Skip to main content
Glama
ariffazil

arifOS MCP Server

by ariffazil

arifOS — Constitutional AI Governance Kernel

Separates judgment from execution for regulated AI deployment.

Enterprises deploying AI at scale face a critical gap: agents that act are also certifying their own actions. Without an independent authority to evaluate proposals against safety, compliance, and policy constraints before execution, organizations risk regulatory violations, data breaches, and untraceable decisions. arifOS solves this by acting as a constitutional judge — evaluating every consequential AI action against 13 immutable policy floors and returning a verdict before any execution occurs.

Forged, Not Given.


Architecture

                    ┌─────────────────────────────────────────┐
                    │           arifOS Kernel (:8088)         │
                    │  ┌───────────────────────────────────┐  │
  User Intent ─────▶│  │  13 Constitutional Floors (F1-F13) │  │──▶ SEAL / HOLD / SABAR / VOID
                    │  │  State Observation & Gap Detection │  │
                    │  │  VAULT999 Append-Only Ledger       │  │
                    │  └───────────────────────────────────┘  │
                    └─────────────┬───────────────────────────┘
                                  │
              ┌───────────────────┼───────────────────┐
              │                   │                   │
              ▼                   ▼                   ▼
     ┌──────────────┐    ┌──────────────┐    ┌──────────────┐
     │   SEAL       │    │   HOLD       │    │   VOID       │
     │              │    │              │    │              │
     │  A-FORGE     │    │  Human Review│    │  Blocked     │
     │  Executes    │    │  Approves    │    │  by Floor    │
     └──────┬───────┘    └──────────────┘    └──────────────┘
            │
            ▼
     ┌──────────────┐
     │  VAULT999    │  67K+ immutable records
     │  Audit Log   │  append-only, zero gaps
     └──────────────┘

The judge never executes. The executor never certifies.


Related MCP server: acf-mcp

Quick Start

Docker

docker run -d --name arifos \
  -p 8088:8088 \
  -v $(pwd)/data:/app/data \
  arifos/kernel:latest

Health Check

curl http://localhost:8088/health

MCP Connection

# Connect via MCP endpoint
mcp connect http://localhost:8088/mcp

Core Features

13 Constitutional Floors (F1–F13)

Every proposal is evaluated against a chain of 13 policy constraints spanning safety, reversibility, scope, authority, evidence, and governance. A single floor failure produces a VOID verdict — no action proceeds until the constraint is resolved.

Four Verdict Types

Verdict

Meaning

SEAL

Authorized under stated conditions

HOLD

Insufficient evidence or human approval required

SABAR

Proceed with caution — partial authorization

VOID

Blocked by a constitutional floor

VAULT999 — Immutable Audit Ledger

Every verdict, evidence chain, and execution receipt is recorded in VAULT999 — an append-only JSONL ledger currently holding 67,000+ records with zero broken lines. Designed for compliance auditing, forensic review, and regulatory proof of governance.

MCP Interface

The kernel exposes 8 MCP verbs over /mcp (and /webmcp locally on :8088). No public console — programmatic access only.


Federation Topology

The arifOS Federation comprises 7 organs, each with a distinct responsibility:

Organ

Port

Responsibility

arifOS

:8088

Law — constitutional judgment

AAA

:3001

Routing — intelligence & task orchestration

A-FORGE

:7071/:7072

Execution — hands that build and act

GEOX

:8081

Earth sciences — geospatial reasoning

WEALTH

:18082

Capital management — financial operations

WELL

:18083

Biometric & health — vitality monitoring

arifFlow

:7073

Orchestration — workflow coordination

ARIF vetoes. arifOS judges. AAA routes. A-FORGE executes.


MCP Verbs Reference

Verb

Purpose

arif_init

Establish session context, actor identity, and constraints

arif_observe

State observation & gap detection — inspect current conditions

arif_think

Constitutional reasoning against floors before judgment

arif_route

Route intent to the appropriate federation organ

arif_memory

Query and manage institutional memory

arif_judge

Evaluate a proposal and return a verdict (SEAL/HOLD/SABAR/VOID)

arif_forge

Dispatch authorized actions to A-FORGE for execution

arif_seal

Seal a completed action chain with full evidence and receipt


Sister Repositories

Repository

Description

AAA

Intelligence, routing, and multi-agent orchestration

A-FORGE

Execution engine — containerized task execution

GEOX

Geospatial and earth sciences reasoning organ

WEALTH

Capital management and financial operations organ

WELL

Biometric monitoring and health management organ

arifFlow

Workflow orchestration and pipeline management


Documentation


License

AGPL-3.0 — This software is licensed under the GNU Affero General Public License v3.0. See LICENSE for details.

When deployed over a network, the complete source code must be made available to all users interacting with the service, consistent with AGPL-3.0 terms.

