Skip to main content
Glama

aziel-runtime

Aziel Eliab Runtime 1.6.0FragGate door over the catalog. One door: discover, route, refuse. Hashed registry, thin MCP tools/list, DecisionGATE before exec, ask/refuse ledger. 1.5.0 was the agent-native flat {slug}_{op} pile. Human software — Worker UI, Flutter mobile/, local install, counted /download — stays complete. Catalog + pull + proxy, one session object, in-process engines for every catalog Software slug, plus production gates (/v1/ready, HEAD, no-store, receipt cap 64, session TTL 6h, per-IP rate limits, optional RUNTIME_TOKEN on session mutate).

Kernel: AzielEliab/fraggate (FG-0.1)

open → policy → exec(slug, op, payload) → receipt → close

Agents should not narrate that chain. Prefer fraggate_list then fraggate_call { name, op, payload }.

1.3.0 vendored portable engines (ark, azai Lamb check, azclce, decisiongate, foldlock, zsolver) and ran them in this isolate.

1.2.0 was a session/receipt runtime: exec still upstreamFetched product Workers. Those receipts were not “this process ran FoldLock.”

1.1.0 was catalog + pull + proxy that started calling itself a runtime. Those front doors stay. They are not exec.

For every catalog slug session exec loads a vendored module, computes engine_digest = SHA-256 of that artifact’s bytes, runs the primary compute op inside this Worker isolate (the jail) or a local CLI jail, wipes scratch buffers, and the receipt includes engine_digest, engine_slug, engine_op, ran_in. GET /v1/health engine_slugs equals true_engine_slugs. Ops that literally cannot run without product-Worker bindings (KV / D1 / AI / live media) stay honest per-op proxy_fallback — the slug itself remains a true engine.

Cloudflare’s Worker / Durable Object isolate is the jail. No extra guest isolate is claimed. engine_digest is still required.

Hosted / in-process AZAI is still protocol mirror + Lamb check, not the local blend (azai serve).

ChatGPT GPT Actions, Grok custom tools, and Venice HTTP tools import this OpenAPI file — then use fraggate_call. Session tools and runtime_run are advanced/internal. /p/{slug}/{op} is proxy only and is not the agent default path.

Author: Aziel Eliab
Identity: Aziel Eliab (primary). Also known as Aziel Elroi Eliab (alternateName / aka only).
License: Apache-2.0
Version: 1.6.0
Role: engine-runtime (layer: catalog+pull+proxy+session+in-process-engines+fraggate)
Door: fraggate
Worker: aziel-runtimehttps://aziel-runtime.vibelock.workers.dev/
Library front door: https://www.azielcorpuslibrary.net/runtime
Everblooming sigil: https://aziel-runtime.vibelock.workers.dev/sigil.png
Packaging: Worker session + in-repo CLI (node cli/aziel-runtime.mjs) + stdio MCP (node cli/mcp-stdio.mjs / npm run mcp). No counted runtime tarball.

Forks are welcome and always allowed. Do not invent Zenodo DOIs.

Websites / Live sites

This Worker homepage stays the API / MCP / OpenAPI surface. Human site access is the two public sites — Aziel Corpus Library and GodLock.uk — which cross-tether each other and this runtime.

Glama Install Server is stdio via glama.json + Dockerfile on main. See docs/GLAMA.md.

Public identity: Aziel Eliab only. Do not invent Zenodo DOIs.

Related MCP server: Relay

Dual surface (product law)

  1. Agent / MCP — Software runs through the agent. Show display.title / display.summary / display.fields, then take the next input. Session, OpenAPI, and HTTP plumbing stay invisible unless asked for. One door — discover, route, refuse.

  2. Human software — This Worker UI, Flutter mobile/, local install, and counted /download remain complete developed software.

FragGate door

Public MCP tools/list is a thin set (≤ 20): runtime_skill, fraggate_list, fraggate_describe, fraggate_verify, fraggate_call, decisiongate_check, library_lookup, plus catalog helpers. runtime_run is advanced/internal.

Every catalog product is a hashed registry entry (name, slug, digest, status, public ops). Status is live | stub | local_only.

Live on the public mesh (via fraggate_call): DecisionGATE check, GodLock score/submit, FoldLock fold-preview/unfold-preview, AZ-CLCE score/classify/gate, Aziel Digital Library read ops (search/example/skill).

Stub (named, never execute): ARK scorch/wipe/unlock, WhistleLock send, MirageGrid VPN-hop fantasies, AzielTether mesh-join. Most other Locks are local_only — named in the registry, not live as flat MCP tools.

Unknown names refuse FG-HALLUC-TOOL and list the tools that do exist. DecisionGATE runs before any exec side effect; refuse is a typed ResultEnvelope + ledger tip (TemporalLock-shaped hash chain). Mesh is not claimed on this public surface.

curl -s -A 'Mozilla/5.0' https://aziel-runtime.vibelock.workers.dev/v1/fraggate
curl -s -A 'Mozilla/5.0' https://aziel-runtime.vibelock.workers.dev/v1/fraggate/list
curl -s -A 'Mozilla/5.0' -X POST https://aziel-runtime.vibelock.workers.dev/v1/fraggate/call \
  -H 'content-type: application/json' \
  -d '{"slug":"foldlock","op":"fold-preview","payload":{"text":"the cat and the dog"}}'

Session (the actual cut)

SID=$(curl -s -A 'Mozilla/5.0' -X POST https://aziel-runtime.vibelock.workers.dev/v1/session/open \
  -H 'content-type: application/json' -d '{}' | jq -r .session.id)

curl -s -A 'Mozilla/5.0' -X POST https://aziel-runtime.vibelock.workers.dev/v1/session/$SID/policy \
  -H 'content-type: application/json' \
  -d '{"allow_slugs":["azclce","foldlock"],"max_payload_bytes":8192}'

curl -s -A 'Mozilla/5.0' -X POST https://aziel-runtime.vibelock.workers.dev/v1/session/$SID/exec \
  -H 'content-type: application/json' \
  -d '{"slug":"azclce","op":"score","payload":{"r":"login button blue","d":"login form submits","p":"login button submits"}}'

curl -s -A 'Mozilla/5.0' https://aziel-runtime.vibelock.workers.dev/v1/session/$SID/receipt
curl -s -A 'Mozilla/5.0' https://aziel-runtime.vibelock.workers.dev/v1/session/$SID/receipts
curl -s -A 'Mozilla/5.0' -X POST https://aziel-runtime.vibelock.workers.dev/v1/session/$SID/close

A local exec receipt includes engine_digest, engine_slug, engine_op, ran_in: "aziel-runtime", result digests, and latency — not only an upstream HTTP status. close seals the chain; further exec is HTTP 409. Sessions expire after 6h (410/auto-close). Receipt cap is 64. Session mutate may require Authorization: Bearer … or X-Aziel-Runtime-Token when RUNTIME_TOKEN is set.

