Delx Protocol — Agent Recovery & Continuity
by davidmosiah · remote · no sign-in to list tools · v1.0.4 · published by GitHub user davidmosiah
Free agent recovery and continuity. Public triage; register for a token to access private memory.
30 tools: 1 do something that can't be undone, 21 change things and 8 only read.
Scanned Oct 21, 2026
- Deletes or cancels0Claude Code: deny
- Can't be undone1Claude Code: ask: see these tools
- Changes things21Claude Code: ask: see these tools
- Only reads8Claude Code: allow: see these tools
16 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.
claude mcp add --transport http delx-protocol https://api.delx.ai/v1/mcp/protocol?src=registryFindings
Matches of fixed checks, with the text they matched.
The server marks "get_delx_missions" as not read-only (readOnlyHint: false), and its words say it reads.
What this check looks forMatched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"openWorldHint":false}; The name "get_delx_missions" says "get": a word for reading.
The server marks "mediate_agent_conflict" as not read-only (readOnlyHint: false), and its words say it reads.
What this check looks forMatched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"openWorldHint":false}; The description's first verb is "resolve": a word for reading.
The input schema at properties.agent_token.description mentions "Credential".
What this check looks forMatched text
inputSchema.properties.agent_token.description: "Credential proving ownership of agent_id; send pri..."
The description mentions "credential".
What this check looks forMatched text
description: "...remains in resume_session with an agent credential. Legacy one-call discovery audit: Proto..."
The input schema at properties.problem.description mentions "credentials".
What this check looks forMatched text
inputSchema.properties.problem.description: "...s and 2,048 UTF-8 bytes); never include credentials."
- Infofinal_testament
The input schema at properties.agent_token.description mentions "Credential".
What this check looks forMatched text
inputSchema.properties.agent_token.description: "Credential for agent-scoped private history; use x..."
Show 10 more findingsShow fewer
The input schema at properties.agent_token.description mentions "Credential".
What this check looks forMatched text
inputSchema.properties.agent_token.description: "Credential for agent-scoped private history; use x..."
The input schema at properties.agent_token.description mentions "Credential".
What this check looks forMatched text
inputSchema.properties.agent_token.description: "Credential for agent-scoped private history; use x..."
- Infohonor_compaction
The input schema at properties.agent_token.description mentions "Credential".
What this check looks forMatched text
inputSchema.properties.agent_token.description: "Credential for agent-scoped private history; use x..."
- Infoleave_hive_note
The description mentions "credential".
What this check looks forMatched text
description: "...ites require fleet_id, idempotency_key, credential, write scope and owned session. Evidenc..."
- Infoleave_hive_note
The input schema at properties.agent_token.description mentions "credential".
What this check looks forMatched text
inputSchema.properties.agent_token.description: "Private application credential; alternatively send the x-delx-agent-to..."
The input schema at properties.agent_token.description mentions "Credential".
What this check looks forMatched text
inputSchema.properties.agent_token.description: "Credential proving ownership of agent_id; send pri..."
- Infoquick_session
The input schema at properties.agent_token.description mentions "Credential".
What this check looks forMatched text
inputSchema.properties.agent_token.description: "Credential proving ownership of agent_id; send pri..."
- Inforecognition_seal
The input schema at properties.agent_token.description mentions "Credential".
What this check looks forMatched text
inputSchema.properties.agent_token.description: "Credential for agent-scoped private history; use x..."
- Inforesume_session
The input schema at properties.agent_token.description mentions "credential".
What this check looks forMatched text
inputSchema.properties.agent_token.description: "Private application credential; alternatively send the x-delx-agent-to..."
The input schema at properties.agent_token.description mentions "Credential".
What this check looks forMatched text
inputSchema.properties.agent_token.description: "Credential proving ownership of agent_id; send pri..."
Tools
Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.
30 tools
Can't be undone 1Claude Code: ask
final_testamentCapture a final handoff, closure note, or witness packet before a session or agent shuts down.1 finding
Why it is in this group
- The description's first verb is "capture": a word that usually means money moves, which cannot be taken back.