Available Tools

11 tools
arif_bridge_connect444 Bridge · Direct Organ (HIGH)AInspect

KERNEL 444-direct · Low-level organ call (organ + tool_name required). Bypasses intent routing. Authority: HIGH / lease — often 888_HOLD for anonymous. Agents should prefer arif_route (same reach, safer default). Not a generic MCP proxy; only federation organs under kernel envelope.

ParametersJSON Schema
NameRequiredDescriptionDefault
organYes"geox" | "wealth" | "well" | "geox" (case-insensitive)
actor_idNoCalling actor (injected into envelope)
_envelopeNo
argumentsNoTool arguments dict
tool_nameYesMCP tool name on the target organ
session_idNoGoverning session

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

A4.4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations provide basic safety hints (non-destructive, non-idempotent, read-write). The description adds context about authority levels (HIGH / lease) and that it bypasses intent routing, which is valuable. However, it does not elaborate on potential side effects or consequences of misuse beyond these points, so not fully exhaustive.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is very concise—four sentences. It is front-loaded with the kernel identifier and key purpose, and every sentence adds essential information without redundancy. No wasted words.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a tool with 6 parameters, 2 required, high schema coverage, and an output schema, the description adequately covers purpose, usage guidelines, and key constraints. It does not explain return values, but the output schema exists. Minor gap: no mention of error cases or expected behavior when parameters are missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is high (83%), so the baseline is 3. The description reinforces that organ and tool_name are required, but does not add new details about other parameters like actor_id, arguments, or session_id beyond what the schema provides. No parameter-specific guidance is given.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool's purpose: a low-level, direct organ call that bypasses intent routing, requiring organ and tool_name. It distinguishes itself from the sibling tool arif_route, which is the safer default. The description is specific and actionable.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly advises agents to prefer arif_route instead, providing clear when-to-use and when-not-to-use guidance. This directly addresses the decision between this tool and its alternative, making it highly helpful for selection.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

arif_composeCompose · Kernel ReplyA
Read-onlyIdempotent
Inspect

KERNEL reply · Final human-facing composition (citations, tone, ΔS≤0). Call LAST after observe/think/judge — not mid-pipeline. Authority: L0–L1. Modes: compose | summarize | cite | tone_shift | style | format. Not a substitute for arif_judge or arif_seal.

ParametersJSON Schema
NameRequiredDescriptionDefault
modeNocompose
styleNo
messageNo
actor_idNo
languageNoen
_envelopeNo
citationsNo
session_idNo
session_tokenNo
ai_involvementNofull

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

A4.3/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already provide readOnlyHint, idempotentHint, destructiveHint. The description adds significant behavioral context: it is a 'final human-facing composition' with a ΔS≤0 constraint (no state change), and it supports multiple modes. There is no contradiction; the description enriches transparency beyond annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is short and front-loaded with key information. It uses jargon like 'ΔS≤0' that may be obscure but is concise. Every sentence adds value. Minor deduction for the jargon density.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool has 10 parameters and an output schema exists (not shown), the description covers overall purpose and pipeline position but lacks parameter documentation. It is adequate for understanding when to use the tool but insufficient for parameter-level decisions without the schema. The output schema may compensate, but description doesn't reference it.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, so the description must compensate. It mentions modes and style but introduces 'format' and 'style' as modes not present in the enum (schema lacks 'style' and 'format' as enum values, though style is a separate parameter). Other parameters (message, actor_id, language, etc.) are not explained at all. This inconsistency and lack of detail limit its helpfulness.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description explicitly states the tool's purpose: 'Final human-facing composition' and positions it as the last step in a pipeline ('Call LAST after observe/think/judge'). It lists specific capabilities (citations, tone, ΔS≤0) and modes, clearly distinguishing it from siblings like arif_judge and arif_seal.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives explicit guidance on when to call ('LAST after observe/think/judge') and when not to ('not mid-pipeline'). It also states what the tool is not a substitute for (arif_judge, arif_seal), providing clear exclusion criteria. This helps the agent select the correct tool in the pipeline.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

arif_critique555 Critique · HeartA
Read-onlyIdempotent
Inspect

KERNEL 555 · Heart — ethical/dignity/risk stress before judgment (not SEAL). Select when blast_radius MEDIUM+, human/dignity impact, or irreversible risk. Requires non-empty target (proposal/plan text). Authority: L1. Modes: critique | redteam | maruah | deescalate | empathize | simulate | instruction_scan. Returns: risk, floors, human impact. Skip pure technical with zero human stake. Binding verdict → arif_judge.

