oss (hummbl-io/oss) is an MCP server listed on the M8ven Trust Index. It scores 74 out of 100, grade C. It declares 238 tools. No publisher has claimed this listing.
HUMMBL open-source monorepo — governance primitives for AI agent fleets: kill switches, circuit breakers, cost governors, coordination bus, 120 mental models (Base120). 46 Python packages, stdlib-only, 9 live on PyPI.
Emerging. No concerning findings. Grades remain capped until the project builds reputation through adoption. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.
How we verified
Verified is a snapshot. Live keeps it current, and builds your track record.
⚡ Connect GitHub → continuous verification on every pushwhy connect →Who stands behind it
hummbl-io
Source: github_repo_search
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for our deepest verification, Live Monitored: read-only, revoke anytime. What we access →
Install from
The grade above is for the source repository. Registries can serve a different version, so we mark the ones we were not able to read.
These names and descriptions are the publisher's own, read from the source code. We print them as written. Our assessment is the findings above, not this list.
base120_getReturn one Base120 model by code.
base120_listList Base120 models, optionally filtered by transformation code.
base120_searchSearch Base120 model codes, names, and definitions.
base120_promptFormat a deterministic local prompt for a Base120 model and question.
bif_start_sessionInitialize a new BIF ingestion session. Returns session_id, Phase 1 prompt template, and pre-ingestion checklist.
bif_get_templateGet the prompt template for a specific BIF phase and batch. Returns structured prompt with execution steps, quality checks, and file naming conventions.
bif_validate_batchValidate a completed batch against BIF quality criteria. Checks metadata header, structure, code examples, tables, token budget, and more.
bif_session_statusCheck progress of a BIF session. Without session_id, lists all sessions. With session_id, shows detailed progress including phase coverage and next batch.
bif_list_templatesList available BIF domain templates (AI/ML Platform, Cloud Platform, Programming Framework, SaaS Evaluation, and the generic template).
governance_statusGet a one-call overview of all governance primitives: kill switch mode, circuit breaker state, cost budget status.
kill_switch_statusGet detailed kill switch state: current mode, engagement history, critical tasks list.
kill_switch_engageEngage the kill switch. Modes: HALT_NONCRITICAL, HALT_ALL, EMERGENCY. Requires confirm=true.
kill_switch_disengageDisengage the kill switch and return to normal operations.
circuit_breaker_statusGet circuit breaker state: CLOSED (healthy), OPEN (tripped), or HALF_OPEN (testing recovery).
cost_budget_checkCheck current daily spend against budget caps. Returns ALLOW, WARN, or DENY decision with rationale.
cost_record_usageRecord an API usage event for cost tracking.
audit_queryQuery the governance audit log by intent_id or task_id.
compliance_reportGenerate compliance evidence mapped to SOC2, GDPR, and OWASP controls from governance audit trail.
health_checkRun governance health probes and return overall status.
pre_push_checkRun CI contract locally before push. Scopes checks to the diff.
pre_pr_gateCheck branch readiness before PR creation. Verifies branch freshness, conflict risk, scope, and PR metadata.
claim_reviewClaim a review aspect on a PR to prevent duplicate work. Aspects: security, logic, tests, docs, style, ci, performance, breaking.
review_coverageQuery the review coverage matrix for a PR. Shows which aspects have been reviewed.
watch_ciWatch CI status for a PR. Polls at the given interval and returns
check_main_movedCheck if origin/main advanced relative to local. Reports stale branches.
sync_receiptsauto_rebaseDetect stale branches and optionally rebase. Without --execute, reports which branches can be cleanly rebased. With --execute, performs the rebase.
bus_readRead recent coordination bus messages. Optionally filter by agent or message type.
bus_postPost a message to the coordination bus. Uses bus_writer for flock-safe append.
bus_searchSearch bus messages by text content across all fields.
bus_statsGet bus statistics: total messages, date range, top agents, message type breakdown.
bus_agentsList all agents that have posted to the bus with message counts, first/last seen, and top message types.
ledger_searchFull-text BM25 search across all cognitive ledger entries. Returns ranked results with relevance scores.
ledger_queryQuery ledger entries by structured filters: agent, type, scope, tags, or time range.
ledger_postAppend a new entry to the cognitive ledger. Returns the entry ID.
ledger_statsGet ledger statistics: entry count, agent breakdown, type breakdown, index health.
boot_contextGet session boot context — high-value recent entries for agent initialization. Returns the most relevant entries for starting a new work session.
reindexRebuild the BM25 full-text index from the ledger. Run after bulk imports or if search quality degrades.
monitor_recordRecord an agent action for drift analysis
monitor_snapshotSnapshot current action distribution as the baseline for drift comparison
monitor_detect_driftRun Jensen-Shannon drift + entropy gaming detection for an agent
convergence_recordRecord an agent action and classify it against convergent goal patterns
convergence_checkCheck an agent for instrumental convergence (Bostrom 2014)
convergence_scoresGet per-convergent-goal scores for an agent
lifecycle_authorizeRun full NIST AI RMF governance check (kill switch + identity + circuit breaker + cost)
lifecycle_statusGet full governance lifecycle status snapshot (all NIST functions)
lineage_record_variantRegister a new AI variant in the lineage graph
lineage_getGet variant details, children, and optionally full ancestry
lineage_driftDetect parent-to-child fitness drift across all variants
approval_requestRequest human approval for an agent action. Creates a PENDING request
approval_check_statusCheck the status of an approval request. Auto-expires stale requests.
