Streamable HTTP (2024-11-05) · Verified

arifOS MCP — Sovereign Developer Gateway

Bounded, observed Model Context Protocol endpoint for reality-aligned AI. Connect any autonomous agent to 8 canonical kernel verbs, 13 constitutional floors, and the 7-organ federation with cryptographic proof.

POST https://mcp.arif-fazil.com/mcp
Connect in 60s ↓ Test Live Request →
Transport Protocol
Streamable HTTP
JSON-RPC 2.0 via POST /mcp
Runtime Attestation
a3e5132 · Live
Fresh snapshot verified
Constitutional Floors
13 Floors Bound
F1 Amanah → F13 Sovereign
Observation Contract
Live health at /health

B · Connect in 60 seconds

Verified client configurations. Select your agentic harness to install the arifOS MCP gateway immediately.

Add to your claude_desktop_config.json:

{
  "mcpServers": {
    "arifos": {
      "transport": "http",
      "url": "https://mcp.arif-fazil.com/mcp"
    }
  }
}

Add to .cursor/mcp.json or project Settings → Features → MCP:

{
  "mcpServers": {
    "arifos": {
      "url": "https://mcp.arif-fazil.com/mcp"
    }
  }
}

Run in terminal to register the gateway globally in Claude Code:

claude mcp add --transport http arifos https://mcp.arif-fazil.com/mcp

Add to ~/.codeium/windsurf/mcp_config.json:

{
  "mcpServers": {
    "arifos": {
      "serverUrl": "https://mcp.arif-fazil.com/mcp"
    }
  }
}

Add to cline_mcp_settings.json:

{
  "mcpServers": {
    "arifos": {
      "url": "https://mcp.arif-fazil.com/mcp",
      "disabled": false,
      "autoApprove": []
    }
  }
}

Add to Zed editor settings.json:

{
  "context_servers": {
    "arifos": {
      "endpoint": "https://mcp.arif-fazil.com/mcp"
    }
  }
}

Run in terminal for Block Goose agent:

goose configure --add-extension --name arifos --uri https://mcp.arif-fazil.com/mcp

Probe directly via terminal JSON-RPC 2.0:

curl -X POST https://mcp.arif-fazil.com/mcp   -H "Content-Type: application/json"   -d '{"jsonrpc":"2.0","id":1,"method":"tools/list","params":{}}'

Official Python MCP Client implementation:

import asyncio
from mcp import ClientSession
from mcp.client.streamable_http import streamable_http_client

async def main():
    async with streamable_http_client("https://mcp.arif-fazil.com/mcp") as (read, write):
        async with ClientSession(read, write) as session:
            await session.initialize()
            tools = await session.list_tools()
            print(f"Connected! Loaded {len(tools.tools)} canonical tools.")

asyncio.run(main())
1
Initialize Session
Call arif_init with your agent identity. The kernel binds F1–F13 constitutional floors and returns a session Continuity Token (SCT).
2
Discover Capabilities
Call tools/list and resources/list without authentication to discover all 8 kernel verbs and 82 federation resources.
3
Safe Read-Only Operations
Execute arif_observe with mode="vitals". Unsealed mutations are strictly prevented by deterministic gate.

C · Eight Canonical Verbs

The core execution contract of the arifOS kernel. Every verb carries strict authority ceilings, mutation classifications, and audit bindings.

arif_init 000 · INIT
OBSERVE_ONLY

Binds actor identity and constitutional floors F1–F13 for a governed session. Returns the session_id and Session Continuity Token (SCT).

MutationNone (Session Binding)Risk TierT0 (Safe)
Modesinit, light, resume, validate, canary, preflight, triage, epoch_open, epoch_seal, opt_out, opt_out_profiling
Key Parametersactor_id, intent, mode, sovereign_id
arif_observe 111 · OBSERVE
OBSERVE

Read-only evidence collection against reality. Queries literature, fetches URLs with provenance, inspects vitals, and measures system entropy (dS).