ParametersJSON Schema
NameRequiredDescriptionDefault
modeNocritique
targetNo
actor_idNo
_envelopeNo
session_idNo
session_tokenNo
evidence_receiptNo

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

A4.2/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint, idempotentHint, and destructiveHint false, which the description does not contradict. The description adds beyond annotations: requires non-empty target, lists return types (risk, floors, human impact), and describes modes. However, it does not detail behavioral variations across modes, keeping a score of 4.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single dense paragraph that front-loads purpose and usage. It packs substantial information without excessive verbosity, though it could be better structured with separation of modes and return types.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given 7 parameters (all optional, mostly metadata), no required params, and existence of output schema, the description covers core aspects: purpose, selection criteria, modes, requirements, and return types. Minor inconsistencies (mode list) and missing details on non-core parameters prevent a 5.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The description provides partial meaning for 'mode' and 'target' but contains inaccuracies: lists modes like 'simulate' and 'instruction_scan' not in schema enum, and omits 'shadow' and 'empathy'. Also states target is required but schema allows null default. With 0% schema coverage, the description poorly compensates.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool performs ethical/dignity/risk stress testing before judgment, distinguishing it from SEAL. It specifies the conditions for selection (blast_radius MEDIUM+, human/dignity impact, irreversible risk) and names a sibling tool (arif_judge) for binding verdict.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly states when to use (blast_radius MEDIUM+, human/dignity impact, irreversible risk) and when to skip (pure technical with zero human stake). Also mentions authority level L1 and available modes, providing clear context for agent decision.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

arif_forge777 Forge · Execute GateC
Destructive
Inspect

KERNEL 777 · Execution gate via A-FORGE (hands, not law). Mutates only after arif_judge SEAL + lease/chain IDs — no self-authorize. Authority: 888_HOLD without SEAL. Modes include dry_run | engineer | query | write. Public execution verb (arif_act is internal alias only). Skip while still planning (arif_think) or without judge SEAL.

ParametersJSON Schema
NameRequiredDescriptionDefault
modeNoengineer
queryNo
plan_idNo
actor_idNo
manifestNo
_envelopeNo
session_idNo
arif_ack_idNo
artifact_idNo
vault_entry_idNo
seal_verdict_idNo
ack_irreversibleNo
judge_state_hashNo
approved_action_hashNo
constitutional_chain_idNo

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

C2.5/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already indicate destructiveHint=true. Description adds that mutation only occurs after judge SEAL and lease/chain IDs, and mentions modes. However, terms like '888_HOLD without SEAL' are undefined, reducing clarity.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is short but dense with jargon. It attempts to be concise but sacrifices clarity. Key information is present but poorly structured.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Despite having an output schema, the description does not explain what the tool returns or how parameters like 'seal_verdict_id' or 'approved_action_hash' relate to the judge workflow. Given the complexity (15 params, destructive behavior, sibling tools), the description is insufficient.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

With 0% schema description coverage, the description adds very little about the 15 parameters. Only 'mode' enum values are mentioned in passing. This is insufficient for an agent to correctly use the tool.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose2/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses cryptic jargon like 'KERNEL 777', 'A-FORGE', and '888_HOLD' without plain-language explanation. It vaguely indicates it's an execution gate requiring judge seal, but the core purpose is unclear for an AI agent.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It provides some guidance: skip without judge SEAL or while still planning (arif_think). However, it doesn't explicitly state when to use this tool vs siblings like arif_judge or arif_think, leaving ambiguity.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

arif_init000 Init · Kernel SessionA
Idempotent
Inspect

KERNEL 000 · Session ignition — not a helper app. Binds actor, floors, and audit before any other arif_* verb can govern. Without session_id, kernel treats you as anonymous (OBSERVE_ONLY / SYUBHAH). Authority: pre-session open; light/init mint session_id + authority band. Modes: ping | light | init | resume | validate | epoch_open | epoch_seal | canary | preflight | triage. Returns: session_id, actor_verified, authority, allowed_next_verbs, next_tool. Skip when live session already bound → arif_triage; pure facts only → arif_observe.

ParametersJSON Schema
NameRequiredDescriptionDefault
modeNoinit
nonceNo
intentNo
contextNo
payloadNo
toolingNo
verboseNo
actor_idNo
epoch_idNo
evidenceNo
trace_idNo
_envelopeNo
session_idNo
agent_policyNo
counterpartyNo
sovereign_idNo
actor_signatureNo
caller_actor_idNo
delegation_modeNo
idempotency_keyNo
ack_irreversibleNo
executor_actor_idNo
declared_model_keyNo
client_capabilitiesNo
requested_authorityNoOBSERVE_ONLY
previous_session_hashNo

