aziel-runtime
Click on "Install Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@aziel-runtimeRun decisiongate_check on 'Ship the catalog.' with evidence 'OpenAPI 3.1'."
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
aziel-runtime
Aziel Eliab Runtime 1.6.0 — FragGate door over the catalog. One door: discover, route, refuse. Hashed registry, thin MCP tools/list, DecisionGATE before exec, ask/refuse ledger. 1.5.0 was the agent-native flat {slug}_{op} pile. Human software — Worker UI, Flutter mobile/, local install, counted /download — stays complete. Catalog + pull + proxy, one session object, in-process engines for every catalog Software slug, plus production gates (/v1/ready, HEAD, no-store, receipt cap 64, session TTL 6h, per-IP rate limits, optional RUNTIME_TOKEN on session mutate).
Kernel: AzielEliab/fraggate (FG-0.1)
open → policy → exec(slug, op, payload) → receipt → close
Agents should not narrate that chain. Prefer fraggate_list then fraggate_call { name, op, payload }.
1.3.0 vendored portable engines (ark, azai Lamb check, azclce, decisiongate, foldlock, zsolver) and ran them in this isolate.
1.2.0 was a session/receipt runtime: exec still upstreamFetched product Workers. Those receipts were not “this process ran FoldLock.”
1.1.0 was catalog + pull + proxy that started calling itself a runtime. Those front doors stay. They are not exec.
For every catalog slug session exec loads a vendored module, computes engine_digest = SHA-256 of that artifact’s bytes, runs the primary compute op inside this Worker isolate (the jail) or a local CLI jail, wipes scratch buffers, and the receipt includes engine_digest, engine_slug, engine_op, ran_in. GET /v1/health engine_slugs equals true_engine_slugs. Ops that literally cannot run without product-Worker bindings (KV / D1 / AI / live media) stay honest per-op proxy_fallback — the slug itself remains a true engine.
Cloudflare’s Worker / Durable Object isolate is the jail. No extra guest isolate is claimed. engine_digest is still required.
Hosted / in-process AZAI is still protocol mirror + Lamb check, not the local blend (azai serve).
ChatGPT GPT Actions, Grok custom tools, and Venice HTTP tools import this OpenAPI file — then use fraggate_call. Session tools and runtime_run are advanced/internal. /p/{slug}/{op} is proxy only and is not the agent default path.
Author: Aziel Eliab
Identity: Aziel Eliab (primary). Also known as Aziel Elroi Eliab (alternateName / aka only).
License: Apache-2.0
Version: 1.6.0
Role: engine-runtime (layer: catalog+pull+proxy+session+in-process-engines+fraggate)
Door: fraggate
Worker: aziel-runtime → https://aziel-runtime.vibelock.workers.dev/
Library front door: https://www.azielcorpuslibrary.net/runtime
Everblooming sigil: https://aziel-runtime.vibelock.workers.dev/sigil.png
Packaging: Worker session + in-repo CLI (node cli/aziel-runtime.mjs) + stdio MCP (node cli/mcp-stdio.mjs / npm run mcp). No counted runtime tarball.
Forks are welcome and always allowed. Do not invent Zenodo DOIs.
Websites / Live sites
This Worker homepage stays the API / MCP / OpenAPI surface. Human site access is the two public sites — Aziel Corpus Library and GodLock.uk — which cross-tether each other and this runtime.
Surface | URL |
Runtime Worker / MCP / OpenAPI | |
Library Runtime front door | |
Aziel Corpus Library | |
Aziel Eliab (library) | |
Software page | |
GodLock.uk | https://godlock.uk — https://godlock.uk/AzielEliab — https://godlock.uk/software |
Repos | https://github.com/AzielEliab/aziel-corpus · https://github.com/AzielEliab/godlock |
Glama MCP listing |
Glama Install Server is stdio via glama.json + Dockerfile on main. See docs/GLAMA.md.
Public identity: Aziel Eliab only. Do not invent Zenodo DOIs.
Related MCP server: Relay
Dual surface (product law)
Agent / MCP — Software runs through the agent. Show
display.title/display.summary/display.fields, then take the next input. Session, OpenAPI, and HTTP plumbing stay invisible unless asked for. One door — discover, route, refuse.Human software — This Worker UI, Flutter
mobile/, local install, and counted/downloadremain complete developed software.
FragGate door
Public MCP tools/list is a thin set (≤ 20): runtime_skill, fraggate_list, fraggate_describe, fraggate_verify, fraggate_call, decisiongate_check, library_lookup, plus catalog helpers. runtime_run is advanced/internal.
Every catalog product is a hashed registry entry (name, slug, digest, status, public ops). Status is live | stub | local_only.
Live on the public mesh (via fraggate_call): DecisionGATE check, GodLock score/submit, FoldLock fold-preview/unfold-preview, AZ-CLCE score/classify/gate, Aziel Digital Library read ops (search/example/skill).
Stub (named, never execute): ARK scorch/wipe/unlock, WhistleLock send, MirageGrid VPN-hop fantasies, AzielTether mesh-join. Most other Locks are local_only — named in the registry, not live as flat MCP tools.
Unknown names refuse FG-HALLUC-TOOL and list the tools that do exist. DecisionGATE runs before any exec side effect; refuse is a typed ResultEnvelope + ledger tip (TemporalLock-shaped hash chain). Mesh is not claimed on this public surface.
curl -s -A 'Mozilla/5.0' https://aziel-runtime.vibelock.workers.dev/v1/fraggate
curl -s -A 'Mozilla/5.0' https://aziel-runtime.vibelock.workers.dev/v1/fraggate/list
curl -s -A 'Mozilla/5.0' -X POST https://aziel-runtime.vibelock.workers.dev/v1/fraggate/call \
-H 'content-type: application/json' \
-d '{"slug":"foldlock","op":"fold-preview","payload":{"text":"the cat and the dog"}}'Session (the actual cut)
SID=$(curl -s -A 'Mozilla/5.0' -X POST https://aziel-runtime.vibelock.workers.dev/v1/session/open \
-H 'content-type: application/json' -d '{}' | jq -r .session.id)
curl -s -A 'Mozilla/5.0' -X POST https://aziel-runtime.vibelock.workers.dev/v1/session/$SID/policy \
-H 'content-type: application/json' \
-d '{"allow_slugs":["azclce","foldlock"],"max_payload_bytes":8192}'
curl -s -A 'Mozilla/5.0' -X POST https://aziel-runtime.vibelock.workers.dev/v1/session/$SID/exec \
-H 'content-type: application/json' \
-d '{"slug":"azclce","op":"score","payload":{"r":"login button blue","d":"login form submits","p":"login button submits"}}'
curl -s -A 'Mozilla/5.0' https://aziel-runtime.vibelock.workers.dev/v1/session/$SID/receipt
curl -s -A 'Mozilla/5.0' https://aziel-runtime.vibelock.workers.dev/v1/session/$SID/receipts
curl -s -A 'Mozilla/5.0' -X POST https://aziel-runtime.vibelock.workers.dev/v1/session/$SID/closeA local exec receipt includes engine_digest, engine_slug, engine_op, ran_in: "aziel-runtime", result digests, and latency — not only an upstream HTTP status. close seals the chain; further exec is HTTP 409. Sessions expire after 6h (410/auto-close). Receipt cap is 64. Session mutate may require Authorization: Bearer … or X-Aziel-Runtime-Token when RUNTIME_TOKEN is set.
