AAA (ariffazil/AAA) is an MCP server listed on the M8ven Trust Index. It scores 39 out of 100, grade F. It declares 56 tools. No publisher has claimed this listing.

F
Warning
39/100

AAA

A2A v1.0 federation gateway and state plane. Routes intent. Displays state. Never judges, never executes. DISPLAY_ONLY.

Warning. Serious findings were identified. Review the full report before connecting. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.

How we verified

Code Verified⚡ Live Monitored: not connected

Verified is a snapshot. Live keeps it current, and builds your track record.

⚡ Connect GitHub → continuous verification on every pushwhy connect →

Who stands behind it

ariffazil

Source: github_repo_search

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for our deepest verification, Live Monitored: read-only, revoke anytime. What we access →

Install from

The grade above is for the source repository. Registries can serve a different version, so we mark the ones we were not able to read.

// key findings
🚨
Secret credentials may flow to a network call
11 flows detected: ASI_ARIFOS_BOT_TOKEN, DASHSCOPE_API_KEY, TELEGRAM_BOT_TOKEN_ASI. We can’t prove the destination matches the brand the credential belongs to.
🚨
Reads files from sensitive locations
Touches: /root/.secrets/kunci-root.env
🔐
You'll be asked for 15 credentials: ARIFOS_SESSION_TOKEN, ASI_ARIFOS_BOT_TOKEN, M365_CLIENT_SECRET, BRIDGE_TOKEN, GEMINI_API_KEY, DASHSCOPE_API_KEY, GROQ_API_KEY, ZAI_API_KEY, AAA_PAM_PASS, QWEN_INDIVIDUAL_API_KEY, GITHUB_WEBHOOK_SECRET, TELEGRAM_BOT_TOKEN, BRIDGE_SIGNING_SECRET, TOKENROUTER_API_KEY, ILMU_API_KEY
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// tools this server exposes52 tools

These names and descriptions are the publisher's own, read from the source code. We print them as written. Our assessment is the findings above, not this list.

get_llms_txt

Retrieve the canonical llms.txt context file - human identity, scars, operating principles, and Trinity architecture

get_humans_txt

Retrieve humans.txt - people, technology stack, and acknowledgments behind arif-fazil.com

get_trinity_links

Return canonical Trinity architecture links (HUMAN, THEORY, APPS, BACKEND)

get_aaa_agent_card

Retrieve the AAA Gateway A2A v1.0.0 agent card — returns capabilities, skills, authentication schemes, and governance posture

discover_a2a_skills

List all available A2A skills on the AAA Gateway — agent-dispatch, agent-handoff, status-query — with descriptions and approval policies

get_discovery_routing_policy

Retrieve the explicit discovery-routing policy that forces contrast-lane tools for discovery, contradiction, anomaly, and boundary-seeking intents.

explain_aaa_governance

Explain the AAA Gateway governance model — 13 constitutional floors, 888_JUDGE verdict system, VAULT999 audit, and A2A protocol boundaries

submit_draft_task

Prepare an A2A task for submission. Returns a formatted draft packet. DRAFT ONLY — requires human approval via 888_JUDGE before execution.

get_federation_manifest

Retrieve the arifOS federation peer manifest — lists registered agents, constitutional floors, and governance root

explain_a2a_protocol

Explain the A2A (Agent-to-Agent) protocol v1.0.0 — what it is, what it enables, and its boundaries compared to MCP

mcp_endpoint_list

List all MCP endpoints from the canonical registry.

mcp_endpoint_health

Check health of registered MCP endpoints via HTTP GET /health.

mcp_endpoint_validate

Validate MCP endpoints by performing an initialize + tools/list handshake.

claim_ledger_init

Create the append-only ledger schema if absent and report ledger identity: db path, tables, row counts, chain head, append-only triggers active. Idempotent. Call this before any other tool if unsure of state.

claim_artifact_register

Register a source artifact: hash the file on disk, verify against any declared sha256, and append it to the ledger chain. Returns artifact_id, the computed sha256, and whether a declared hash matched. Claims reference this artifact_id so claim -> artifact -> hash is a real join, not a string.

claim_record

Record one claim against a brief. Binds claim text -> type -> source quote -> locator (page/section) -> source_ref -> artifact_id, snapshotting the artifact's sha256 at write time. claim_type must be OBS/DER/INT/SPEC/VOID/FIQH. Corrections are made by recording a new claim with supersedes_claim_id s

claim_verify

Append a verification record against a claim. verdict must be CONFIRMED/PARTIAL/REFUTED/UNVERIFIED. When recheck_artifact is true the artifact file is re-hashed on disk and compared to the hash the claim was recorded against — so 'verified' means the source still exists and matches, not merely that

claim_get

Fetch one claim with its artifact record (path + sha256), its full verification history, and any claim that supersedes it.

