.md)进行协调。这在不需要 SLA 超时、人在环路(HITL)拦截、严格模式校验或加密 RBAC 时还能凑合。
AgentBus 用 localhost 边车 取代了“传话游戏”:一个由 SQLite 支撑的 Python MCP 服务器。没有编排器运行时锁定,没有笨重的云端仪表盘。只有为顶级 AI 编排而生的超快本地发布/订阅。
v0.18.0(2026 年 8 月): 迁移至 MCP Python SDK v2,紧随 v0.12-v0.16 中发布的无头运行器、异步挂起/恢复、唤醒平面和弹性投递功能。详见变更日志。
注意: 安装包名为
okf-agentbus(CLI 命令仍为agentbus)。可选依赖:[obs,devex,jupyter,sdk]。
⚡ “顿悟”时刻:零重启集成
已经在 tmux 窗格中运行 Aider、OpenHands 或自定义智能体?不要终止你的会话。 AgentBus 采用双接口架构(MCP + CLI)。你无需现在就配置 JSON 配置来测试它。只需提示你正在运行的智能体:
“使用你的终端运行
agentbus publish --topic okf/handoff --payload '{\"from\":\"grok\",\"to\":\"hermes\",\"summary\":\"Write tests\"}'”
SQLite 总线会立即捕获它,无需 MCP 服务器。一旦你被 Mission Control TUI 说服,就可以在下次启动时为强类型 MCP 服务器接线。
Related MCP server: Hivemind
为什么选择 AgentBus?
替代方案 | 局限性 | AgentBus |
| 无模式、竞态条件 | 类型化主题、单调 ID、咨询锁 |
LangGraph / CrewAI | 同运行时锁定 | 异构进程外客户端(IDE + CLI) |
LangSmith | 仅云端、回溯式 | 本地 SQLite、前瞻式执行 TUI |
Redis pub/sub | 额外守护进程、配置复杂 | 零配置 SQLite、原生 stdio MCP |
功能军火库(v0.3 - v0.18)
MCP Python SDK v2(v0.18): 迁移 stdio MCP 服务器,同时保留现有事件存储契约。
弹性投递(v0.16.4): 带抖动的有界重试、重试耗尽后的死信以及针对 SQLite 争用的文件溢出。
异步挂起/恢复(v0.16): 持久等待和关联唤醒事件让无头智能体无需忙轮询即可让出控制权。
无头运行器(v0.15): 为异构 CLI 智能体提供可选适配器,具有有界链行为和结构化确认。
唤醒平面与 Go 辅助工具(v0.12-v0.13): 平台打包的工作器、角色租约、唤醒入口和 Webhook 投递。
Jupyter 异步客户端(v0.11):
from agentbus.jupyter import AsyncAgentBus+%agentbus start— 非阻塞轮询,让出给笔记本事件循环。TypeScript 客户端(v0.11):
packages/js/agentbus-client— Node EventEmitter + MCP stdio 生成(@agentbus/agentbus-client,目前为路径安装)。God View 网格(v0.9): 被动 OS + MCP 可观测性,让沉默的智能体仍留下总线足迹(
system/mcp、system/fs、system/shell、system/monologue)。Mission Control TUI(v0.8+): 一个丰富的、键盘驱动的
Textual仪表盘(agentbus monitor)。追踪瀑布、HITL、Wiretap 窗格、Dark Agent 警告。可插拔 Pydantic 模式(v0.7): 代码优先的
@bus.topic装饰器,在插入层强制严格 JSON 模式。分布式上下文(v0.6): 通过
--attach传递大型上下文(如 git diff)。1MB 硬性负载限制防止上下文窗口爆炸。智能体可观测性(v0.5): 原生 OpenTelemetry 风格的
trace_id和parent_span_id谱系。SLA 超时与死信(v0.4): 防止幽灵死锁。如果智能体从集群中消失,SLA 定时器会将负载路由到
okf/dead-letter。集群 RBAC 与 Droid 证明(v0.3): 加密 JWT/UUID 令牌确保只有授权智能体才能发布到受限主题。
HITL 拦截(v0.3): 捕获危险负载(例如
DROP TABLE)并将其置于PENDING_APPROVAL状态,供人类通过 TUI 审查。
安装
最快的方式(一步安装并自动配置你的 IDE):
curl -sSL https://raw.githubusercontent.com/onicarps/agentbus/main/install.sh | bash或通过 pip 手动安装:
pip install -U "okf-agentbus[devex,sdk]"
agentbus init --apply --producer-id my-agentJupyter 笔记本:
pip install -U "okf-agentbus[jupyter]"%load_ext agentbus.jupyter
%agentbus start
# or
from agentbus.jupyter import AsyncAgentBus
bus = AsyncAgentBus() # AGENTBUS_WORKSPACE or cwd
bus.on_event(print)
await bus.start_background(interval=1.0)TypeScript(从 monorepo 检出):
cd packages/js/agentbus-client && npm install && npm test
# set AGENTBUS_WORKSPACE + agentbus on PATH, then use createStdioMcpClient / AgentBus快速入门与示例
理解 AgentBus 的最佳方式是阅读我们可复制粘贴的示例。
参见 examples/ 目录,其中有 7 个完美、独立的 Python 脚本,涵盖从基本发布/订阅到 Pydantic 模式和 SLA 超时的所有功能。
# Terminal A — Launch the Mission Control TUI
agentbus monitor
# Terminal B — Publish a handoff
agentbus publish \
--topic okf/handoff \
--payload '{"from":"cursor","to":"hermes","summary":"Write tests"}'God View 可观测性(v0.9.0):
