Skip to main content

MCP API Reference (The "Tools Menu")

If you are building an AI agent or connecting arifOS to an app like Claude Desktop, this page lists the 13 specific tools the AI is allowed to use.

Unlike a normal API where tools just execute blindly, arifOS exposes a "governed" surface using the Model Context Protocol (MCP). This means every time the AI tries to use a tool, arifOS intercepts the request and runs it through the 13 constitutional safety gates before letting the action happen.

Protocol versioningโ€‹

  • Current protocol: 2025-11-25
  • Supported versions: 2025-11-25, 2025-03-26
  • Negotiated during initialize; one session must use one agreed version.
{
"jsonrpc": "2.0",
"id": 1,
"method": "initialize",
"params": {
"protocolVersion": "2025-11-25",
"capabilities": {},
"clientInfo": {"name": "client", "version": "1.0"}
}
}

JSON-RPC call shapeโ€‹

{
"jsonrpc": "2.0",
"id": 42,
"method": "tools/call",
"params": {
"name": "reason_mind",
"arguments": {
"query": "Is this deployment ready?",
"session_id": "sess_abc"
}
}
}

Canonical 13 Toolsโ€‹

The 13 MCP tools are organized into 8 Metabolic Tools (core governance chain) and 5 Evidence Tools (read-only support).

8 Metabolic Tools (000โ†’999 Chain)โ€‹

These tools form the constitutional metabolic loop:

ToolIconStagePurpose
anchor_session๐Ÿ”ฅ000 INITSession ignition, defense scan
reason_mind๐Ÿง 333 REASONAGI cognition, truth validation
recall_memory๐Ÿ“š444 PHOENIXMemory retrieval via EUREKA Sieve
simulate_heartโค๏ธ555 EMPATHYStakeholder impact analysis
critique_thoughtโš–๏ธ666 ALIGNMulti-model bias detection
eureka_forgeโš’๏ธ777 FORGESandboxed execution with gates
apex_judge๐Ÿ‘‘888 APEXConstitutional verdict synthesis
seal_vault๐Ÿ”’999 SEALTamper-evident ledger commitment

F7 Humility Notice on VAULT999: The ledger provides application-level tamper-evidence via Merkle chains and cryptographic hashes. It does not protect against root compromise of the database host or sovereign key theft. See threat model for complete security boundaries.

5 Evidence Tools (Read-Only)โ€‹

These tools provide evidence grounding without state changes:

ToolIconPurposeConstitutional Role
search_reality๐Ÿ”Web evidence discoveryF2 Truth verification
fetch_content๐Ÿ“„Content/document retrievalEvidence gathering
inspect_file๐Ÿ“Filesystem inspectionF1 Amanah audit trail
audit_rules๐Ÿ“‹Governance health checkSystem verification
check_vital๐Ÿ“ˆSystem telemetryOperational monitoring

Resources and promptโ€‹

  • Resource: arifos://aaa/schemas
  • Resource: arifos://aaa/full-context-pack
  • Prompt: arifos.prompt.aaa_chain

Response envelopeโ€‹

All tool responses use the UnifiedResponse format:

Public Fields (Always Present)โ€‹

FieldTypeDescription
statusstringOK, ERROR, BLOCKED, or PENDING
session_idstringConstitutional session token
stagestringPipeline stage: 000, 111, 222, 333, 444, 555, 666, 777, 888, 999
messagestringHuman-readable summary
policy_verdictstringSEAL, PARTIAL, SABAR, VOID, or 888_HOLD
next_toolstring | nullNext tool to call, or null if complete
dataobjectStage-specific output (minimal, stable)

Constitutional Fields (Audit Trail)โ€‹

FieldTypeDescription
_constitutionalobjectGovernance metadata: floor scores, telemetry, tri-witness

Debug Fields (Optional)โ€‹

FieldTypeDescription
_debugobjectFull internal state (only if debug=true)
_schemaobjectSchema versions for audit

Example Responseโ€‹

{
"status": "OK",
"session_id": "sess_a1b2c3d4",
"stage": "888",
"message": "Constitutional verdict: SEAL",
"policy_verdict": "SEAL",
"next_tool": null,
"data": {
"result": "Action approved",
"timestamp": "2026-03-01T12:00:00Z"
},
"_constitutional": {
"floors": {
"F1": 1.0,
"F2": 0.99,
"F4": -0.5,
"F6": 0.72,
"F7": 0.04
},
"telemetry": {
"delta_s": -0.5,
"peace_squared": 1.02,
"kappa_r": 0.72
},
"verdict": "SEAL"
}
}

Verdict Behaviorโ€‹

(Curious how these look in practice? View the live Audit Dashboard)

  • โœ… SEAL -> Approved (Continue)
  • ๐ŸŸก PARTIAL -> Approved with warnings
  • โš ๏ธ SABAR -> Blocked temporarily (AI must refine/retry)
  • โŒ VOID -> Blocked entirely (Rule violation)
  • ๐Ÿ›‘ 888_HOLD -> Blocked until a human cryptographically signs it