Local CLI (Worker client by default; --local writes a session file and prefers vendored engines; --jail runs the engine in a child Node process):
node cli/aziel-runtime.mjs session open --local
node cli/aziel-runtime.mjs session policy --allow-slugs azclce,foldlock
node cli/aziel-runtime.mjs session exec azclce score \
'{"r":"login button blue","d":"login form submits","p":"login button submits"}'
node cli/aziel-runtime.mjs session exec foldlock fold-preview '{"text":"the cat and the dog"}'
node cli/aziel-runtime.mjs session receipt
node cli/aziel-runtime.mjs session closeProof script (local session log): bash scripts/demo-session.sh
Front doors (still useful — not exec)
curl -s -A 'Mozilla/5.0' https://aziel-runtime.vibelock.workers.dev/v1/skill
curl -s -A 'Mozilla/5.0' https://aziel-runtime.vibelock.workers.dev/v1/runtime.json
curl -s -A 'Mozilla/5.0' https://aziel-runtime.vibelock.workers.dev/v1/bundle
curl -s -A 'Mozilla/5.0' https://aziel-runtime.vibelock.workers.dev/v1/pull/foldlock
curl -s -A 'Mozilla/5.0' https://aziel-runtime.vibelock.workers.dev/v1/pull/foldlock/skillProxy (no runtime-owned receipt — not exec):
curl -s -A 'Mozilla/5.0' -X POST https://aziel-runtime.vibelock.workers.dev/p/azclce/score \
-H 'content-type: application/json' \
-d '{"r":"login button blue","d":"login form submits","p":"login button submits"}'Always send User-Agent: Mozilla/5.0.
Quick URLs
What | URL |
Homepage (HTML) | |
Skill | |
FragGate door | |
FragGate kernel | |
Machine manifest ( | |
Session open |
|
Session exec |
|
Session receipt(s) | https://aziel-runtime.vibelock.workers.dev/v1/session/{id}/receipt |
Bundle | |
Pull one product | |
Pull product skill | https://aziel-runtime.vibelock.workers.dev/v1/pull/{slug}/skill |
Combined OpenAPI 3.1 | |
Machine catalog | |
How to cite | |
LLM crawler | https://aziel-runtime.vibelock.workers.dev/llms.txt (also |
robots.txt | |
sitemap.xml | |
sitemap-index.xml | https://aziel-runtime.vibelock.workers.dev/sitemap-index.xml |
MCP (JSON-RPC over HTTP, public, no OAuth) | |
MCP stdio (Glama / Claude Desktop) |
|
Glama listing | |
Health | |
Ready | |
Everblooming sigil |
GET /v1/pull?all=1 is an alias of /v1/bundle.
POST /p/{product}/{op} proxies to the product Worker /v1/{op} with the JSON
body. Service bindings are preferred; public *.vibelock.workers.dev is the
fallback. That path is a proxy, not session exec. Download counters are
not incremented.
This Worker is Worker-only (no counted runtime tarball). The local CLI lives
in-repo and is not a GitBaby /download package. Each product still has its
own counted /download.
How to cite: Eliab, Aziel. (2026). Aziel Eliab Runtime [Software]. Apache-2.0. https://aziel-runtime.vibelock.workers.dev/
Digital Library: Eliab, Aziel. (2026). Aziel Digital Library [Software]. Apache-2.0. https://www.azielcorpuslibrary.net/
Product Worker crawl template: docs/PRODUCT_SEO.md.
Add to ChatGPT (GPT Actions)
Create a GPT (or open GPT Actions).
Import from URL →
https://aziel-runtime.vibelock.workers.dev/openapi.jsonNo authentication. CORS
*.Ask the GPT to call
fraggate_list, thenfraggate_call. Named live modules:decisiongate_check,library_lookup. Session tools andruntime_runare advanced/internal.
Add to Grok
Custom tool / OpenAPI: import
https://aziel-runtime.vibelock.workers.dev/openapi.jsonMCP remote:
POST https://aziel-runtime.vibelock.workers.dev/mcp
Methods:initialize,tools/list,tools/call.
Default: thin FragGate door (fraggate_list,fraggate_describe,fraggate_verify,fraggate_call).
Named live:decisiongate_check,library_lookup. Catalog/pull:runtime_skill,runtime_bundle,runtime_pull.
Advanced/internal:runtime_run,runtime_manifest,runtime_session_*.
Flat{product}_{op}names are not listed. HTTP/p/{product}/{op}is still a proxy (not exec). Public, no OAuth.
Tool results are{ display, result, ledger_tip? }— showdisplayto the user.
Add to Glama (Install Server)
Glama hosts a stdio MCP process. HTTP POST /mcp on the Worker is not enough — without glama.json, cli/mcp-stdio.mjs, and a Dockerfile, the listing says This server cannot be installed.
node cli/mcp-stdio.mjs
npm run mcpDefault mode bridges to POST https://aziel-runtime.vibelock.workers.dev/mcp (User-Agent: Mozilla/5.0). Optional RUNTIME_TOKEN / AZIEL_RUNTIME_TOKEN. --local or AZIEL_RUNTIME_MCP=local runs the same /mcp handler in-process.
docker build -t aziel-runtime-mcp .
docker run --rm -i aziel-runtime-mcpAfter merge: claim on the Glama Score tab (glama.json maintainers = AzielEliab), then admin Dockerfile → Deploy → Make Release so Install Server works. Build steps: npm install --omit=dev. CMD: ["node", "cli/mcp-stdio.mjs"]. Full steps: docs/GLAMA.md. Public identity: Aziel Eliab only.
Add to Venice
Custom HTTP tools / OpenAPI: import the same
https://aziel-runtime.vibelock.workers.dev/openapi.json.
Pull via GET /v1/bundle / GET /v1/pull/{slug}. Session exec is
POST /v1/session/{id}/exec. Proxy remains POST /p/{slug}/{op}.
Honesty banners
Every catalog Software slug is in-process.
engine_slugsequalstrue_engine_slugson/v1/healthand/v1/runtime.json. Binding-only ops stay per-opproxy_fallback.GodLock and MirageGrid are not VPNs and not anonymity networks.
ForgeReceipts is not legal advice and does not contact courts.
ZionPattern Solver never claims more than 75% confidence. It does not solve cases.
VeilLock does not inject into FaceTime or any calling app. YOUR camera/screen only.
AZ-CLCE detects inconsistency, not intent. Type D is a label, not a finding of malice.
ChronoLock is advisory only — not a scheduler, not targeting, not virality. 08:30–10:30 local. Distinct from TemporalLock.
The ARK is not a kernel. Hosted API never unlocks or encrypts with a passphrase and never stores vaults. Sweep is Mode E heuristics only.
AZAI is a local OpenAI-compatible runtime, not a new foundation model. Hosted / in-process
/v1is a protocol mirror + Lamb check, not a provider proxy. Jeeves is not sovereign. Live blend is localazai serve.SpectralLock hosted overlay is a 256px preview, not a spectrometer, not forensic. Full pipeline is the Python package.
EmployeeLock is not a court, not UL, not a truth score. Hosted never stores xlsx. Demo rows are format proof, not case facts.
FoldLock is not zip. Hosted / in-process preview is tether-suppression on small UTF-8 text. Ratios are receipts, not trophies. Short strings can grow.
