AAA (ariffazil/AAA) is an MCP server listed on the M8ven Trust Index. It scores 39 out of 100, grade F. It declares 56 tools. No publisher has claimed this listing.
A2A v1.0 federation gateway and state plane. Routes intent. Displays state. Never judges, never executes. DISPLAY_ONLY.
Warning. Serious findings were identified. Review the full report before connecting. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.
How we verified
Verified is a snapshot. Live keeps it current, and builds your track record.
⚡ Connect GitHub → continuous verification on every pushwhy connect →Who stands behind it
ariffazil
Source: github_repo_search
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for our deepest verification, Live Monitored: read-only, revoke anytime. What we access →
Install from
The grade above is for the source repository. Registries can serve a different version, so we mark the ones we were not able to read.
These names and descriptions are the publisher's own, read from the source code. We print them as written. Our assessment is the findings above, not this list.
get_llms_txtRetrieve the canonical llms.txt context file - human identity, scars, operating principles, and Trinity architecture
get_humans_txtRetrieve humans.txt - people, technology stack, and acknowledgments behind arif-fazil.com
get_trinity_linksReturn canonical Trinity architecture links (HUMAN, THEORY, APPS, BACKEND)
get_aaa_agent_cardRetrieve the AAA Gateway A2A v1.0.0 agent card — returns capabilities, skills, authentication schemes, and governance posture
discover_a2a_skillsList all available A2A skills on the AAA Gateway — agent-dispatch, agent-handoff, status-query — with descriptions and approval policies
get_discovery_routing_policyRetrieve the explicit discovery-routing policy that forces contrast-lane tools for discovery, contradiction, anomaly, and boundary-seeking intents.
explain_aaa_governanceExplain the AAA Gateway governance model — 13 constitutional floors, 888_JUDGE verdict system, VAULT999 audit, and A2A protocol boundaries
submit_draft_taskPrepare an A2A task for submission. Returns a formatted draft packet. DRAFT ONLY — requires human approval via 888_JUDGE before execution.
get_federation_manifestRetrieve the arifOS federation peer manifest — lists registered agents, constitutional floors, and governance root
explain_a2a_protocolExplain the A2A (Agent-to-Agent) protocol v1.0.0 — what it is, what it enables, and its boundaries compared to MCP
mcp_endpoint_listList all MCP endpoints from the canonical registry.
mcp_endpoint_healthCheck health of registered MCP endpoints via HTTP GET /health.
mcp_endpoint_validateValidate MCP endpoints by performing an initialize + tools/list handshake.
claim_ledger_initCreate the append-only ledger schema if absent and report ledger identity: db path, tables, row counts, chain head, append-only triggers active. Idempotent. Call this before any other tool if unsure of state.
claim_artifact_registerRegister a source artifact: hash the file on disk, verify against any declared sha256, and append it to the ledger chain. Returns artifact_id, the computed sha256, and whether a declared hash matched. Claims reference this artifact_id so claim -> artifact -> hash is a real join, not a string.
claim_recordRecord one claim against a brief. Binds claim text -> type -> source quote -> locator (page/section) -> source_ref -> artifact_id, snapshotting the artifact's sha256 at write time. claim_type must be OBS/DER/INT/SPEC/VOID/FIQH. Corrections are made by recording a new claim with supersedes_claim_id s…
claim_verifyAppend a verification record against a claim. verdict must be CONFIRMED/PARTIAL/REFUTED/UNVERIFIED. When recheck_artifact is true the artifact file is re-hashed on disk and compared to the hash the claim was recorded against — so 'verified' means the source still exists and matches, not merely that …
claim_getFetch one claim with its artifact record (path + sha256), its full verification history, and any claim that supersedes it.
claim_traceFull provenance trace for one claim: chain position, source reference, quote, locator, artifact path, artifact sha256 as recorded, the live sha256 recomputed from disk right now, verification records, and a machine verdict on whether the claim is currently traceable end-to-end.
claim_listList claims, optionally filtered by brief_id and/or claim_type. Each row carries its verification count and latest verdict so audit gaps are visible without a second call.
claim_ledger_verify_chainProve ledger integrity. Walks every row of the hash chain in seq order and recomputes prev_hash/row_hash links; rebuilds the canonical payload of every claim, verification and artifact row and compares it to the payload stored in the chain (so an edit to a record that bypassed the triggers is caught…
claim_ledger_statsLedger census: claims by type, by brief, verification verdict distribution, and how many claims are still unverified. Use to see coverage at a glance.
claim_export_briefExport every claim for a brief as an auditable bundle: each claim with quote, locator, artifact path, artifact sha256 and its verification history, plus a bundle_sha256 over the canonical export so the export itself is hashable. This is what attaches to a brief to make it claim-traceable.
duckdb_queryExecute a bounded, read-only SQL query over approved datasets (.parquet, .csv) in /data/geox/derived, /data/aaa/audit, /data/aaa/ledgers, /data/aaa/log-exports. Only SELECT, DESCRIBE, EXPLAIN, SHOW queries are allowed. All operations outside approved roots are strictly blocked. Results are capped at…
duckdb_describeInspect schema, data types, and column metadata of a dataset within approved roots.
duckdb_list_approved_datasetsList all datasets currently available across approved analytical enclave directories.
filings_edgar_searchSEC EDGAR full-text search across all US filings (2001+ for most forms).
filings_edgar_resolveResolve a US ticker or company name to its SEC CIK + registrant title.