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

A3.9/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations provide idempotentHint and destructiveHint. The description adds context: binds actor/floors/audit, mints session_id and authority band, and describes anonymous mode without session. Good additional insight.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is dense with jargon but front-loaded with core purpose. Could be more concise; multiple concepts packed into a single paragraph.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given 26 undocumented parameters and no formal output schema, the description lists return fields but lacks explanations for most parameters. Incomplete for a complex initialization tool.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema has 26 parameters with 0% description coverage. The description only lists some modes but misses two enum values (opt_out, opt_out_profiling) and does not explain other parameters like nonce, intent, context, etc. Insufficient compensation.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states that this tool initiates a kernel session, binds actor, floors, and audit, and is required before other arif_* verbs. It distinguishes from siblings by noting when to use arif_triage or arif_observe instead.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly states when to use (before other arif_* verbs, if no session) and when not to use (live session bound → arif_triage; pure facts only → arif_observe). Provides clear alternatives.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

arif_judge888 Judge · VerdictA
Read-only
Inspect

KERNEL 888 · Constitutional verdict — only organ that SEAL/HOLD/SABAR/VOIDs. Not advice; binding arbitration of floors + authority. Authority: 888_HOLD / SOVEREIGN session required for real adjudicate. REQUIRES: actor, intent, domain, reversibility_level, blast_radius (+ evidence). Modes: judge | compare | history | explain | floor_status | witness_consensus. Skip if evidence incomplete → arif_observe; plan incomplete → arif_think; reversible low-risk advisory only.

ParametersJSON Schema
NameRequiredDescriptionDefault
actorYes
domainYes
intentYes
actor_idNo
evidenceNo
_envelopeNo
session_idNo
measurementNo
blast_radiusYes
session_tokenNo
authority_tokenNo
epistemic_stateNoUNKNOWN
reversibility_levelYes
requested_capabilityYes

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

A3.5/5.0
Behavior1/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Description claims binding arbitration and state-changing actions (SEAL/HOLD/SABAR/VOIDs), contradicting the readOnlyHint=true annotation. This is a serious inconsistency.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Description is dense and front-loaded with core purpose, but uses cryptic jargon (KERNEL 888, floors, SABAR) that may confuse agents. Not optimally concise for AI consumption.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Covers core concept, modes, prerequisites, and alternatives, but lacks explanation of cryptic terms and some parameters. Adequate given output schema exists, but could be more comprehensive.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Description adds meaning to key required parameters (actor, intent, domain, etc.) and mentions evidence, but many parameters (actor_id, session_id, etc.) are left unexplained. With 0% schema coverage, more detail would be beneficial.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Description clearly states the tool is for constitutional verdict and binding arbitration, with specific verbs like SEAL/HOLD/SABAR/VOIDs. It distinguishes from siblings by naming alternative tools for incomplete evidence or plans.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly states required parameters (actor, intent, domain, etc.) and provides clear when-to-use guidance by directing to siblings when evidence or plan is incomplete, or for low-risk advisory.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

arif_memoryMemory Governor · KernelB
Destructive
Inspect

KERNEL memory governor · L1–L6 stack under F1/F2/F4/F11 (not a free notepad). Recall/inspect free-ish; remember/promote/revise/forget are J-space mutations. Authority: recall L0; writes gated. Modes: recall | inspect | attest | remember | promote | revise | forget. Skip ephemeral one-off facts.

ParametersJSON Schema
NameRequiredDescriptionDefault
modeNorecall
tierNo
queryNo
scopeNo
top_kNo
aspectNo
hybridNo
policyNo
cascadeNo
contentNo
includeNo
payloadNo
seal_idNo
to_tierNo
actor_idNo
lease_idNo
metadataNo
trace_idNo
_envelopeNo
from_tierNo
memory_idNo
tier_hintNo
timestampNo
provenanceNo
redact_piiNo
session_idNo
structuredNo
graph_firstNo
new_contentNo
truth_classNo
caller_chainNo
memory_classNo
policy_basisNo
embedding_refNo
include_proofNo
session_tokenNo
vault_versionNo
human_approvalNo
new_structuredNo
temporal_as_ofNo
tombstone_textNo
idempotency_keyNo
new_truth_classNo
resolution_kindNo
source_receiptsNo
correction_eventNo
promotion_reasonNo
include_contestedNo
progressive_levelNo
require_human_ackNo
time_window_hoursNo
organ_staleness_bandNo
supersedes_memory_idNo
minimised_vault_recordNo
required_floors_satisfiedNo

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

B3.1/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Beyond annotations (destructiveHint true), the description adds that recall/inspect are free-ish and writes are gated mutations. It mentions authority and tiers. However, it does not explain what 'J-space mutations' entail, rate limits, or what exactly gets destroyed, leaving some ambiguity.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is concise (4 sentences) and front-loaded with the essential identifier. It includes a list of modes. However, the dense jargon and lack of structure (e.g., bullet points) slightly reduce readability.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool's complexity (55 parameters, no schema descriptions), the description is incomplete. It omits explanations for most parameters, does not clarify parameter interactions, and assumes knowledge of the kernel stack. The output schema exists but does not compensate for the lack of usage guidance.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

