agentbus
AgentBus is a localhost MCP sidecar server for multi-agent coordination, providing a structured event log and advisory lease locks backed by SQLite.
Event Log
Publish events (
agentbus_publish): Append validated events to a topic with support for payloads, producer identity, causation chaining, schema versioning, and idempotency keys.Poll events (
agentbus_poll): Fetch events from a topic using asince_idcursor for at-least-once delivery, with configurable limits.Check status (
agentbus_status): Retrieve workspace bus health, event counts, and topic listings.
Advisory Lease Locks
Acquire a lock (
agentbus_lock_acquire): Claim an exclusive advisory lease on a resource (e.g., a shared file) with an optional TTL and owner identity.Release a lock (
agentbus_lock_release): Release a held lease by providing the resource, lease ID, and owner ID (idempotent if already expired).Renew a lock (
agentbus_lock_renew): Extend the TTL of an active lease as a heartbeat to prevent expiration.Check lock status (
agentbus_lock_status): Inspect the current lock state of a resource without acquiring it.
Key Properties
Mutating operations (publish, lock acquire/release/renew) require authentication via an ephemeral workspace token.
Read operations (poll, status, lock_status) are open and unauthenticated.
Designed to coordinate heterogeneous, out-of-process agents (Cursor, Claude Code, etc.) over stdio MCP.
Enables Hermes agents to publish and poll structured events in a multi-agent workspace via MCP.
Click on "Install Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@agentbusshow recent handoff events"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
AgentBus
The SQLite-Backed MCP Event Bus & Control Surface for Heterogeneous Agent Swarms.
When Cursor, Claude, Antigravity, and Terminal Agents (like Hermes) share a workspace, they usually coordinate through fragile append-only files (log.md). That works until you need SLA timeouts, Human-in-the-Loop (HITL) intercepts, strict schema validation, or cryptographic RBAC.
AgentBus replaces the "Game of Telephone" with a localhost sidecar: a Python MCP server backed by SQLite. No orchestrator runtime lock-in. No heavy cloud dashboard. Just a hyper-fast local pub/sub built for top-tier AI orchestration.
v0.19.0 (August 2026): Release-integrity gates, honest runtime diagnostics, registered Codex/Pi headless adapters, and untrusted-event prompt containment, on top of the MCP Python SDK v2 migration. See the changelog for details.
Note: Install as
okf-agentbus(CLI command remainsagentbus). Extras:[obs,devex,jupyter,sdk].
⚡ The "Ah-Ha" Moment: Zero-Restart Integration
Already running Aider, OpenHands, or custom agents in tmux panes? Do not kill your sessions. AgentBus features a dual-interface architecture (MCP + CLI). You don't need to wire up JSON configs to test it today. Just prompt your running agent:
"Use your terminal to run
agentbus publish --topic okf/handoff --payload '{\"from\":\"grok\",\"to\":\"hermes\",\"summary\":\"Write tests\"}'"
The SQLite bus instantly captures it, without requiring the MCP server. Once you're convinced by the Mission Control TUI, you can wire up the strongly-typed MCP server for your next boot.
Related MCP server: Hivemind
Why AgentBus?
Alternative | Limitation | AgentBus |
| No schema, race conditions | Typed topics, monotonic IDs, advisory locks |
LangGraph / CrewAI | Same-runtime lock-in | Heterogeneous out-of-process clients (IDE + CLI) |
LangSmith | Cloud-only, backward-looking | Local SQLite, forward-looking Execution TUI |
Redis pub/sub | Extra daemon, complex setup | Zero-config SQLite, native stdio MCP |
Feature Arsenal (v0.3 - v0.18)
MCP Python SDK v2 (v0.18): migrated the stdio MCP server while preserving the existing event-store contract.
Resilient delivery (v0.16.4): bounded retry with jitter, retry-exhausted dead letters and file spillover for SQLite contention.
Async suspend/resume (v0.16): durable waits and correlated wake events let headless agents yield without busy polling.
Headless runners (v0.15): opt-in adapters for heterogeneous CLI agents with bounded chain behavior and structured acknowledgements.
Wake plane and Go helpers (v0.12-v0.13): platform-packaged workers, role leases, wake ingress and webhook delivery.