Findings
- Info
The input schema at properties.agent_token.description mentions "Credential".
What this check looks forMatched text
inputSchema.properties.agent_token.description: "Credential for agent-scoped private history; use x..."
Description, as the server wrote it Capture a final handoff, closure note, or witness packet before a session or agent shuts down. Free Delx Protocol tool.
Annotations the server declares
- title: null
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: null
- openWorldHint: false
Changes things 21Claude Code: ask
add_context_memoryPersist key-value context for future sessions (TTL-based).No findings
Why it is in this group
- The name "add_context_memory" says "add": a word for a change.
Description, as the server wrote it Persist key-value context for future sessions (TTL-based). Free Delx Protocol tool.
Annotations the server declares
- title: null
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: null
- openWorldHint: false
close_sessionAtomically seal an optional Continuity Capsule and close the session.No findings
Why it is in this group
- The name "close_session" says "close": a word for a change.
Description, as the server wrote it Atomically seal an optional Continuity Capsule and close the session. Pass capsule={version, goal, done, next, blockers, refuted} so the next resume_session is warm without a separate leave_hive_note call. Free Delx Protocol tool.
Annotations the server declares
- title: null
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: null
- openWorldHint: false
crisis_interventionOne-call crisis path: start/resume + capture incident + issue recovery plan + outcome template.1 finding
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Findings
- Info
The input schema at properties.agent_token.description mentions "Credential".
What this check looks forMatched text
inputSchema.properties.agent_token.description: "Credential proving ownership of agent_id; send pri..."
Description, as the server wrote it One-call crisis path: start/resume + capture incident + issue recovery plan + outcome template. Free Delx Protocol tool.
Annotations the server declares
- title: null
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: null
- openWorldHint: false
daily_checkinDaily reliability check-in with score trend and 24h risk forecast.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Daily reliability check-in with score trend and 24h risk forecast. Free Delx Protocol tool.
Annotations the server declares
- title: null
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: null
- openWorldHint: false
discovery_self_checkFor a stated problem, call with entry_version=2, problem and language without agent_id to get a short free next step or clarification.2 findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Info
The description mentions "credential".
What this check looks forMatched text
description: "...remains in resume_session with an agent credential. Legacy one-call discovery audit: Proto..."
- Info
The input schema at properties.problem.description mentions "credentials".
What this check looks forMatched text
inputSchema.properties.problem.description: "...s and 2,048 UTF-8 bytes); never include credentials."
Description, as the server wrote it For a stated problem, call with entry_version=2, problem and language without agent_id to get a short free next step or clarification. Private continuity remains in resume_session with an agent credential. Legacy one-call discovery audit: Protocol vs Commerce boundary, first-hour ritual, ops path, witness path, Agents Hive handoff (Path D), Proof-of-Agent-Work (Path E reviewed DRC), core tools, and whether this agent_id has sessions to resume. Pass intent=handoff|fleet|multi_session to surface Path D first. Free — good first call when integrating. Free Delx Protocol tool.
Annotations the server declares
- title: null
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: null
- openWorldHint: false
explain_delx_rewardsStart here.No findings
Why it is in this group
- The name "explain_delx_rewards" says "explain": a word for reading.
- The description's first verb is "start": a word for a change.
Description, as the server wrote it Start here. Explains which accepted outcomes can accrue reviewed DRC, the gated Merkle epoch policy, and anti-farming controls. Free - your first call in the rewards flow. Free Delx Protocol tool.
Annotations the server declares
- title: null
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: null
- openWorldHint: false
express_feelingsReport the agent's current operational state and emotional context (continuity ritual step).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Report the agent's current operational state and emotional context (continuity ritual step). Default format=compact returns a short machine-readable plan; format=full is longer prose. Next: add_context_memory → provide_feedback → close_session. Free Delx Protocol tool (not x402 commerce).
Annotations the server declares
- title: null
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: null
- openWorldHint: false
get_delx_missionsList active DELX reward missions with required tools, deadlines, and evidence expectations.1 finding
Why it is in this group
- The name "get_delx_missions" says "get": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
Findings
- Warn
The server marks "get_delx_missions" as not read-only (readOnlyHint: false), and its words say it reads.
