← Back to search

@atrib/mcp

GitHub Actions Scanned 8d ago

Client-side middleware for atrib's verifiable action layer. Adds chain context, gap records, and transaction fallback records across MCP framework adapters.

D
53.8 / 100

Versions

@atrib/mcp
0.25.0latest
Jul 29, 2026
0.24.0
Jul 29, 2026
0.23.0
Jul 25, 2026
0.22.0
Jul 24, 2026
0.21.0
Jul 14, 2026
+ show 36 moreshow less
0.20.0
Jul 10, 2026
0.19.1
Jul 8, 2026
0.19.0
Jul 8, 2026
0.18.1
Jun 19, 2026
0.18.0
Jun 13, 2026
0.17.6
Jun 12, 2026
0.17.5
Jun 11, 2026
0.17.4
Jun 11, 2026
0.17.3
Jun 10, 2026
0.17.2
Jun 10, 2026
0.17.1
Jun 10, 2026
0.17.0
Jun 4, 2026
0.16.1
Jun 2, 2026
0.16.0
Jun 1, 2026
0.15.1
May 30, 2026
0.15.0
May 29, 2026
0.14.0
May 29, 2026
0.13.0
May 28, 2026
0.12.0
May 27, 2026
0.11.1
May 24, 2026
0.11.0
May 24, 2026
0.10.0
May 23, 2026
0.9.1
May 23, 2026
0.9.0
May 23, 2026
0.8.0
May 22, 2026
0.7.0
May 18, 2026
0.6.2
May 9, 2026
0.6.1
May 9, 2026
0.6.0
May 9, 2026
0.5.0
May 6, 2026
0.4.0
May 6, 2026
0.3.0
May 5, 2026
0.2.0
May 5, 2026
0.1.2
May 4, 2026
0.1.1
May 4, 2026
0.1.0
May 4, 2026
@atrib/agent
0.4.10latest
Jul 29, 2026
0.4.9
Jul 29, 2026
0.4.8
Jul 25, 2026
0.4.7
Jul 25, 2026
0.4.6
Jul 25, 2026
+ show 44 moreshow less
0.4.5
Jul 25, 2026
0.4.4
Jul 25, 2026
0.4.3
Jul 24, 2026
0.4.2
Jul 24, 2026
0.4.1
Jul 16, 2026
0.4.0
Jul 14, 2026
0.3.3
Jul 10, 2026
0.3.2
Jul 8, 2026
0.3.1
Jul 8, 2026
0.3.0
Jul 8, 2026
0.2.23
Jun 19, 2026
0.2.22
Jun 13, 2026
0.2.21
Jun 12, 2026
0.2.20
Jun 11, 2026
0.2.19
Jun 11, 2026
0.2.18
Jun 10, 2026
0.2.17
Jun 10, 2026
0.2.16
Jun 10, 2026
0.2.15
Jun 4, 2026
0.2.14
Jun 2, 2026
0.2.13
Jun 1, 2026
0.2.12
Jun 1, 2026
0.2.11
May 30, 2026
0.2.10
May 29, 2026
0.2.9
May 29, 2026
0.2.8
May 28, 2026
0.2.7
May 27, 2026
0.2.6
May 24, 2026
0.2.5
May 24, 2026
0.2.4
May 23, 2026
0.2.3
May 23, 2026
0.2.2
May 23, 2026
0.2.1
May 22, 2026
0.2.0
May 18, 2026
0.1.9
May 9, 2026
0.1.8
May 9, 2026
0.1.7
May 9, 2026
0.1.6
May 6, 2026
0.1.5
May 6, 2026
0.1.4
May 5, 2026
0.1.3
May 5, 2026
0.1.2
May 4, 2026
0.1.1
May 4, 2026
0.1.0
May 4, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 38

demo-agent
annotations: none low

slow_tool
annotations: none low

Slow test tool

atrib-primitives-${name}
annotations: none low

emit
annotations: none low

Fake write primitive

content record chain_root string context_id string event_type string
fake_read
annotations: none low

Fake read primitive

abortable_read
annotations: none low

Abort-aware read

fast_tool
annotations: none low

Fast test tool

atrib-verify
annotations: none low

Verify counterparty handoff evidence before linking follow-up work through informed_by.

recall_my_attribution_history
annotations: none low

Return signed atrib records from the local mirror. The agent's own past, with each record's

recall_walk
annotations: none low

Walk the local derived graph from a starting record_hash. Returns records reachable via the requested edge types up to the given hop depth, ordered by ascending weighted distance. Layer 1 covers four edge types: CHAIN_PRECEDES (weight 1), INFORMED_BY (weight 1), ANNOTATES (weight 2), REVISES (weight 2). SESSION_PRECEDES, SESSION_PARALLEL, CONVERGES_ON, CROSS_SESSION, and PROVENANCE_OF are deferred to subsequent releases. Useful for tracing the local causal neighborhood of a record before re-attempting a similar action. Legacy alias: new callers should prefer the `recall` tool with shape='walk' (no direction).

recall_annotations
annotations: none low

Return the aggregated annotation summary for a record: maximum annotation importance across all D058 annotation records pointing at it, the union of their topic tags, and the most recent summary string. Useful for surfacing the agent's prior critique on a record before re-attempting a similar action. Returns null annotations field when no annotation points at the record. Legacy alias: new callers should prefer the `recall` tool with shape='annotations'.

