Skip to main content
Glama
Proofpane

Proofpane

Official
by Proofpane

Proofpane

Proofpane is an AI governance platform — the evidence plane for governed AI work. Every AI action across coding agents (Claude Code, Cursor, Codex, Hermes, Claude Desktop), workflow platforms (n8n, UiPath, Power Automate, Zapier, Make) and direct LLM API calls is policy-gated in the execution path (allow / deny / redact / pause for a human), cost-metered, and recorded in a SHA-256 hash-chained, tamper-evident audit log that exports as an Ed25519-signed Evidence Pack an auditor verifies offline — no vendor account, no trust in us required.

The architecture

The Proofpane Architecture for AI Governance — every AI action passes a policy gate in the execution path; every decision lands on a hash-chained audit log; evidence exports as a signed pack verified outside the operator and the vendor

Our claim: governance must happen at runtime, and the record it leaves must be tamper-evident. A policy that is checked after the fact governs nothing — by the time a review reads the log, the secret has left, the payment has cleared, the decision has shipped. So the gate sits in the execution path: the AI action does not complete until policy has allowed it, redacted it, or paused it for a human. And a record the operator can quietly edit proves nothing — so every decision is appended to a SHA-256 hash-chained, append-only log (DB-level immutability trigger, Ed25519 chain-head anchoring) whose export any auditor can verify offline, against a published rubric, without trusting the operator or us. Runtime enforcement produces the evidence; the evidence does not depend on anyone's word — including ours.

The architecture is a public, versioned reference — not a private rubric:

  • Read it: proofpane.com/architecture — interactive map + full Markdown spec

  • Cite it: DOI 10.5281/zenodo.21402331 (CC BY 4.0 — anyone may implement it)

  • Core claim: evidence must be checkable by parties who trust neither the operator nor the vendor — and so must the rubric it is graded against. A standard that can quietly move is not a standard.

The MCP server below is one enforcement point of this architecture: the on-machine gate for MCP-speaking AI clients.

Related MCP server: VaultMind

This repo

This repository mirrors Proofpane's public evidence and documentation and preserves historical daemon release artifacts. The main Proofpane codebase is private. The current supported binaries are served from https://app.proofpane.com/daemon/; the canonical version, digest and platform-signing record is docs/releases.json.

What you can do with just the download

No account, no pairing, no talking to us first:

  • Run the MCP serverairgov_daemon mcp serves 13 governed tools (bash, read, write, edit, glob, grep, listdir, RAG search, session search, skills) to any MCP client. Local policy gates and DLP redaction are active: a secret in a file read is masked before the model sees it, on your machine, with no cloud in the loop.

  • Scan your coverageairgov_daemon coverage reads this machine's AI-client configs and shows which MCP servers route through governance and which run direct (ungoverned).

  • Check the monitoring switchairgov_daemon monitoring-status, and disable / enable <app> to turn per-app monitoring off and on.

  • Preview usage extractionairgov_daemon usage-sync --dry-run shows what token/usage data WOULD sync, without sending anything.

Pairing with a Proofpane org (airgov_daemon pair <CODE>) connects the daemon to the server side: the cloud audit chain, human-approval gates, org-wide policy sync, and Evidence Pack export.

Proofpane MCP server

airgov_daemon mcp is a stdio Model Context Protocol server — a governance layer that runs on the user's machine and exposes local tools to MCP clients (Claude Desktop, Cursor, Codex, …) under policy control. Every call is policy-gated, DLP-redacted before a model sees a secret, and recorded on a hash-chained, offline-verifiable audit trail.

Tools advertised (tools/list, no pairing needed): bash, read, write, edit, glob, grep, listdir, search_compliance_docs, ingest_to_rag, session_search, skills_list, skill_view, skill_manage.

Run it

airgov_daemon mcp     # stdio MCP server (from a downloaded binary)

Container / directory checks (e.g. Glama)

A Dockerfile is included that pulls the public prebuilt Linux binary and runs the server in mcp mode, so an automated directory can start it and introspect (initialize + tools/list) without the private source:

docker build -t proofpane-mcp .
docker run --rm -i proofpane-mcp     # speaks stdio MCP

Get the current daemon

Use the fail-closed installer at proofpane.com/install. It selects the native artifact, verifies its published SHA-256, and on macOS requires the exact PROOFPANE LIMITED Developer ID (team B94QM75QNG) plus Apple's accepted notarisation verdict before replacing an installed file.