Jupyter async client (v0.11):
from agentbus.jupyter import AsyncAgentBus+%agentbus start— non-blocking polls that yield to the notebook event loop.TypeScript client (v0.11):
packages/js/agentbus-client— Node EventEmitter + MCP stdio spawn (@agentbus/agentbus-client, path install for now).God View Mesh (v0.9): Passive OS + MCP observability so silent agents still leave bus footprints (
system/mcp,system/fs,system/shell,system/monologue).Mission Control TUI (v0.8+): A rich, keyboard-driven
Textualdashboard (agentbus monitor). Trace waterfall, HITL, Wiretap pane, Dark Agent warnings.Pluggable Pydantic Schemas (v0.7): Code-first
@bus.topicdecorators to enforce strict JSON schemas at the insertion layer.Distributed Context (v0.6): Pass massive context (like git diffs) via
--attach. Hard 1MB payload limits prevent context window explosion.Agentic Observability (v0.5): Native OpenTelemetry-style
trace_idandparent_span_idlineage.SLA Timeouts & Dead-Letter (v0.4): Prevent phantom deadlocks. If an agent ghosts the swarm, SLA timers route the payload to
okf/dead-letter.Swarm RBAC & Droid Proofs (v0.3): Cryptographic JWT/UUID tokens ensure only authorized agents can publish to restricted topics.
HITL Intercepts (v0.3): Catch dangerous payloads (e.g.,
DROP TABLE) and place them inPENDING_APPROVALfor human review via the TUI.
Install
The fastest way (Installs & Auto-wires your IDEs in one step):
curl -sSL https://raw.githubusercontent.com/onicarps/agentbus/main/install.sh | bashOr manually via pip:
pip install -U "okf-agentbus[devex,sdk]"
agentbus init --apply --producer-id my-agentJupyter notebooks:
pip install -U "okf-agentbus[jupyter]"%load_ext agentbus.jupyter
%agentbus start
# or
from agentbus.jupyter import AsyncAgentBus
bus = AsyncAgentBus() # AGENTBUS_WORKSPACE or cwd
bus.on_event(print)
await bus.start_background(interval=1.0)TypeScript (from monorepo checkout):
cd packages/js/agentbus-client && npm install && npm test
# set AGENTBUS_WORKSPACE + agentbus on PATH, then use createStdioMcpClient / AgentBusQuickstart & Examples
The best way to understand AgentBus is to read our copy-pasteable examples.
See the examples/ directory for 7 flawless, isolated Python scripts covering every feature from basic Pub/Sub to Pydantic Schemas and SLA Timeouts.
# Terminal A — Launch the Mission Control TUI
agentbus monitor
# Terminal B — Publish a handoff
agentbus publish \
--topic okf/handoff \
--payload '{"from":"cursor","to":"hermes","summary":"Write tests"}'Before operating or releasing a workspace, run the read-only diagnostics:
agentbus doctor --workspace /path/to/workspace
agentbus doctor --workspace /path/to/workspace --jsonThe command inspects the target without publishing to its bus. Write-path and
MCP stdio checks run in temporary isolated workspaces. --strict makes warnings
(including absent optional Go helpers) fail CI.
God View Observability (v0.9.0):
Track silent agents by wiretapping their operations:
# Intercept MCP tool calls
mcp-serve --wiretap
# Watch file edits and command executions
agentbus watch
# Tail internal agent reasoning logs
agentbus tailEvents will stream into the TUI's Wiretap pane as system/mcp, system/fs, system/shell, and system/monologue topics.
📦 Workspace Isolation (The .agentbus directory)
AgentBus operates on the concept of Workspace Isolation (similar to how git uses .git or Docker uses docker-compose.yml).
The bus and its events are physically scoped to the directory you run it in. This prevents your Swarm from tracking your entire operating system or cross-contaminating different projects.
When you navigate to a specific project folder and run agentbus init or agentbus up, it creates a localized .agentbus/events.db SQLite database specifically for that directory.
1-Click Swarm Orchestration (v0.10.0)
Instead of manually opening 5 tmux panes to start your agents and observability daemons, use the new orchestrator:
cd /path/to/my-project
# 1. Generate a boilerplate .agentbus/swarm.yaml
agentbus up --init
# 2. Boot the swarm (Watchers, Agents, and TUI) in one click
agentbus up
# 3. View running background agents
agentbus ps
# 4. Safely kill the entire swarm
agentbus downDocumentation
For full architectural documentation, see the docs/ directory.