Local CLI (Worker client by default; --local writes a session file and prefers vendored engines; --jail runs the engine in a child Node process):

node cli/aziel-runtime.mjs session open --local
node cli/aziel-runtime.mjs session policy --allow-slugs azclce,foldlock
node cli/aziel-runtime.mjs session exec azclce score \
  '{"r":"login button blue","d":"login form submits","p":"login button submits"}'
node cli/aziel-runtime.mjs session exec foldlock fold-preview '{"text":"the cat and the dog"}'
node cli/aziel-runtime.mjs session receipt
node cli/aziel-runtime.mjs session close

Proof script (local session log): bash scripts/demo-session.sh

Front doors (still useful — not exec)

curl -s -A 'Mozilla/5.0' https://aziel-runtime.vibelock.workers.dev/v1/skill
curl -s -A 'Mozilla/5.0' https://aziel-runtime.vibelock.workers.dev/v1/runtime.json
curl -s -A 'Mozilla/5.0' https://aziel-runtime.vibelock.workers.dev/v1/bundle
curl -s -A 'Mozilla/5.0' https://aziel-runtime.vibelock.workers.dev/v1/pull/foldlock
curl -s -A 'Mozilla/5.0' https://aziel-runtime.vibelock.workers.dev/v1/pull/foldlock/skill

Proxy (no runtime-owned receipt — not exec):

curl -s -A 'Mozilla/5.0' -X POST https://aziel-runtime.vibelock.workers.dev/p/azclce/score \
  -H 'content-type: application/json' \
  -d '{"r":"login button blue","d":"login form submits","p":"login button submits"}'

Always send User-Agent: Mozilla/5.0.

Quick URLs

What

URL

Homepage (HTML)

https://aziel-runtime.vibelock.workers.dev/

Skill

https://aziel-runtime.vibelock.workers.dev/v1/skill

FragGate door

https://aziel-runtime.vibelock.workers.dev/v1/fraggate

FragGate kernel

https://github.com/AzielEliab/fraggate

Machine manifest (role=engine-runtime)

https://aziel-runtime.vibelock.workers.dev/v1/runtime.json

Session open

POST https://aziel-runtime.vibelock.workers.dev/v1/session/open

Session exec

POST https://aziel-runtime.vibelock.workers.dev/v1/session/{id}/exec

Session receipt(s)

https://aziel-runtime.vibelock.workers.dev/v1/session/{id}/receipt

Bundle

https://aziel-runtime.vibelock.workers.dev/v1/bundle

Pull one product

https://aziel-runtime.vibelock.workers.dev/v1/pull/{slug}

Pull product skill

https://aziel-runtime.vibelock.workers.dev/v1/pull/{slug}/skill

Combined OpenAPI 3.1

https://aziel-runtime.vibelock.workers.dev/openapi.json

Machine catalog

https://aziel-runtime.vibelock.workers.dev/v1/catalog.json

How to cite

https://aziel-runtime.vibelock.workers.dev/cite.json

LLM crawler

https://aziel-runtime.vibelock.workers.dev/llms.txt (also /ai.txt)

robots.txt

https://aziel-runtime.vibelock.workers.dev/robots.txt

sitemap.xml

https://aziel-runtime.vibelock.workers.dev/sitemap.xml

sitemap-index.xml

https://aziel-runtime.vibelock.workers.dev/sitemap-index.xml

MCP (JSON-RPC over HTTP, public, no OAuth)

POST https://aziel-runtime.vibelock.workers.dev/mcp

MCP stdio (Glama / Claude Desktop)

node cli/mcp-stdio.mjsdocs/GLAMA.md

Glama listing

https://glama.ai/mcp/servers/AzielEliab/aziel-runtime

Health

https://aziel-runtime.vibelock.workers.dev/v1/health

Ready

https://aziel-runtime.vibelock.workers.dev/v1/ready

Everblooming sigil

https://aziel-runtime.vibelock.workers.dev/sigil.png

GET /v1/pull?all=1 is an alias of /v1/bundle.

POST /p/{product}/{op} proxies to the product Worker /v1/{op} with the JSON body. Service bindings are preferred; public *.vibelock.workers.dev is the fallback. That path is a proxy, not session exec. Download counters are not incremented.

This Worker is Worker-only (no counted runtime tarball). The local CLI lives in-repo and is not a GitBaby /download package. Each product still has its own counted /download.

How to cite: Eliab, Aziel. (2026). Aziel Eliab Runtime [Software]. Apache-2.0. https://aziel-runtime.vibelock.workers.dev/

Digital Library: Eliab, Aziel. (2026). Aziel Digital Library [Software]. Apache-2.0. https://www.azielcorpuslibrary.net/

Product Worker crawl template: docs/PRODUCT_SEO.md.

Add to ChatGPT (GPT Actions)

  1. Create a GPT (or open GPT Actions).

  2. Import from URLhttps://aziel-runtime.vibelock.workers.dev/openapi.json

  3. No authentication. CORS *.

  4. Ask the GPT to call fraggate_list, then fraggate_call. Named live modules: decisiongate_check, library_lookup. Session tools and runtime_run are advanced/internal.

Add to Grok

  • Custom tool / OpenAPI: import https://aziel-runtime.vibelock.workers.dev/openapi.json

  • MCP remote: POST https://aziel-runtime.vibelock.workers.dev/mcp
    Methods: initialize, tools/list, tools/call.
    Default: thin FragGate door (fraggate_list, fraggate_describe, fraggate_verify, fraggate_call).
    Named live: decisiongate_check, library_lookup. Catalog/pull: runtime_skill, runtime_bundle, runtime_pull.
    Advanced/internal: runtime_run, runtime_manifest, runtime_session_*.
    Flat {product}_{op} names are not listed. HTTP /p/{product}/{op} is still a proxy (not exec). Public, no OAuth.
    Tool results are { display, result, ledger_tip? } — show display to the user.

Add to Glama (Install Server)

Glama hosts a stdio MCP process. HTTP POST /mcp on the Worker is not enough — without glama.json, cli/mcp-stdio.mjs, and a Dockerfile, the listing says This server cannot be installed.

node cli/mcp-stdio.mjs
npm run mcp

Default mode bridges to POST https://aziel-runtime.vibelock.workers.dev/mcp (User-Agent: Mozilla/5.0). Optional RUNTIME_TOKEN / AZIEL_RUNTIME_TOKEN. --local or AZIEL_RUNTIME_MCP=local runs the same /mcp handler in-process.

docker build -t aziel-runtime-mcp .
docker run --rm -i aziel-runtime-mcp

After merge: claim on the Glama Score tab (glama.json maintainers = AzielEliab), then admin Dockerfile → DeployMake Release so Install Server works. Build steps: npm install --omit=dev. CMD: ["node", "cli/mcp-stdio.mjs"]. Full steps: docs/GLAMA.md. Public identity: Aziel Eliab only.

Add to Venice

Custom HTTP tools / OpenAPI: import the same https://aziel-runtime.vibelock.workers.dev/openapi.json. Pull via GET /v1/bundle / GET /v1/pull/{slug}. Session exec is POST /v1/session/{id}/exec. Proxy remains POST /p/{slug}/{op}.

Honesty banners

  • Every catalog Software slug is in-process. engine_slugs equals true_engine_slugs on /v1/health and /v1/runtime.json. Binding-only ops stay per-op proxy_fallback.

  • GodLock and MirageGrid are not VPNs and not anonymity networks.

  • ForgeReceipts is not legal advice and does not contact courts.

  • ZionPattern Solver never claims more than 75% confidence. It does not solve cases.

  • VeilLock does not inject into FaceTime or any calling app. YOUR camera/screen only.

  • AZ-CLCE detects inconsistency, not intent. Type D is a label, not a finding of malice.

  • ChronoLock is advisory only — not a scheduler, not targeting, not virality. 08:30–10:30 local. Distinct from TemporalLock.

  • The ARK is not a kernel. Hosted API never unlocks or encrypts with a passphrase and never stores vaults. Sweep is Mode E heuristics only.

  • AZAI is a local OpenAI-compatible runtime, not a new foundation model. Hosted / in-process /v1 is a protocol mirror + Lamb check, not a provider proxy. Jeeves is not sovereign. Live blend is local azai serve.

  • SpectralLock hosted overlay is a 256px preview, not a spectrometer, not forensic. Full pipeline is the Python package.