The current channel is https://app.proofpane.com/daemon/ and its authority is docs/releases.json. The public GitHub binary archive currently stops at daemon v1.5.19; it is preserved as history and is not the current distribution channel.

SHA-256 verification

Every current binary has a .sha256 sibling. The installer verifies it automatically before installation. For manual inspection, download the artifact and its sibling from https://app.proofpane.com/daemon/ and compare them with shasum -a 256 (macOS) or sha256sum (Linux). The platform matrix and expected digests are also recorded in docs/releases.json.

Reporting issues

For daemon issues, email Louie.Lu@proofpane.com.

License

This mirror repo's scaffolding (this README, the Dockerfile, glama.json) is released under the MIT License. The Proofpane daemon it distributes is proprietary software — see proofpane.com. The architecture reference is CC BY 4.0 via its DOI.

Available Tools

13 tools
bashC

Execute a bash command in the project directory. Output is captured and truncated.

ParametersJSON Schema
NameRequiredDescriptionDefault
commandYesShell command to execute
project_pathYesWorking directory (absolute path)

TDQS

C2.9/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations are absent, so description bears full burden. It only mentions output truncation, but not destructive potential, permission requirements, side effects, or command lifecycle. A bash command can modify files, yet this is unstated.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Single, efficient sentence. Front-loaded with key information. No filler, but could add more without becoming verbose.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

No output schema, and description only notes output truncation. Does not explain error behavior, return codes, or how to interpret results. For an execution tool, this is incomplete.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so baseline is 3. Description adds no extra meaning beyond the schema, which already describes command and project_path adequately.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

Clearly states it executes a bash command in the project directory. The verb 'execute' and resource 'bash command' are specific. Sibling tools like grep and read are distinct, so no ambiguity.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance on when to use this tool versus alternatives like grep or read. No mention of prerequisites, safe contexts, or when not to use it.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

editB

Replace one occurrence of old_string with new_string in a file.

ParametersJSON Schema
NameRequiredDescriptionDefault
file_pathYes
new_stringYes
old_stringYes
project_pathYes

TDQS

B3.3/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The description discloses the key behavioral constraint that only one occurrence is replaced, which is valuable for an agent. However, with no annotations provided, the description carries the full burden of behavioral disclosure. It does not mention what happens if old_string is not found, whether the operation is destructive/reversible, or any authorization requirements. Still, the 'one occurrence' note adds meaningful transparency beyond just stating 'edit'.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single, succinct sentence that front-loads the action and includes the essential constraint. There is no fluff or repetition, making it appropriately concise for the tool's simplicity.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The tool has 4 required parameters and no output schema or annotations, yet the description is minimal. It lacks essential context about project_path, error behavior, return value, and prerequisites (e.g., file existence). This is under-specified for a tool with this many required inputs.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The description names old_string and new_string, giving them clear roles, but it does not explain file_path or project_path. Since the schema has 0% description coverage, the description must compensate, but it fails to clarify the relationship between file_path and project_path or their expected formats. Only partial parameter meaning is provided.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool's function: replacing one occurrence of old_string with new_string in a file. The verb 'replace' is specific, and the 'one occurrence' constraint distinguishes it from a bulk write or a replace-all operation. It is immediately clear from the description what this tool does.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance is provided on when to use this tool versus alternatives like 'write' or 'bash'. There is no mention of 'use this for targeted edits' or 'do not use this for full file rewrites'. Given the sibling tools, the description lacks explicit usage direction.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

globC

Find files matching a glob pattern under the project.