WhistleLock is a local vault + dead-man copy. Not a mailer. Hosted never holds whistle files.
TrajectoryLock is a research prototype / auditable geometric test. Not a certified forensic instrument. Hosted never stores media. Match probability is P(match | declared model), not P(official account is true). Synthetic examples are not real-case findings.
M.I.A.Lock Doe hits are compatibility leads only — never an ID. Coverage heat is not presence. No live tracking.
Aziel Corpus Library is a public library index + counted PDF/package download. Not a private-file search engine, not Zenodo, not a new Lock engine.
AzielTether is not a VPN. Prefer-central mesh for downloaded Aziel Eliab software; public HTTPS stays mesh-free.
Product slugs → Workers
slug | Worker hostname | example ops | session exec |
vibelock | vibelock-download-tracker | analyze | in-process (features/PCM; no live mic) |
veillock | veillock-download-tracker | apps | in-process (no camera inject) |
codelock | codelock-download-tracker | render | in-process |
godlock | godlock-download-tracker | score, submit | in-process (not a VPN) |
shadowlock | shadowlock-download-tracker | observe | in-process (no OS hook) |
temporallock | temporallock-download-tracker | genesis, append, verify | in-process |
forgereceipts | forgereceipts-download-tracker | receipt | in-process (not legal advice) |
decisiongate | decisiongate-download-tracker | check | in-process |
zsolver | zsolver-download-tracker | patterns, score, session | in-process |
azos | azos-download-tracker | status | in-process (session/exec/lattice per-op proxy) |
glossafilter | glossafilter-download-tracker | render | in-process |
miragegrid | miragegrid-download-tracker | assign | in-process (control-plane; not a hosted VPN hop) |
staticclock | staticclock-download-tracker | advise | in-process |
chronolock | chronolock-download-tracker | advisory, anchors | in-process |
postking | postking-download-tracker | new, move, status | in-process |
azclce | azclce-download-tracker | score, classify, gate | in-process |
ark | ark-download-tracker | sweep, levels | in-process |
azai | azai-download-tracker | health, lamb-check | in-process (Lamb only; not the blend) |
spectrallock | spectrallock-download-tracker | health, modes, overlay | in-process (256px PNG preview) |
azbot | azbot-download-tracker | health, skill, route | in-process (skill router, not a model) |
employeelock | employeelock-download-tracker | health, append-preview, verify-canonical, skill | in-process (no xlsx store) |
foldlock | foldlock-download-tracker | health, fold-preview, unfold-preview, skill | in-process |
whistlelock | whistlelock-download-tracker | health, hash-preview, canon-preview, skill | in-process (no file store) |
trajectorylock | trajectorylock-download-tracker | health, example, analyze, skill | in-process (geometry; no media store) |
mialock | mialock-download-tracker | map, search-options, queries, doe-match, coverage | in-process (leads ≠ ID) |
azieltether | azieltether-download-tracker | health, skill, verify | in-process (not a VPN) |
aziel-corpus | aziel-corpus-download-tracker (www.azielcorpuslibrary.net) | health, search, example, skill | in-process (sample MASTER; live D1/Whisper/OCR per-op proxy) |
Catalog aliases (also accepted on /v1/pull/{slug}): az-clce → azclce,
zion-pattern-solver → zsolver, postking-chess → postking,
aziel-digital-library → aziel-corpus, mia-lock → mialock.
If a sibling /v1 API is not live yet, the proxy returns that Worker's response
(often 404 JSON) and the combined OpenAPI still lists the expected path.
GET /v1/pull/{slug}/skill falls back to a catalog-built skill so an AI can
still invoke.
Vendored engine artifacts live under src/engines/. engine_digest is SHA-256
of those file bytes (sorted path order). Recompute with
node scripts/hash-engines.mjs --write.
Deploy
npx wrangler deployAccount ac575a9b822bea2bed97d0ab73aed238. workers.dev
aziel-runtime.vibelock.workers.dev. No download KV.
1.2.0+ requires Durable Object migration tag v1 (RuntimeSession, SQLite).
The first deploy after the session cut creates the SESSION binding. 1.4.0
does not need a new DO migration — engines run in the same isolate. 1.4.1
reuses that SESSION class. 1.5.0 and 1.6.0 do not need a new DO migration.
Optional production token (session mutate only — catalog / health / runtime / skill / pull stay public):
# wrangler.toml
# [vars]
# REQUIRE_TOKEN = "1"npx wrangler secret put RUNTIME_TOKEN
npx wrangler deploy
node scripts/probe-live.mjsIf RUNTIME_TOKEN is unset and REQUIRE_TOKEN is not 1, sessions stay open
(dev). If the secret is set, POST /v1/session/open|policy|exec|close requires
Authorization: Bearer … or X-Aziel-Runtime-Token. GET /v1/ready is 200
only when the SESSION Durable Object binding is up, and 503 when
REQUIRE_TOKEN=1 and the secret is missing. Authority JSON (/v1/health,
/v1/ready, /v1/runtime.json, /v1/catalog.json) is Cache-Control: no-store.
Receipts cap at 64. Sessions expire after 6h. Per-IP: 20 opens / minute, 60
execs / minute (HTTP 429 JSON).
If this checkout has no wrangler credentials, deploy from the author's machine:
npx wrangler secret put RUNTIME_TOKEN
npx wrangler deploy
node scripts/probe-live.mjs
# confirm GET /v1/health and /v1/ready and /v1/runtime.json version=1.6.0 role=engine-runtime door=fraggate
# confirm engine_slugs == true_engine_slugs == all 27 catalog slugs
# confirm POST /v1/session/open → policy → exec each primary op → receipt has engine_digest + ran_inLibrary /runtime
https://www.azielcorpuslibrary.net/runtime is the Aziel Digital Library front door that points here. After this runtime ships pull APIs, the corpus Worker should advertise and reverse-proxy:
GET https://www.azielcorpuslibrary.net/runtime— human front doorGET https://www.azielcorpuslibrary.net/runtime/v1/skill→ this/v1/skillGET https://www.azielcorpuslibrary.net/runtime/v1/runtime.json→ this/v1/runtime.jsonGET https://www.azielcorpuslibrary.net/runtime/v1/bundle→ this/v1/bundleGET https://www.azielcorpuslibrary.net/runtime/v1/pull/{slug}→ this/v1/pull/{slug}POST https://www.azielcorpuslibrary.net/runtime/v1/session/open→ this session object
See the companion PR on AzielEliab/aziel-corpus.
License
Apache License 2.0. Copyright 2026 Aziel Eliab.