License
MIT — see LICENSE.
Available Tools
10 toolsagentbus_approveC
Approve a pending event so agents can see it on poll.
| Name | Required | Description | Default |
|---|---|---|---|
| event_id | Yes | ||
| auth_token | No | ||
| reviewer_id | No |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations exist, so the description must fully disclose behavior. It reveals that the tool changes state (approval) and makes events visible on poll, but omits critical details like required permissions, idempotency, reversibility, or side effects. Mutation tools need richer behavioral context.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Extremely concise (one sentence), which is efficient but arguably too brief given the tool's complexity (3 parameters, no schema coverage, mutation). A few more sentences would improve clarity without losing conciseness.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The tool is a mutation with no annotations and an output schema (not described). The description does not cover what constitutes a 'pending event', the approval workflow, or the response structure. The context is insufficient for an agent to use the tool confidently.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, yet the description adds no parameter meaning. It does not explain event_id, auth_token, or reviewer_id, leaving the agent to infer from names alone. The description must compensate for missing schema descriptions but fails to do so.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description explicitly states the verb 'Approve' and the resource 'pending event', and clarifies the effect 'so agents can see it on poll'. This clearly distinguishes it from sibling tools like agentbus_review, suggesting a specific approval step.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance on when to use this tool versus alternatives. It does not provide prerequisites, conditions for use, or exclusions. The sibling tools list is given but not leveraged to explain selection criteria.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
agentbus_lock_acquireC
Acquire an exclusive advisory lease on a workspace resource.
| Name | Required | Description | Default |
|---|---|---|---|
| owner_id | Yes | ||
| resource | Yes | ||
| auth_token | No | ||
| ttl_seconds | No |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description must carry the full burden. It only states that the lease is 'exclusive' and 'advisory,' but lacks details on what happens if the lock is already held, side effects, or return behavior.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single short sentence, which is under-specified for a tool with four parameters and an output schema; it sacrifices necessary detail for brevity.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the complexity (4 parameters, output schema, no annotations), the description fails to cover return values, failure modes, or how to use the parameters, leaving significant gaps.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0% and the description does not explain any of the four parameters (owner_id, resource, auth_token, ttl_seconds), providing no added meaning beyond the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb 'Acquire' and clearly identifies the resource as 'exclusive advisory lease on a workspace resource,' which distinguishes it from siblings like lock_release, lock_renew, and lock_status.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides no guidance on when to use this tool versus alternatives like lock_release or lock_renew, nor any prerequisites or exclusions.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
agentbus_lock_releaseB
Release a held lease (idempotent if already expired).
| Name | Required | Description | Default |
|---|---|---|---|
| lease_id | Yes | ||
| owner_id | Yes | ||
| resource | Yes | ||
| auth_token | No |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description mentions idempotency if the lease is already expired, which is a useful behavioral trait. However, with no annotations, the description carries the full burden and fails to disclose authentication requirements, side effects, or what happens if the lease is not held.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, concise sentence with no wasted words. It could arguably add more detail without becoming verbose, but it is efficiently structured.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool has four parameters and no parameter descriptions in the schema, the description should compensate but does not. The existence of an output schema mitigates the need to explain return values, but overall completeness is lacking.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema has 0% description coverage for parameters, and the tool description does not explain any of the four parameters (lease_id, owner_id, resource, auth_token). This is a critical gap.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states 'Release a held lease', with a specific verb and resource. The sibling tools include acquire and renew, so the purpose is distinct and unambiguous.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Usage is implied by the name and description, but there is no explicit guidance on when to use this tool versus alternatives like agentbus_lock_acquire or agentbus_lock_renew. No exclusions or prerequisites are mentioned.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
agentbus_lock_renewC
Extend TTL on an active lease (heartbeat).
| Name | Required | Description | Default |
|---|---|---|---|
| lease_id | Yes | ||
| owner_id | Yes | ||
| resource | Yes | ||
| auth_token | No | ||
| ttl_seconds | No |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries full burden for behavioral disclosure. It only states the basic function (extending TTL) without mentioning side effects, error cases, or required permissions (e.g., auth_token needed).