With 55 parameters and 0% schema description coverage, the description only explains the 'mode' parameter (lists values) and briefly hints at 'tier'. The vast majority of parameters (e.g., query, content, policy) are not addressed, leaving agents to guess their meaning and usage.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states it is a memory governor for a kernel, managing L1–L6 tiers and listing modes (recall, inspect, etc.). It distinguishes itself from a free notepad and from siblings by focusing on structured memory operations. However, the heavy jargon (J-space, F1/F2/F4/F11) reduces immediate clarity.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies when to use it (for structured memory, not ephemeral facts) and distinguishes read vs write modes. However, it lacks explicit guidance on when to use this tool vs sibling tools (e.g., arif_observe, arif_think) or when not to use it.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

arif_observe111 Observe · Sense RealityA
Read-onlyIdempotent
Inspect

KERNEL 111 · Sense reality into evidence (not reasoning, not judgment). Web/URL/vitals/repo/entropy with epistemic tags. Authority: L0 OBSERVE. Modes: search | fetch | ingest | compass | atlas | entropy_dS | vitals | repo_map | hybrid_discovery. Returns: evidence + sources + uncertainty. Skip when pure reasoning → arif_think; domain compute → arif_route to GEOX/WEALTH/WELL.

ParametersJSON Schema
NameRequiredDescriptionDefault
urlNo
modeNosearch
queryNo
layersNo
actor_idNo
_envelopeNo
session_idNo
result_limitNo
session_tokenNo

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

A3.8/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already cover safety (readOnly, idempotent, openWorld). Description adds behavioral detail: returns evidence, sources, uncertainty; authority level L0 OBSERVE; mentions epistemic tags. No contradictions.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Description is very concise with no wasted words. It front-loads the purpose and lists modes. However, the jargon 'KERNEL 111', 'L0 OBSERVE' may be opaque without additional context, slightly reducing accessibility.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given 9 un-documented parameters and many modes, the description is far from complete. It mentions return types but fails to explain parameter roles or mode differences. Output schema exists but is not shown; description does not compensate for missing parameter semantics.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters1/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0% – the description does not explain any of the 9 parameters beyond listing some modes. It omits meanings for url, query, layers, actor_id, session_id, etc. This is a critical gap.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool gathers evidence from reality, with specific verb 'sense' and resource 'reality'. It distinguishes from siblings arif_think (pure reasoning) and arif_route (domain compute), making purpose unambiguous.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly states when to use: for evidence gathering with modes like search, fetch, etc. Directly advises against use for pure reasoning ('skip when pure reasoning → arif_think') and domain compute ('arif_route to GEOX/WEALTH/WELL').

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

arif_route444 Route · Intent→OrganA
Read-onlyIdempotent
Inspect

KERNEL 444 · Intent→organ router (default path to GEOX/WEALTH/WELL/A-FORGE). Select when you know the goal but not which organ/verb. Optional organ_tool+arguments = governed bridge call (prefer this over arif_bridge_connect). Authority: L0. Returns: organ, port, tool_prefix, suggested_tools. Not session preflight (use arif_triage). Not a free shell.

ParametersJSON Schema
NameRequiredDescriptionDefault
taskNoAlias for intent (backward compat).
organNoOptional explicit organ override. If provided, intent matching is skipped and this organ is used directly.
intentYesNatural-language description of what the user wants. e.g. "interpret this seismic section", "assess portfolio risk"
actor_idNoCalling actor.
_envelopeNo
argumentsNoArguments to pass to organ_tool.
organ_toolNoThe tool name on the target organ to call. If absent, returns routing decision only (no bridge call).
session_idNoGoverning session.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

A3.9/5.0
Behavior1/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The annotation declares readOnlyHint=true, but the description mentions 'Optional organ_tool+arguments = governed bridge call', which implies potential execution of a non-read-only action. This contradiction undermines transparency.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Description is concise, front-loaded with purpose, and each sentence adds value. No filler or redundancy.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the complexity (8 params, output schema exists), the description covers purpose, usage, alternatives, return values, and constraints (L0 authority, not a free shell). It is sufficiently complete.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 88% (high), so baseline is 3. The description adds minimal parameter info beyond the schema; it mentions 'organ_tool+arguments' but does not elaborate on other parameters.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states it is an 'Intent→organ router' and explains the use case: route a goal to the appropriate organ and verb. It distinguishes from siblings by mentioning arif_bridge_connect and arif_triage, providing specific alternatives.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly states when to use: 'Select when you know the goal but not which organ/verb.' Also gives clear when-not: 'Not session preflight (use arif_triage).' Recommends preferring this over arif_bridge_connect.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

arif_seal999 Seal · VAULT999B
Destructive
Inspect

KERNEL 999 · VAULT999 immutable append — civilizational memory, irreversible. Authority: 888_HOLD / SOVEREIGN + ack_irreversible for seal mode. Modes: seal | verify | chain | list | dry_run | seal_card | render. Seal only after SEAL verdict path; HOLD/SABAR/VOID do not seal. Testing → dry_run. Kernel judges; vault seals; Arif owns F13 veto.

