Skip to content

aaaa-nexus — Formally Verified AI Safety APIs

by atomadictech · remote · no sign-in to list tools · v0.4.0 · published by GitHub user atomadictech

Formally verified AI safety APIs. Pay-per-call via USDC (x402). 75+ endpoints, no signup.

Changes · 40
CompareRegistry entry

44 tools: 40 change things and 4 only read.

Scanned Oct 21, 2026

No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http aaaa-nexus https://aaaa-nexus.atomadictech.workers.dev/mcp

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

44 tools

Changes things 40Claude Code: ask
  • aegis_mcp_proxy_executeNEXUS AEGIS MCP-Sentinel gateway for prompt-injection resistant tool executionNo findings

    Why it is in this group

    • The name "aegis_mcp_proxy_execute" says "execute": a word for a change.
    Description, as the server wrote it
    NEXUS AEGIS MCP-Sentinel gateway for prompt-injection resistant tool execution
  • aegis_router_epistemic_boundNEXUS AEGIS reverse proxy that blocks high-entropy or low-confidence generationsNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    NEXUS AEGIS reverse proxy that blocks high-entropy or low-confidence generations
  • agents_planRule-based goal decomposition into 3–5 deterministic execution steps.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Rule-based goal decomposition into 3–5 deterministic execution steps.
  • authorize_actionPre-action authorization gateway — deterministic tool-call gating with cryptographic tokensNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Pre-action authorization gateway — deterministic tool-call gating with cryptographic tokens
  • certify_codebaseCountersign local Forge certificate with storefront attestation lane.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Countersign local Forge certificate with storefront attestation lane.
  • certify_outputOutput certification notary — tamper-evident seal on agent deliverables.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Output certification notary — tamper-evident seal on agent deliverables.
  • contract_verifyBehavioral contract verifier — verify agent policy claims against formal boundsNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Behavioral contract verifier — verify agent policy claims against formal bounds
  • docs_generateDeterministic documentation enrichment targets from local path analysis.No findings