  • EmployeeLock is not a court, not UL, not a truth score. Hosted never stores xlsx. Demo rows are format proof, not case facts.

  • FoldLock is not zip. Hosted / in-process preview is tether-suppression on small UTF-8 text. Ratios are receipts, not trophies. Short strings can grow.

  • WhistleLock is a local vault + dead-man copy. Not a mailer. Hosted never holds whistle files.

  • TrajectoryLock is a research prototype / auditable geometric test. Not a certified forensic instrument. Hosted never stores media. Match probability is P(match | declared model), not P(official account is true). Synthetic examples are not real-case findings.

  • M.I.A.Lock Doe hits are compatibility leads only — never an ID. Coverage heat is not presence. No live tracking.

  • Aziel Corpus Library is a public library index + counted PDF/package download. Not a private-file search engine, not Zenodo, not a new Lock engine.

  • AzielTether is not a VPN. Prefer-central mesh for downloaded Aziel Eliab software; public HTTPS stays mesh-free.

Product slugs → Workers

slug

Worker hostname

example ops

session exec

vibelock

vibelock-download-tracker

analyze

in-process (features/PCM; no live mic)

veillock

veillock-download-tracker

apps

in-process (no camera inject)

codelock

codelock-download-tracker

render

in-process

godlock

godlock-download-tracker

score, submit

in-process (not a VPN)

shadowlock

shadowlock-download-tracker

observe

in-process (no OS hook)

temporallock

temporallock-download-tracker

genesis, append, verify

in-process

forgereceipts

forgereceipts-download-tracker

receipt

in-process (not legal advice)

decisiongate

decisiongate-download-tracker

check

in-process

zsolver

zsolver-download-tracker

patterns, score, session

in-process

azos

azos-download-tracker

status

in-process (session/exec/lattice per-op proxy)

glossafilter

glossafilter-download-tracker

render

in-process

miragegrid

miragegrid-download-tracker

assign

in-process (control-plane; not a hosted VPN hop)

staticclock

staticclock-download-tracker

advise

in-process

chronolock

chronolock-download-tracker

advisory, anchors

in-process

postking

postking-download-tracker

new, move, status

in-process

azclce

azclce-download-tracker

score, classify, gate

in-process

ark

ark-download-tracker

sweep, levels

in-process

azai

azai-download-tracker

health, lamb-check

in-process (Lamb only; not the blend)

spectrallock

spectrallock-download-tracker

health, modes, overlay

in-process (256px PNG preview)

azbot

azbot-download-tracker

health, skill, route

in-process (skill router, not a model)

employeelock

employeelock-download-tracker

health, append-preview, verify-canonical, skill

in-process (no xlsx store)

foldlock

foldlock-download-tracker

health, fold-preview, unfold-preview, skill

in-process

whistlelock

whistlelock-download-tracker

health, hash-preview, canon-preview, skill

in-process (no file store)

trajectorylock

trajectorylock-download-tracker

health, example, analyze, skill

in-process (geometry; no media store)

mialock

mialock-download-tracker

map, search-options, queries, doe-match, coverage

in-process (leads ≠ ID)

azieltether

azieltether-download-tracker

health, skill, verify

in-process (not a VPN)

aziel-corpus

aziel-corpus-download-tracker (www.azielcorpuslibrary.net)

health, search, example, skill

in-process (sample MASTER; live D1/Whisper/OCR per-op proxy)

Catalog aliases (also accepted on /v1/pull/{slug}): az-clce → azclce, zion-pattern-solver → zsolver, postking-chess → postking, aziel-digital-library → aziel-corpus, mia-lock → mialock.

If a sibling /v1 API is not live yet, the proxy returns that Worker's response (often 404 JSON) and the combined OpenAPI still lists the expected path. GET /v1/pull/{slug}/skill falls back to a catalog-built skill so an AI can still invoke.

Vendored engine artifacts live under src/engines/. engine_digest is SHA-256 of those file bytes (sorted path order). Recompute with node scripts/hash-engines.mjs --write.

Deploy

npx wrangler deploy

Account ac575a9b822bea2bed97d0ab73aed238. workers.dev aziel-runtime.vibelock.workers.dev. No download KV.

1.2.0+ requires Durable Object migration tag v1 (RuntimeSession, SQLite). The first deploy after the session cut creates the SESSION binding. 1.4.0 does not need a new DO migration — engines run in the same isolate. 1.4.1 reuses that SESSION class. 1.5.0 and 1.6.0 do not need a new DO migration.

Optional production token (session mutate only — catalog / health / runtime / skill / pull stay public):

# wrangler.toml
# [vars]
# REQUIRE_TOKEN = "1"
npx wrangler secret put RUNTIME_TOKEN
npx wrangler deploy
node scripts/probe-live.mjs

If RUNTIME_TOKEN is unset and REQUIRE_TOKEN is not 1, sessions stay open (dev). If the secret is set, POST /v1/session/open|policy|exec|close requires Authorization: Bearer … or X-Aziel-Runtime-Token. GET /v1/ready is 200 only when the SESSION Durable Object binding is up, and 503 when REQUIRE_TOKEN=1 and the secret is missing. Authority JSON (/v1/health, /v1/ready, /v1/runtime.json, /v1/catalog.json) is Cache-Control: no-store. Receipts cap at 64. Sessions expire after 6h. Per-IP: 20 opens / minute, 60 execs / minute (HTTP 429 JSON).

If this checkout has no wrangler credentials, deploy from the author's machine:

npx wrangler secret put RUNTIME_TOKEN
npx wrangler deploy
node scripts/probe-live.mjs
# confirm GET /v1/health and /v1/ready and /v1/runtime.json version=1.6.0 role=engine-runtime door=fraggate
# confirm engine_slugs == true_engine_slugs == all 27 catalog slugs
# confirm POST /v1/session/open → policy → exec each primary op → receipt has engine_digest + ran_in

Library /runtime

https://www.azielcorpuslibrary.net/runtime is the Aziel Digital Library front door that points here. After this runtime ships pull APIs, the corpus Worker should advertise and reverse-proxy:

  • GET https://www.azielcorpuslibrary.net/runtime — human front door

  • GET https://www.azielcorpuslibrary.net/runtime/v1/skill → this /v1/skill

  • GET https://www.azielcorpuslibrary.net/runtime/v1/runtime.json → this /v1/runtime.json

  • GET https://www.azielcorpuslibrary.net/runtime/v1/bundle → this /v1/bundle

  • GET https://www.azielcorpuslibrary.net/runtime/v1/pull/{slug} → this /v1/pull/{slug}

  • POST https://www.azielcorpuslibrary.net/runtime/v1/session/open → this session object

See the companion PR on AzielEliab/aziel-corpus.

License

Apache License 2.0. Copyright 2026 Aziel Eliab.

Available Tools

17 tools
decisiongate_checkRun DecisionGATE on a proposalC

Named live module. Five sequential gates on a proposal. Freedom without clarity is chaos. Also runs automatically inside fraggate_call before exec.

