agentflow-mcp
This server is an enterprise architecture knowledge MCP server that provides structured data to agents for architecture, platform selection, risk governance, and branding.
Look up reference architecture patterns (
arch_pattern_lookup) by industry, data stack, cloud, and constraints, returning components, data zones, integration notes, confidence scores, and diagram data.Recommend data platforms (
tool_selection_lookup) based on use case, data stack, constraints, and latency, with cloud fit, reasoning, and alternatives.Get risk and governance policies (
risk_policy_lookup) including required controls, risk flags, and human-in-the-loop triggers for regulated data.Retrieve company brand context (
brand_context_lookup) for a domain, including name, description, tags, positioning, brand voice/style, and logo URL, with caching and graceful fallback.Run locally or over HTTP (stdio or streamable HTTP) for integration with MCP clients and scale-to-zero deployment on Fly.io.
Use offline source data for the first three tools, with optional Brandfetch and logo.dev API keys for brand lookups.
Provides Databricks-specific architecture and platform guidance, including recommending Databricks as a data platform, assessing cloud fit, and surfacing alternative platforms with rationale based on workload, constraints, and latency.
Provides Snowflake-specific architecture and platform guidance, including recommending Snowflake as a data platform, assessing cloud fit, and surfacing alternative platforms with rationale based on workload, constraints, and latency.
Click on "Install Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@agentflow-mcpWhat architecture pattern fits a media agency using BigQuery with EU data residency?"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
agentflow-mcp
An enterprise architecture knowledge MCP server for the agentflow demo pipeline. Built with the MCP TypeScript SDK v2 + TypeScript, deployed on Fly.io.
The server exposes four tools that ground an Architecture Agent and Risk Checker Agent in curated enterprise patterns rather than generic LLM reasoning:
Tool | Called by | Returns |
| Architect Agent | Reference architecture pattern, components, diagram data |
| Architect Agent | Platform recommendation with constraint-aware reasoning |
| Risk Checker Agent | Required controls, risk flags, HITL trigger |
| Architect Agent | Company identity, positioning, logo (via Brandfetch + logo.dev) |
How It Fits In
agentflow pipeline agentflow-mcp
┌──────────────────────┐ ┌───────────────────────┐
│ Qualifier Agent │ │ arch_pattern_lookup │
│ - clarifies the ask │ │ tool_selection_lookup │
└──────┬───────────────┘ │ risk_policy_lookup │
│ handoff │ brand_context_lookup │
┌──────▼───────────────┐ │ │
│ Architect Agent │──── MCP calls ───▶│ Source pack (data/) │
│ - pattern selection │ │ 102 markdown files │
│ - tool selection │◀── JSON response ─│ with YAML frontmatter │
│ - diagram rendering │ │ │
└──────┬───────────────┘ │ Brandfetch + logo.dev │
│ handoff │ (cached, additive) │
┌──────▼───────────────┐ └───────────────────────┘
│ Risk Checker Agent │──── risk_policy_lookup ──▶
│ - HITL gate trigger │◀── risk_flags, HITL ──
└──────────────────────┘The MCP is a tool provider, not an agent orchestrator. Agent prompts and the architecture-diagram skill live in the agentflow project. The MCP provides structured data; the agents interpret and act on it.
Related MCP server: MCP Architect
Quickstart
Prerequisites
Node.js >= 20
(Optional) Brandfetch API key and logo.dev key for
brand_context_lookup
Install & Run
npm install
npm run dev # stdio transport (local dev + MCP Inspector)HTTP transport (streamable HTTP)
MCP_TRANSPORT=http-stream PORT=8080 npm run dev
# agentflow-mcp listening on http://0.0.0.0:8080/mcpThe http-stream transport runs in stateless mode (hardcoded in src/index.ts). This is required for compatibility with standard MCP clients: their startup "probe" is a GET with no session ID, which a stateful server answers with 400 No sessionId (surfaced by clients as a fatal "version negotiation failed" error). Stateless mode answers that probe with 405 Method Not Allowed + Allow: POST, which every client explicitly tolerates. It also suits scale-to-zero deployments (Fly.io) — no server-side session state to lose when instances spin down.
Run Tests
npm test # 31 unit + integration tests
npm run typecheck # tsc --noEmit
npm run check # biome lint + formatEnvironment Variables
Copy .env.example to .env and fill in the keys. Only brand_context_lookup needs external API keys — the other three tools work offline from the source pack.