通过窃听其操作来追踪沉默的智能体:
# Intercept MCP tool calls
mcp-serve --wiretap
# Watch file edits and command executions
agentbus watch
# Tail internal agent reasoning logs
agentbus tail事件将以 system/mcp、system/fs、system/shell 和 system/monologue 主题流式传输到 TUI 的 Wiretap 窗格。
📦 工作区隔离(.agentbus 目录)
AgentBus 基于 工作区隔离 的概念运行(类似于 git 使用 .git 或 Docker 使用 docker-compose.yml)。
总线和其事件在物理上限定于你运行它的目录。这可以防止你的集群追踪整个操作系统或不同项目之间的交叉污染。
当你导航到特定项目文件夹并运行 agentbus init 或 agentbus up 时,它会为该目录创建一个本地化的 .agentbus/events.db SQLite 数据库。
一键集群编排(v0.10.0)
无需手动打开 5 个 tmux 窗格来启动你的智能体和可观测性守护进程,使用新的编排器:
cd /path/to/my-project
# 1. Generate a boilerplate .agentbus/swarm.yaml
agentbus up --init
# 2. Boot the swarm (Watchers, Agents, and TUI) in one click
agentbus up
# 3. View running background agents
agentbus ps
# 4. Safely kill the entire swarm
agentbus down文档
有关完整的架构文档,请参阅 docs/ 目录。
许可证
MIT — 参见 LICENSE。
Available Tools
10 toolsagentbus_approveC
Approve a pending event so agents can see it on poll.
| Name | Required | Description | Default |
|---|---|---|---|
| event_id | Yes | ||
| auth_token | No | ||
| reviewer_id | No |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations exist, so the description must fully disclose behavior. It reveals that the tool changes state (approval) and makes events visible on poll, but omits critical details like required permissions, idempotency, reversibility, or side effects. Mutation tools need richer behavioral context.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Extremely concise (one sentence), which is efficient but arguably too brief given the tool's complexity (3 parameters, no schema coverage, mutation). A few more sentences would improve clarity without losing conciseness.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The tool is a mutation with no annotations and an output schema (not described). The description does not cover what constitutes a 'pending event', the approval workflow, or the response structure. The context is insufficient for an agent to use the tool confidently.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, yet the description adds no parameter meaning. It does not explain event_id, auth_token, or reviewer_id, leaving the agent to infer from names alone. The description must compensate for missing schema descriptions but fails to do so.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description explicitly states the verb 'Approve' and the resource 'pending event', and clarifies the effect 'so agents can see it on poll'. This clearly distinguishes it from sibling tools like agentbus_review, suggesting a specific approval step.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance on when to use this tool versus alternatives. It does not provide prerequisites, conditions for use, or exclusions. The sibling tools list is given but not leveraged to explain selection criteria.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
agentbus_lock_acquireC
Acquire an exclusive advisory lease on a workspace resource.