Available Tools
17 toolsdecisiongate_checkRun DecisionGATE on a proposalC
Named live module. Five sequential gates on a proposal. Freedom without clarity is chaos. Also runs automatically inside fraggate_call before exec.
| Name | Required | Description | Default |
|---|---|---|---|
| values | No | ||
| evidence | No | ||
| statement | No | ||
| impact_neg | No | ||
| impact_pos | No | ||
| accountable | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations only declare readOnlyHint=false, leaving the description to explain behavior. It adds that there are five sequential gates and automatic invocation within fraggate_call, but it never says what the gates do, whether the proposal is modified, or what happens on failure.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is short and front-loads the main function, but 'Freedom without clarity is chaos' is philosophical filler that does not help an agent invoke the tool. The useful information is concise but mixed with non-functional text.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With six optional parameters, no output schema, and minimal annotations, the description is too sparse. It omits return behavior, gate semantics, parameter requirements, and side effects, leaving an agent without enough context to call the tool confidently.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0% and the description does not mention any of the six parameters: values, evidence, statement, impact_neg, impact_pos, and accountable. The word 'proposal' gives loose context, but no parameter is explained or mapped to the tool's behavior.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states that the tool runs DecisionGATE as 'five sequential gates on a proposal' and notes it also runs inside fraggate_call, giving a clear action and resource. It doesn't fully differentiate from sibling gate tools, but the core function is identifiable.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies usage by noting DecisionGATE 'runs automatically inside fraggate_call before exec,' which hints that direct invocation is for standalone gating. However, it provides no explicit when-to-use guidance or exclusions relative to siblings like fraggate_verify or fraggate_list.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
fraggate_callCall through FragGateA
CallEnvelope in → DecisionGATE → handler or refuse → ResultEnvelope + ledger tip. Pass name/slug, op, payload. Optional claim (DecisionGATE proposal). Default exec path. Unknown names refuse FG-HALLUC-TOOL.
| Name | Required | Description | Default |
|---|---|---|---|
| op | Yes | Public allowlisted op | |
| name | No | Registry name or slug | |
| slug | No | ||
| claim | No | Optional DecisionGATE proposal (statement, evidence, impacts, values, accountable) | |
| payload | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Without rich annotations, the description discloses a full behavior chain: DecisionGATE evaluation, possible refusal, ResultEnvelope plus ledger tip, and the exact FG-HALLUC-TOOL refusal for unknown names. It does not detail side effects or authorization, but it is far more transparent than a bare mutate verb.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The pipeline notation front-loads the flow and the second sentence packs parameter and error behavior compactly. It is concise and scannable, though slightly cryptic due to the arrow notation.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a 5-parameter tool with no output schema, the description provides enough to attempt a basic call (op/payload/name/slug) and explains refusal, but it leaves ambiguity about whether name/slug is required given the schema marks only op required, and it does not describe the ResultEnvelope or ledger tip shape.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema already documents op, name, and claim; the description adds that name/slug are alternatives and that payload is passed, and clarifies claim is optional. With 60% schema coverage, this is helpful but does not fully define payload, slug, or the DecisionGATE proposal structure beyond the schema's field list.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description names a concrete action—passing a CallEnvelope into FragGate for a handler to process or refuse—and states the result (ResultEnvelope + ledger tip). It clearly implies execution rather than listing or describing registry entries, though it does not explicitly name a sibling to differentiate from.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It gives operational guidance ('Pass name/slug, op, payload', 'Optional claim ... Default exec path') and warns that unknown names refuse, but it never states when to choose fraggate_call over siblings like fraggate_verify, fraggate_describe, or runtime_run. Usage is implied rather than explicitly contrasted.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
fraggate_describeDescribe one registry nameARead-only
Describe one catalog name: live vs stub vs local_only, public ops, digest. Argument: name or slug.
| Name | Required | Description | Default |
|---|---|---|---|
| name | No | ||
| slug | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already carry readOnlyHint=true and openWorldHint=false, and the description's 'Describe' verb is consistent with those, so there is no contradiction. The description adds value by disclosing what the describe output covers (type classification, public ops, digest), but it does not cover error behavior or edge cases such as unknown names.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two short sentences with zero waste; the core purpose and output categories are front-loaded, followed by the single invocation note. Every phrase earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple read-only tool with no output schema, the description compensates by listing the return categories (live/stub/local_only, public ops, digest). It is slightly incomplete on what 'public ops' means and what happens for unrecognized names, but these are minor gaps given the tool's low complexity.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the description must carry the burden, and it does provide the key disambiguation: 'Argument: name or slug' tells the agent the two parameters are alternatives. However, it gives no format guidance or examples for what constitutes a valid name versus a slug, leaving the agent to guess.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific verb ('Describe'), a specific resource ('one catalog name'), and enumerates the returned information ('live vs stub vs local_only, public ops, digest'). It implicitly distinguishes from siblings like fraggate_list by scoping to a single name, though it never names an alternative explicitly.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The singular scope ('one catalog name') implies this is for inspecting a single registry entry rather than listing, verifying, or calling, but there is no explicit when-to-use guidance or mention of alternatives. The 'Argument: name or slug' note is invocation detail, not usage selection guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
fraggate_listList the FragGate registryARead-only
List hashed registry entries (live / stub / local_only). Discover names. Do not invent tools. Kernel: https://github.com/AzielEliab/fraggate
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true and openWorldHint=false. The description adds useful behavior context by defining the entry categories, noting entries are hashed, and warning 'Do not invent tools,' which reinforces that the listed names are authoritative. No contradiction with annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is three short sentences plus a reference URL, front-loads the primary action and scope, and contains no filler. The 'Do not invent tools' warning earns its place, and the kernel URL is compact optional context.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a parameterless list tool with no output schema, the description is largely complete: it names the resource, categories, and purpose. It does not detail the exact response shape, but 'List...entries' and 'Discover names' sufficiently convey what the agent will get from a simple registry listing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
There are zero parameters and schema description coverage is 100%, so the baseline of 4 applies. The description does not need to document parameters; it also correctly implies no arguments are needed to list the registry.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb ('List') and resource ('hashed registry entries') and distinguishes the action from siblings like fraggate_describe, fraggate_verify, and fraggate_call. It also states the entry categories (live/stub/local_only), leaving no ambiguity about what is listed.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
'Discover names' provides clear context for when to call this tool: when the agent needs to know what registry entries exist. It does not name alternatives or explicitly say when not to use it, but with zero parameters and a simple list purpose, the context is sufficient.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
fraggate_verifyVerify a registry name or digestBRead-only
registry.verify — confirm a name or digest against the hashed FragGate registry.
| Name | Required | Description | Default |
|---|---|---|---|
| name | No | ||
| slug | No | ||
| digest | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, so the read-only safety profile is covered by structured data. The description adds one behavioral detail — the registry is 'hashed' — implying matches are validated against stored hashes. However, it does not disclose the output shape, whether matching is exact/fuzzy, or what happens on a failed match. With annotations present, the bar is lower, and the description provides marginal but real added context; a 3 is appropriate.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single 15-word sentence with the verb front-loaded and zero filler. The 'hashed FragGate registry' qualifier earns its place by scoping the verification target. Nothing in the description is redundant with the title or annotations.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool with three undocumented optional parameters, no output schema, and several closely related siblings, the description is too thin. An agent lacks: the return shape, the meaning of 'slug', how parameters combine, and when this tool is preferable to fraggate_describe. The readOnly annotation covers safety but not the operational semantics an agent needs to invoke this correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the description must compensate fully. It does clarify that 'name' and 'digest' are identifier types being checked against the registry, but it never mentions the 'slug' parameter at all, and it gives no hint about how the three optional parameters relate (alternatives? AND? priority?). additionalProperties: true further widens the ambiguity. The description covers two of three params without relational semantics, which is insufficient at 0% schema coverage.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb ('confirm') with a defined resource ('a name or digest against the hashed FragGate registry'), so an agent can tell this performs an existence/authenticity check rather than enumeration or inspection. It is not tautological and adds the meaningful 'hashed' qualifier. It loses one point because it never states what a verification returns (boolean vs. details) and doesn't explicitly distinguish itself from fraggate_describe.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance whatsoever about when to use this tool versus fraggate_list, fraggate_describe, or fraggate_call. The description neither states a triggering condition nor names alternatives. Given a sibling set full of registry tools, the agent is left to guess whether verification is for CI checks, pre-call validation, or ad-hoc lookups.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
library_lookupSearch the Aziel Digital LibraryARead-only
Read-only library lookup (aziel-corpus search / example / skill). Not a private-file search engine.