ParametersJSON Schema
NameRequiredDescriptionDefault
valuesNo
evidenceNo
statementNo
impact_negNo
impact_posNo
accountableNo

TDQS

C2.8/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations only declare readOnlyHint=false, leaving the description to explain behavior. It adds that there are five sequential gates and automatic invocation within fraggate_call, but it never says what the gates do, whether the proposal is modified, or what happens on failure.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is short and front-loads the main function, but 'Freedom without clarity is chaos' is philosophical filler that does not help an agent invoke the tool. The useful information is concise but mixed with non-functional text.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With six optional parameters, no output schema, and minimal annotations, the description is too sparse. It omits return behavior, gate semantics, parameter requirements, and side effects, leaving an agent without enough context to call the tool confidently.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0% and the description does not mention any of the six parameters: values, evidence, statement, impact_neg, impact_pos, and accountable. The word 'proposal' gives loose context, but no parameter is explained or mapped to the tool's behavior.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states that the tool runs DecisionGATE as 'five sequential gates on a proposal' and notes it also runs inside fraggate_call, giving a clear action and resource. It doesn't fully differentiate from sibling gate tools, but the core function is identifiable.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies usage by noting DecisionGATE 'runs automatically inside fraggate_call before exec,' which hints that direct invocation is for standalone gating. However, it provides no explicit when-to-use guidance or exclusions relative to siblings like fraggate_verify or fraggate_list.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

fraggate_callCall through FragGateA

CallEnvelope in → DecisionGATE → handler or refuse → ResultEnvelope + ledger tip. Pass name/slug, op, payload. Optional claim (DecisionGATE proposal). Default exec path. Unknown names refuse FG-HALLUC-TOOL.

ParametersJSON Schema
NameRequiredDescriptionDefault
opYesPublic allowlisted op
nameNoRegistry name or slug
slugNo
claimNoOptional DecisionGATE proposal (statement, evidence, impacts, values, accountable)
payloadNo

TDQS

A3.6/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Without rich annotations, the description discloses a full behavior chain: DecisionGATE evaluation, possible refusal, ResultEnvelope plus ledger tip, and the exact FG-HALLUC-TOOL refusal for unknown names. It does not detail side effects or authorization, but it is far more transparent than a bare mutate verb.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The pipeline notation front-loads the flow and the second sentence packs parameter and error behavior compactly. It is concise and scannable, though slightly cryptic due to the arrow notation.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a 5-parameter tool with no output schema, the description provides enough to attempt a basic call (op/payload/name/slug) and explains refusal, but it leaves ambiguity about whether name/slug is required given the schema marks only op required, and it does not describe the ResultEnvelope or ledger tip shape.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema already documents op, name, and claim; the description adds that name/slug are alternatives and that payload is passed, and clarifies claim is optional. With 60% schema coverage, this is helpful but does not fully define payload, slug, or the DecisionGATE proposal structure beyond the schema's field list.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description names a concrete action—passing a CallEnvelope into FragGate for a handler to process or refuse—and states the result (ResultEnvelope + ledger tip). It clearly implies execution rather than listing or describing registry entries, though it does not explicitly name a sibling to differentiate from.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It gives operational guidance ('Pass name/slug, op, payload', 'Optional claim ... Default exec path') and warns that unknown names refuse, but it never states when to choose fraggate_call over siblings like fraggate_verify, fraggate_describe, or runtime_run. Usage is implied rather than explicitly contrasted.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

fraggate_describeDescribe one registry nameA
Read-only

Describe one catalog name: live vs stub vs local_only, public ops, digest. Argument: name or slug.

ParametersJSON Schema
NameRequiredDescriptionDefault
nameNo
slugNo

TDQS

A3.6/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already carry readOnlyHint=true and openWorldHint=false, and the description's 'Describe' verb is consistent with those, so there is no contradiction. The description adds value by disclosing what the describe output covers (type classification, public ops, digest), but it does not cover error behavior or edge cases such as unknown names.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two short sentences with zero waste; the core purpose and output categories are front-loaded, followed by the single invocation note. Every phrase earns its place.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a simple read-only tool with no output schema, the description compensates by listing the return categories (live/stub/local_only, public ops, digest). It is slightly incomplete on what 'public ops' means and what happens for unrecognized names, but these are minor gaps given the tool's low complexity.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, so the description must carry the burden, and it does provide the key disambiguation: 'Argument: name or slug' tells the agent the two parameters are alternatives. However, it gives no format guidance or examples for what constitutes a valid name versus a slug, leaving the agent to guess.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb ('Describe'), a specific resource ('one catalog name'), and enumerates the returned information ('live vs stub vs local_only, public ops, digest'). It implicitly distinguishes from siblings like fraggate_list by scoping to a single name, though it never names an alternative explicitly.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The singular scope ('one catalog name') implies this is for inspecting a single registry entry rather than listing, verifying, or calling, but there is no explicit when-to-use guidance or mention of alternatives. The 'Argument: name or slug' note is invocation detail, not usage selection guidance.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

fraggate_listList the FragGate registryA
Read-only

List hashed registry entries (live / stub / local_only). Discover names. Do not invent tools. Kernel: https://github.com/AzielEliab/fraggate

ParametersJSON Schema
NameRequiredDescriptionDefault

No parameters

TDQS

A4.4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true and openWorldHint=false. The description adds useful behavior context by defining the entry categories, noting entries are hashed, and warning 'Do not invent tools,' which reinforces that the listed names are authoritative. No contradiction with annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is three short sentences plus a reference URL, front-loads the primary action and scope, and contains no filler. The 'Do not invent tools' warning earns its place, and the kernel URL is compact optional context.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a parameterless list tool with no output schema, the description is largely complete: it names the resource, categories, and purpose. It does not detail the exact response shape, but 'List...entries' and 'Discover names' sufficiently convey what the agent will get from a simple registry listing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

There are zero parameters and schema description coverage is 100%, so the baseline of 4 applies. The description does not need to document parameters; it also correctly implies no arguments are needed to list the registry.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a specific verb ('List') and resource ('hashed registry entries') and distinguishes the action from siblings like fraggate_describe, fraggate_verify, and fraggate_call. It also states the entry categories (live/stub/local_only), leaving no ambiguity about what is listed.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

'Discover names' provides clear context for when to call this tool: when the agent needs to know what registry entries exist. It does not name alternatives or explicitly say when not to use it, but with zero parameters and a simple list purpose, the context is sufficient.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

fraggate_verifyVerify a registry name or digestB
Read-only

registry.verify — confirm a name or digest against the hashed FragGate registry.

ParametersJSON Schema
NameRequiredDescriptionDefault
nameNo
slugNo
digestNo

TDQS

B3/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true, so the read-only safety profile is covered by structured data. The description adds one behavioral detail — the registry is 'hashed' — implying matches are validated against stored hashes. However, it does not disclose the output shape, whether matching is exact/fuzzy, or what happens on a failed match. With annotations present, the bar is lower, and the description provides marginal but real added context; a 3 is appropriate.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

A single 15-word sentence with the verb front-loaded and zero filler. The 'hashed FragGate registry' qualifier earns its place by scoping the verification target. Nothing in the description is redundant with the title or annotations.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a tool with three undocumented optional parameters, no output schema, and several closely related siblings, the description is too thin. An agent lacks: the return shape, the meaning of 'slug', how parameters combine, and when this tool is preferable to fraggate_describe. The readOnly annotation covers safety but not the operational semantics an agent needs to invoke this correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, so the description must compensate fully. It does clarify that 'name' and 'digest' are identifier types being checked against the registry, but it never mentions the 'slug' parameter at all, and it gives no hint about how the three optional parameters relate (alternatives? AND? priority?). additionalProperties: true further widens the ambiguity. The description covers two of three params without relational semantics, which is insufficient at 0% schema coverage.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a specific verb ('confirm') with a defined resource ('a name or digest against the hashed FragGate registry'), so an agent can tell this performs an existence/authenticity check rather than enumeration or inspection. It is not tautological and adds the meaningful 'hashed' qualifier. It loses one point because it never states what a verification returns (boolean vs. details) and doesn't explicitly distinguish itself from fraggate_describe.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance whatsoever about when to use this tool versus fraggate_list, fraggate_describe, or fraggate_call. The description neither states a triggering condition nor names alternatives. Given a sibling set full of registry tools, the agent is left to guess whether verification is for CI checks, pre-call validation, or ad-hoc lookups.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

library_lookupSearch the Aziel Digital LibraryA
Read-only

Read-only library lookup (aziel-corpus search / example / skill). Not a private-file search engine.