| Name | Required | Description | Default |
|---|---|---|---|
| owner_id | Yes | ||
| resource | Yes | ||
| auth_token | No | ||
| ttl_seconds | No |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description must carry the full burden. It only states that the lease is 'exclusive' and 'advisory,' but lacks details on what happens if the lock is already held, side effects, or return behavior.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single short sentence, which is under-specified for a tool with four parameters and an output schema; it sacrifices necessary detail for brevity.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the complexity (4 parameters, output schema, no annotations), the description fails to cover return values, failure modes, or how to use the parameters, leaving significant gaps.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0% and the description does not explain any of the four parameters (owner_id, resource, auth_token, ttl_seconds), providing no added meaning beyond the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb 'Acquire' and clearly identifies the resource as 'exclusive advisory lease on a workspace resource,' which distinguishes it from siblings like lock_release, lock_renew, and lock_status.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides no guidance on when to use this tool versus alternatives like lock_release or lock_renew, nor any prerequisites or exclusions.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
agentbus_lock_releaseB
Release a held lease (idempotent if already expired).
| Name | Required | Description | Default |
|---|---|---|---|
| lease_id | Yes | ||
| owner_id | Yes | ||
| resource | Yes | ||
| auth_token | No |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description mentions idempotency if the lease is already expired, which is a useful behavioral trait. However, with no annotations, the description carries the full burden and fails to disclose authentication requirements, side effects, or what happens if the lease is not held.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, concise sentence with no wasted words. It could arguably add more detail without becoming verbose, but it is efficiently structured.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool has four parameters and no parameter descriptions in the schema, the description should compensate but does not. The existence of an output schema mitigates the need to explain return values, but overall completeness is lacking.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema has 0% description coverage for parameters, and the tool description does not explain any of the four parameters (lease_id, owner_id, resource, auth_token). This is a critical gap.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states 'Release a held lease', with a specific verb and resource. The sibling tools include acquire and renew, so the purpose is distinct and unambiguous.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Usage is implied by the name and description, but there is no explicit guidance on when to use this tool versus alternatives like agentbus_lock_acquire or agentbus_lock_renew. No exclusions or prerequisites are mentioned.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
agentbus_lock_renewC
Extend TTL on an active lease (heartbeat).
| Name | Required | Description | Default |
|---|---|---|---|
| lease_id | Yes | ||
| owner_id | Yes | ||
| resource | Yes | ||
| auth_token | No | ||
| ttl_seconds | No |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries full burden for behavioral disclosure. It only states the basic function (extending TTL) without mentioning side effects, error cases, or required permissions (e.g., auth_token needed).
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single sentence with no unnecessary words. It is concise and front-loaded with the key action.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the complexity (5 params, 0% schema coverage, and a locking context), the description is insufficient. It fails to explain parameters or output, leaving significant gaps for correct invocation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, and the description does not explain any of the 5 parameters. It adds no meaning beyond their names, leaving the agent to infer their purposes.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description 'Extend TTL on an active lease (heartbeat)' clearly specifies the verb (extend) and resource (active lease), and the heartbeat terminology distinguishes it from sibling tools like lock_acquire, lock_release, etc.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides no guidance on when to use this tool versus alternatives, nor does it mention prerequisites or exclusions. It only states the action without context.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
agentbus_lock_statusB
Check lock state without acquiring (no auth required).