recall_revisions
annotations: none low

Return the D059 revision chain for a record, with per-entry content + sibling-fan-out awareness. Walks revises edges forward from the given record_hash, surfacing each revision in turn. Each entry carries the revision's record_hash, timestamp, and content (`new_position`, `reason`, `importance`) so the agent can read the chain inline without follow-up recall calls per entry. When more than one revision targets the same record, the chain follows the first-by-timestamp branch and lists the other branch heads as `sibling_hashes` on that entry so the agent learns about parallel revision branches (common in multi-agent flows). Useful for checking whether a position the agent previously held has been revised before acting on it. Returns an empty chain when no revision points at the record. Legacy alias: new callers should prefer the `recall` tool with shape='revisions'.

recall_by_content
annotations: none low

Free-form text search over the agent's signed past. Returns top-k records by hybrid retrieval: BM25 over each record's per-event_type indexable text (observation `what + why_noted + intent + rationale + topics`; tool_call `tool_name + args + result`; annotation `summary + topics`; revision `prior_position + new_position + reason + topics`; transaction counterparty + memo; directory_anchor tree_root; extension URIs via generic recursive string-walk per D086/D118) plus the annotation summary + topics when present as a curator-quality lift. Reranked by Park et al. weighted-sum scoring with annotation-derived importance and recency signals. Raw unannotated tool_call records are score-demoted so operation logs do not dominate substantive memory. BM25 contribution is clamped to [0, 1] before coverage scaling so the documented Park-component bound is honored. Responses include runtime metadata plus coverage.index, so callers can detect stale MCP processes and whether the durable content-token sidecar was hit, rebuilt, disabled, or bypassed. Useful when the agent has no specific filter and needs to ask 'what do I know about X?'. Legacy alias: new callers should prefer the `recall` tool with shape='content'.

recall_session_chain
annotations: none low

Return all records in a context_id, ordered chronologically (oldest-first). The natural traversal of the CHAIN_PRECEDES topology for a single session/trace. Each entry carries record_hash, event_type, timestamp, display_summary (per-event_type human-readable text from D086), and producer label. Useful for 'what happened in this session?' without manually sorting filter results. Sibling tool to recall_my_attribution_history with built-in context_id scoping + chain-ascending order. Legacy alias: new callers should prefer the `recall` tool with shape='chain'.

recall_orphans
annotations: none low

Return records that are NOT cited by any other record via informed_by (loose ends: decisions or observations the agent made but never followed up on). Surfaces records whose record_hash does NOT appear in any other record's informed_by[] array within the local mirror. Optionally scoped to one context_id, one event_type, or one creator_key. Useful for the agent to discover dropped balls (e.g. 'I noted X but never built on it'). Legacy alias: new callers should prefer the `recall` tool with shape='orphans'.

recall_by_signer
annotations: none low

Aggregate the local mirror by creator_key. Returns the distinct creators present + per-creator record count + latest record timestamp. Useful when the mirror is multi-signer (multi-agent flows, transactions with counterparty signers) and the agent wants to discover who else's records are in scope before deciding whether to filter with creator_key. Pure aggregation; no records returned directly. Use recall_my_attribution_history with the creator_key filter to drill into one creator's records. Legacy alias: new callers should prefer the `recall` tool with shape='by_signer'.

trace
annotations: none low

Walk a record's informed_by chain backward to surface the reasoning

trace_forward
annotations: none low

Walk forward from a record_hash, surfacing the records that cited

atrib-revise
annotations: none low

Supersede a prior position with a stated reason. Produces a signed

atrib-annotate
annotations: none low

Mark a past record\'s importance and meaning without superseding it.

attest
annotations: none low

Make a signed statement now: atrib's write verb. Signs an observation by default;

summarize
annotations: none low

Read a set of records (by context_id and/or record_hashes) and ask

recall
annotations: none low

mock modern recall tool

search-server
annotations: none low

test-agent
annotations: none low

list-agent
annotations: none low

get_temperature
annotations: none low

Get the current temperature for a location

latitude number longitude number
record_outcome
annotations: none low

Store an action outcome with diagnostic evidence.

action string outcome string diagnostic string
recall_outcomes
annotations: none low

Read prior diagnostic outcomes from this Durable Object.

limit number action string
list_signed_records
annotations: none low

Return signed atrib records captured by the Durable Object.

limit number
flush_atrib_queue
annotations: none low

Flush pending atrib log submissions.

execution_context
annotations: none low

Return the signed approval context for a runnable Cloudflare action.

mode enum run_id string
preview_file_update
annotations: none low

Preview the approved Cloudflare Workers checkout patch before mutation.

payload any payload_digest string stable_connector_id string approval_record_hash string
write_file
annotations: none low

Apply the approved Cloudflare Workers checkout patch to Durable Object SQLite.

payload any force_error boolean payload_digest string stable_connector_id string approval_record_hash string
complete_checkout
annotations: none low

Complete a checkout and return an ACP-style completion shape.

sku string
test
annotations: none low

fake-upstream
annotations: none low

echo
annotations: none low

Permissions 4

network medium
Server uses network capabilities via: fetch(), http, urllib, websocket
filesystem low
Server uses filesystem capabilities via: fs, fs/promises, open(), os, path, pathlib, shutil, tempfile
shell high
Server uses shell capabilities via: child_process, spawn(), spawnSync(), subprocess
env_vars low
Server uses env_vars capabilities via: os.environ, process.env

Scan Findings 0

No scan findings.