| Name | Required | Description | Default |
|---|---|---|---|
| q | No | ||
| op | No | search (default), example, or skill |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, and the description reinforces this with 'Read-only' and adds the corpus scope and the exclusion of private-file searches. It does not disclose further behaviors like authentication, rate limits, or return format, but the bar is lowered by the annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two short sentences, front-loaded with the read-only nature and scope. No filler; every phrase adds information.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description is adequate for a simple read-only lookup but leaves the meaning of 'example' and 'skill' modes undefined and does not mention what the response contains or how q behaves across modes. Given no output schema, an agent gets only partial guidance.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema documents op values ('search (default), example, or skill') and the description repeats that mapping with 'aziel-corpus search / example / skill'. The q parameter remains undocumented in both schema and description; only the tool name and 'lookup' imply it is a query string. 50% coverage leaves room for more.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a clear verb and resource: 'Read-only library lookup' of the Aziel Digital Library, with explicit scope (aziel-corpus search/example/skill). The negative clause 'Not a private-file search engine' adds a boundary, though it does not explicitly differentiate from sibling tools like runtime_skill.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Implies usage for aziel-corpus lookups and excludes private-file searches, but provides no explicit when-to-use comparisons or alternatives among the sibling tools. The guidance is inferred rather than stated.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
runtime_bundleList every productARead-only
List every Aziel Eliab product (human/catalog helper). Prefer fraggate_list for the agent door.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The annotations already provide readOnlyHint=true and openWorldHint=false, so the safety and closed-world nature are covered. The description adds scope ('every product') and intended audience ('human/catalog helper'), but it does not describe return shape, ordering, or other runtime behavior beyond what the title and annotations imply. No contradiction exists, but the added behavioral detail is modest.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two short sentences with no filler. The core purpose is front-loaded in the first sentence, and the routing guidance is delivered as a clear, separate second sentence. Every word earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a zero-parameter, read-only list tool, this description is complete enough for an agent to select and invoke it correctly. It states the scope, identifies the intended audience, and explicitly points to the alternative for agent-facing use. With no required arguments and annotations covering safety, nothing critical is missing for invocation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
There are zero specified parameters and zero required parameters, so the description has no parameter burden to carry. The schema is fully covered with no defined properties, and the baseline for zero-parameter tools is 4; nothing in the description is missing on this front.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description starts with a specific verb and resource: 'List every Aziel Eliab product,' and it identifies itself as a 'human/catalog helper,' which separates it from its sibling tools. It also explicitly names fraggate_list as the alternative, so an agent can distinguish the tools without inspecting schemas.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The sentence 'Prefer fraggate_list for the agent door' explicitly tells the agent when not to use this tool and which sibling to prefer instead. The 'human/catalog helper' label establishes the intended context, making the routing guidance direct rather than implied.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
runtime_manifestAdvanced: runtime manifestARead-only
[advanced/internal] Machine manifest (version, role, door=fraggate, engine slugs). Prefer runtime_skill or fraggate_list. Not the default agent path.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true and openWorldHint=false, so the safety profile is covered. The description adds useful context that this is an advanced/internal tool and not the default path, but it does not disclose additional behavioral traits such as output shape, pagination, or failure behavior. This is adequate given the low complexity and annotation coverage.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is very short and front-loaded with the most important information: the tool is advanced/internal and returns a machine manifest with specific fields. The routing guidance and default-path warning are packed into two additional clauses without redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a parameterless, read-only tool with no output schema, the description provides the essential invocation context: what the manifest contains and when to avoid this tool. It does not explain terms like 'door=fraggate' or 'engine slugs,' but for an advanced/internal tool this is likely sufficient for the intended audience.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
There are zero parameters and a vacuous 100% schema description coverage, so the baseline of 4 applies. The description mentions the manifest fields, which is enough context for a no-argument call.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly identifies the resource as a machine manifest and enumerates its contents (version, role, door=fraggate, engine slugs). It does not use a direct verb like 'get' or 'list,' and the distinction from runtime_skill/fraggate_list is more about routing than function, so it stops short of a 5.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It gives explicit alternatives ('Prefer runtime_skill or fraggate_list') and warns this is not the default agent path, which tells an agent when not to use it. However, the positive condition for when runtime_manifest should be chosen is only vaguely implied by '[advanced/internal]', not explicitly stated.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
runtime_pullOpen one productARead-only
Open one product by slug: name, version, skill, download, and ops. Argument: slug.
| Name | Required | Description | Default |
|---|---|---|---|
| slug | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The readOnlyHint annotation already establishes this as a safe read operation, so the description's main job is to add what the tool exposes. It does that by listing the returned aspects (name, version, skill, download, ops), which is useful given there is no output schema. It does not address error behavior or return format, but the annotation lowers the burden here.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is short and front-loaded, with the core action and parameter stated first. The trailing 'Argument: slug' is slightly redundant with the input schema, but the overall wording is efficient and has no filler.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple read-only tool with one parameter, the description provides a workable level of context: the identifying parameter and the main fields returned. However, it leaves some ambiguity around terms like 'ops' and gives no indication of what happens when the slug is not found, so it is adequate but not fully complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 0%, so the description must carry the meaning of the slug parameter. It does indicate that slug is the lookup key for identifying one product, which is the minimum needed for a single required string parameter. It does not provide slug format, constraints, or examples, but the simple one-parameter case is adequately served.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a clear action ('Open') and resource ('one product'), and specifies the identifying key (slug) and the facets returned (name, version, skill, download, ops). It is distinct enough from the sibling runtime_* tools, though it does not explicitly name an alternative.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The usage context is implied: an agent should call this when it needs to open a product by slug. However, there is no explicit guidance on when to prefer this over closely related siblings such as runtime_run, runtime_manifest, or runtime_session_open, and no exclusions are provided.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
runtime_runAdvanced: raw runtime_runC
[advanced/internal] Advanced exec façade. Prefer fraggate_call. Still DecisionGATE-admitted; not a backdoor past the door.
| Name | Required | Description | Default |
|---|---|---|---|
| op | Yes | ||
| slug | Yes | ||
| payload | No | ||
| session_id | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=false. The description adds governance-related behavior: it is 'DecisionGATE-admitted' and 'not a backdoor,' meaning it is still subject to policy checks. This is useful context but does not disclose side effects, state changes, or error behavior beyond the annotation.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is compact—two sentences with no filler. It front-loads the '[advanced/internal]' label and the core governance message. Brevity is achieved, though at the cost of semantic clarity.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With four parameters, no output schema, no parameter documentation, and no description of return values or failure modes, the description is severely incomplete. An agent cannot construct a correct invocation or understand the tool's behavior from this text alone.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0% and the description makes no mention of slug, op, payload, or session_id. There is no explanation of what these parameters mean, how they relate to the execution, or what valid values look like. The agent is left entirely to infer parameter semantics from names alone.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description labels the tool an 'Advanced exec façade' but never states what it executes, what resource it operates on, or what outcome it produces. The phrase 'raw runtime_run' largely restates the tool's name, and while it distinguishes itself from fraggate_call, it fails to define its actual function.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explicitly says 'Prefer fraggate_call,' which gives an alternative and a clear preference. The '[advanced/internal]' tag signals restricted usage context, and 'not a backdoor past the door' clarifies it should not be used to bypass governance. However, it does not specify exactly when an agent should choose this over its siblings.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
runtime_session_closeAdvanced: seal a sessionA
[advanced/internal] Seal a raw session. Further exec is rejected. Prefer leaving sessions to expire unless the user asked to close.