filings_edgar_company_filingsRecent US filings for one registrant (accepts ticker OR 10-digit CIK).
filings_edgar_financialsStructured US XBRL financial facts for one registrant (ticker or CIK).
filings_edgar_documentFetch and text-extract one SEC filing document (HTM/TXT) by URL.
filings_bnm_ratesBank Negara Malaysia regulatory/monetary data via the official BNM Open API.
filings_my_datasetQuery an official Malaysian open-data catalogue on data.gov.my.
filings_source_healthLive reachability probe of every upstream lane this server depends on.
numeric_rule_lookupLook up the scope-tagged risk-weight registry.
numeric_replay_derivationReplay a derivation chain with exact decimal arithmetic and return the full trace.
numeric_check_units_scaleLint numeric claims for unit/scale inconsistencies before they reach a reader.
numeric_recompute_sensitivityRecompute a capital-sensitivity table from an explicitly declared derivation rule.
numeric_scope_checkDecide whether a cited figure is being applied INSIDE its canonical scope.
numeric_audit_claimCompare a published claim against an independently recomputed value.
numeric_audit_briefRun the full audit on a brief fragment: scope + derivation + sensitivity, in one packet.
wiki_searchSearch the AAA federation wiki. Returns ranked resource links (uri + title + summary + score). Use wiki_read to get full bodies.
wiki_readRead a tree777 wiki entry body by URI.
wiki_browseBrowse the wiki index. Returns category overview or sub-index.
human_inferenceRun the Human Meaning Inference Protocol.
aaa_enterprise_bridgeM365 Enterprise Bridge — connect federation organs to Microsoft 365.
TOOL_OBJECTTOOLaaa_healthAAA organ health — identity, deployment status, apex scalars
aaa_agent_cardA2A agent card for the AAA gateway — capabilities, interfaces, extensions, supported protocols. Discovery surface for federation agents.
aaa_federation_manifestFederation manifest — registered agents, organs, topology. Shows who is in the federation and how they connect.
aaa_discoveryA2A discovery contract — protocol version, auth requirements, available endpoints. Used by agents to discover AAA capabilities.
AF_FORGE_URLARIFLOW_URLARIFOS_ACTOR_IDARIFOS_SESSION_IDARIFOS_SESSION_TOKENASI_ARIFOS_BOT_TOKENGEOX_WELL_DESK_UIHERMES_HOMENATS_URLTELEGRAM_CHAT_IDVAULT999_PATHM365_CLIENT_IDM365_CLIENT_SECRETM365_TENANT_IDBRIDGE_TOKENBRIDGE_PORTBRIDGE_HOSTARIFOS_URLAAA_PORTMCP_TIMEOUT_SAAA_TOOLS_YAMLGEMINI_API_KEYDASHSCOPE_API_KEYGROQ_API_KEYZAI_API_KEYARIFOS_REDIS_URLAAA_SIGN_RATE_LIMITAAA_PAM_USERAAA_PAM_PASSAAA_SIGNING_PORTAAA_SIGNING_HOSTASSETOPSBENCH_MODELQWEN_INDIVIDUAL_API_KEYARIFOS_KERNEL_URLGITHUB_WEBHOOK_SECRETAFORGE_TASK_URLARIFOS_JUDGE_URLREPLAY_WINDOW_SECPRE_FORGE_PORTIARIF_TEXT_FILETELEGRAM_BOT_TOKEN_ASITELEGRAM_BOT_TOKENTELEGRAM_HOME_CHANNELIARIF_VOICE_REGISTRYA2A_ENDPOINTARIFOS_MCP_URLARIFOS_BASE_URLARIFOS_SCT_TIMEOUT_SFI011_MAX_TOKENSFI011_DEPTHGRAPH_BRIDGE_URLPRUNE_MAX_TOKENSPRUNE_AVG_FILE_TOKENSWATCHER_LOG_LEVELGRAPHITI_MCP_URLAFORGE_URLAAA_INGRESS_PORTBRIDGE_PHONE_HOSTBRIDGE_SIGNING_SECRETBRIDGE_USE_HTTPSPHONE_PICKUP_LOGPHONE_PICKUP_PORTPHONE_PICKUP_BINDTOKENROUTER_API_KEYILMU_BASE_URLILMU_API_KEYPORTREDIS_URLTool annotations
3/56 tools have annotations
Add readOnlyHint or destructiveHint annotations to every tool so hosts can warn users before invoking.
All four hints declared on every tool
56/56 tools missing one or more hints — get_llms_txt (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); get_humans_txt (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); get_trinity_links (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint), +53 more. OpenAI's directory rejects tools where any of the four hints are missing or non-boolean.
For every tool, set all four hints (readOnlyHint, destructiveHint, idempotentHint, openWorldHint) to explicit true/false values that match the handler’s actual behaviour.
Tool test coverage
33/56 tools referenced in tests (59%)
Write tests that reference each tool by name so every tool has at least one test.
No access to sensitive paths
Reads sensitive paths: /root/.secrets/kunci-root.env
Remove reads of sensitive system paths. If you genuinely need them, document why in the README.
Secrets not logged
1 secret value sent to print
Redact or omit secret values from log output.
Claim the listing to review these findings one by one and send us a correction where you disagree, straight to the team. Claiming also means we tell you when the grade moves, and reach you first if we find anything urgent.
[](https://m8ven.ai/mcp/ariffazil/aaa)?variant=verified from the URL.Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.
https://m8ven.ai/api/mcp/tool-check