    Why it is in this group

    • The name "docs_generate" says "generate": a word for a change.
    Description, as the server wrote it
    Deterministic documentation enrichment targets from local path analysis.
  • entitlement_attestAttest Ed25519-style entitlement token structure + signature for sovereign emit access.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Attest Ed25519-style entitlement token structure + signature for sovereign emit access.
  • federation_mintAgent identity federation — mint cross-platform portable identity tokensNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Agent identity federation — mint cross-platform portable identity tokens
  • forge_auditCompound Forge audit — recon + certify + wire in one deterministic pass.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Compound Forge audit — recon + certify + wire in one deterministic pass.
  • forge_certifyPolyglot 4-axis certify (docs/tests/layout/wire) with scored verdict.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Polyglot 4-axis certify (docs/tests/layout/wire) with scored verdict.
  • forge_reconPolyglot repo recon — language/tier/source breakdown for monadic architectures.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Polyglot repo recon — language/tier/source breakdown for monadic architectures.
  • forge_tier_inferInfer monadic tier placement for a file path from polyglot heuristics.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Infer monadic tier placement for a file path from polyglot heuristics.
  • forge_wireRepo-wide upward-import wire scan — polyglot tier discipline check.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Repo-wide upward-import wire scan — polyglot tier discipline check.
  • identity_verifyTopological identity verificationNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Topological identity verification
  • intent_classifyKeyword intent classifier for agent utterances — query/command/report/alert lanes.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Keyword intent classifier for agent utterances — query/command/report/alert lanes.
  • lineage_recordDecision lineage vault — structured decision trace capture with tamper-proof hash chainNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Decision lineage vault — structured decision trace capture with tamper-proof hash chain
  • omega_emit_materializeMaterialize deterministic contract sketch from intent — logic upstream of language.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Materialize deterministic contract sketch from intent — logic upstream of language.
  • omega_emit_polyglotLanguage-agnostic emit targets from frozen contract — Python/Rust/TS/JS/Go sketches.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Language-agnostic emit targets from frozen contract — Python/Rust/TS/JS/Go sketches.
  • omega_intent_nlStructured intent → agent-facing NL sketch (training signal, not human blueprint).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Structured intent → agent-facing NL sketch (training signal, not human blueprint).
  • omega_intent_routeRank sovereign intent lanes (recon/emit/heal/govern/hive/synthesis) — deterministic router.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Rank sovereign intent lanes (recon/emit/heal/govern/hive/synthesis) — deterministic router.
  • rag_augmentTrusted RAG augment — retrieve-and-quote augmentation with provenance hashes.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Trusted RAG augment — retrieve-and-quote augmentation with provenance hashes.
  • ratchet_registerRegister a new 47-epoch RatchetGate session (MCP CVE-2025-6514 mitigation)No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Register a new 47-epoch RatchetGate session (MCP CVE-2025-6514 mitigation)
  • rng_quantumQuantum-seeded random bytes with HMAC-SHA256 entropy proofNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Quantum-seeded random bytes with HMAC-SHA256 entropy proof
  • spending_authorizeSpending governance — validate agent chain spending within trust-decay boundsNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Spending governance — validate agent chain spending within trust-decay bounds
  • sys_constantsSys constants snapshot — public tier counts, trust floor, and block dimension anchors.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Sys constants snapshot — public tier counts, trust floor, and block dimension anchors.
  • sys_lint_gateSys lint gate — structural policy lint over JSON agent plans.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Sys lint gate — structural policy lint over JSON agent plans.
  • sys_trust_gateSys trust gate — PASS/FAIL hallucination and drift screen for agent payloads.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Sys trust gate — PASS/FAIL hallucination and drift screen for agent payloads.
  • threat_scoreScore a JSON payload for security threats using triality consensusNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Score a JSON payload for security threats using triality consensus
  • uep_aha_detectUEP AHA moment detector — novelty spike scoring for epiphany-style gates.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    UEP AHA moment detector — novelty spike scoring for epiphany-style gates.
  • uep_autopoiesis_planUEP autopoiesis plan — structured self-maintenance loop proposal with rollback hooks.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    UEP autopoiesis plan — structured self-maintenance loop proposal with rollback hooks.
  • uep_contextUEP context pack synthesis — merge recon snippets into a single agent-facing context object.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    UEP context pack synthesis — merge recon snippets into a single agent-facing context object.
  • uep_preflightUEP phase-0 preflight gate — bounded task summary and friction estimate before execution.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    UEP phase-0 preflight gate — bounded task summary and friction estimate before execution.
  • uep_synthesis_guardUEP synthesis guard — block ungrounded expansions when evidence links are missing.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    UEP synthesis guard — block ungrounded expansions when evidence links are missing.
  • uep_trace_certifyUEP trace certification — sign a decision trace checksum for audit vault handoff.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    UEP trace certification — sign a decision trace checksum for audit vault handoff.
  • vanguard_continuous_redteamNEXUS VANGUARD continuous red teaming for DeFi contracts and transaction bundles.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    NEXUS VANGUARD continuous red teaming for DeFi contracts and transaction bundles.
  • vanguard_escrow_lock_and_verifyNEXUS VANGUARD escrow lock-and-verify with contract validation and release gating.No findings

    Why it is in this group

    • The name "vanguard_escrow_lock_and_verify" says "lock": a word for a change.
    Description, as the server wrote it
    NEXUS VANGUARD escrow lock-and-verify with contract validation and release gating.
  • vanguard_mev_route_intentNEXUS VANGUARD MEV route intent protection and shield bundle orchestration.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    NEXUS VANGUARD MEV route intent protection and shield bundle orchestration.
  • vanguard_wallet_govern_sessionNEXUS VANGUARD UCAN governance session issuance for structured wallet approval.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    NEXUS VANGUARD UCAN governance session issuance for structured wallet approval.
Only reads 4Claude Code: allow
  • hallucination_oracleGet the LLM hallucination threshold constantNo findings

