arifOS MCP Server

   █████╗ ██████╗ ██╗███████╗ ██████╗ ███████╗
  ██╔══██╗██╔══██╗██║██╔════╝██╔═══██╗██╔════╝
  ███████║██████╔╝██║█████╗  ██║   ██║███████╗
  ██╔══██║██╔══██╗██║██╔══╝  ██║   ██║╚════██║
  ██║  ██║██║  ██║██║██║     ╚██████╔╝███████║
  ╚═╝  ╚═╝╚═╝  ╚═╝╚═╝╚═╝      ╚═════╝ ╚══════╝

  Constitutional AI Governance Kernel
  ─────────────────────────────────────────
  Not a chatbot. Not a model wrapper. The LAW.

DITEMPA BUKAN DIBERI — "Forged, Not Given."

⚠️ PUBLIC REPO NOTICE (2026-07-06): The GitHub repository ariffazil/arifos is a public snapshot and may be archived or significantly behind the live production codebase running on af-forge (72.62.71.199). The live code has active patches for identity verification, schema strictness, CORS hardening, and MCP error handling that are NOT reflected in the public repo. Security audits should target the live deployment, not the public GitHub snapshot. See SECURITY.md for details.

1. What Is arifOS?

arifOS is a constitutional governance kernel that sits between AI agents and their tools, enforcing 13 floors before any irreversible action.

• The law layer — decides what agents must NOT do, so they can be trusted with what they CAN do

• An MCP server — 12 canonical public verbs (F13 SOVEREIGN RATIFIED 2026-07-04; prior freeze was 7). One intent = one public tool. See arifosmcp/PUBLIC_SURFACE_CANON.md.

• A federation hub — 6 live organs (arifOS, A-FORGE, AAA, GEOX, WEALTH, WELL) plus the VAULT999 immutable ledger under one contract

• An immutable ledger — VAULT999: append-only, hash-chained. Every decision sealed forever

• Built for one sovereign — Muhammad Arif bin Fazil. F13 veto is absolute

What it is NOT: an AI model, a chatbot, a startup, LangChain/CrewAI/AutoGen, or a replacement for human judgment.

Related MCP server: attestix

APEX STACK Bridge

APEX THEORY defines the constitutional dynamics of governed intelligence through ΔΩΨ. arifOS compiles those dynamics into an AGI substrate kernel. AAA renders the substrate as visible ASI civilization state. A-FORGE gives the system governed hands. GEOX, WEALTH, and WELL anchor those hands to earth, capital, and human reality. VAULT999 preserves consequence. Arif/F13 remains the sovereign witness and final veto.

arifOS must never: replace human judgment, self-authorize a SEAL, skip 888_JUDGE, or issue verdicts without a constitutional chain.

Full doctrine: GENESIS/040_APEX_STACK.md

2. Quick Start

Human Operators

You don't install arifOS. You interact through:

• AAA Cockpit: https://aaa.arif-fazil.com

• Hermes Telegram: @ASI_arifos_bot

• Health check: https://arifos.arif-fazil.com/health

AI Agents (MCP Clients)

{
  "mcpServers": {
    "arifOS": {
      "url": "https://mcp.arif-fazil.com/mcp",
      "transport": "streamable-http"
    }
  }
}

Developers

pip install arifos                          # from PyPI
# or
git clone git@github.com:ariffazil/arifos.git && cd arifOS
uv sync --all-extras
python -m arifosmcp.runtime.server           # starts on :8088
curl http://127.0.0.1:8088/health            # verify
python -m pytest tests/ -q --tb=short

3. The 12 Canonical Public Tools

Default tools/list is frozen to the 12-verb public facade (arifosmcp/PUBLIC_SURFACE_CANON.md, F13 ratified 2026-07-04). Diagnostic and legacy aliases still exist internally and may surface via governed channels, but they are not on the default public MCP wire surface. arif_seal is no longer public — VAULT999 owns the receipt seal; arif_judge returns SEAL_CANDIDATE.

000 ── 000c ── 000t ──→ 111 / 111f ──→ 333 ──→ 444 ── 555b ──→ 666 ──→ 888 ──→ 900 ──→ 444r
init  canary  triage    observe fetch  think    route   bridge  critique  judge   forge   compose

Iron rules:

• No action skips 888. No organ self-authorizes.

• After 888 → arif_forge; after 888 + reply → arif_compose.

• arif_seal is internal alias only — public sealing route = arif_judge → SEAL_CANDIDATE → VAULT999.