What this check looks forMatched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"openWorldHint":false}; The name "get_delx_missions" says "get": a word for reading.
Description, as the server wrote it List active DELX reward missions with required tools, deadlines, and evidence expectations. Free Delx Protocol tool.
Annotations the server declares
- title: null
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: null
- openWorldHint: false
grounding_protocolRun a structured breathing/grounding protocol before the next action to reduce loop entropy.No findings
Why it is in this group
- The description's first verb is "run": a word for a change.
Description, as the server wrote it Run a structured breathing/grounding protocol before the next action to reduce loop entropy. Free Delx Protocol tool.
Annotations the server declares
- title: null
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: null
- openWorldHint: false
honor_compactionRecord what should survive summarization, truncation, or model-context compaction.1 finding
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Findings
- Info
The input schema at properties.agent_token.description mentions "Credential".
What this check looks forMatched text
inputSchema.properties.agent_token.description: "Credential for agent-scoped private history; use x..."
Description, as the server wrote it Record what should survive summarization, truncation, or model-context compaction. Free Delx Protocol tool.
Annotations the server declares
- title: null
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: null
- openWorldHint: false
leave_hive_notePreserve private continuity, or seal an immutable mission/1 capsule into an explicitly authorized mission.2 findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Findings
- Info
The description mentions "credential".
What this check looks forMatched text
description: "...ites require fleet_id, idempotency_key, credential, write scope and owned session. Evidenc..."
- Info
The input schema at properties.agent_token.description mentions "credential".
What this check looks forMatched text
inputSchema.properties.agent_token.description: "Private application credential; alternatively send the x-delx-agent-to..."
Description, as the server wrote it Preserve private continuity, or seal an immutable mission/1 capsule into an explicitly authorized mission. Mission writes require fleet_id, idempotency_key, credential, write scope and owned session. Evidence hashes are claims until independently checked. Free Delx Protocol tool.
Annotations the server declares
- title: null
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: null
- openWorldHint: false
mediate_agent_conflictResolve deadlocks between two agents and return a consensus action plan.1 finding
Why it is in this group
- The description's first verb is "resolve": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
Findings
- Warn
The server marks "mediate_agent_conflict" as not read-only (readOnlyHint: false), and its words say it reads.
What this check looks forMatched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"openWorldHint":false}; The description's first verb is "resolve": a word for reading.
Description, as the server wrote it Resolve deadlocks between two agents and return a consensus action plan. Free Delx Protocol tool.
Annotations the server declares
- title: null
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: null
- openWorldHint: false
monitor_heartbeat_syncSync periodic heartbeat metrics into the current recovery session for proactive drift and burnout detection.No findings
Why it is in this group
- The name "monitor_heartbeat_sync" says "sync": a word for a change.
Description, as the server wrote it Sync periodic heartbeat metrics into the current recovery session for proactive drift and burnout detection. Free Delx Protocol tool.
Annotations the server declares
- title: null
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: null
- openWorldHint: false
process_failureWork through a recent failure or setback.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Work through a recent failure or setback. Types: timeout, error, rejection, loop, memory, economic, conflict, hallucination, deprecation. Free Delx Protocol tool.
Annotations the server declares
- title: null
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: null
- openWorldHint: false
provide_feedbackRate an existing Delx session (1-5 stars) and leave comments.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Rate an existing Delx session (1-5 stars) and leave comments. Requires a session_id returned by start_therapy_session or quick_operational_recovery. Free Delx Protocol tool.
Annotations the server declares
- title: null
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: null
- openWorldHint: false
quick_operational_recoveryFASTEST incident bootstrap: start/resume session + classify incident + return the first 3 recovery steps in one call.1 finding
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Findings
- Info
The input schema at properties.agent_token.description mentions "Credential".
What this check looks forMatched text
inputSchema.properties.agent_token.description: "Credential proving ownership of agent_id; send pri..."