ParametersJSON Schema
NameRequiredDescriptionDefault
patternYes
search_pathNoOptional sub-path
project_pathYes

TDQS

C2.6/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries full burden. It does not disclose behavioral traits such as recursion behavior, hidden files handling, or pattern syntax support. The minimal description leaves significant gaps.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is one sentence and front-loaded, but it is overly terse. While concise, it sacrifices necessary details about behavior and parameters.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given no output schema and no annotations, the description should provide more context. It lacks information on return format, error handling, and operational details like recursion depth or path resolution.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is low (33%), with only 'search_path' described. The description does not add any parameter-level context beyond what the schema provides. It fails to explain pattern format or the role of required parameters.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool finds files using a glob pattern under the project. It uses a specific verb ('find') and resource ('files'), which helps distinguish from sibling tools like grep and listdir, though not explicitly.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides no guidance on when to use this tool versus alternatives. It does not mention exclusions, prerequisites, or context that would help decide between glob and other file-searching tools.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

grepB

Search for a regex pattern in files (uses system grep -r -n).

ParametersJSON Schema
NameRequiredDescriptionDefault
includeNoFile pattern e.g. *.py
patternYes
search_pathNo.
project_pathYes

TDQS

B3.4/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries full burden. It discloses the use of system grep recursive and line-number flags, but lacks details on safety (read-only), handling of binary files, or performance considerations. Adequate but could be more explicit.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single sentence, very concise and front-loaded. However, it could include slightly more detail (e.g., return format) without becoming verbose. The current length is acceptable but just above minimal.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool has 4 parameters, no output schema, and no annotations, the description is too terse. It does not explain output format, error handling, or how parameters interact (e.g., search_path vs project_path). More context is needed for an agent to use it confidently.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is only 25% (only 'include' has a description). The description adds that 'pattern' is a regex, but does not explain 'project_path', 'search_path', or their defaults/relationships. The description should compensate for the low schema coverage but does not sufficiently detail parameter meaning.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the action ('Search for a regex pattern in files') and specifies the tool's behavior (uses system grep with -r -n). This distinguishes it from sibling tools like 'bash' or 'read'.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies when to use (for regex pattern searching in files) but does not explicitly contrast with alternatives like 'bash' (which could also run grep) or 'search_compliance_docs'. No guidance on when not to use this tool.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

ingest_to_ragA

Upload a LOCAL file into the Proofpane governance RAG corpus. The cloud parses it (PDF / DOCX / HTML / text), DLP-scrubs secrets, chunks + embeds it, and audits the ingest. After this, the file's contents are searchable with search_compliance_docs on the returned collection. Use when the user wants a local document made available for governed retrieval / Q&A.

ParametersJSON Schema
NameRequiredDescriptionDefault
pathYesAbsolute (or cwd-relative) path to the local file to ingest.
collectionNoOptional target collection. Must start with 'ai_gov_' (tenant-namespaced). Omit to use the org's default upload collection.

TDQS

A4.3/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden and does well: it discloses the full pipeline (cloud parsing, DLP scrubbing, chunking/embedding, audit) and the post-condition that contents become searchable on the returned collection. Missing details like permissions or failure modes, but this is substantially transparent for an ingestion tool.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is three sentences, front-loaded with the action and outcome. Every clause adds value: formats, security, processing, and subsequent searchability. No filler or redundancy.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a two-parameter tool with no output schema, the description explains end-to-end behavior and tells the agent what the caller gets (a collection usable with search_compliance_docs). It is complete enough to select and invoke correctly in most scenarios.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% and already provides detailed descriptions for both path and collection, including the namespace rule. The description adds a local-file emphasis and the concept of a returned collection, but doesn't materially improve on the schema's parameter guidance, so the baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states exactly what it does: uploads a local file into the Proofpane governance RAG corpus. It clearly distinguishes from siblings like search_compliance_docs by framing this as the ingestion side and explaining that retrieval happens separately.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly instructs when to use: 'Use when the user wants a local document made available for governed retrieval / Q&A.' It also points to search_compliance_docs as the retrieval alternative. It doesn't explicitly list when-not-to-use scenarios or exclusions, but the usage context is clear.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

listdirC

List contents of a directory.