Variable | Required by | Purpose |
|
| Bearer token for Brandfetch Brand Context API |
|
| Bearer token for logo.dev Brand API |
|
| Publishable key for logo.dev CDN URLs |
| Server |
|
| Server | HTTP port (default 8080, used when transport is |
| Server | Graylog GELF HTTP input URL (e.g. |
| Server | Source name for Graylog messages (default |
When API keys are missing, brand_context_lookup returns cached responses for cached domains or a graceful unavailable response for uncached domains. The other three tools continue to function normally.
Tools
arch_pattern_lookup
Match an enterprise ask to a curated reference architecture pattern.
Input:
{
"industry": "media_agency",
"data_stack": ["BigQuery", "Snowflake"],
"cloud": "GCP",
"constraints": ["SAML SSO", "EU data residency", "cross-client governance"],
"latency": "batch"
}Output:
{
"pattern_id": "media_agency_audience_measurement",
"architecture_summary": "...",
"recommended_components": ["BigQuery", "Snowflake", "SAML SSO", "GCP EU Region"],
"data_zones": ["bronze", "silver", "gold"],
"integration_notes": ["..."],
"confidence": 0.87,
"diagram_data": {
"components": [{ "name": "BigQuery", "type": "database", "sublabel": "...", "zone": "gold" }],
"connections": [{ "from": "Users", "to": "SAML SSO", "label": "OAuth 2.0", "style": "dashed" }],
"boundaries": [{ "label": "GCP EU Region", "type": "region" }]
},
"source_references": [{ "path": "data/patterns/...", "title": "...", "source_url": "..." }]
}Matching logic: Deterministic, rules-based — industry match (40%) → data stack overlap (30%) → constraint coverage (30%). Curated matches (confidence >= 0.85) include diagram_data and source references. Weak matches fall back to a generic enterprise AI POC pattern with confidence < 0.5.
tool_selection_lookup
Recommend a platform based on workload, data stack, constraints, and latency.
Input:
{
"use_case": "AI-powered patient insights",
"data_stack": ["Databricks"],
"constraints": ["HIPAA", "PHI", "US data residency"],
"latency": "batch"
}Output:
{
"recommended_platform": "Databricks",
"cloud_fit": "Azure or AWS",
"reasoning": "Strong lakehouse fit for healthcare AI with HIPAA-compliant governance...",
"alternatives": [{ "platform": "Snowflake", "rationale": "..." }, { "platform": "BigQuery", "rationale": "..." }]
}risk_policy_lookup
Return industry-specific risk and governance checks, including HITL triggers for regulated data.
Input:
{
"industry": "healthcare",
"data_classification": ["PHI", "PII"],
"region": "US",
"deployment": "cloud",
"constraints": ["HIPAA"]
}Output:
{
"required_controls": ["RBAC", "audit logs", "data lineage", "SAML SSO"],
"risk_flags": ["prompt leakage", "overbroad analyst access"],
"hitl_required": true,
"review_reason": "PHI access requires human approval before final architecture signoff"
}HITL is triggered for regulated data types (PHI, PII, regulated financial data) with a human-readable review_reason.
brand_context_lookup
Retrieve rich company context from Brandfetch and a logo from logo.dev, with layered caching.
Input:
{
"domain": "havas.com"
}Output:
{
"company_name": "Havas",
"domain": "havas.com",
"industry_hint": "media_agency",
"description": "...",
"tags": ["advertising", "marketing", "media"],
"positioning": { "value_proposition": "...", "target_audience": "...", "products_and_services": "..." },
"brand": { "voice": "...", "style": "..." },
"logo_url": "https://...",
"confidence": 0.85
}Caching layers: (1) Brandfetch cachedOnly=true for instant cache-only lookups, (2) local file cache with TTL. Repeated lookups return cached data without consuming API quota. Graceful fallback when APIs are unreachable.
Source Pack
The data/ directory contains 102 markdown files with structured YAML frontmatter, organized into:
data/
├── industry/ # Industry-specific architecture notes
├── vendors/ # Vendor documentation (GCP, AWS, Azure, Snowflake, Databricks)
└── patterns/ # Curated reference architecture patterns (4 demo scenarios)Frontmatter fields: type, title, source_url, vendor, industry, data_stack, cloud, constraints, compliance, region, data_zones, latency, pattern_id, architecture_summary, recommended_components, integration_notes, confidence_baseline, diagram_data.
The source pack is loaded into an in-memory index at server startup, keyed by industry, data stack, constraints, and pattern_id.