| Name | Required | Description | Default |
|---|---|---|---|
| resource | Yes |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, description discloses an important behavioral trait ('no auth required'), but omits other aspects like idempotency, side effects, or what the lock state entails. Minimal but not misleading.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Extremely concise with no filler. However, the brevity sacrifices clarity on parameter semantics. Front-loaded with key differentiating info.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Despite low complexity and presence of output schema (not shown), the description fails to explain the sole required parameter. Leaves agent guessing about 'resource'.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0% and description does not mention the 'resource' parameter at all. No guidance on its meaning, format, or constraints.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Clearly states verb 'Check' and resource 'lock state', distinguishing it from sibling tools like lock_acquire, lock_release, and lock_renew. No ambiguity.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Implicitly indicates when to use ('without acquiring') and notes no auth required, but does not explicitly list alternatives or when not to use. Context from sibling names helps, but description lacks explicit guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
agentbus_pollA
Fetch events after cursor (at-least-once delivery).
| Name | Required | Description | Default |
|---|---|---|---|
| limit | No | ||
| topic | Yes | ||
| since_id | No |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description discloses 'at-least-once delivery', a meaningful behavioral trait indicating possible duplicate deliveries and implied consumption semantics. With no annotations provided, this adds value beyond the schema, though it omits other details like read-only vs. side-effect on the cursor.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is extremely concise, with two short phrases that are front-loaded and contain no redundant information. Every word contributes to the meaning.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Despite having an output schema, the description is too sparse to fully understand the tool's mechanics. It omits parameter semantics, ordering, and error behavior, making it incomplete for correct invocation, especially with no annotations to fill gaps.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, and the description only hints at a 'cursor' without explicitly mapping to the since_id parameter. It does not explain the meaning of limit or topic, so the description fails to compensate for the lack of parameter documentation.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool fetches events after a cursor, using the verb 'Fetch' and resource 'events'. This distinguishes it from sibling tools like agentbus_publish (writing) and agentbus_status (status checks), and the cursor aspect adds specificity.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Usage is implied by the name and sibling context (polling for events after a cursor), but there is no explicit guidance on when to use this tool versus alternatives, nor any exclusions or prerequisites.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
agentbus_publishC
Append one event to the workspace event log.
| Name | Required | Description | Default |
|---|---|---|---|
| topic | Yes | ||
| action | No | ||
| payload | Yes | ||
| trace_id | No | ||
| auth_token | No | ||
| producer_id | No | ||
| causation_id | No | ||
| parent_span_id | No | ||
| schema_version | No | 1.0 | |
| idempotency_key | No | ||
| sla_timeout_minutes | No |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden. 'Append' implies a durable mutation, but the description says nothing about authentication (despite an auth_token parameter), idempotency/deduplication behavior (despite an idempotency_key parameter), ordering guarantees, or failure modes.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single clean, front-loaded sentence with no filler, which is structurally good. But for an 11-parameter mutation tool the extreme brevity reflects under-specification rather than disciplined conciseness.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
An output schema exists so return values needn't be explained, but the description leaves the auth requirement, idempotency semantics, and event-schema/versioning behavior unspecified for a complex write tool with no annotations and no parameter docs.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0% across 11 parameters, and the description adds no parameter meaning at all. Critical parameters such as auth_token, idempotency_key, causation_id, parent_span_id, and sla_timeout_minutes are entirely undocumented in both places.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description gives a specific verb ('Append'), resource ('event log'), and scope ('one event', 'workspace'), so an agent can tell this is a write/publish operation. It does not, however, differentiate itself from siblings like agentbus_poll or agentbus_review, which an agent must distinguish on its own.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is no when-to-use guidance, no conditions selecting this over agentbus_poll or any other sibling, and no stated prerequisites. The agent must infer the entire usage context from the name alone.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
agentbus_rejectB
Reject a pending event and notify the originating agent.