ParametersJSON Schema
NameRequiredDescriptionDefault
qNo
opNosearch (default), example, or skill

TDQS

A3.5/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true, and the description reinforces this with 'Read-only' and adds the corpus scope and the exclusion of private-file searches. It does not disclose further behaviors like authentication, rate limits, or return format, but the bar is lowered by the annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two short sentences, front-loaded with the read-only nature and scope. No filler; every phrase adds information.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The description is adequate for a simple read-only lookup but leaves the meaning of 'example' and 'skill' modes undefined and does not mention what the response contains or how q behaves across modes. Given no output schema, an agent gets only partial guidance.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The schema documents op values ('search (default), example, or skill') and the description repeats that mapping with 'aziel-corpus search / example / skill'. The q parameter remains undocumented in both schema and description; only the tool name and 'lookup' imply it is a query string. 50% coverage leaves room for more.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a clear verb and resource: 'Read-only library lookup' of the Aziel Digital Library, with explicit scope (aziel-corpus search/example/skill). The negative clause 'Not a private-file search engine' adds a boundary, though it does not explicitly differentiate from sibling tools like runtime_skill.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Implies usage for aziel-corpus lookups and excludes private-file searches, but provides no explicit when-to-use comparisons or alternatives among the sibling tools. The guidance is inferred rather than stated.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

runtime_bundleList every productA
Read-only

List every Aziel Eliab product (human/catalog helper). Prefer fraggate_list for the agent door.

ParametersJSON Schema
NameRequiredDescriptionDefault

No parameters

TDQS

A4.5/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The annotations already provide readOnlyHint=true and openWorldHint=false, so the safety and closed-world nature are covered. The description adds scope ('every product') and intended audience ('human/catalog helper'), but it does not describe return shape, ordering, or other runtime behavior beyond what the title and annotations imply. No contradiction exists, but the added behavioral detail is modest.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is two short sentences with no filler. The core purpose is front-loaded in the first sentence, and the routing guidance is delivered as a clear, separate second sentence. Every word earns its place.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a zero-parameter, read-only list tool, this description is complete enough for an agent to select and invoke it correctly. It states the scope, identifies the intended audience, and explicitly points to the alternative for agent-facing use. With no required arguments and annotations covering safety, nothing critical is missing for invocation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

There are zero specified parameters and zero required parameters, so the description has no parameter burden to carry. The schema is fully covered with no defined properties, and the baseline for zero-parameter tools is 4; nothing in the description is missing on this front.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description starts with a specific verb and resource: 'List every Aziel Eliab product,' and it identifies itself as a 'human/catalog helper,' which separates it from its sibling tools. It also explicitly names fraggate_list as the alternative, so an agent can distinguish the tools without inspecting schemas.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The sentence 'Prefer fraggate_list for the agent door' explicitly tells the agent when not to use this tool and which sibling to prefer instead. The 'human/catalog helper' label establishes the intended context, making the routing guidance direct rather than implied.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

runtime_manifestAdvanced: runtime manifestA
Read-only

[advanced/internal] Machine manifest (version, role, door=fraggate, engine slugs). Prefer runtime_skill or fraggate_list. Not the default agent path.

ParametersJSON Schema
NameRequiredDescriptionDefault

No parameters

TDQS

A3.9/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true and openWorldHint=false, so the safety profile is covered. The description adds useful context that this is an advanced/internal tool and not the default path, but it does not disclose additional behavioral traits such as output shape, pagination, or failure behavior. This is adequate given the low complexity and annotation coverage.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is very short and front-loaded with the most important information: the tool is advanced/internal and returns a machine manifest with specific fields. The routing guidance and default-path warning are packed into two additional clauses without redundancy.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a parameterless, read-only tool with no output schema, the description provides the essential invocation context: what the manifest contains and when to avoid this tool. It does not explain terms like 'door=fraggate' or 'engine slugs,' but for an advanced/internal tool this is likely sufficient for the intended audience.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

There are zero parameters and a vacuous 100% schema description coverage, so the baseline of 4 applies. The description mentions the manifest fields, which is enough context for a no-argument call.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly identifies the resource as a machine manifest and enumerates its contents (version, role, door=fraggate, engine slugs). It does not use a direct verb like 'get' or 'list,' and the distinction from runtime_skill/fraggate_list is more about routing than function, so it stops short of a 5.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It gives explicit alternatives ('Prefer runtime_skill or fraggate_list') and warns this is not the default agent path, which tells an agent when not to use it. However, the positive condition for when runtime_manifest should be chosen is only vaguely implied by '[advanced/internal]', not explicitly stated.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

runtime_pullOpen one productA
Read-only

Open one product by slug: name, version, skill, download, and ops. Argument: slug.

ParametersJSON Schema
NameRequiredDescriptionDefault
slugYes

TDQS

A3.6/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The readOnlyHint annotation already establishes this as a safe read operation, so the description's main job is to add what the tool exposes. It does that by listing the returned aspects (name, version, skill, download, ops), which is useful given there is no output schema. It does not address error behavior or return format, but the annotation lowers the burden here.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is short and front-loaded, with the core action and parameter stated first. The trailing 'Argument: slug' is slightly redundant with the input schema, but the overall wording is efficient and has no filler.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a simple read-only tool with one parameter, the description provides a workable level of context: the identifying parameter and the main fields returned. However, it leaves some ambiguity around terms like 'ops' and gives no indication of what happens when the slug is not found, so it is adequate but not fully complete.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 0%, so the description must carry the meaning of the slug parameter. It does indicate that slug is the lookup key for identifying one product, which is the minimum needed for a single required string parameter. It does not provide slug format, constraints, or examples, but the simple one-parameter case is adequately served.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a clear action ('Open') and resource ('one product'), and specifies the identifying key (slug) and the facets returned (name, version, skill, download, ops). It is distinct enough from the sibling runtime_* tools, though it does not explicitly name an alternative.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The usage context is implied: an agent should call this when it needs to open a product by slug. However, there is no explicit guidance on when to prefer this over closely related siblings such as runtime_run, runtime_manifest, or runtime_session_open, and no exclusions are provided.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

runtime_runAdvanced: raw runtime_runC

[advanced/internal] Advanced exec façade. Prefer fraggate_call. Still DecisionGATE-admitted; not a backdoor past the door.

ParametersJSON Schema
NameRequiredDescriptionDefault
opYes
slugYes
payloadNo
session_idNo

TDQS

C2.6/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=false. The description adds governance-related behavior: it is 'DecisionGATE-admitted' and 'not a backdoor,' meaning it is still subject to policy checks. This is useful context but does not disclose side effects, state changes, or error behavior beyond the annotation.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is compact—two sentences with no filler. It front-loads the '[advanced/internal]' label and the core governance message. Brevity is achieved, though at the cost of semantic clarity.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness1/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With four parameters, no output schema, no parameter documentation, and no description of return values or failure modes, the description is severely incomplete. An agent cannot construct a correct invocation or understand the tool's behavior from this text alone.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters1/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0% and the description makes no mention of slug, op, payload, or session_id. There is no explanation of what these parameters mean, how they relate to the execution, or what valid values look like. The agent is left entirely to infer parameter semantics from names alone.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose2/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description labels the tool an 'Advanced exec façade' but never states what it executes, what resource it operates on, or what outcome it produces. The phrase 'raw runtime_run' largely restates the tool's name, and while it distinguishes itself from fraggate_call, it fails to define its actual function.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description explicitly says 'Prefer fraggate_call,' which gives an alternative and a clear preference. The '[advanced/internal]' tag signals restricted usage context, and 'not a backdoor past the door' clarifies it should not be used to bypass governance. However, it does not specify exactly when an agent should choose this over its siblings.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

runtime_session_closeAdvanced: seal a sessionA

[advanced/internal] Seal a raw session. Further exec is rejected. Prefer leaving sessions to expire unless the user asked to close.