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single sentence with no unnecessary words. It is concise and front-loaded with the key action.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the complexity (5 params, 0% schema coverage, and a locking context), the description is insufficient. It fails to explain parameters or output, leaving significant gaps for correct invocation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, and the description does not explain any of the 5 parameters. It adds no meaning beyond their names, leaving the agent to infer their purposes.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description 'Extend TTL on an active lease (heartbeat)' clearly specifies the verb (extend) and resource (active lease), and the heartbeat terminology distinguishes it from sibling tools like lock_acquire, lock_release, etc.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides no guidance on when to use this tool versus alternatives, nor does it mention prerequisites or exclusions. It only states the action without context.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
agentbus_lock_statusB
Check lock state without acquiring (no auth required).
| Name | Required | Description | Default |
|---|---|---|---|
| resource | Yes |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, description discloses an important behavioral trait ('no auth required'), but omits other aspects like idempotency, side effects, or what the lock state entails. Minimal but not misleading.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Extremely concise with no filler. However, the brevity sacrifices clarity on parameter semantics. Front-loaded with key differentiating info.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Despite low complexity and presence of output schema (not shown), the description fails to explain the sole required parameter. Leaves agent guessing about 'resource'.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0% and description does not mention the 'resource' parameter at all. No guidance on its meaning, format, or constraints.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Clearly states verb 'Check' and resource 'lock state', distinguishing it from sibling tools like lock_acquire, lock_release, and lock_renew. No ambiguity.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Implicitly indicates when to use ('without acquiring') and notes no auth required, but does not explicitly list alternatives or when not to use. Context from sibling names helps, but description lacks explicit guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
agentbus_pollA
Fetch events after cursor (at-least-once delivery).
| Name | Required | Description | Default |
|---|---|---|---|
| limit | No | ||
| topic | Yes | ||
| since_id | No |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description discloses 'at-least-once delivery', a meaningful behavioral trait indicating possible duplicate deliveries and implied consumption semantics. With no annotations provided, this adds value beyond the schema, though it omits other details like read-only vs. side-effect on the cursor.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is extremely concise, with two short phrases that are front-loaded and contain no redundant information. Every word contributes to the meaning.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Despite having an output schema, the description is too sparse to fully understand the tool's mechanics. It omits parameter semantics, ordering, and error behavior, making it incomplete for correct invocation, especially with no annotations to fill gaps.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, and the description only hints at a 'cursor' without explicitly mapping to the since_id parameter. It does not explain the meaning of limit or topic, so the description fails to compensate for the lack of parameter documentation.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool fetches events after a cursor, using the verb 'Fetch' and resource 'events'. This distinguishes it from sibling tools like agentbus_publish (writing) and agentbus_status (status checks), and the cursor aspect adds specificity.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Usage is implied by the name and sibling context (polling for events after a cursor), but there is no explicit guidance on when to use this tool versus alternatives, nor any exclusions or prerequisites.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
agentbus_publishB
Append one event to the workspace event log.
| Name | Required | Description | Default |
|---|---|---|---|
| topic | Yes | ||
| payload | Yes | ||
| trace_id | No | ||
| auth_token | No | ||
| producer_id | No | ||
| causation_id | No | ||
| parent_span_id | No | ||
| schema_version | No | 1.0 | |
| idempotency_key | No | ||
| sla_timeout_minutes | No |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden of disclosing behavioral traits. It states the core action ('append') but does not mention required authentication, idempotency behavior, potential side effects, or failure modes. The array of metadata fields (auth_token, idempotency_key, etc.) suggests additional behavioral context that is left unexplored.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, clear sentence of ten words, efficiently communicating the primary purpose. It is appropriately front-loaded and lacks extraneous content. While it is very short, it is not overly terse to the point of meaninglessness, earning a high but not perfect score for conciseness.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's complexity (10 parameters, 2 required, output schema present), the description is markedly underspecified. It does not explain what constitutes an event, how the workspace context is established, or what the output schema contains. The optional parameters (trace_id, auth_token, idempotency_key) hint at distributed tracing and delivery guarantees, but no such context is provided, making the tool difficult to use correctly without additional assumptions.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, and the description provides no parameter information whatsoever. The required parameters (topic, payload) are not explained, nor are any of the eight optional parameters. The description's phrase 'workspace event log' only faintly implies that topic and payload constitute an event, but it fails to add any semantic value beyond the raw schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb ('Append') and resource ('workspace event log'), clearly indicating the operation's scope and distinguishing it from sibling tools that handle locks, status, and approvals. It is concise and unambiguous, leaving no doubt about the tool's primary function.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies clear usage context: use this tool to append an event to the workspace log. While it does not explicitly mention alternatives or exclusions, the sibling tools are in different domains (locking, polling, reviewing), so the context is sufficient for an agent to infer when to invoke this tool.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
agentbus_rejectB
Reject a pending event and notify the originating agent.