| Name | Required | Description | Default |
|---|---|---|---|
| session_id | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The annotations only indicate readOnlyHint=false, so the description carries the burden of behavioral disclosure. It states that sealing blocks further exec, which is a useful effect. However, it does not disclose whether the action is reversible, whether special permissions are required, or what happens to the session object. For an 'advanced/internal' tool, more transparency about side effects and irreversibility would be expected.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single sentence with a bracketed tag, front-loading the action and its effect. There is no filler or redundancy; every word contributes to understanding the tool's purpose and usage. The structure is efficient and easy to parse.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool has one required parameter, no output schema, and minimal annotations, the description needs to cover parameter semantics, return behavior, and any caveats. It explains the action and usage preference but omits what session_id means, what the tool returns (if anything), and clarifies the meaning of 'raw session.' For an advanced tool, this is a significant gap that could lead to misuse.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema provides zero description for session_id (coverage 0%), and the description does not mention the parameter at all. It gives no indication of what session_id refers to, how to obtain it, or its format. The description focuses entirely on the action, leaving the sole parameter completely ambiguous and forcing the agent to guess from the parameter name alone.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the action ('Seal a raw session') and its immediate effect ('Further exec is rejected'). This is a specific verb+resource combination that distinguishes it from sibling tools like runtime_session_open, runtime_session_exec, and runtime_session_receipt, all of which have different purposes.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides explicit guidance: 'Prefer leaving sessions to expire unless the user asked to close.' This tells the agent when to use the tool (only when explicitly requested) and implies the default alternative (letting sessions expire naturally). While it doesn't name specific sibling tools, the condition is clear and actionable.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
runtime_session_execAdvanced: raw session execC
[advanced/internal] Raw session exec for an already-open session. Prefer fraggate_call. FragGate-admitted on the MCP path. Binding-only ops stay per-op proxy_fallback.
| Name | Required | Description | Default |
|---|---|---|---|
| op | Yes | ||
| slug | Yes | ||
| payload | No | ||
| session_id | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations only indicate readOnlyHint=false and openWorldHint=false, so the description carries the burden of disclosing side effects, security behavior, and operational details. It mentions 'FragGate-admitted on the MCP path' and 'Binding-only ops stay per-op proxy_fallback,' but these phrases are too jargon-heavy to be transparent to an agent. No clear explanation of mutation risks, permissions, or failure behavior is provided.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is short and front-loaded with the main purpose, which is good. However, several clauses are cryptic and likely do not help an agent ('FragGate-admitted on the MCP path,' 'Binding-only ops stay per-op proxy_fallback'). These sentences take up space without adding clear instructional value.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool with four parameters, no output schema, no parameter descriptions, and advanced/internal positioning, this description is far from complete. It lacks guidance on parameter semantics, expected behavior, return values, error cases, and when to override the 'Prefer fraggate_call' advice. An agent would not have enough information to invoke this tool reliably.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, and the description does not explain session_id, slug, op, or payload. The only hint is that the session must already be open, which weakly relates to session_id. There is no meaningful guidance on how to construct op, slug, or payload, making correct invocation very difficult.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states the tool's core function: 'Raw session exec for an already-open session.' It also names fraggate_call as the preferred alternative, which helps differentiate it from a key sibling. However, terms like 'FragGate-admitted' and 'proxy_fallback' are not defined, leaving some ambiguity about what 'exec' actually entails.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives a clear usage signal by saying 'Prefer fraggate_call' and notes that this tool targets an already-open session, which implies a prerequisite. It does not, however, provide explicit conditions or scenarios where raw exec should be chosen over the preferred alternative, beyond labeling it 'advanced/internal.'
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
runtime_session_openAdvanced: open a raw sessionA
[advanced/internal] Open a raw session object. Prefer fraggate_call. Session plumbing stays invisible unless the user asked for the receipt chain.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The annotations only mark readOnlyHint=false and openWorldHint=false, so the description carries most behavioral weight. It adds meaningful context: the operation is internal/advanced, session plumbing is normally hidden, and visible effects appear only when the receipt chain is requested. This is useful, though it does not detail side effects or lifecycle requirements.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two short sentences with no filler. The advanced/internal status is front-loaded, the preferred alternative is immediate, and the usage condition is stated efficiently. Every phrase contributes.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a zero-parameter internal tool with no output schema, the description gives enough to decide when to call it and what to expect at a high level. It could name related lifecycle tools like runtime_session_close or runtime_session_receipt, but the core context is present and not misleading.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
There are zero parameters, so the description has no parameter burden to carry. The schema is fully covered by being empty; no additional parameter explanation is needed. The mention of 'session object' gives semantic context beyond the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific action ('Open a raw session object') and immediately distinguishes itself from the preferred sibling ('Prefer fraggate_call'). The '[advanced/internal]' tag further clarifies it is a low-level alternative, so an agent can differentiate it from normal session tools.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It explicitly names fraggate_call as the preferred alternative and gives a concrete condition for when the raw session is relevant: 'unless the user asked for the receipt chain.' This tells the agent both when not to use the tool and when the advanced path is justified.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
runtime_session_policyAdvanced: attach session policyA
[advanced/internal] Attach allow rules on a raw session. Prefer fraggate_call, which applies defaults. Identity remains Aziel Eliab.
| Name | Required | Description | Default |
|---|---|---|---|
| allow_ops | No | ||
| session_id | Yes | ||
| allow_slugs | No | ||
| kv_increment | No | ||
| max_payload_bytes | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already indicate readOnlyHint=false and openWorldHint=false, so the mutation behavior is covered. The description adds useful context that 'Identity remains Aziel Eliab,' clarifying the auth identity, and notes this operates on a 'raw session.' However, it does not explain what happens to existing rules, whether the policy is immediately applied, or what side effects may occur on the session.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is compact and front-loaded with the important context, action, and alternative routing. Every sentence earns its place, though the final sentence about identity could be more explicitly tied to behavior or authorization.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
This is an advanced tool with five parameters, no output schema, and no parameter-level documentation. The description does not explain return behavior, how allow rules combine with existing session policy, or what kv_increment and max_payload_bytes control. Given the tool's complexity, the description is not complete enough for correct invocation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the description must compensate for parameter meaning. It only vaguely references 'allow rules' without mapping to allow_ops or allow_slugs, and it says nothing about kv_increment or max_payload_bytes. With five parameters and no schema documentation, this is a significant gap.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific verb and resource: 'Attach allow rules on a raw session.' It also distinguishes itself from fraggate_call, which is the default path that 'applies defaults.' The 'advanced/internal' tag further clarifies its targeted role, making the purpose unmistakable.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explicitly names fraggate_call as the preferred alternative and gives a clear reason: it applies defaults. This tells the agent when to choose the sibling instead. However, it does not spell out specific conditions or scenarios where this tool should be selected beyond the 'advanced/internal' signal.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
runtime_session_receiptAdvanced: last session receiptARead-only
[advanced/internal] Read the last receipt for a raw session. Prefer product output (display) unless the user asked for the chain.