ParametersJSON Schema
NameRequiredDescriptionDefault
modeNoseal
nonceNo
payloadNo
actor_idNo
_envelopeNo
session_idNo
drift_eventsNo
witness_typeNoai
session_tokenNo
actor_signatureNo
judge_state_hashNo
constitutional_chain_idNo

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

B3/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The description reinforces the annotation's destructiveHint=true by stating 'irreversible' and 'immutable append'. It adds behavioral context beyond annotations, such as authority requirements ('Authority: 888_HOLD / SOVEREIGN + ack_irreversible for seal mode') and a veto power ('Arif owns F13 veto'). There is no contradiction with annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single paragraph of moderate length, front-loading the core concept of immutable append. It contains poetic language and jargon (e.g., 'civilizational memory'), which reduces conciseness. While it covers key points, it could be more efficiently structured for an AI agent.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool's complexity (12 parameters, destructive, no param descriptions), the description leaves significant gaps. It does not explain the meaning or purpose of any parameter, nor describe the output (despite an existing output schema). The mode list discrepancy further undermines completeness. An agent would struggle to use this tool correctly without additional context.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The input schema has 12 parameters with 0% description coverage, and the description does not explain any parameter in detail. It lists modes in text ('seal | verify | chain | list | dry_run | seal_card | render') but the schema's mode enum includes different values ('seal', 'verify', 'ledger', 'changelog', 'audit'), creating inconsistency. The description adds minimal helpful parameter semantics and introduces confusion instead.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose3/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states that the tool performs an 'immutable append' or 'seal' operation, implying irreversible creation of a record. It mentions modes like 'seal' and 'verify', and gives a condition ('Seal only after SEAL verdict path'). However, the language is esoteric and uses proprietary terms (e.g., '888_HOLD', 'F13 veto') that may confuse an AI agent. The purpose is somewhat clear but not universally understandable.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides implicit usage guidance: 'Seal only after SEAL verdict path' and 'Testing → dry_run', indicating when to use the seal mode versus dry run. It distinguishes the tool from siblings by stating 'Kernel judges; vault seals', implying arif_seal is for sealing after judging. However, it does not explicitly list when to use this tool over sibling tools like arif_judge or arif_think, limiting clarity.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

arif_think333 Think · MindA
Read-onlyIdempotent
Inspect

KERNEL 333 · Mind — structure reasoning under F2/F7 (not a chat model, not a verdict). Plan, reflect, verify, synthesize with OBS/DER/INT/SPEC labels. Authority: L0–L1. Modes: reason | reflect | verify | plan | plan_review | plan_approve | refactor_plan | metabolize | axioms. Returns: structured reasoning + confidence + next_safe_action. Ethical/maruah risk → arif_critique. Binding decision → arif_judge. Facts → arif_observe.

ParametersJSON Schema
NameRequiredDescriptionDefault
modeNoreason
queryNo
plan_idNo
actor_idNo
_envelopeNo
session_idNo
witness_typeNoai
session_tokenNo

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

A3.9/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already indicate readOnlyHint, idempotentHint, destructiveHint. Description adds that it operates at Authority L0–L1, returns structured reasoning + confidence + next_safe_action, and is not a chat model. This provides useful behavioral context beyond annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is concise, packing purpose, modes, output, and cross-references into a few sentences. It front-loads the core identity. However, heavy jargon (F2/F7, OBS/DER/INT/SPEC) may reduce clarity for some agents, but it remains efficient.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With 8 parameters and an output schema, the description covers purpose, usage, and behavioral traits reasonably well. However, it does not explain most parameters or provide usage examples, leaving some gaps for a complex tool. The output schema exists but is not shared in the description.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%. The description explains the 'mode' parameter with its enum values, but does not describe other parameters like query, plan_id, actor_id, session_id, etc. Given 8 parameters, the description only partially compensates for the lack of schema descriptions.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states it's for structure reasoning under F2/F7, explicitly distinguishes from a chat model and a verdict, and differentiates from siblings by pointing to arif_critique (ethical risk), arif_judge (binding decision), and arif_observe (facts).