| Name | Required | Description | Default |
|---|---|---|---|
| reason | No | rejected by human reviewer | |
| event_id | Yes | ||
| auth_token | No | ||
| reviewer_id | No |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden of disclosing behavioral traits. It does mention the notification side effect, but it omits critical information such as whether the rejection is permanent, how the event state changes, or any authentication requirements. This is a significant gap for a mutating tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, concise sentence that immediately communicates the primary action and key side effect. It is front-loaded and contains no filler or redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given four parameters, no annotations, and zero schema description coverage, this description is insufficiently complete. It does not explain the lifecycle of the event, the meaning of reviewer_id, or any prerequisites, leaving the agent to rely on the output schema which does not cover these behavioral aspects.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, and the description provides no parameter details. While event_id and reason may be self-evident from their names, auth_token and reviewer_id are not explained, forcing the agent to guess their purpose and required format.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the verb 'Reject', the resource 'a pending event', and the side effect 'notify the originating agent.' It is specific and distinguishable from sibling tools like approve and review, which have contrary or different purposes.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The usage context is implied: use this tool when rejecting a pending event. However, it does not explicitly mention alternatives or when not to use it, nor does it contrast with approve or review, so the guidance is only implicit.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
agentbus_reviewA
List events pending human approval (hidden from standard poll).
| Name | Required | Description | Default |
|---|---|---|---|
| limit | No | ||
| topic | No |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description must disclose behavioral traits. It only states the basic purpose (listing pending events) but does not clarify whether the operation is read-only, any side effects, authentication requirements, or behavior under different conditions (e.g., empty results). The description is too minimal for a tool without annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, clear sentence that front-loads the core purpose. Every word is necessary; there is no redundancy or extraneous information. It is appropriately sized for the tool's simplicity.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the existence of an output schema (which covers return values) and the tool's straightforward nature (listing pending events), the description provides the essential context. However, missing details such as filtering behavior or relationship to sibling tools (like agentbus_approve) could be added for completeness, even though the tool is simple.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the description carries the full burden for parameter meaning. However, the description does not mention the parameters 'limit' or 'topic' at all. While the parameter names are somewhat self-explanatory, the description adds no additional context or usage guidance, which is insufficient given the lack of schema descriptions.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb 'List' and clearly identifies the resource as 'events pending human approval', making the purpose immediately clear. It also distinguishes the tool from siblings by noting these events are 'hidden from standard poll', implying that other tools like agentbus_status show standard events.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies when to use the tool—to view events that are not visible through the standard poll. It does not explicitly state when not to use it or mention alternatives, but the context of sibling tools (e.g., agentbus_approve for approvals) provides implicit guidance. A higher score would require explicit when/when-not statements.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
agentbus_statusB
Workspace bus health and topic list.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description must cover behavioral traits. It only states that the tool returns health and topic list, implying a read-only operation but doesn't mention side effects, authorization needs, or error states.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is very short and front-loaded, but it's a noun phrase rather than a complete sentence. It is efficient but could be improved with a verb.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given zero parameters and the presence of an output schema, the description adequately explains the tool's purpose and return value. It is sufficiently complete for a simple status-check tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
No parameters exist, so the baseline is 4. The description adds meaning by specifying what the output covers (health and topic list), which goes beyond the empty schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool returns workspace bus health and topic list, distinguishing it from sibling tools like agentbus_review or agentbus_approve. However, it lacks a verb like 'get' or 'retrieve', making it slightly less directive.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance on when to use this tool versus siblings. The sibling names suggest different purposes (review, approve, lock operations), but no explicit conditions or exclusions are provided.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections. Dates show when Glama detected each change.