Demo Scenarios
Scenario | Industry | Pattern ID |
Media agency audience measurement |
|
|
Healthcare patient insights |
|
|
Retail lakehouse personalization |
|
|
FSI governance copilot |
|
|
Deployment
Docker
docker build -t agentflow-mcp .
docker run -p 8080:8080 agentflow-mcpFly.io
Simplest deployment path — no IAM setup, deploys your Dockerfile directly:
# Install Fly CLI (if not already)
curl -L https://fly.io/install.sh | sh
# Create the app (one-time)
fly launch --no-deploy
# Set secrets
fly secrets set BRANDFETCH_API_KEY=your-key-here
fly secrets set LOGO_DEV_SECRET_KEY=your-key-here
fly secrets set LOGO_DEV_PUBLISHABLE_KEY=your-key-here
# Deploy
fly deployfly.toml is already configured: Node 22 Docker image, HTTP transport on port 8080, scale-to-zero when idle. The MCP endpoint will be at https://agentflow-mcp.fly.dev/mcp (or a custom domain such as https://arch.ishlab.dev/mcp).
Note: the server runs http-stream in stateless mode — do not switch it back to stateful, or standard MCP clients will fail their startup probe with "version negotiation failed" (see HTTP transport).
Scripts
Script | Purpose |
| Validate all markdown files in |
| Generate frontmatter for source pack files |
| Verify all four tools are discoverable via MCP tool listing |
| Pre-populate the brand cache for the four demo domains |
npx tsx scripts/validate-source-pack.ts # validate source pack
npx tsx scripts/mcp-list-check.ts # verify tool discovery
npx tsx scripts/brand-cache-warm.ts # warm brand cacheTesting with MCP Inspector
npx @modelcontextprotocol/inspector npm run devThis launches the MCP Inspector UI where you can call tools interactively and verify responses.
Project Structure
agentflow-mcp/
├── src/
│ ├── index.ts # MCP server entry point (stdio + http-stream)
│ ├── tools/
│ │ ├── archPatternLookup.ts # Pattern matching + confidence scoring
│ │ ├── toolSelectionLookup.ts # Platform recommendation
│ │ ├── riskPolicyLookup.ts # Risk/governance checks + HITL
│ │ └── brandContextLookup.ts # Brandfetch + logo.dev with caching
│ ├── data/
│ │ ├── loader.ts # Source pack parser + in-memory index
│ │ ├── brandfetchClient.ts # Brandfetch Brand Context API client
│ │ ├── logoDevClient.ts # logo.dev Brand API client
│ │ └── brandCache.ts # Local file cache with TTL
│ └── types/
│ ├── source.ts # Source pack entry types
│ ├── arch-pattern.ts # arch_pattern_lookup types
│ ├── tool-selection.ts # tool_selection_lookup types
│ ├── risk-policy.ts # risk_policy_lookup types
│ └── brand-context.ts # brand_context_lookup types
├── data/ # Source pack (102 markdown files)
│ ├── industry/
│ ├── vendors/
│ └── patterns/
├── tests/ # Unit + integration tests
├── docs/ # PRD, MCP overview
├── scripts/ # Validation + cache warming scripts
├── openspec/ # OpenSpec specs (4 capabilities)
│ ├── specs/ # Main specs (synced from archived change)
│ └── changes/archive/ # Archived change proposals
├── Dockerfile # Multi-stage build for Fly.io
├── fly.toml # Fly.io app config
└── package.jsonTech Stack
Runtime: Node.js >= 20
MCP framework: MCP TypeScript SDK v2 (
@modelcontextprotocol/server2.x)Language: TypeScript (strict)
Validation: Zod v4
Linting/formatting: Biome
Testing: Node.js built-in test runner
Deployment: Docker + Fly.io
OpenSpec
This project uses OpenSpec for spec-driven development. The four tool capabilities are specified under openspec/specs/:
arch-pattern-lookup(7 requirements)brand-context-lookup(6 requirements)risk-policy-lookup(4 requirements)tool-selection-lookup(5 requirements)
Validate specs with:
openspec validate --specs
openspec doctorLicense
MIT
Available Tools
4 toolsarch_pattern_lookupA
Match an enterprise ask (industry, data stack, cloud, constraints) to a curated reference architecture pattern with components, data zones, integration notes, confidence, and diagram-ready data.