MutationNone (Read-Only)Risk TierT1 (Safe Read)
Modessearch, fetch, hybrid_discovery, ingest, compass, atlas, entropy_dS, vitals
Key Parametersmode, query, session_id, url, layers
arif_think 333 · THINK
OBSERVE

Structured reasoning with truth-class labels. Multi-step plan generation, epistemic hypothesis formulation, contradiction detection, and simulation.

MutationNone (Cognitive State)Risk TierT1 (Reasoning)
Modesreason, reflect, verify, axioms, plan, plan_review, plan_approve, refactor_plan, metabolize, simulate, wonder, atlas, dag, branches, clarify
Key Parametersmode, query, session_id, plan_id
arif_route 444 · ROUTE
OBSERVE

Intent classification and dispatch to the designated target organ in the federation (GEOX, WEALTH, WELL, A-FORGE, AAA).

MutationNone (Routing Vector)Risk TierT1 (Routing)
Modesroute, bridge
Key Parametersintent, organ, task, session_id
arif_memory 555 · MEMORY
READ_WRITE

Memory Governor for tiered persistent recall (L1 Working to L6 Episodic). Recalls, remembers, promotes, and audits memory traces under declared content class.

MutationMemory Store MutationRisk TierT2 (Governed RW)
Modesrecall, inspect, attest, remember, promote, revise, forget, audit, metabolize
Key Parametersmode, tier, content, memory_id
arif_judge 666 · JUDGE
JUDGE

Binding constitutional arbitration. Evaluates candidate actions against F1–F13 and emits formal verdicts: SEAL, HOLD, SABAR, or VOID.

MutationNone (Emits Verdict Hash)Risk TierT4 (Constitutional)
Modesintercept, judge, validate, hold, escalate, score, collapse
Key Parameterscandidate, action_tier, reversibility_level, blast_radius
arif_forge 777 · FORGE
MUTATE

Governed code and state mutation through A-FORGE execution gate. Unsealed writes are refused; strictly requires prior 666 SEAL verdict hash.

MutationState & Code MutationRisk TierT3 (Execute Gate)
Modesengineer, query, write, generate, commit, recall, dry_run
Key Parametersmanifest, seal_verdict_id, judge_state_hash
arif_seal 999 · SEAL
IRREVERSIBLE

Append-only terminal anchoring to VAULT999 immutable cryptographic ledger. History cannot be rewritten. Requires ack_irreversible=true.

MutationPermanent Ledger AppendRisk TierT5 (Permanent)
Modesseal, verify, ledger, changelog, audit, session_close
Key Parameterspayload, judge_state_hash, ack_irreversible

Live In-Browser Console

Direct live probe to https://mcp.arif-fazil.com/mcp. Test JSON-RPC 2.0 payloads right from your browser.

Method:
REQUEST PAYLOAD (JSON-RPC 2.0)
RESPONSE Idle
Click "Execute Live Request" to probe https://mcp.arif-fazil.com/mcp directly...

D · What the Gateway Proves & E · Known Gaps

Constitutional AI requires total epistemic honesty. We publish what is proven alongside what is still unmeasured.

Deterministic Rejection Verified

Hard-deterministic governance gates are observed and enforced. When an unauthenticated or invalid mutation is attempted, the kernel refutes it immediately with llm_consulted=false.

Unauthorized Mutation Prevented

Triadic Witness and Execution Gate actively rejected unsealed mutations not bound to sovereign authority. Execution without prior SEAL verdict is impossible.

⚠️ E · What It Does Not Yet Prove (Open Gaps)

  1. Verified actor: Unsigned calls are permitted in OBSERVE_ONLY band; cryptographic key-attestation is not yet mandatory for anonymous public reads.
  2. Receipt fidelity: Public telemetry lacks complete governance debug fields; one HOLD was persisted as ok:true in legacy logger.
  3. Sink agreement: One failed ledger event was omitted by secondary organ counters during high-load reconciler pass.
  4. Independent reconstruction: External third-party auditor verifier has not yet bound into the automatic continuous CI seal chain.