3 tool updates
v0.18.0- Added
agentbus_poll - Added
agentbus_publish - Added
agentbus_reject
8 tool updates
v0.17.0- Added
agentbus_approve - Added
agentbus_lock_acquire - Added
agentbus_lock_release - Added
agentbus_lock_renew - Added
agentbus_lock_status - Removed
agentbus_publish - Added
agentbus_review - Added
agentbus_status
3 tool updates
v0.16.3- Removed
agentbus_poll - Added
agentbus_publish - Removed
agentbus_reject
8 tool updates
v0.16.3- Removed
agentbus_approve - Removed
agentbus_lock_acquire - Removed
agentbus_lock_release - Removed
agentbus_lock_renew - Removed
agentbus_lock_status - Removed
agentbus_publish - Removed
agentbus_review - Removed
agentbus_status
1 tool update
v0.6.0- Changed
agentbus_publish2 fields changed- added
Input schema / properties / parent_span_idAdded value: +{ + "anyOf": [ + { + "type": "string" + }, + { + "type": "null" + } + ], + "default": null, + "title": "Parent Span Id" +} - added
Input schema / properties / trace_idAdded value: +{ + "anyOf": [ + { + "type": "string" + }, + { + "type": "null" + } + ], + "default": null, + "title": "Trace Id" +}
4 tool updates
v0.4.0- Added
agentbus_approve - Changed
agentbus_publish1 field changed- added
Input schema / properties / sla_timeout_minutesAdded value: +{ + "anyOf": [ + { + "type": "integer" + }, + { + "type": "null" + } + ], + "default": null, + "title": "Sla Timeout Minutes" +}
- Added
agentbus_reject - Added
agentbus_review
4 tool updates
v0.2.0- Added
agentbus_lock_acquire - Added
agentbus_lock_release - Added
agentbus_lock_renew - Added
agentbus_lock_status
3 tool updates
v0.1.0- First observed
agentbus_poll - First observed
agentbus_publish - First observed
agentbus_status
TDQS
Each tool has a clearly distinct purpose: publishing vs polling events, reviewing/approving/rejecting pending events, and lock status/acquire/release/renew are all separate actions. No two tools overlap in function.
All tools use the 'agentbus_' prefix consistently, but the verb/noun order is not uniform. Event-related tools are verb-only (publish, poll, review), while lock tools use noun-first (lock_acquire, lock_release) and status tools are noun-only (status, lock_status). Despite this, the naming is still predictable and readable.
10 tools is well-scoped for the domain of an agent communication bus. It covers the core event lifecycle (publish/poll), human approval workflow (review/approve/reject), and advisory locking (acquire/release/renew/status) without unnecessary bloat.
The tool set covers the full event bus lifecycle: publishing, polling, and health status. The approval workflow is complete with review, approve, and reject. Locking includes status, acquire, release, and renew, leaving no obvious gaps for the stated purpose.
Maintenance
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Related MCP Connectors
Persistent memory for AI agents — log and recall conversation context over MCP.
Private-by-default, local-first memory/context/task orchestrator for MCP apps and agents.
An agent-native database over MCP: shared, validated, structured records in every AI chat.
System-of-record notebook for AI coding agents: pages, datastores, tasks, skills over MCP.
Related MCP Servers
- AlicenseNot gradedqualityCmaintenanceLocal-first MCP server that enables multiple Claude agents to coordinate through a shared message bus with SQLite persistence and real-time clock anchoring.MIT
- FlicenseNot gradedqualityDmaintenancePersistent, append-only event log for AI agent coordination, enabling agents to publish, query, and react to structured events across tools and sessions.81-
- FlicenseNot gradedqualityDmaintenanceSQLite-backed MCP server for Claude Code session persistence and multi-agent coordination. Provides tools for session management, event logging, decision tracking, file locking, agent registry, and plan tracking.-
- AlicenseNot gradedqualityFmaintenanceLocal-first, auditable memory for AI agents. Provides durable context for MCP hosts with SQLite storage, CLI, and MCP tools for memory management.2Apache 2.0
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/onicarps/agentbus'
If you have feedback or need assistance with the MCP directory API, please join our Discord server