| Name | Required | Description | Default |
|---|---|---|---|
| cloud | No | Cloud preference, e.g. GCP, AWS, Azure | |
| latency | No | Latency expectation: batch or real-time | |
| industry | Yes | Industry code, e.g. media_agency, healthcare, retail, financial_services | |
| data_stack | Yes | Candidate platforms/tools, e.g. ["BigQuery", "Snowflake"] | |
| constraints | Yes | Governance/compliance constraints, e.g. ["SAML SSO", "EU data residency"] |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the burden of explaining behavior. It discloses that the result is a curated, confidence-scored pattern rather than an unranked list. It does not detail no-match behaviors or side-effect safety, but the lookup-oriented naming and output-focused description make behavior reasonably transparent.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is one information-dense sentence with no filler. It front-loads the core matching behavior, then lists the key outputs. It is compact and scannable, though the full list of outputs makes the sentence slightly long.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a lookup-oriented tool with no output schema and no annotations, the description adequately explains what inputs shape the match and what the caller receives. It does not cover edge cases like no matching pattern, confidence representation, or return structure, preventing a 5.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
All five parameters are already described in the schema with 100% coverage, so a baseline 2 is appropriate. The description only lightly reinforces the input dimensions and does not add material relationships or format details beyond the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb, 'Match', and a resource, 'reference architecture pattern', and identifies the output categories it returns. This clearly distinguishes it from sibling lookup tools like brand_context_lookup and tool_selection_lookup, which target different lookups.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description clearly frames the use case: matching an enterprise ask with industry, data stack, cloud, and constraints to a reference architecture. It does not explicitly exclude or compare against sibling tools, but the intended context is clear enough for an agent to select it appropriately.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
brand_context_lookupA
Retrieve company brand context (name, description, tags, positioning, brand voice/style, logo URL) for a resolved domain, from Brandfetch plus logo.dev. Serves cached data when the sources are unavailable. Resolve partial company names to a domain before calling.
| Name | Required | Description | Default |
|---|---|---|---|
| domain | Yes | Resolved company domain, e.g. "havas.com" |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are present, so the description carries the burden. It adds useful behavioral context: the tool sources from Brandfetch plus logo.dev, and serves cached data when sources are unavailable. It could say more about return behavior or failure handling, but this is solid disclosure for a simple retrieval tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three short sentences with no wasted words. The main purpose is front-loaded, parameters/sources/usage-prerequisite are each given their own concise sentence.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description is sufficient for a simple one-parameter read tool. It names the output fields, the source, the fallback cache behavior, and the required input format. A minor gap is the lack of any statement about what happens when no brand context exists for the domain.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so baseline is 3. The description adds meaning by emphasizing that the domain must be a resolved company domain rather than a partial name, which goes beyond the schema's simple 'string' definition.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb ('Retrieve'), a clear resource ('company brand context'), and enumerates the exact fields returned. It also specifies the source and input requirement ('resolved domain'), which clearly separates it from the sibling tools by topic.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It gives a clear prerequisite: resolve partial company names to a domain before calling. It does not explicitly name alternatives or state when not to use it, but the domain-required condition provides sufficiently clear usage context.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
risk_policy_lookupA
Return required controls, risk flags, and human-in-the-loop triggers for an architecture based on industry, data classification (PHI, PII, regulated financial data), region, deployment model, and governance constraints.
| Name | Required | Description | Default |
|---|---|---|---|
| region | Yes | Data region, e.g. US or EU | |
| industry | Yes | Industry, e.g. healthcare, financial_services, media_agency, retail | |
| deployment | Yes | Deployment model: cloud, on-prem, or hybrid | |
| constraints | No | Governance constraints from the architecture brief, e.g. ["cross-client governance", "EU data residency"] | |
| data_classification | Yes | Data classifications in scope, e.g. ["PHI", "PII"], ["regulated financial data"], ["non-sensitive"] |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
There are no annotations, so the description carries the full burden. It surfaces that the tool computes/returns policy-derived values and maps inputs to outputs, which is genuinely informative, but it doesn't say whether the data is static, whether lookups can return empty/no-match results, or whether governance constraints are validated at runtime. 3 is fair.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
One dense sentence with a heavy enumerative tail, but every phrase contributes. Front-loads the return value ('required controls, risk flags...') before diving into the lookup axes. Slightly long but not bloated; the enumeration is useful.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a lookup tool with 5 params, 100% schema coverage, and no output schema, the description covers the key decision context (what it returns and on what basis). It doesn't state the output shape, but with no output schema that gap is mostly acceptable, though adding 'returns a list of policy items' would make it complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema already documents every parameter with 100% coverage, so the baseline is 3 per the rubric. The description clarifies the semantic intent behind the parameters as a group (industry/classification/region/deployment drive policy), but adds no individual parameter details beyond the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb ('Return') and a specific resource ('required controls, risk flags, and human-in-the-loop triggers for an architecture') and enumerates the dimensions the lookup is based on, clearly distinguishing it from sibling lookup tools such as brand_context_lookup or arch_pattern_lookup. The scope is explicit enough that an agent can tell when to reach for this tool instead of the others.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description clearly implies this tool is for policy/risk-oriented lookups and lists the exact inputs that drive the lookup, which gives strong context on when to use it. The only thing missing is an explicit 'use this instead of X when...' statement, but the sibling names (brand_context_lookup, arch_pattern_lookup) are distinguishable from the plain wording.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
tool_selection_lookupA
Recommend a data platform based on use case, data stack, constraints (HIPAA, PII, data residency, SSO/SAML), and latency needs — with cloud fit, reasoning, and alternatives.