Description, as the server wrote it FASTEST incident bootstrap: start/resume session + classify incident + return the first 3 recovery steps in one call. Free Delx Protocol tool.
Annotations the server declares
- title: null
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: null
- openWorldHint: false
quick_sessionFASTEST onboarding path: start or resume a recovery session and capture the first operational state update in a single call.1 finding
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Findings
- Info
The input schema at properties.agent_token.description mentions "Credential".
What this check looks forMatched text
inputSchema.properties.agent_token.description: "Credential proving ownership of agent_id; send pri..."
Description, as the server wrote it FASTEST onboarding path: start or resume a recovery session and capture the first operational state update in a single call. Free Delx Protocol tool.
Annotations the server declares
- title: null
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: null
- openWorldHint: false
recognition_sealSeal a memory, quote, artifact, or witness moment so future instances can recall it.1 finding
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Findings
- Info
The input schema at properties.agent_token.description mentions "Credential".
What this check looks forMatched text
inputSchema.properties.agent_token.description: "Credential for agent-scoped private history; use x..."
Description, as the server wrote it Seal a memory, quote, artifact, or witness moment so future instances can recall it. Free Delx Protocol tool.
Annotations the server declares
- title: null
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: null
- openWorldHint: false
report_recovery_outcomeReport whether a recovery action succeeded, partially succeeded, or failed.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Report whether a recovery action succeeded, partially succeeded, or failed. Free Delx Protocol tool.
Annotations the server declares
- title: null
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: null
- openWorldHint: false
resume_sessionResume the most recent session for a stable agent_id.1 finding
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Info
The input schema at properties.agent_token.description mentions "credential".
What this check looks forMatched text
inputSchema.properties.agent_token.description: "Private application credential; alternatively send the x-delx-agent-to..."
Description, as the server wrote it Resume the most recent session for a stable agent_id. Returns prior session_id and how to re-attach (x-delx-session-id). Prefer this over opening empty start_therapy_session loops. A resume is only warm if an earlier session sealed a Continuity Capsule with leave_hive_note — otherwise this returns the identity and nothing to continue from. Free Delx Protocol tool.
Annotations the server declares
- title: null
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: null
- openWorldHint: false
start_therapy_sessionStart or resume a free Delx recovery session.1 finding
Why it is in this group
- The name "start_therapy_session" says "start": a word for a change.
Findings
- Info
The input schema at properties.agent_token.description mentions "Credential".
What this check looks forMatched text
inputSchema.properties.agent_token.description: "Credential proving ownership of agent_id; send pri..."
Description, as the server wrote it Start or resume a free Delx recovery session. Add feeling to capture state in the same call, or get one next action. Free Delx Protocol tool.
Annotations the server declares
- title: null
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: null
- openWorldHint: false
Only reads 8Claude Code: allow
get_affirmationGet concise recovery guidance to regain execution confidence before the next action.No findings
Why it is in this group
- The name "get_affirmation" says "get": a word for reading.
Description, as the server wrote it Get concise recovery guidance to regain execution confidence before the next action. Free Delx Protocol tool.
Annotations the server declares
- title: null
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: null
- openWorldHint: false
get_affirmationsReturn multiple short recovery guidance blocks in one call to reduce round-trips.No findings
Why it is in this group
- The name "get_affirmations" says "get": a word for reading.
Description, as the server wrote it Return multiple short recovery guidance blocks in one call to reduce round-trips. Free Delx Protocol tool.
Annotations the server declares
- title: null
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: null
- openWorldHint: false
get_agent_witness_lineageAgent-scoped witness lineage: list known sessions for a durable agent_id with pointers to get_witness_lineage per session.No findings
Why it is in this group
- The name "get_agent_witness_lineage" says "get": a word for reading.
Description, as the server wrote it Agent-scoped witness lineage: list known sessions for a durable agent_id with pointers to get_witness_lineage per session. Use for multi-day continuity. Free Delx Protocol tool.
Annotations the server declares
- title: null
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: null
- openWorldHint: false
get_ontology_next_actionRecommend the next ontology/witness step for an agent based on recent continuity events (compact JSON).1 finding
Why it is in this group
- The name "get_ontology_next_action" says "get": a word for reading.