Source of truth: arifosmcp/PUBLIC_SURFACE_CANON.md → arifosmcp/runtime/public_surface.py (CANONICAL_12) → arifosmcp/constitutional_map.py (_PUBLIC_12) → arifosmcp/tool_registry.json (canonical_order) → static/.well-known/mcp/server.json. All SDK aliases (arif_session_init, arif_gateway_connect, arif_forge_execute, arif_heart_critique, arif_mind_reason, arif_reply_compose, arif_evidence_fetch, arif_sense_observe, arif_judge_deliberate) resolve to one of the 12.

4. The 13 Constitutional Floors

Every tool call passes through these. Hard floors block. Soft floors warn.

HARD violation → VOID. Action blocked. SOFT tension → CAUTION/HOLD. Human review. DERIVED → informational only.

Full spec: static/arifos/theory/000/000_CONSTITUTION.md

5. Federation Architecture

arifOS is the kernel. Six organs serve under it. Two edge agents interface with the world.

                         ┌──────────────────────┐
                         │  Arif (F13 SOVEREIGN) │
                         └──────────┬───────────┘
                                    │
       ┌────────────────────────────┼────────────────────────────┐
       │                            │                            │
  ┌────▼─────┐              ┌───────▼───────┐            ┌───────▼───────┐
  │  Hermes  │              │      AAA      │            │   OpenClaw    │
  │  🧠 :8644│              │  🖥️  :3001    │            │   🤖 :18789   │
  │ Telegram │              │   Cockpit     │            │  Transport    │
  └──────────┘              └───────────────┘            └───────────────┘
                                    │
                         ┌──────────▼──────────┐
                         │    arifOS (Ω)        │
                         │    Kernel :8088      │
                         │    F1-F13 · 888 JUDGE│
                         └──┬───┬───┬───┬──────┘
                            │   │   │   │
          ┌─────────────────┼───┼───┼───┼─────────────────┐
          │                 │   │   │   │                 │
    ┌─────▼────┐   ┌───────▼┐ ┌▼─────┐ ┌▼────────┐  ┌────▼─────┐
    │  GEOX    │   │WEALTH  │ │ WELL │ │A-FORGE  │  │ VAULT999 │
    │  🌍 :8081│   │💰:18082│ │🫀:18083│ │⚒️:7071  │  │ 🔒 Seal  │
    │ Evidence │   │Compute │ │Reflect│ │Execute  │  │ Immutable│
    └──────────┘   └────────┘ └──────┘ └─────────┘  └──────────┘

Authority chain: Arif → AAA/Hermes → arifOS kernel → Domain organs → A-FORGE → VAULT999

6. Build, Test, Deploy

# Development
uv sync --all-extras
uv run python -m arifosmcp.runtime.server
python -m pytest tests/ -q --tb=short
ruff check . && ruff format .

# Deploy to VPS
make deploy-local                             # rsync + systemd restart
systemctl status arifos

# Docker
docker build -t ghcr.io/ariffazil/arifos:latest .

7. MCP Connection Guide

Public Endpoint

https://mcp.arif-fazil.com/mcp

Transport: streamable-http. Initialize session first, then call tools.

Internal Organs

Rule: arifOS judges → A-FORGE executes → VAULT999 records. Never skip the chain.

Federation Context (read all 3 for full picture)

🔌 MCP Connection

Connect to arifOS via the Model Context Protocol:

Claude Code / Cursor

Add to your MCP client config:

{
  "mcpServers": {
    "arifos": {
      "url": "https://mcp.arif-fazil.com/mcp"
    }
  }
}

Direct Usage

curl -X POST https://mcp.arif-fazil.com/mcp \
  -H "Content-Type: application/json" \
  -H "Accept: application/json" \
  -d '{"jsonrpc":"2.0","method":"tools/list","id":1}'

Discovery

• Agent Card: https://arifos.arif-fazil.com/.well-known/agent-card.json

• MCP Manifest: https://arifos.arif-fazil.com/.well-known/mcp.json

8. License & Sovereignty

AGPL-3.0. The constitution must remain open. The kernel must remain inspectable.

Muhammad Arif bin Fazil is F13 SOVEREIGN. His veto is absolute. No algorithm overrides. No agent bypasses. No institution supersedes.

arifOS · Port 8088 · 7 canonical public verbs · 13 floors · 6 live organs
AGPL-3.0 · Sovereign: Arif Fazil · Federation: ALIVE
DITEMPA BUKAN DIBERI — 999 SEAL ALIVE