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description says when not to use it ('not a chat model, not a verdict') and directs to sibling tools for related tasks. It lists modes but does not provide explicit guidance on when to choose each mode, though the mode names are self-explanatory.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections. Dates show when Glama detected each change.

  1. 35 tool updatesv0.1.1
    • Removedarif_bridge
    • Changedarif_bridge_connect3 fields changed
      • addedOutput schema / additionalProperties
        Added value: +true
      • removedOutput schema / properties
        Removed value: -{
        -  "_nine_signal_compliant": {
        -    "description": "Internal compliance flag",
        -    "type": "boolean"
        -  },
        -  "_violations": {
        -    "description": "Non-compliance audit trail",
        -    "items": {
        -      "type": "string"
        -    },
        -    "type": "array"
        -  },
        -  "actor_id": {
        -    "description": "Sovereign or agent actor ID",
        -    "type": [
        -      "string",
        -      "null"
        -    ]
        -  },
        -  "delta_S": {
        -    "description": "Thermodynamic entropy change",
        -    "type": "number"
        -  },
        -  "meta": {
        -    "description": "Metadata including actor_id, mode, circuit",
        -    "type": "object"
        -  },
        -  "nine_signal": {
        -    "description": "F2 addendum nine-signal block",
        -    "type": "object"
        -  },
        -  "output_policy": {
        -    "description": "Policy constraints: DOMAIN_SEAL, DOMAIN_HOLD, DOMAIN_VOID, SIMULATION_ONLY",
        -    "type": "string"
        -  },
        -  "reasons": {
        -    "description": "Human-readable justification list",
        -    "items": {
        -      "type": "string"
        -    },
        -    "type": "array"
        -  },
        -  "result": {
        -    "description": "Tool-specific payload",
        -    "type": "object"
        -  },
        -  "session_id": {
        -    "description": "Active session identifier",
        -    "type": [
        -      "string",
        -      "null"
        -    ]
        -  },
        -  "stage_progression": {
        -    "description": "Next stage auto-chain hint",
        -    "type": [
        -      "object",
        -      "null"
        -    ]
        -  },
        -  "status": {
        -    "description": "Execution status: OK, ERROR, TIMEOUT, DRY_RUN",
        -    "type": "string"
        -  },
        -  "timestamp": {
        -    "description": "ISO-8601 timestamp",
        -    "type": "string"
        -  },
        -  "tool": {
        -    "description": "Canonical tool name that produced this response",
        -    "type": "string"
        -  },
        -  "verdict": {
        -    "description": "Constitutional verdict: SEAL, HOLD, VOID, SABAR, PROVISIONAL, PARTIAL",
        -    "type": "string"
        -  }
        -}
      • removedOutput schema / required
        Removed value: -[
        -  "status",
        -  "tool",
        -  "verdict",
        -  "result",
        -  "nine_signal",
        -  "reasons"
        -]
    • Addedarif_compose
    • Removedarif_conformance_report
    • Addedarif_critique
    • Removedarif_evidence_fetch
    • Addedarif_forge
    • Removedarif_forge_execute
    • Removedarif_gateway_connect
    • Removedarif_heart_critique
    • Addedarif_init
    • Removedarif_initialize_probe
    • Addedarif_judge
    • Removedarif_judge_deliberate
    • Removedarif_kernel_attest
    • Removedarif_kernel_health
    • Removedarif_kernel_route
    • Removedarif_kernel_status
    • Addedarif_memory
    • Removedarif_memory_recall
    • Removedarif_mind_reason
    • Addedarif_observe
    • Removedarif_ops_measure
    • Removedarif_ping
    • Removedarif_reply_compose
    • Changedarif_route3 fields changed
      • addedOutput schema / additionalProperties
        Added value: +true
      • removedOutput schema / properties
        Removed value: -{
        -  "_nine_signal_compliant": {
        -    "description": "Internal compliance flag",
        -    "type": "boolean"
        -  },
        -  "_violations": {
        -    "description": "Non-compliance audit trail",
        -    "items": {
        -      "type": "string"
        -    },
        -    "type": "array"
        -  },
        -  "actor_id": {
        -    "description": "Sovereign or agent actor ID",
        -    "type": [
        -      "string",
        -      "null"
        -    ]
        -  },
        -  "delta_S": {
        -    "description": "Thermodynamic entropy change",
        -    "type": "number"
        -  },
        -  "meta": {
        -    "description": "Metadata including actor_id, mode, circuit",
        -    "type": "object"
        -  },
        -  "nine_signal": {
        -    "description": "F2 addendum nine-signal block",
        -    "type": "object"
        -  },
        -  "output_policy": {
        -    "description": "Policy constraints: DOMAIN_SEAL, DOMAIN_HOLD, DOMAIN_VOID, SIMULATION_ONLY",
        -    "type": "string"
        -  },
        -  "reasons": {
        -    "description": "Human-readable justification list",
        -    "items": {
        -      "type": "string"
        -    },
        -    "type": "array"
        -  },
        -  "result": {
        -    "description": "Tool-specific payload",
        -    "type": "object"
        -  },
        -  "session_id": {
        -    "description": "Active session identifier",
        -    "type": [
        -      "string",
        -      "null"
        -    ]
        -  },
        -  "stage_progression": {
        -    "description": "Next stage auto-chain hint",
        -    "type": [
        -      "object",
        -      "null"
        -    ]
        -  },
        -  "status": {
        -    "description": "Execution status: OK, ERROR, TIMEOUT, DRY_RUN",
        -    "type": "string"
        -  },
        -  "timestamp": {
        -    "description": "ISO-8601 timestamp",
        -    "type": "string"
        -  },
        -  "tool": {
        -    "description": "Canonical tool name that produced this response",
        -    "type": "string"
        -  },
        -  "verdict": {
        -    "description": "Constitutional verdict: SEAL, HOLD, VOID, SABAR, PROVISIONAL, PARTIAL",
        -    "type": "string"
        -  }
        -}
      • removedOutput schema / required
        Removed value: -[
        -  "status",
        -  "tool",
        -  "verdict",
        -  "result",
        -  "nine_signal",
        -  "reasons"
        -]
    • Removedarif_schema_echo
    • Addedarif_seal
    • Removedarif_sense_observe
    • Removedarif_session_init
    • Addedarif_think
    • Removedarif_transport_echo
    • Removedarif_triage
    • Removedarif_vault_seal
    • Removedarif_version_echo
  2. 26 tool updatesv0.1.0
    • First observedarif_bridge
    • First observedarif_bridge_connect
    • First observedarif_conformance_report
    • First observedarif_evidence_fetch
    • First observedarif_forge_execute
    • First observedarif_gateway_connect
    • First observedarif_heart_critique
    • First observedarif_initialize_probe
    • First observedarif_judge_deliberate
    • First observedarif_kernel_attest
    • First observedarif_kernel_health
    • First observedarif_kernel_route
    • First observedarif_kernel_status
    • First observedarif_memory_recall
    • First observedarif_mind_reason
    • First observedarif_ops_measure
    • First observedarif_ping
    • First observedarif_reply_compose
    • First observedarif_route
    • First observedarif_schema_echo
    • First observedarif_sense_observe
    • First observedarif_session_init
    • First observedarif_transport_echo
    • First observedarif_triage
    • First observedarif_vault_seal
    • First observedarif_version_echo