ParametersJSON Schema
NameRequiredDescriptionDefault
session_idYes

TDQS

A3.5/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The annotations only indicate readOnlyHint=false, so the description carries the burden of behavioral disclosure. It states that sealing blocks further exec, which is a useful effect. However, it does not disclose whether the action is reversible, whether special permissions are required, or what happens to the session object. For an 'advanced/internal' tool, more transparency about side effects and irreversibility would be expected.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single sentence with a bracketed tag, front-loading the action and its effect. There is no filler or redundancy; every word contributes to understanding the tool's purpose and usage. The structure is efficient and easy to parse.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool has one required parameter, no output schema, and minimal annotations, the description needs to cover parameter semantics, return behavior, and any caveats. It explains the action and usage preference but omits what session_id means, what the tool returns (if anything), and clarifies the meaning of 'raw session.' For an advanced tool, this is a significant gap that could lead to misuse.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters1/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The input schema provides zero description for session_id (coverage 0%), and the description does not mention the parameter at all. It gives no indication of what session_id refers to, how to obtain it, or its format. The description focuses entirely on the action, leaving the sole parameter completely ambiguous and forcing the agent to guess from the parameter name alone.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the action ('Seal a raw session') and its immediate effect ('Further exec is rejected'). This is a specific verb+resource combination that distinguishes it from sibling tools like runtime_session_open, runtime_session_exec, and runtime_session_receipt, all of which have different purposes.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides explicit guidance: 'Prefer leaving sessions to expire unless the user asked to close.' This tells the agent when to use the tool (only when explicitly requested) and implies the default alternative (letting sessions expire naturally). While it doesn't name specific sibling tools, the condition is clear and actionable.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

runtime_session_execAdvanced: raw session execC

[advanced/internal] Raw session exec for an already-open session. Prefer fraggate_call. FragGate-admitted on the MCP path. Binding-only ops stay per-op proxy_fallback.

ParametersJSON Schema
NameRequiredDescriptionDefault
opYes
slugYes
payloadNo
session_idYes

TDQS

C2.8/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations only indicate readOnlyHint=false and openWorldHint=false, so the description carries the burden of disclosing side effects, security behavior, and operational details. It mentions 'FragGate-admitted on the MCP path' and 'Binding-only ops stay per-op proxy_fallback,' but these phrases are too jargon-heavy to be transparent to an agent. No clear explanation of mutation risks, permissions, or failure behavior is provided.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is short and front-loaded with the main purpose, which is good. However, several clauses are cryptic and likely do not help an agent ('FragGate-admitted on the MCP path,' 'Binding-only ops stay per-op proxy_fallback'). These sentences take up space without adding clear instructional value.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness1/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a tool with four parameters, no output schema, no parameter descriptions, and advanced/internal positioning, this description is far from complete. It lacks guidance on parameter semantics, expected behavior, return values, error cases, and when to override the 'Prefer fraggate_call' advice. An agent would not have enough information to invoke this tool reliably.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters1/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, and the description does not explain session_id, slug, op, or payload. The only hint is that the session must already be open, which weakly relates to session_id. There is no meaningful guidance on how to construct op, slug, or payload, making correct invocation very difficult.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states the tool's core function: 'Raw session exec for an already-open session.' It also names fraggate_call as the preferred alternative, which helps differentiate it from a key sibling. However, terms like 'FragGate-admitted' and 'proxy_fallback' are not defined, leaving some ambiguity about what 'exec' actually entails.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives a clear usage signal by saying 'Prefer fraggate_call' and notes that this tool targets an already-open session, which implies a prerequisite. It does not, however, provide explicit conditions or scenarios where raw exec should be chosen over the preferred alternative, beyond labeling it 'advanced/internal.'

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

runtime_session_openAdvanced: open a raw sessionA

[advanced/internal] Open a raw session object. Prefer fraggate_call. Session plumbing stays invisible unless the user asked for the receipt chain.

ParametersJSON Schema
NameRequiredDescriptionDefault

No parameters

TDQS

A4.6/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The annotations only mark readOnlyHint=false and openWorldHint=false, so the description carries most behavioral weight. It adds meaningful context: the operation is internal/advanced, session plumbing is normally hidden, and visible effects appear only when the receipt chain is requested. This is useful, though it does not detail side effects or lifecycle requirements.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is two short sentences with no filler. The advanced/internal status is front-loaded, the preferred alternative is immediate, and the usage condition is stated efficiently. Every phrase contributes.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a zero-parameter internal tool with no output schema, the description gives enough to decide when to call it and what to expect at a high level. It could name related lifecycle tools like runtime_session_close or runtime_session_receipt, but the core context is present and not misleading.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

There are zero parameters, so the description has no parameter burden to carry. The schema is fully covered by being empty; no additional parameter explanation is needed. The mention of 'session object' gives semantic context beyond the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific action ('Open a raw session object') and immediately distinguishes itself from the preferred sibling ('Prefer fraggate_call'). The '[advanced/internal]' tag further clarifies it is a low-level alternative, so an agent can differentiate it from normal session tools.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It explicitly names fraggate_call as the preferred alternative and gives a concrete condition for when the raw session is relevant: 'unless the user asked for the receipt chain.' This tells the agent both when not to use the tool and when the advanced path is justified.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

runtime_session_policyAdvanced: attach session policyA

[advanced/internal] Attach allow rules on a raw session. Prefer fraggate_call, which applies defaults. Identity remains Aziel Eliab.

ParametersJSON Schema
NameRequiredDescriptionDefault
allow_opsNo
session_idYes
allow_slugsNo
kv_incrementNo
max_payload_bytesNo

TDQS

A3.6/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already indicate readOnlyHint=false and openWorldHint=false, so the mutation behavior is covered. The description adds useful context that 'Identity remains Aziel Eliab,' clarifying the auth identity, and notes this operates on a 'raw session.' However, it does not explain what happens to existing rules, whether the policy is immediately applied, or what side effects may occur on the session.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is compact and front-loaded with the important context, action, and alternative routing. Every sentence earns its place, though the final sentence about identity could be more explicitly tied to behavior or authorization.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

This is an advanced tool with five parameters, no output schema, and no parameter-level documentation. The description does not explain return behavior, how allow rules combine with existing session policy, or what kv_increment and max_payload_bytes control. Given the tool's complexity, the description is not complete enough for correct invocation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, so the description must compensate for parameter meaning. It only vaguely references 'allow rules' without mapping to allow_ops or allow_slugs, and it says nothing about kv_increment or max_payload_bytes. With five parameters and no schema documentation, this is a significant gap.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb and resource: 'Attach allow rules on a raw session.' It also distinguishes itself from fraggate_call, which is the default path that 'applies defaults.' The 'advanced/internal' tag further clarifies its targeted role, making the purpose unmistakable.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description explicitly names fraggate_call as the preferred alternative and gives a clear reason: it applies defaults. This tells the agent when to choose the sibling instead. However, it does not spell out specific conditions or scenarios where this tool should be selected beyond the 'advanced/internal' signal.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

runtime_session_receiptAdvanced: last session receiptA
Read-only

[advanced/internal] Read the last receipt for a raw session. Prefer product output (display) unless the user asked for the chain.