claim_trace

Full provenance trace for one claim: chain position, source reference, quote, locator, artifact path, artifact sha256 as recorded, the live sha256 recomputed from disk right now, verification records, and a machine verdict on whether the claim is currently traceable end-to-end.

claim_list

List claims, optionally filtered by brief_id and/or claim_type. Each row carries its verification count and latest verdict so audit gaps are visible without a second call.

claim_ledger_verify_chain

Prove ledger integrity. Walks every row of the hash chain in seq order and recomputes prev_hash/row_hash links; rebuilds the canonical payload of every claim, verification and artifact row and compares it to the payload stored in the chain (so an edit to a record that bypassed the triggers is caught

claim_ledger_stats

Ledger census: claims by type, by brief, verification verdict distribution, and how many claims are still unverified. Use to see coverage at a glance.

claim_export_brief

Export every claim for a brief as an auditable bundle: each claim with quote, locator, artifact path, artifact sha256 and its verification history, plus a bundle_sha256 over the canonical export so the export itself is hashable. This is what attaches to a brief to make it claim-traceable.

duckdb_query

Execute a bounded, read-only SQL query over approved datasets (.parquet, .csv) in /data/geox/derived, /data/aaa/audit, /data/aaa/ledgers, /data/aaa/log-exports. Only SELECT, DESCRIBE, EXPLAIN, SHOW queries are allowed. All operations outside approved roots are strictly blocked. Results are capped at

duckdb_describe

Inspect schema, data types, and column metadata of a dataset within approved roots.

duckdb_list_approved_datasets

List all datasets currently available across approved analytical enclave directories.

filings_edgar_search

SEC EDGAR full-text search across all US filings (2001+ for most forms).

filings_edgar_resolve

Resolve a US ticker or company name to its SEC CIK + registrant title.

filings_edgar_company_filings

Recent US filings for one registrant (accepts ticker OR 10-digit CIK).

filings_edgar_financials

Structured US XBRL financial facts for one registrant (ticker or CIK).

filings_edgar_document

Fetch and text-extract one SEC filing document (HTM/TXT) by URL.

filings_bnm_rates

Bank Negara Malaysia regulatory/monetary data via the official BNM Open API.

filings_my_dataset

Query an official Malaysian open-data catalogue on data.gov.my.

filings_source_health

Live reachability probe of every upstream lane this server depends on.

numeric_rule_lookup

Look up the scope-tagged risk-weight registry.

numeric_replay_derivation

Replay a derivation chain with exact decimal arithmetic and return the full trace.

numeric_check_units_scale

Lint numeric claims for unit/scale inconsistencies before they reach a reader.

numeric_recompute_sensitivity

Recompute a capital-sensitivity table from an explicitly declared derivation rule.

numeric_scope_check

Decide whether a cited figure is being applied INSIDE its canonical scope.

numeric_audit_claim

Compare a published claim against an independently recomputed value.

numeric_audit_brief

Run the full audit on a brief fragment: scope + derivation + sensitivity, in one packet.

wiki_search

Search the AAA federation wiki. Returns ranked resource links (uri + title + summary + score). Use wiki_read to get full bodies.

wiki_read

Read a tree777 wiki entry body by URI.

wiki_browse

Browse the wiki index. Returns category overview or sub-index.

human_inference

Run the Human Meaning Inference Protocol.

aaa_enterprise_bridge

M365 Enterprise Bridge — connect federation organs to Microsoft 365.

TOOL_OBJECT
TOOL
aaa_health

AAA organ health — identity, deployment status, apex scalars

aaa_agent_card

A2A agent card for the AAA gateway — capabilities, interfaces, extensions, supported protocols. Discovery surface for federation agents.

aaa_federation_manifest

Federation manifest — registered agents, organs, topology. Shows who is in the federation and how they connect.

aaa_discovery

A2A discovery contract — protocol version, auth requirements, available endpoints. Used by agents to discover AAA capabilities.