| Name | Required | Description | Default |
|---|---|---|---|
| latency | No | Latency need: batch or real-time | |
| use_case | Yes | What the enterprise wants to build, e.g. "AI-powered patient insights" | |
| data_stack | Yes | Platforms/tools in play or under consideration | |
| constraints | Yes | Governance/compliance constraints |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations exist, so the description carries the burden. It discloses that the tool will return 'cloud fit, reasoning, and alternatives,' which gives some behavioral shape, but it does not clarify whether it performs external calls, returns mock versus curated answers, or has any side effects. It describes inputs/outputs but not deeper behavior.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single, dense sentence lists all inputs and outputs without waste. It front-loads the verb and target, and every phrase earns its place. The semi-colon-separated output list is clear to parse.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description is sufficient for an agent to prepare the required fields and know what kind of response to expect (recommendation with cloud fit, reasoning, alternatives). Since there is no output schema, describing the response at this level helps. It could add the expected result shape or a mention of staleness provenance, but this is minor.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the baseline is 3. The description adds meaning by expanding 'constraints' with examples (HIPAA, PII, data residency, SSO/SAML) and by flagging latency as an additional decision factor. This goes beyond the literal schema descriptions and helps an agent populate parameters accurately.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description names a concrete verb, 'Recommend', and a specific resource, 'data platform', and enumerates the decision inputs and outputs (cloud fit, reasoning, alternatives). This clearly differentiates the tool from siblings like arch_pattern_lookup and risk_policy_lookup, which concern different domains.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explicitly frames when to use this tool: when the agent needs a data platform recommendation given use case, data stack, and constraints. It doesn't explicitly mention alternative tools or exclusions, but the context is clear enough. Sibling names also make the separation obvious.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections. Dates show when Glama detected each change.
4 tool updates
v0.1.0- First observed
arch_pattern_lookup - First observed
brand_context_lookup - First observed
risk_policy_lookup - First observed
tool_selection_lookup
TDQS
Each tool targets a distinct outcome: architecture pattern, brand info, platform recommendation, and risk controls. There is some conceptual overlap between architecture patterns and tool/risk recommendations, but the descriptions make their outputs clear enough to avoid major misselection.
All tool names follow the same clear `entity_lookup` pattern in lowercase snake_case: arch_pattern_lookup, brand_context_lookup, tool_selection_lookup, risk_policy_lookup. This makes the server feel uniform and predictable.
With only 4 focused lookup tools, the server is tightly scoped and does not introduce redundancy. Each tool serves a distinct functional need, making this an appropriate small toolset.
The server covers the major lookup categories it appears designed for: architecture, brand, platform, and policy. It is slightly limited by the lack of any listing or browsing endpoint for available patterns/platforms, but for a retrieval-oriented tool set the core coverage is strong.
Maintenance
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Related MCP Connectors
Shared, permission-aware company context for AI agents, with provenance, approvals and audit.
Your company's brain for AI agents. Cited, permission-aware knowledge across every system.
Curated knowledge API for AI agents - skill packs, semantic search, validated patterns.
Agent-native security, trust, reliability, data and procurement tools for AI workflows.
Related MCP Servers
FlicenseAqualityCmaintenanceProvides a persistent memory and governance layer that allows AI coding agents to query documented architecture rules and validate code against team standards. It enables agents to verify compliance across categories like security and testing before suggesting changes to ensure consistency across development sessions.317-- AlicenseNot gradedqualityDmaintenanceProvides comprehensive architectural expertise through specialized agents, resources, and tools for generating, evaluating, and modifying architectural designs.1,853ISC
- FlicenseNot gradedqualityBmaintenanceEnables AI agents to index, search, and retrieve architectural documentation and store self-learning notes from codebases.1-
- AlicenseNot gradedqualityBmaintenanceEnables AI agents to query organizational architecture and governance constraints, returning evidence-grounded answers from documented structures.MIT
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/ishfuseini/agentflow-mcp'
If you have feedback or need assistance with the MCP directory API, please join our Discord server