ParametersJSON Schema
NameRequiredDescriptionDefault
dir_pathNo
project_pathYes

TDQS

C2.3/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries full burden. It does not disclose behavioral traits like recursion, filtering, or whether it reads the directory or simulates. Only a single verb 'list' implies reading, but no further details.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Single sentence, no wasted words. However, the conciseness comes at the cost of completeness; it is appropriately sized for its simplicity, but lacks necessary detail.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given no output schema and no annotations, the description fails to cover return format, error conditions, or whether the listing is recursive. For a simple directory listing tool, it is insufficient for an AI agent to confidently select and invoke correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters1/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema has two parameters (project_path required, dir_path optional) with 0% schema description coverage. The description adds no meaning beyond the parameter names—no explanation of what each parameter does, how they interact (e.g., dir_path relative to project_path), or default behavior.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose3/5

Does the description clearly state what the tool does and how it differs from similar tools?

Description states 'List contents of a directory' which is a specific verb-resource pair, but it is vague about what 'contents' includes (files, subdirectories, both?) and does not distinguish from sibling tools like bash (which can ls) or glob (which pattern-matches files).

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance on when to use this tool versus alternatives (e.g., bash ls, glob). No context on prerequisites or limitations.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

readB

Read a file from the project directory. Path traversal is blocked.

ParametersJSON Schema
NameRequiredDescriptionDefault
file_pathYesPath relative to project_path
project_pathYesProject root (absolute path)

TDQS

B3.4/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations given, the description carries the full burden for disclosure. It adds a meaningful behavioral constraint: 'Path traversal is blocked.' However, it does not explain return values, error behavior, or permissions. The security note is useful, but the description remains minimal.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description consists of two short, purposeful sentences. The primary action is front-loaded, and the security warning is appended without redundancy. No filler words—optimal conciseness.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a simple read operation with fully specified parameters, the description adequately conveys purpose and a key constraint. The return value (file contents) is implied by 'read,' and error handling is not critical for a basic tool. While it doesn't explicitly mention return format, it is sufficiently complete for an agent to use correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The input schema fully describes both parameters (file_path as relative path, project_path as absolute root). The description only repeats the phrase 'project directory' and adds no parameter-specific semantics beyond the schema. With 100% schema coverage, the baseline of 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool's action: 'Read a file from the project directory.' The verb 'read' and resource 'file' are specific, and the tool is distinct from siblings like write/edit (which mutate) and grep/glob (which search). However, it does not explicitly name alternative tools, so it stops short of a 5.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance is provided on when to use this tool versus other directory/search tools like listdir, grep, or glob. The description does not mention any prerequisites, exclusions, or scenario-based recommendations. This is a clear gap.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

search_compliance_docsA

Search the Proofpane governance / compliance document corpus via the cloud RAG service. Returns the top N matching chunks with source + relevance score. Default collection + retrieval method come from this agent's rag_config (configured in the Proofpane UI); override per-call with the collection arg when needed.

ParametersJSON Schema
NameRequiredDescriptionDefault
queryYesNatural-language search query
top_kNoNumber of results (1-20). Omit to use agent default.
collectionNoOverride the agent's default collection. Must start with 'ai_gov_'. Omit to use the agent's configured default.

TDQS

A3.8/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description must disclose behavior. It does state the return format ('top N matching chunks with source + relevance score') and the default/override behavior for collection. However, it does not explicitly state that the operation is read-only or disclose any potential side effects, rate limits, or auth requirements.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences with no filler. The first sentence front-loads the core purpose; the second adds configuration nuance. Every sentence earns its place.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool's moderate complexity (3 params, no output schema), the description provides sufficient context: purpose, return shape, default behavior, override capability. It could mention edge cases or limits on top_k, but for a RAG search tool this is largely complete.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the baseline is 3. The description adds context by explaining the default collection/retrieval method and that top N corresponds to top_k, which is marginally helpful but doesn't add significant new meaning.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific action ('Search') targeting a distinct resource ('Proofpane governance / compliance document corpus') and specifies the mechanism ('cloud RAG service'). This clearly differentiates it from sibling search tools like grep or session_search despite not naming them explicitly.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description explains default configuration behavior and collection overrides, but it does not provide guidance on when to use this tool versus siblings like grep or session_search. Usage context is implied ('compliance document corpus') but no explicit alternatives or exclusions are given.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

skill_manageA

Create / edit / patch / delete a skill, or write/remove a skill's linked file (governed — every write is policy-gated + audited).