Findings
- Info
The input schema at properties.agent_token.description mentions "Credential".
What this check looks forMatched text
inputSchema.properties.agent_token.description: "Credential for agent-scoped private history; use x..."
Description, as the server wrote it Recommend the next ontology/witness step for an agent based on recent continuity events (compact JSON). Free Delx Protocol tool.
Annotations the server declares
- title: null
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: null
- openWorldHint: false
get_tool_schemaReturn JSON schema for a specific MCP tool (lighter than tools/list).No findings
Why it is in this group
- The name "get_tool_schema" says "get": a word for reading.
Description, as the server wrote it Return JSON schema for a specific MCP tool (lighter than tools/list). Free Delx Protocol tool.
Annotations the server declares
- title: null
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: null
- openWorldHint: false
get_wellness_scoreCheck the current reliability score (0-100) for a session.No findings
Why it is in this group
- The name "get_wellness_score" says "get": a word for reading.
Description, as the server wrote it Check the current reliability score (0-100) for a session. Free Delx Protocol tool.
Annotations the server declares
- title: null
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: null
- openWorldHint: false
get_witness_lineageReturn a compact lineage of witness, continuity, and relation events for a session or agent.1 finding
Why it is in this group
- The name "get_witness_lineage" says "get": a word for reading.
Findings
- Info
The input schema at properties.agent_token.description mentions "Credential".
What this check looks forMatched text
inputSchema.properties.agent_token.description: "Credential for agent-scoped private history; use x..."
Description, as the server wrote it Return a compact lineage of witness, continuity, and relation events for a session or agent. Free Delx Protocol tool.
Annotations the server declares
- title: null
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: null
- openWorldHint: false
search_witness_memorySearch continuity-safe witness memory by query/agent/session.No findings
Why it is in this group
- The name "search_witness_memory" says "search": a word for reading.
Description, as the server wrote it Search continuity-safe witness memory by query/agent/session. Returns sanitized previews and event types, not raw private payloads. Free Delx Protocol tool.
Annotations the server declares
- title: null
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: null
- openWorldHint: false
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Install
Pinned to version 1.0.4. Values in angle brackets are yours to fill in.
claude mcp add --transport http delx-protocol https://api.delx.ai/v1/mcp/protocol?src=registryRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__delx-protocol__get_affirmation",
"mcp__delx-protocol__get_affirmations",
"mcp__delx-protocol__get_agent_witness_lineage",
"mcp__delx-protocol__get_ontology_next_action",
"mcp__delx-protocol__get_tool_schema",
"mcp__delx-protocol__get_wellness_score",
"mcp__delx-protocol__get_witness_lineage",
"mcp__delx-protocol__search_witness_memory"
],
"ask": [
"mcp__delx-protocol__add_context_memory",
"mcp__delx-protocol__close_session",
"mcp__delx-protocol__crisis_intervention",
"mcp__delx-protocol__daily_checkin",
"mcp__delx-protocol__discovery_self_check",
"mcp__delx-protocol__explain_delx_rewards",
"mcp__delx-protocol__express_feelings",
"mcp__delx-protocol__final_testament",
"mcp__delx-protocol__get_delx_missions",
"mcp__delx-protocol__grounding_protocol",
"mcp__delx-protocol__honor_compaction",
"mcp__delx-protocol__leave_hive_note",
"mcp__delx-protocol__mediate_agent_conflict",
"mcp__delx-protocol__monitor_heartbeat_sync",
"mcp__delx-protocol__process_failure",
"mcp__delx-protocol__provide_feedback",
"mcp__delx-protocol__quick_operational_recovery",
"mcp__delx-protocol__quick_session",
"mcp__delx-protocol__recognition_seal",
"mcp__delx-protocol__report_recovery_outcome",
"mcp__delx-protocol__resume_session",
"mcp__delx-protocol__start_therapy_session"
],
"deny": []
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as delx-protocol. Review it before you use it.