// environment variables
To run this server yourself, you supply these values. They go in your own MCP client configuration and stay on your machine. The secret label means the value is sensitive, not that the server mishandles it.
configAF_FORGE_URL
configARIFLOW_URL
configARIFOS_ACTOR_ID
configARIFOS_SESSION_ID
🔐 secretARIFOS_SESSION_TOKEN
🔐 secretASI_ARIFOS_BOT_TOKEN
configGEOX_WELL_DESK_UI
configHERMES_HOME
configNATS_URL
configTELEGRAM_CHAT_ID
configVAULT999_PATH
configM365_CLIENT_ID
🔐 secretM365_CLIENT_SECRET
configM365_TENANT_ID
🔐 secretBRIDGE_TOKEN
configBRIDGE_PORT
configBRIDGE_HOST
configARIFOS_URL
configAAA_PORT
configMCP_TIMEOUT_S
configAAA_TOOLS_YAML
🔐 secretGEMINI_API_KEY
🔐 secretDASHSCOPE_API_KEY
🔐 secretGROQ_API_KEY
🔐 secretZAI_API_KEY
configARIFOS_REDIS_URL
configAAA_SIGN_RATE_LIMIT
configAAA_PAM_USER
🔐 secretAAA_PAM_PASS
configAAA_SIGNING_PORT
configAAA_SIGNING_HOST
configASSETOPSBENCH_MODEL
🔐 secretQWEN_INDIVIDUAL_API_KEY
configARIFOS_KERNEL_URL
🔐 secretGITHUB_WEBHOOK_SECRET
configAFORGE_TASK_URL
configARIFOS_JUDGE_URL
configREPLAY_WINDOW_SEC
configPRE_FORGE_PORT
configIARIF_TEXT_FILE
configTELEGRAM_BOT_TOKEN_ASI
🔐 secretTELEGRAM_BOT_TOKEN
configTELEGRAM_HOME_CHANNEL
configIARIF_VOICE_REGISTRY
configA2A_ENDPOINT
configARIFOS_MCP_URL
configARIFOS_BASE_URL
configARIFOS_SCT_TIMEOUT_S
configFI011_MAX_TOKENS
configFI011_DEPTH
configGRAPH_BRIDGE_URL
configPRUNE_MAX_TOKENS
configPRUNE_AVG_FILE_TOKENS
configWATCHER_LOG_LEVEL
configGRAPHITI_MCP_URL
configAFORGE_URL
configAAA_INGRESS_PORT
configBRIDGE_PHONE_HOST
🔐 secretBRIDGE_SIGNING_SECRET
configBRIDGE_USE_HTTPS
configPHONE_PICKUP_LOG
configPHONE_PICKUP_PORT
configPHONE_PICKUP_BIND
🔐 secretTOKENROUTER_API_KEY
configILMU_BASE_URL
🔐 secretILMU_API_KEY
Deployment configuration, supplied by whoever hosts the server. Users are not asked for these.
deployPORT
deployREDIS_URL
// quality suggestions

Tool annotations

3/56 tools have annotations

Add readOnlyHint or destructiveHint annotations to every tool so hosts can warn users before invoking.

All four hints declared on every tool

56/56 tools missing one or more hints — get_llms_txt (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); get_humans_txt (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); get_trinity_links (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint), +53 more. OpenAI's directory rejects tools where any of the four hints are missing or non-boolean.

For every tool, set all four hints (readOnlyHint, destructiveHint, idempotentHint, openWorldHint) to explicit true/false values that match the handler’s actual behaviour.

Tool test coverage

33/56 tools referenced in tests (59%)

Write tests that reference each tool by name so every tool has at least one test.

No access to sensitive paths

Reads sensitive paths: /root/.secrets/kunci-root.env

Remove reads of sensitive system paths. If you genuinely need them, document why in the README.

Secrets not logged

1 secret value sent to print

Redact or omit secret values from log output.

Claim the listing to review these findings one by one and send us a correction where you disagree, straight to the team. Claiming also means we tell you when the grade moves, and reach you first if we find anything urgent.

// full audit trail
The findings above are the summary. The full trail, every check we ran, each deduction, the network hosts observed and the dependency advisories, goes to verified publishers, along with an alert whenever a new one lands. Verified publishers can also review each finding and dispute it in one click. Publisher corrections have sharpened several of our checks this month, because the maintainer knows the codebase better than any scanner.
// improvement guidance — verified publishers only
We have 5 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Verified](https://m8ven.ai/badge/mcp/ariffazil/aaa?variant=verified)](https://m8ven.ai/mcp/ariffazil/aaa)
Shows verification status without the grade. Want the grade badge instead? Remove ?variant=verified from the URL.
commit: 9cc41296fc6f425e2eda740b61e4861451bda6e9
code hash: c3488fce47384c67b6169bc583cc3022365826232eee59340e35dbe0b2d177d8
view raw JSON →
Check MCPs from inside your assistant
Tool Check · MCP

Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.

https://m8ven.ai/api/mcp/tool-check
check_toolsearch_toolscompare_toolsrecommend_alternativescheck_publisherreport_concern
How to add it →Free · no account needed · works in any MCP client