| Name | Required | Description | Default |
|---|---|---|---|
| session_id | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already establish readOnlyHint=true, so the description is not burdened with safety disclosure. It adds useful context about the advanced/internal nature and the raw-session scope, but does not explain what a receipt contains or what 'the chain' refers to. This is adequate but not rich.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two short sentences with no filler. The advanced/internal label, the action, and the routing preference are all front-loaded, and every clause adds value.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple read-only tool with one parameter, the description gives enough to identify the tool and basic invocation intent. However, with no output schema and no explanation of receipt contents or the 'chain' concept, an agent may lack sufficient context to interpret the result correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema describes session_id only as a required string, and the description provides zero additional parameter guidance. Because schema description coverage is 0%, the description needed to compensate but did not explain the expected format or meaning of session_id in the context of a raw session.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific action ('Read the last receipt') and a specific resource ('a raw session'), making the core purpose clear. It also frames the tool as advanced/internal, which helps distinguish it from product-facing display tools, although it does not explicitly differentiate from the sibling runtime_session_receipts.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The instruction to prefer product output (display) unless the user asked for 'the chain' provides a concrete when-to-use guideline. It does not name alternatives explicitly, but the directive is actionable enough for an agent deciding between this and a display-oriented tool.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
runtime_session_receiptsAdvanced: session receipt chainARead-only
[advanced/internal] Read the full receipt list for a raw session. Prefer product output unless the user asked for the chain.
| Name | Required | Description | Default |
|---|---|---|---|
| session_id | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, and the description's 'Read' is consistent. The description adds useful context that this is an advanced/internal low-level view and that it returns the full chain, but it does not disclose return structure, ordering, pagination, or empty-result behavior.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two short sentences with no filler: the first defines the tool's scope, the second gives routing guidance. The '[advanced/internal]' tag is front-loaded and informative.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a one-parameter read-only tool, this provides the core call intent and a usage preference. However, with no output schema, terms like 'raw session' and 'chain' are left undefined, and the description does not address possible error conditions or how the receipts are ordered.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the description carries the full parameter-documentation burden. It adds that session_id refers to a raw session and that the tool returns the full receipt list for that session, which is meaningful but still leaves the format or accepted values of a raw session unspecified.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a clear verb ('Read') and a specific resource ('full receipt list for a raw session'), which distinguishes it from the singular runtime_session_receipt sibling and other runtime session tools. It could be stronger by naming the alternative product output tool, but it is not tautological or misleading.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The phrase 'Prefer product output unless the user asked for the chain' gives an explicit when-to-use condition and points away from this tool for normal cases. It is actionable, though it does not name the preferred alternative explicitly.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
runtime_skillHow to use this softwareARead-only
Read how an agent uses Aziel Eliab software: one door — discover, route, refuse. Dual surface: agent chat has no technical UI chrome; Worker / Flutter / local install / counted download stay complete human software.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true and openWorldHint=false. The description adds context beyond that by disclosing the 'one door' agent flow (discover, route, refuse) and the dual surface (agent chat vs. Worker/Flutter/local install), which helps set expectations for what the skill covers.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is short and front-loaded, but the second sentence relies on jargon ('technical UI chrome', 'complete human software', 'counted download') that may confuse rather than clarify. It earns its place conceptually but is not as crisp as it could be.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a no-parameter, read-only skill the description conveys the general purpose, but it leaves the 'discover, route, refuse' process unexplained and does not state what the returned content looks like. Given no output schema, a slightly more explicit account of what the agent will receive would make it complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool has zero parameters and schema coverage is 100%, so the baseline is 4. There are no parameter semantics to clarify, and the description correctly spends no space on inputs.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The opening 'Read how an agent uses Aziel Eliab software' gives a clear verb and resource, and the title 'How to use this software' reinforces it. The following 'one door — discover, route, refuse' is cryptic, but the core purpose is still identifiable and distinct from the runtime_bundle/fraggate siblings.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The imperative 'Read how an agent uses...' implies this is the orientation/entry point for understanding the software. However, it does not explicitly state when to prefer this tool over runtime_manifest, runtime_session_policy, or other siblings, nor give any when-not-to-use conditions.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections. Dates show when Glama detected each change.
110 tool updates
- Removed
ark_health - Removed
ark_levels - Removed
ark_skill - Removed
ark_sweep - Removed
azai_health - Removed
azai_lamb_check - Removed
azai_lamb-check - Removed
azai_skill - Removed
azbot_health - Removed
azbot_route - Removed
azbot_skill - Removed
azclce_classify - Removed
azclce_gate - Removed
azclce_health - Removed
azclce_score - Removed
azclce_skill - Removed
aziel-corpus_example - Removed
aziel-corpus_health - Removed
aziel-corpus_search - Removed
aziel-corpus_skill - Removed
azieltether_health - Removed
azieltether_skill - Removed
azieltether_verify - Removed
azos_health - Removed
azos_skill - Removed
azos_status - Removed
chronolock_advisory - Removed
chronolock_anchors - Removed
chronolock_health - Removed
chronolock_skill - Removed
codelock_health - Removed
codelock_render - Removed
codelock_skill - Changed
decisiongate_check2 fields changed- removed
Input schema / descriptionRemoved value: -"Pass { statement, evidence, impact_pos, impact_neg, values, accountable }. Freedom without clarity is chaos" - added
Input schema / propertiesAdded value: +{ + "accountable": { + "type": "string" + }, + "evidence": { + "items": { + "type": "string" + }, + "type": "array" + }, + "impact_neg": { + "items": { + "type": "string" + }, + "type": "array" + }, + "impact_pos": { + "items": { + "type": "string" + }, + "type": "array" + }, + "statement": { + "type": "string" + }, + "values": { + "items": { + "type": "string" + }, + "type": "array" + } +}
- Removed
decisiongate_health - Removed
decisiongate_skill - Removed
employeelock_append-preview - Removed
employeelock_health - Removed
employeelock_skill - Removed
employeelock_verify-canonical - Removed
foldlock_fold-preview - Removed
foldlock_health - Removed
foldlock_skill - Removed
foldlock_unfold-preview - Removed
forgereceipts_health - Removed
forgereceipts_receipt - Removed
forgereceipts_skill - Added
fraggate_call - Added
fraggate_describe - Added
fraggate_list - Added
fraggate_verify - Removed
glossafilter_health - Removed
glossafilter_render - Removed
glossafilter_skill - Removed
godlock_health - Removed