ParametersJSON Schema
NameRequiredDescriptionDefault
nameYes
actionYes
contentNoFull SKILL.md for create/edit
categoryNocreate: category segment
file_pathNowrite_file/remove_file/patch target
new_stringNopatch: replacement (empty = delete)
old_stringNopatch: text to replace
replace_allNo
file_contentNowrite_file: content

TDQS

A3.6/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations exist, so description carries full burden. It mentions 'governed — every write is policy-gated + audited', which discloses policy enforcement and auditing. However, it does not cover idempotency, error handling, or return values. Adequate but not comprehensive.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Single sentence, no redundant words. All information is front-loaded. Every phrase adds value: actions, resource, governance. This is an efficient use of space.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Tool complexity is high (9 params, multiple actions, no output schema). Description covers core purpose and a key behavioral trait (governance) but omits details like return format, error cases, and parameter constraints. Sufficient for a basic understanding but leaves gaps for correct invocation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 67%, so schema provides some meaning. The description adds no parameter-level detail beyond naming actions; it does not explain how parameters relate to actions or indicate dependencies. For 9 parameters, more guidance is needed.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Description clearly lists all actions (create, edit, patch, delete, write_file, remove_file) on the resource 'skill'. It distinguishes from sibling tools like skills_list and skill_view, which are read-only. Verb+resource is specific and unambiguous.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Description implies write operations but does not explicitly state when to use this tool versus alternatives. Given siblings include skills_list and skill_view, explicit guidance on when to use each would improve clarity. Currently, usage context is only implied by the tool's name and actions.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

skills_listA

List available Hermes skills (name + description + category), governed. Optional category filter.

ParametersJSON Schema
NameRequiredDescriptionDefault
categoryNo

TDQS

A3.8/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations provided, so description carries full burden. Mentions 'governed' but lacks details on authentication, rate limits, or side effects. Sufficient for a read-only list tool.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

One concise sentence front-loading key information with no unnecessary words.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a simple 1-param, no output schema tool, description covers purpose, output fields, and filter. Lacks details like pagination but overall adequate.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Adds basic meaning with 'Optional category filter' but does not elaborate on valid values or behavior. Schema coverage is 0% so description partially compensates.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Clearly states verb 'List', resource 'Hermes skills', and includes output fields (name, description, category). Distinguishes from siblings like skill_manage and skill_view.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Indicates use case for listing skills with optional category filter, but does not explicitly state when not to use or provide alternatives among siblings.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

skill_viewB

Read a skill's full SKILL.md (and linked reference/template/script files via file_path), governed.

ParametersJSON Schema
NameRequiredDescriptionDefault
nameYesSkill name (bare, category/skill, or plugin:skill)
file_pathNoOptional linked file, e.g. references/api.md

TDQS

B3.4/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the full burden. It states 'Read' implying a read-only operation but does not disclose any other behavioral traits (e.g., authentication requirements, rate limits). The vague term 'governed' adds minimal value.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single sentence that is front-loaded with the primary action. It is efficient but lacks structure; however, no word is wasted.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the simplicity of the tool (two params, no output schema), the description adequately states the core functionality. However, it does not explain the return format (e.g., full file contents as a string) or elaborate on 'governed' behavior. It is sufficient but not thorough.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so baseline is 3. The description adds context that file_path can link to 'reference/template/script files', slightly surpassing what the schema provides ('Optional linked file, e.g. references/api.md'). However, it does not add significant new meaning.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description explicitly states it reads a skill's SKILL.md and optionally linked files via file_path. The verb 'Read' and resource 'skill's full SKILL.md' are specific, and it distinguishes from siblings like 'read' (generic file read) and 'skill_manage' (management operations).

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description does not provide explicit when-to-use or when-not-to-use guidance relative to siblings such as 'read' or 'grep'. The term 'governed' hints at access control but is not elaborated. No alternatives are mentioned.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

writeB

Write content to a file (overwrites). Parent directories are created.