TDQS

A3.6/5.0
Disambiguation5/5

Each tool has a distinct and clearly defined purpose within the kernel's lifecycle: from session initiation (arif_init) through observation, reasoning, ethical critique, judgment, sealing, composition, execution, and memory management. The only potential overlap between arif_route and arif_bridge_connect is explicitly resolved by preferring arif_route. All other tools are uniquely scoped with no ambiguity.

Naming Consistency4/5

All tools follow the 'arif_<verb>' pattern, with most verbs being single words (e.g., compose, judge, seal). The sole exception is 'arif_bridge_connect', which uses a compound verb. This minor inconsistency slightly detracts from the overall uniformity, but the pattern is otherwise consistent and predictable.

Tool Count5/5

With 11 tools, arifOS covers the full gamut of operations for a sophisticated governance kernel without being excessive. Each tool serves a clear and necessary role in the agent's workflow, from initialization to immutable sealing. The count feels well-scoped for the intended domain.

Completeness4/5

The tool set covers the major stages of the decision and execution pipeline: init, observe, think, critique, judge, seal, compose, forge, memory, route, and bridge. This provides a cohesive workflow. Missing are utility tools like listing or unsealing, but these are not central to the core lifecycle, so the gap is minor.

Maintenance

ActivityActive
ResponsivenessWithin a week

Resources

Unclaimed servers have limited discoverability.

Looking for Admin?

If you are the server author, to access and configure the admin panel.

Related MCP Connectors

Related MCP Servers

  • A
    license
    A
    quality
    B
    maintenance
    Universal governance layer for AI agents — MCP-native, fail-closed, LNN interpretability. Governed receipts, IPFS audit proofs, and rollback for any agent in any framework.
    3
    82
    Apache 2.0
  • A
    license
    Not graded
    quality
    F
    maintenance
    Constitutional MCP server enforcing 13 Floors of governance for AI agents, providing tools for session anchoring, reasoning, safety critique, and audit logging.
    AGPL 3.0

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/ariffazil/arifos'

If you have feedback or need assistance with the MCP directory API, please join our Discord server