godlock_score - Removed
godlock_skill - Removed
godlock_submit - Added
library_lookup - Removed
mialock_coverage - Removed
mialock_doe-match - Removed
mialock_example - Removed
mialock_health - Removed
mialock_map - Removed
mialock_queries - Removed
mialock_search-options - Removed
mialock_skill - Removed
miragegrid_assign - Removed
miragegrid_health - Removed
miragegrid_skill - Removed
postking_health - Removed
postking_move - Removed
postking_new - Removed
postking_skill - Removed
postking_status - Changed
runtime_run4 fields changed- removed
Input schema / properties / op / descriptionRemoved value: -"Product verb, e.g. fold-preview, submit, score" - removed
Input schema / properties / payload / descriptionRemoved value: -"What the software needs as input" - removed
Input schema / properties / session_id / descriptionRemoved value: -"Optional. Reuse an open session." - removed
Input schema / properties / slug / descriptionRemoved value: -"Product slug, e.g. foldlock, godlock, azclce"
- Removed
shadowlock_health - Removed
shadowlock_observe - Removed
shadowlock_skill - Removed
spectrallock_health - Removed
spectrallock_modes - Removed
spectrallock_overlay - Removed
spectrallock_skill - Removed
staticclock_advise - Removed
staticclock_health - Removed
staticclock_skill - Removed
temporallock_append - Removed
temporallock_genesis - Removed
temporallock_health - Removed
temporallock_skill - Removed
temporallock_verify - Removed
trajectorylock_analyze - Removed
trajectorylock_example - Removed
trajectorylock_health - Removed
trajectorylock_skill - Removed
veillock_apps - Removed
veillock_health - Removed
veillock_skill - Removed
vibelock_analyze - Removed
vibelock_health - Removed
vibelock_skill - Removed
whistlelock_canon-preview - Removed
whistlelock_hash-preview - Removed
whistlelock_health - Removed
whistlelock_skill - Removed
zsolver_health - Removed
zsolver_patterns - Removed
zsolver_score - Removed
zsolver_session - Removed
zsolver_skill
115 tool updates
v1.5.0- First observed
ark_health - First observed
ark_levels - First observed
ark_skill - First observed
ark_sweep - First observed
azai_health - First observed
azai_lamb_check - First observed
azai_lamb-check - First observed
azai_skill - First observed
azbot_health - First observed
azbot_route - First observed
azbot_skill - First observed
azclce_classify - First observed
azclce_gate - First observed
azclce_health - First observed
azclce_score - First observed
azclce_skill - First observed
aziel-corpus_example - First observed
aziel-corpus_health - First observed
aziel-corpus_search - First observed
aziel-corpus_skill - First observed
azieltether_health - First observed
azieltether_skill - First observed
azieltether_verify - First observed
azos_health - First observed
azos_skill - First observed
azos_status - First observed
chronolock_advisory - First observed
chronolock_anchors - First observed
chronolock_health - First observed
chronolock_skill - First observed
codelock_health - First observed
codelock_render - First observed
codelock_skill - First observed
decisiongate_check - First observed
decisiongate_health - First observed
decisiongate_skill - First observed
employeelock_append-preview - First observed
employeelock_health - First observed
employeelock_skill - First observed
employeelock_verify-canonical - First observed
foldlock_fold-preview - First observed
foldlock_health - First observed
foldlock_skill - First observed
foldlock_unfold-preview - First observed
forgereceipts_health - First observed
forgereceipts_receipt - First observed
forgereceipts_skill - First observed
glossafilter_health - First observed
glossafilter_render - First observed
glossafilter_skill - First observed
godlock_health - First observed
godlock_score - First observed
godlock_skill - First observed
godlock_submit - First observed
mialock_coverage - First observed
mialock_doe-match - First observed
mialock_example - First observed
mialock_health - First observed
mialock_map - First observed
mialock_queries - First observed
mialock_search-options - First observed
mialock_skill - First observed
miragegrid_assign - First observed
miragegrid_health - First observed
miragegrid_skill - First observed
postking_health - First observed
postking_move - First observed
postking_new - First observed
postking_skill - First observed
postking_status - First observed
runtime_bundle - First observed
runtime_manifest - First observed
runtime_pull - First observed
runtime_run - First observed
runtime_session_close - First observed
runtime_session_exec - First observed
runtime_session_open - First observed
runtime_session_policy - First observed
runtime_session_receipt - First observed
runtime_session_receipts - First observed
runtime_skill - First observed
shadowlock_health - First observed
shadowlock_observe - First observed
shadowlock_skill - First observed
spectrallock_health - First observed
spectrallock_modes - First observed
spectrallock_overlay - First observed
spectrallock_skill - First observed
staticclock_advise - First observed
staticclock_health - First observed
staticclock_skill - First observed
temporallock_append - First observed
temporallock_genesis - First observed
temporallock_health - First observed
temporallock_skill - First observed
temporallock_verify - First observed
trajectorylock_analyze - First observed
trajectorylock_example - First observed
trajectorylock_health - First observed
trajectorylock_skill - First observed
veillock_apps - First observed
veillock_health - First observed
veillock_skill - First observed
vibelock_analyze - First observed
vibelock_health - First observed
vibelock_skill - First observed
whistlelock_canon-preview - First observed
whistlelock_hash-preview - First observed
whistlelock_health - First observed
whistlelock_skill - First observed
zsolver_health - First observed
zsolver_patterns - First observed
zsolver_score - First observed
zsolver_session - First observed
zsolver_skill
TDQS
The core fraggate_* tools and session lifecycle are mostly distinct, but fraggate_call, runtime_run, and runtime_session_exec all describe execution paths, and fraggate_list vs runtime_bundle both list catalog-like data. The internal/advanced labels and 'prefer fraggate_call' notes help, but the overlap still creates misselection risk.
Names are all lowercase snake_case, and fraggate_* and runtime_session_* are internally consistent, but the server mixes noun-style names like runtime_manifest and runtime_skill with verb-style names like runtime_pull and runtime_run. It is readable by family, but not one predictable pattern.
17 tools is at the heavy end for an MCP server, and several are advanced/internal session or exec variants that duplicate the default fraggate_call path. The core registry, decision gate, product, and library surface could likely be delivered in fewer tools.
The set covers registry discovery, verification, calling, product manifests/pulls, library lookup, and a full raw-session lifecycle, so the main workflows are covered. Missing registry entry creation/update/deletion and direct ledger inspection appear intentional, but agents may still need to work around those gaps.
Maintenance
Related MCP Connectors
Discover and call 10,000+ production APIs from one MCP server. Pay-per-call billing for AI agents.
The OpenRouter for tools. One MCP connection gives any AI agent 254 hosted tools, pay per call.
471Connect MCP clients to 2,000+ AI models without managing provider API keys.
A managed runtime for custom API integrations. Manage lines, endpoints, keys, logs and DLQ via MCP.
Related MCP Servers
- AlicenseAqualityDmaintenanceAggregates tools from multiple MCP servers, acting as a proxy to provide unified access to various AI agents and tools.10153MIT
- AlicenseNot gradedqualityDmaintenanceEnables AI agents to access a unified catalog of tools from various APIs (OpenAPI, GraphQL, MCP, Google Discovery) through the MCP protocol.MIT
- AlicenseNot gradedqualityCmaintenanceAggregates multiple OpenAPI specifications into a single searchable MCP server, enabling AI agents to query API endpoints across all services using natural language.MIT
- AlicenseNot gradedqualityAmaintenanceCentralizes OAuth connections and tool access for AI agents, providing a single credential to call multiple services via MCP and REST with consistent errors and pagination.7894Apache 2.0
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/AzielEliab/aziel-runtime'
If you have feedback or need assistance with the MCP directory API, please join our Discord server