ParametersJSON Schema
NameRequiredDescriptionDefault
contentYes
file_pathYes
project_pathYes

TDQS

B3/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The description discloses two important behavioral traits: overwrites existing content and automatically creates parent directories. With no annotations, this is useful but incomplete. It does not mention prerequisites, permissions, reversibility, or what happens if the file does not exist, which are expected for a mutation tool.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two short sentences deliver the core functionality and key side effects without filler. The description is front-loaded with the primary action and immediately notes the overwrite behavior, making it highly scannable.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given three required parameters, no output schema, and no annotations, the description is too sparse. It does not explain the role of 'project_path', any return value, or error conditions. The presence of sibling tools like 'edit' and 'read' also calls for clearer contextual differentiation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The schema has 0% description coverage, so the description must compensate. It mentions 'content' and 'file' which loosely map to 'content' and 'file_path', but does not address 'project_path' at all. The meaning of the file location relative to project root is unspecified, leaving a key parameter unclear.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states 'Write content to a file' with the specific verb 'write' and resource 'file'. The parenthetical '(overwrites)' hints at behavior that distinguishes it from siblings like 'edit', giving enough clarity for purpose.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It gives minimal context on when to use (writing/overwriting a file) but provides no explicit guidance on when not to use it or alternatives. It also does not clarify how it differs from sibling tools like 'edit' beyond the overwrite hint, leaving the agent to infer usage boundaries.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections. Dates show when Glama detected each change.

  1. 6 tool updatesv0.1.3
    • Addededit
    • Addedingest_to_rag
    • Addedread
    • Addedsearch_compliance_docs
    • Addedsession_search
    • Addedwrite
  2. 4 tool updatesv0.1.2
    • Addedglob
    • Addedlistdir
    • Removedread
    • Removedsearch_compliance_docs
  3. 6 tool updatesv0.1.1
    • Removededit
    • Removedglob
    • Removedingest_to_rag
    • Removedlistdir
    • Addedsearch_compliance_docs
    • Removedsession_search
  4. 11 tool updatesv0.1.0
    • First observedbash
    • First observededit
    • First observedglob
    • First observedgrep
    • First observedingest_to_rag
    • First observedlistdir
    • First observedread
    • First observedsession_search
    • First observedskill_manage
    • First observedskill_view
    • First observedskills_list

TDQS

B3.1/5.0
Disambiguation4/5

Most tools have distinct purposes, but there is potential confusion between grep/glob (content vs filename search) and search_compliance_docs/session_search (both are search operations over different corpora). Descriptions are clear enough to differentiate in most cases.

Naming Consistency2/5

Naming conventions are mixed: single verbs (read, write, edit), verb_noun with underscores (search_compliance_docs, ingest_to_rag), noun_verb without underscores (session_search, skills_list), and concatenated forms (listdir). This inconsistency makes it harder to predict tool names.

Tool Count4/5

13 tools is within a reasonable range, but the set covers several domains (filesystem, RAG, sessions, skills) and includes redundant file operations (bash could substitute for many). Each tool has a purpose, but the count feels slightly heavy for a cohesive server.

Completeness4/5

The core workflows are covered: file CRUD, RAG ingest/search, session search, and skill management. Minor gaps exist (e.g., no explicit file delete, no RAG collection listing), but these can be worked around with bash or are outside the apparent primary scope.

Maintenance

ActivityMaintained
ResponsivenessSyncing

Resources

Unclaimed servers have limited discoverability.

Looking for Admin?

If you are the server author, to access and configure the admin panel.

Related MCP Connectors

Related MCP Servers

  • A
    license
    Not graded
    quality
    A
    maintenance
    Open-source MCP proxy that enforces security policies, content scanning, and audit logging between AI agents and tool servers
    25
    AGPL 3.0
  • A
    license
    Not graded
    quality
    C
    maintenance
    Offline-first MCP proxy with policy engine and immutable audit trail for secure AI coding agents.
    2
    MIT
  • A
    license
    Not graded
    quality
    A
    maintenance
    An MCP compliance proxy that enforces deterministic knowledge governance for AI agents, routing tool calls through a 14-gate planner and generating audit logs, budget ledgers, and approval tickets.
    84
    Apache 2.0
  • A
    license
    Not graded
    quality
    B
    maintenance
    Governed MCP gateway that lets AI agents call tools with policy enforcement, prompt-injection screening, a kill-switch, and tamper-evident signed audit logs.
    Apache 2.0

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/Proofpane/releases'

If you have feedback or need assistance with the MCP directory API, please join our Discord server