MCP server that certifies or refutes the soundness of linear integer guards over declared boxes, returning concrete counterexamples when unsound and honest refusals when the domain is too large.
A model checker as an MCP server that lets agents verify state machines with declarative specs, returning a verdict and shortest counterexample when a property fails.