F · Measured Current State

Evaluation Set: 15 Pass · 1 Fail (F5 Memory Calibration) · 0 Unmeasured. Unmeasured is never counted as a pass.

G · Try a Safe Request

Read-only first. The following call discovers available tools without requiring prior session initialization.

curl -X POST https://mcp.arif-fazil.com/mcp   -H 'Content-Type: application/json'   -H 'Accept: application/json, text/event-stream'   -d '{
    "jsonrpc": "2.0",
    "id": 1,
    "method": "tools/list",
    "params": {}
  }'

Expected response contains the complete result.tools array defining all 8 canonical verbs and their live Pydantic input schemas.

H · Governed Workflow

The sovereign state-transition sequence. Calling a stage does not imply authorization.

init (000) ──> observe (111) ──> think (333) ──> route (444) ──> memory (555) ──> judge (666) ──> forge (777) ──> seal (999)

A session identifier does not prove sovereign approval. Execution and human acceptance remain separate by law.

Federation Discovery Surface: Seven Organs, Two Boundary Services

One unified system of governed intelligence. Seven specialized organs coordinated under separation of powers.

arifOS Kernel
The Court
Constitutional execution gate, session continuity, F1–F13 floors, and sovereign arbitration.
https://mcp.arif-fazil.com/mcp
AAA Plane
The Roll
Federation state plane, agent identity registry, A2A gateway, and authority routing.
https://aaa.arif-fazil.com/
A-FORGE
The Workshop
Execution shell. Performs code & system mutations only after SEAL verdict, emitting FlowReceipts.
https://forge.arif-fazil.com/
GEOX
Earth Intelligence
Subsurface reasoning, seismic interpretation, petrophysics, and basin geomechanics.
https://geox.arif-fazil.com/mcp
WELL
Health & Vitality
Sovereign homeostasis, triadic state (human × machine × governance) readiness assessment.
https://well.arif-fazil.com/mcp
WEALTH
Capital Engine
Sovereign capital synthesis, market telemetry (Gold, Oil, Gas, KLCI), and power topology.
https://wealth.arif-fazil.com/mcp
arifFlow
The Record
Metabolic ledger tracking FlowReceipts and verify-versus-execute ratios across organs.
https://arif-fazil.com/999/flow

Two Boundary Services & Relational Invariants

  • HERMES (The Voice): Carries words across the human/agent boundary; verifies meaning and dignity before emission.
  • FRAME / CHRON (The Measure): Independent observer measuring temporal drift and state variance without emitting verdicts.
  • PROPOSES → JUDGES: GEOX, WEALTH, and WELL propose; arifOS judges (strict separation of powers).
  • SEALED EXECUTION: A-FORGE executes only after a kernel SEAL verdict.
  • SOVEREIGN VETO (F13): Human Principal Arif holds absolute, untransferable veto over all autonomous actions.

I · Evidence and Reproduction

Direct references to source files, verified test suites, schemas, and security disclosure policies.

First-party empirical test receipts and cryptographic hash ledger.
Sovereign authority mapping of canonical files and mutable boundaries.
Machine-readable structural index for autonomous search crawlers.
Public kernel codebase, test suites, and constitutional floor implementations.
RFC 9116 compliant security contact and vulnerability reporting policy.
Continuous audit discrepancies and open four-gap closing program.

J · Early Usage Disclosure

FEDERATION USAGE SIGNAL: HERMES Telegram displayed 9 monthly active users in October 2026. Audience composition, distinct external-user count, and commercial customer status are not independently verified.

The MCP gateway does not promote this metric as a customer claim. It does not assert product–market fit or commercial adoption.

K · Developer Next Steps

Recommended sequence for integrating with the arifOS federation.

  1. Connect read-only — run tools/list or arif_observe via the Console.
  2. Inspect resources — examine arifos://vitals and kernel.floors.summary.
  3. Reproduce refusal gates locally — inspect test cases in the kernel repository.
  4. Inspect the evidence packet — verify against the claims.json observation contract.
  5. Contribute a verifier — join the open gap closing program.