| Name | Required | Description | Default |
|---|---|---|---|
| reason | No | rejected by human reviewer | |
| event_id | Yes | ||
| auth_token | No | ||
| reviewer_id | No |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden of disclosing behavioral traits. It does mention the notification side effect, but it omits critical information such as whether the rejection is permanent, how the event state changes, or any authentication requirements. This is a significant gap for a mutating tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, concise sentence that immediately communicates the primary action and key side effect. It is front-loaded and contains no filler or redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given four parameters, no annotations, and zero schema description coverage, this description is insufficiently complete. It does not explain the lifecycle of the event, the meaning of reviewer_id, or any prerequisites, leaving the agent to rely on the output schema which does not cover these behavioral aspects.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, and the description provides no parameter details. While event_id and reason may be self-evident from their names, auth_token and reviewer_id are not explained, forcing the agent to guess their purpose and required format.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the verb 'Reject', the resource 'a pending event', and the side effect 'notify the originating agent.' It is specific and distinguishable from sibling tools like approve and review, which have contrary or different purposes.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The usage context is implied: use this tool when rejecting a pending event. However, it does not explicitly mention alternatives or when not to use it, nor does it contrast with approve or review, so the guidance is only implicit.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
agentbus_reviewA
List events pending human approval (hidden from standard poll).
| Name | Required | Description | Default |
|---|---|---|---|
| limit | No | ||
| topic | No |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description must disclose behavioral traits. It only states the basic purpose (listing pending events) but does not clarify whether the operation is read-only, any side effects, authentication requirements, or behavior under different conditions (e.g., empty results). The description is too minimal for a tool without annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, clear sentence that front-loads the core purpose. Every word is necessary; there is no redundancy or extraneous information. It is appropriately sized for the tool's simplicity.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the existence of an output schema (which covers return values) and the tool's straightforward nature (listing pending events), the description provides the essential context. However, missing details such as filtering behavior or relationship to sibling tools (like agentbus_approve) could be added for completeness, even though the tool is simple.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the description carries the full burden for parameter meaning. However, the description does not mention the parameters 'limit' or 'topic' at all. While the parameter names are somewhat self-explanatory, the description adds no additional context or usage guidance, which is insufficient given the lack of schema descriptions.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb 'List' and clearly identifies the resource as 'events pending human approval', making the purpose immediately clear. It also distinguishes the tool from siblings by noting these events are 'hidden from standard poll', implying that other tools like agentbus_status show standard events.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies when to use the tool—to view events that are not visible through the standard poll. It does not explicitly state when not to use it or mention alternatives, but the context of sibling tools (e.g., agentbus_approve for approvals) provides implicit guidance. A higher score would require explicit when/when-not statements.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
agentbus_statusB
Workspace bus health and topic list.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description must cover behavioral traits. It only states that the tool returns health and topic list, implying a read-only operation but doesn't mention side effects, authorization needs, or error states.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is very short and front-loaded, but it's a noun phrase rather than a complete sentence. It is efficient but could be improved with a verb.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given zero parameters and the presence of an output schema, the description adequately explains the tool's purpose and return value. It is sufficiently complete for a simple status-check tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