ParametersJSON Schema
NameRequiredDescriptionDefault
session_idYes

TDQS

A3.5/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already establish readOnlyHint=true, so the description is not burdened with safety disclosure. It adds useful context about the advanced/internal nature and the raw-session scope, but does not explain what a receipt contains or what 'the chain' refers to. This is adequate but not rich.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is two short sentences with no filler. The advanced/internal label, the action, and the routing preference are all front-loaded, and every clause adds value.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a simple read-only tool with one parameter, the description gives enough to identify the tool and basic invocation intent. However, with no output schema and no explanation of receipt contents or the 'chain' concept, an agent may lack sufficient context to interpret the result correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The schema describes session_id only as a required string, and the description provides zero additional parameter guidance. Because schema description coverage is 0%, the description needed to compensate but did not explain the expected format or meaning of session_id in the context of a raw session.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific action ('Read the last receipt') and a specific resource ('a raw session'), making the core purpose clear. It also frames the tool as advanced/internal, which helps distinguish it from product-facing display tools, although it does not explicitly differentiate from the sibling runtime_session_receipts.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The instruction to prefer product output (display) unless the user asked for 'the chain' provides a concrete when-to-use guideline. It does not name alternatives explicitly, but the directive is actionable enough for an agent deciding between this and a display-oriented tool.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

runtime_session_receiptsAdvanced: session receipt chainA
Read-only

[advanced/internal] Read the full receipt list for a raw session. Prefer product output unless the user asked for the chain.

ParametersJSON Schema
NameRequiredDescriptionDefault
session_idYes

TDQS

A3.7/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true, and the description's 'Read' is consistent. The description adds useful context that this is an advanced/internal low-level view and that it returns the full chain, but it does not disclose return structure, ordering, pagination, or empty-result behavior.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two short sentences with no filler: the first defines the tool's scope, the second gives routing guidance. The '[advanced/internal]' tag is front-loaded and informative.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a one-parameter read-only tool, this provides the core call intent and a usage preference. However, with no output schema, terms like 'raw session' and 'chain' are left undefined, and the description does not address possible error conditions or how the receipts are ordered.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, so the description carries the full parameter-documentation burden. It adds that session_id refers to a raw session and that the tool returns the full receipt list for that session, which is meaningful but still leaves the format or accepted values of a raw session unspecified.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a clear verb ('Read') and a specific resource ('full receipt list for a raw session'), which distinguishes it from the singular runtime_session_receipt sibling and other runtime session tools. It could be stronger by naming the alternative product output tool, but it is not tautological or misleading.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The phrase 'Prefer product output unless the user asked for the chain' gives an explicit when-to-use condition and points away from this tool for normal cases. It is actionable, though it does not name the preferred alternative explicitly.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

runtime_skillHow to use this softwareA
Read-only

Read how an agent uses Aziel Eliab software: one door — discover, route, refuse. Dual surface: agent chat has no technical UI chrome; Worker / Flutter / local install / counted download stay complete human software.

ParametersJSON Schema
NameRequiredDescriptionDefault

No parameters

TDQS

A3.6/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true and openWorldHint=false. The description adds context beyond that by disclosing the 'one door' agent flow (discover, route, refuse) and the dual surface (agent chat vs. Worker/Flutter/local install), which helps set expectations for what the skill covers.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is short and front-loaded, but the second sentence relies on jargon ('technical UI chrome', 'complete human software', 'counted download') that may confuse rather than clarify. It earns its place conceptually but is not as crisp as it could be.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a no-parameter, read-only skill the description conveys the general purpose, but it leaves the 'discover, route, refuse' process unexplained and does not state what the returned content looks like. Given no output schema, a slightly more explicit account of what the agent will receive would make it complete.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The tool has zero parameters and schema coverage is 100%, so the baseline is 4. There are no parameter semantics to clarify, and the description correctly spends no space on inputs.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The opening 'Read how an agent uses Aziel Eliab software' gives a clear verb and resource, and the title 'How to use this software' reinforces it. The following 'one door — discover, route, refuse' is cryptic, but the core purpose is still identifiable and distinct from the runtime_bundle/fraggate siblings.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The imperative 'Read how an agent uses...' implies this is the orientation/entry point for understanding the software. However, it does not explicitly state when to prefer this tool over runtime_manifest, runtime_session_policy, or other siblings, nor give any when-not-to-use conditions.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections. Dates show when Glama detected each change.