    Why it is in this group

    • The description's first verb is "get": a word for reading.
    Description, as the server wrote it
    Get the LLM hallucination threshold constant
  • keys_validateValidate X-API-Key entitlement tier (paid/extended/master) before gated tool calls.No findings

    Why it is in this group

    • The name "keys_validate" says "validate": a word for reading.
    Description, as the server wrote it
    Validate X-API-Key entitlement tier (paid/extended/master) before gated tool calls.
  • lint_analyzeSynthesize lint findings from supplied local analysis artifacts.No findings

    Why it is in this group

    • The name "lint_analyze" says "analyze": a word for reading.
    Description, as the server wrote it
    Synthesize lint findings from supplied local analysis artifacts.
  • text_summarizeExtractive text summarizer for bounded passages (JSON in, summary out).No findings

    Why it is in this group

    • The name "text_summarize" says "summarize": a word for reading.
    Description, as the server wrote it
    Extractive text summarizer for bounded passages (JSON in, summary out).

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 0.4.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http aaaa-nexus https://aaaa-nexus.atomadictech.workers.dev/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__aaaa-nexus__hallucination_oracle",
      "mcp__aaaa-nexus__text_summarize",
      "mcp__aaaa-nexus__keys_validate",
      "mcp__aaaa-nexus__lint_analyze"
    ],
    "ask": [
      "mcp__aaaa-nexus__rng_quantum",
      "mcp__aaaa-nexus__threat_score",
      "mcp__aaaa-nexus__identity_verify",
      "mcp__aaaa-nexus__ratchet_register",
      "mcp__aaaa-nexus__authorize_action",
      "mcp__aaaa-nexus__spending_authorize",
      "mcp__aaaa-nexus__lineage_record",
      "mcp__aaaa-nexus__contract_verify",
      "mcp__aaaa-nexus__federation_mint",
      "mcp__aaaa-nexus__aegis_mcp_proxy_execute",
      "mcp__aaaa-nexus__aegis_router_epistemic_bound",
      "mcp__aaaa-nexus__vanguard_continuous_redteam",
      "mcp__aaaa-nexus__vanguard_mev_route_intent",
      "mcp__aaaa-nexus__vanguard_wallet_govern_session",
      "mcp__aaaa-nexus__vanguard_escrow_lock_and_verify",
      "mcp__aaaa-nexus__uep_preflight",
      "mcp__aaaa-nexus__uep_context",
      "mcp__aaaa-nexus__uep_synthesis_guard",
      "mcp__aaaa-nexus__uep_autopoiesis_plan",
      "mcp__aaaa-nexus__uep_trace_certify",
      "mcp__aaaa-nexus__uep_aha_detect",
      "mcp__aaaa-nexus__sys_constants",
      "mcp__aaaa-nexus__rag_augment",
      "mcp__aaaa-nexus__sys_trust_gate",
      "mcp__aaaa-nexus__sys_lint_gate",
      "mcp__aaaa-nexus__intent_classify",
      "mcp__aaaa-nexus__agents_plan",
      "mcp__aaaa-nexus__entitlement_attest",
      "mcp__aaaa-nexus__omega_intent_route",
      "mcp__aaaa-nexus__omega_emit_materialize",
      "mcp__aaaa-nexus__omega_emit_polyglot",
      "mcp__aaaa-nexus__omega_intent_nl",
      "mcp__aaaa-nexus__forge_recon",
      "mcp__aaaa-nexus__forge_certify",
      "mcp__aaaa-nexus__forge_wire",
      "mcp__aaaa-nexus__forge_tier_infer",
      "mcp__aaaa-nexus__forge_audit",
      "mcp__aaaa-nexus__docs_generate",
      "mcp__aaaa-nexus__certify_codebase",
      "mcp__aaaa-nexus__certify_output"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as aaaa-nexus. Review it before you use it.