No parameters exist, so the baseline is 4. The description adds meaning by specifying what the output covers (health and topic list), which goes beyond the empty schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool returns workspace bus health and topic list, distinguishing it from sibling tools like agentbus_review or agentbus_approve. However, it lacks a verb like 'get' or 'retrieve', making it slightly less directive.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance on when to use this tool versus siblings. The sibling names suggest different purposes (review, approve, lock operations), but no explicit conditions or exclusions are provided.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
1 tool update
v0.23.0- Changed
agentbus_publish1 field changed- added
Input schema / properties / actionAdded value: +{ + "anyOf": [ + { + "additionalProperties": true, + "type": "object" + }, + { + "type": "null" + } + ], + "default": null, + "title": "Action" +}
3 tool updates
v0.18.0- Added
agentbus_poll - Added
agentbus_publish - Added
agentbus_reject
8 tool updates
v0.17.0- Added
agentbus_approve - Added
agentbus_lock_acquire - Added
agentbus_lock_release - Added
agentbus_lock_renew - Added
agentbus_lock_status - Removed
agentbus_publish - Added
agentbus_review - Added
agentbus_status
3 tool updates
v0.16.3- Removed
agentbus_poll - Added
agentbus_publish - Removed
agentbus_reject
8 tool updates
v0.16.3- Removed
agentbus_approve - Removed
agentbus_lock_acquire - Removed
agentbus_lock_release - Removed
agentbus_lock_renew - Removed
agentbus_lock_status - Removed
agentbus_publish - Removed
agentbus_review - Removed
agentbus_status
1 tool update
v0.6.0- Changed
agentbus_publish2 fields changed- added
Input schema / properties / parent_span_idAdded value: +{ + "anyOf": [ + { + "type": "string" + }, + { + "type": "null" + } + ], + "default": null, + "title": "Parent Span Id" +} - added
Input schema / properties / trace_idAdded value: +{ + "anyOf": [ + { + "type": "string" + }, + { + "type": "null" + } + ], + "default": null, + "title": "Trace Id" +}
4 tool updates
v0.4.0- Added
agentbus_approve - Changed
agentbus_publish1 field changed- added
Input schema / properties / sla_timeout_minutesAdded value: +{ + "anyOf": [ + { + "type": "integer" + }, + { + "type": "null" + } + ], + "default": null, + "title": "Sla Timeout Minutes" +}
- Added
agentbus_reject - Added
agentbus_review
4 tool updates
v0.2.0- Added
agentbus_lock_acquire - Added
agentbus_lock_release - Added
agentbus_lock_renew - Added
agentbus_lock_status
3 tool updates
v0.1.0- First observed
agentbus_poll - First observed
agentbus_publish - First observed
agentbus_status
TDQS
Scored across 10 tools
Tools are mostly distinct: publish vs poll vs review vs approve/reject are clearly separated, and lockdown tools (acquire/status/release/renew) are distinguishable. Minor potential overlap between poll and review for fetching events, but descriptions clarify that review shows hidden pending events.
Consistent 'agentbus_' prefix with verb_noun patterns for most tools (e.g., lock_acquire, lock_release, lock_renew). Deviations like 'approve' and 'reject' use a single verb, but they remain readable and fit the domain.
10 tools are well-scoped for an agent bus handling event approval, polling, publishing, and lock leasing. Each tool appears to serve a distinct purpose with no redundancy.
Covers the full lifecycle: publish, poll, review, approve/reject, status, and lock management (acquire, status, renew, release). No obvious gaps for the stated event bus and lock leasing domain.
Maintenance
Related MCP Connectors
Private-by-default, local-first memory/context/task orchestrator for MCP apps and agents.
An agent-native database over MCP: shared, validated, structured records in every AI chat.
System-of-record notebook for AI coding agents: pages, datastores, tasks, skills over MCP.
- memnodeOAuthdev.memnode
Persistent, inspectable memory for AI agents with lineage, correction, and a hosted MCP endpoint.
Related MCP Servers
- AlicenseNot gradedqualityCmaintenanceLocal-first MCP server that enables multiple Claude agents to coordinate through a shared message bus with SQLite persistence and real-time clock anchoring.MIT
- FlicenseNot gradedqualityDmaintenancePersistent, append-only event log for AI agent coordination, enabling agents to publish, query, and react to structured events across tools and sessions.12 npm1-
- FlicenseNot gradedqualityDmaintenanceSQLite-backed MCP server for Claude Code session persistence and multi-agent coordination. Provides tools for session management, event logging, decision tracking, file locking, agent registry, and plan tracking.-
- AlicenseNot gradedqualityFmaintenanceLocal-first, auditable memory for AI agents. Provides durable context for MCP hosts with SQLite storage, CLI, and MCP tools for memory management.2Apache 2.0