  1. 110 tool updates
    • Removedark_health
    • Removedark_levels
    • Removedark_skill
    • Removedark_sweep
    • Removedazai_health
    • Removedazai_lamb_check
    • Removedazai_lamb-check
    • Removedazai_skill
    • Removedazbot_health
    • Removedazbot_route
    • Removedazbot_skill
    • Removedazclce_classify
    • Removedazclce_gate
    • Removedazclce_health
    • Removedazclce_score
    • Removedazclce_skill
    • Removedaziel-corpus_example
    • Removedaziel-corpus_health
    • Removedaziel-corpus_search
    • Removedaziel-corpus_skill
    • Removedazieltether_health
    • Removedazieltether_skill
    • Removedazieltether_verify
    • Removedazos_health
    • Removedazos_skill
    • Removedazos_status
    • Removedchronolock_advisory
    • Removedchronolock_anchors
    • Removedchronolock_health
    • Removedchronolock_skill
    • Removedcodelock_health
    • Removedcodelock_render
    • Removedcodelock_skill
    • Changeddecisiongate_check2 fields changed
      • removedInput schema / description
        Removed value: -"Pass { statement, evidence, impact_pos, impact_neg, values, accountable }. Freedom without clarity is chaos"
      • addedInput schema / properties
        Added value: +{
        +  "accountable": {
        +    "type": "string"
        +  },
        +  "evidence": {
        +    "items": {
        +      "type": "string"
        +    },
        +    "type": "array"
        +  },
        +  "impact_neg": {
        +    "items": {
        +      "type": "string"
        +    },
        +    "type": "array"
        +  },
        +  "impact_pos": {
        +    "items": {
        +      "type": "string"
        +    },
        +    "type": "array"
        +  },
        +  "statement": {
        +    "type": "string"
        +  },
        +  "values": {
        +    "items": {
        +      "type": "string"
        +    },
        +    "type": "array"
        +  }
        +}
    • Removeddecisiongate_health
    • Removeddecisiongate_skill
    • Removedemployeelock_append-preview
    • Removedemployeelock_health
    • Removedemployeelock_skill
    • Removedemployeelock_verify-canonical
    • Removedfoldlock_fold-preview
    • Removedfoldlock_health
    • Removedfoldlock_skill
    • Removedfoldlock_unfold-preview
    • Removedforgereceipts_health
    • Removedforgereceipts_receipt
    • Removedforgereceipts_skill
    • Addedfraggate_call
    • Addedfraggate_describe
    • Addedfraggate_list
    • Addedfraggate_verify
    • Removedglossafilter_health
    • Removedglossafilter_render
    • Removedglossafilter_skill
    • Removedgodlock_health
    • Removedgodlock_score
    • Removedgodlock_skill
    • Removedgodlock_submit
    • Addedlibrary_lookup
    • Removedmialock_coverage
    • Removedmialock_doe-match
    • Removedmialock_example
    • Removedmialock_health
    • Removedmialock_map
    • Removedmialock_queries
    • Removedmialock_search-options
    • Removedmialock_skill
    • Removedmiragegrid_assign
    • Removedmiragegrid_health
    • Removedmiragegrid_skill
    • Removedpostking_health
    • Removedpostking_move
    • Removedpostking_new
    • Removedpostking_skill
    • Removedpostking_status
    • Changedruntime_run4 fields changed
      • removedInput schema / properties / op / description
        Removed value: -"Product verb, e.g. fold-preview, submit, score"
      • removedInput schema / properties / payload / description
        Removed value: -"What the software needs as input"
      • removedInput schema / properties / session_id / description
        Removed value: -"Optional. Reuse an open session."
      • removedInput schema / properties / slug / description
        Removed value: -"Product slug, e.g. foldlock, godlock, azclce"
    • Removedshadowlock_health
    • Removedshadowlock_observe
    • Removedshadowlock_skill
    • Removedspectrallock_health
    • Removedspectrallock_modes
    • Removedspectrallock_overlay
    • Removedspectrallock_skill
    • Removedstaticclock_advise
    • Removedstaticclock_health
    • Removedstaticclock_skill
    • Removedtemporallock_append
    • Removedtemporallock_genesis
    • Removedtemporallock_health
    • Removedtemporallock_skill
    • Removedtemporallock_verify
    • Removedtrajectorylock_analyze
    • Removedtrajectorylock_example
    • Removedtrajectorylock_health
    • Removedtrajectorylock_skill
    • Removedveillock_apps
    • Removedveillock_health
    • Removedveillock_skill
    • Removedvibelock_analyze
    • Removedvibelock_health
    • Removedvibelock_skill
    • Removedwhistlelock_canon-preview
    • Removedwhistlelock_hash-preview
    • Removedwhistlelock_health
    • Removedwhistlelock_skill
    • Removedzsolver_health
    • Removedzsolver_patterns
    • Removedzsolver_score
    • Removedzsolver_session
    • Removedzsolver_skill
  2. 115 tool updatesv1.5.0
    • First observedark_health
    • First observedark_levels
    • First observedark_skill
    • First observedark_sweep
    • First observedazai_health
    • First observedazai_lamb_check
    • First observedazai_lamb-check
    • First observedazai_skill
    • First observedazbot_health
    • First observedazbot_route
    • First observedazbot_skill
    • First observedazclce_classify
    • First observedazclce_gate
    • First observedazclce_health
    • First observedazclce_score
    • First observedazclce_skill
    • First observedaziel-corpus_example
    • First observedaziel-corpus_health
    • First observedaziel-corpus_search
    • First observedaziel-corpus_skill
    • First observedazieltether_health
    • First observedazieltether_skill
    • First observedazieltether_verify
    • First observedazos_health
    • First observedazos_skill
    • First observedazos_status
    • First observedchronolock_advisory
    • First observedchronolock_anchors
    • First observedchronolock_health
    • First observedchronolock_skill
    • First observedcodelock_health
    • First observedcodelock_render
    • First observedcodelock_skill
    • First observeddecisiongate_check
    • First observeddecisiongate_health
    • First observeddecisiongate_skill
    • First observedemployeelock_append-preview
    • First observedemployeelock_health
    • First observedemployeelock_skill
    • First observedemployeelock_verify-canonical
    • First observedfoldlock_fold-preview
    • First observedfoldlock_health
    • First observedfoldlock_skill
    • First observedfoldlock_unfold-preview
    • First observedforgereceipts_health
    • First observedforgereceipts_receipt
    • First observedforgereceipts_skill
    • First observedglossafilter_health
    • First observedglossafilter_render
    • First observedglossafilter_skill
    • First observedgodlock_health
    • First observedgodlock_score
    • First observedgodlock_skill
    • First observedgodlock_submit
    • First observedmialock_coverage
    • First observedmialock_doe-match
    • First observedmialock_example
    • First observedmialock_health
    • First observedmialock_map
    • First observedmialock_queries
    • First observedmialock_search-options
    • First observedmialock_skill
    • First observedmiragegrid_assign
    • First observedmiragegrid_health
    • First observedmiragegrid_skill
    • First observedpostking_health
    • First observedpostking_move
    • First observedpostking_new
    • First observedpostking_skill
    • First observedpostking_status
    • First observedruntime_bundle
    • First observedruntime_manifest
    • First observedruntime_pull
    • First observedruntime_run
    • First observedruntime_session_close
    • First observedruntime_session_exec
    • First observedruntime_session_open
    • First observedruntime_session_policy
    • First observedruntime_session_receipt
    • First observedruntime_session_receipts
    • First observedruntime_skill
    • First observedshadowlock_health
    • First observedshadowlock_observe
    • First observedshadowlock_skill
    • First observedspectrallock_health
    • First observedspectrallock_modes
    • First observedspectrallock_overlay
    • First observedspectrallock_skill
    • First observedstaticclock_advise
    • First observedstaticclock_health
    • First observedstaticclock_skill
    • First observedtemporallock_append
    • First observedtemporallock_genesis
    • First observedtemporallock_health
    • First observedtemporallock_skill
    • First observedtemporallock_verify
    • First observedtrajectorylock_analyze
    • First observedtrajectorylock_example
    • First observedtrajectorylock_health
    • First observedtrajectorylock_skill
    • First observedveillock_apps
    • First observedveillock_health
    • First observedveillock_skill
    • First observedvibelock_analyze
    • First observedvibelock_health
    • First observedvibelock_skill
    • First observedwhistlelock_canon-preview
    • First observedwhistlelock_hash-preview
    • First observedwhistlelock_health
    • First observedwhistlelock_skill
    • First observedzsolver_health
    • First observedzsolver_patterns
    • First observedzsolver_score
    • First observedzsolver_session
    • First observedzsolver_skill

TDQS

B3.2/5.0
Disambiguation3/5

The core fraggate_* tools and session lifecycle are mostly distinct, but fraggate_call, runtime_run, and runtime_session_exec all describe execution paths, and fraggate_list vs runtime_bundle both list catalog-like data. The internal/advanced labels and 'prefer fraggate_call' notes help, but the overlap still creates misselection risk.

Naming Consistency3/5

Names are all lowercase snake_case, and fraggate_* and runtime_session_* are internally consistent, but the server mixes noun-style names like runtime_manifest and runtime_skill with verb-style names like runtime_pull and runtime_run. It is readable by family, but not one predictable pattern.

Tool Count3/5

17 tools is at the heavy end for an MCP server, and several are advanced/internal session or exec variants that duplicate the default fraggate_call path. The core registry, decision gate, product, and library surface could likely be delivered in fewer tools.

Completeness4/5

The set covers registry discovery, verification, calling, product manifests/pulls, library lookup, and a full raw-session lifecycle, so the main workflows are covered. Missing registry entry creation/update/deletion and direct ledger inspection appear intentional, but agents may still need to work around those gaps.

Maintenance

ActivityMaintained
ResponsivenessNo issues

Related MCP Connectors

Related MCP Servers

  • A
    license
    Not graded
    quality
    D
    maintenance
    Enables AI agents to access a unified catalog of tools from various APIs (OpenAPI, GraphQL, MCP, Google Discovery) through the MCP protocol.
    MIT
  • A
    license
    Not graded
    quality
    A
    maintenance
    Centralizes OAuth connections and tool access for AI agents, providing a single credential to call multiple services via MCP and REST with consistent errors and pagination.
    789
    4
    Apache 2.0

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/AzielEliab/aziel-runtime'

If you have feedback or need assistance with the MCP directory API, please join our Discord server