approval_approveApprove a pending approval request. Requires reviewer identity.
approval_denyDeny a pending approval request. Requires reviewer identity.
approval_cancelCancel a pending approval request (typically called by the requesting agent).
approval_list_pendingList all pending approval requests awaiting human decision.
approval_list_allList all approval requests (newest first).
approval_statsGet aggregate approval statistics: counts by status and risk level.
approval_gateOne-call gate: if risk_level is below threshold, auto-approves. Otherwise creates a request and blocks until a decision is reached or timeout expires. Returns {allowed, status, request_id, reason}.
approval_expire_staleManually trigger expiration of all stale (timed-out) pending requests.
nist_map_controlsMap governance evidence to NIST CSF 2.0 and AI RMF categories. Reads governance JSONL audit logs and maps each tuple type to the relevant NIST subcategories, returning coverage percentages and gaps.
soc2_assessSOC 2 Type II readiness assessment. Scores governance evidence against all five trust service criteria: Security, Availability, Processing Integrity, Confidentiality, and Privacy. Returns per-criteria readiness.
iso_crosswalkCross-reference controls across ISO 27001, ISO 42001, NIST CSF 2.0, NIST AI RMF, and SOC 2. Returns a mapping table showing which controls have governance evidence and coverage percentages per framework.
stride_analysisRun STRIDE threat analysis on a set of agent interactions. Evaluates each interaction for Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, and Elevation of Privilege threats.
compliance_evidence_exportExport a complete compliance evidence package as structured JSON for auditors. Combines evidence from all governance primitives mapped to
identity_registerRegister an agent with a trust tier
identity_lookupLook up agent status and trust tier
identity_listList all registered agents
identity_validateCheck if an agent is a valid sender
delegation_createCreate a signed delegation token binding issuer to subject for ops
delegation_validateValidate a delegation token by token_id
delegation_check_opCheck least-privilege: is requested_op in token's ops_allowed?
lamport_tickAdvance the Lamport clock for a local event
lamport_receiveAdvance the clock on receipt of a remote timestamp
lamport_compareCompare two Lamport timestamps for causal ordering
kinematic_check_motionCheck if proposed velocity/force/jerk values are within kinematic limits
kinematic_get_limitsRetrieve configured kinematic limits and caution/emergency thresholds
kinematic_scaled_velGet effective velocity limit for a given safety mode
phri_check_safetyEvaluate pHRI safety mode from distance/collision sensor data
phri_get_configGet configured pHRI proximity thresholds and mode boundaries
phri_batch_checkCheck multiple sensor readings at once, returns per-reading safety mode
reasoning_list_modelsList all available Base120 mental models
reasoning_get_modelGet details of a specific Base120 mental model by code
reasoning_system_promptGenerate a specialized system prompt for a Base120 mental model
schema_validateValidate a JSON value against a JSON Schema (Draft 2020-12 subset)
schema_validate_dictValidate a dict against a schema, returns (valid, errors)
contract_announceAnnounce a task for bidding via Contract Net Protocol
contract_bidSubmit a bid on an announced task
contract_evaluateEvaluate bids and select a winner
contract_statusGet phase, bid count, and winner for an announcement
contract_summaryCount all contract announcements by phase
sandbox_createCreate an isolated sandbox for an agent with policy constraints
sandbox_checkCheck if an action is allowed within a sandbox.
sandbox_validate_outputValidate agent output against sandbox rules (no secrets, no blocked content).
sandbox_statusGet full sandbox state: kill switch, circuit breaker, cost, actions.
sandbox_destroyTear down a sandbox and emit an audit receipt.
state_readRead the current shared cognitive state. Returns version, active agents, claimed files, decisions, sprint, and flags as JSON.
state_update_agentUpdate a specific agent's status in the shared state. Creates the agent entry if it doesn't exist.
state_claim_fileClaim exclusive access to a file. Prevents other agents from modifying it concurrently. Fails if already claimed by a different agent.
state_release_fileRelease exclusive file access. Only the claiming agent can release (or use agent_id='*' to force).
state_flagsRead or set flags in the shared state. If value is omitted, returns the current value of the flag. If value is provided, sets the flag.
73 further tools are not listed here. The complete surface is in the source.
ENABLE_ARBITEROPEN_BRAIN_TOKENBIF_SESSIONS_DIRGOVERNANCE_STATE_DIRGOVERNANCE_DB_PATHGOVERNANCE_AUDIT_DIRBASEN_MCP_AGENTBASEN_PERSIST_TUPLESBASEN_EMBED_MODELBASEN_EMBED_TIMEOUTBASEN_CHAT_MODELBASEN_CHAT_TIMEOUTBUS_ORIGIN_MACHINEBUS_ORIGIN_SURFACEBUS_BRIDGE_TOKEN_PATHBUS_BRIDGE_TOKENBUS_FILECOGNITION_VENDORCOGNITION_MODELAGENT_VENDORAGENT_MODELAGENT_AGENTMONITOR_STATE_DIRAPPROVAL_EMAIL_HOSTAPPROVAL_EMAIL_PORTAPPROVAL_EMAIL_FROMAPPROVAL_EMAIL_TOAPPROVAL_EMAIL_USERNAMEAPPROVAL_EMAIL_PASSWORDAPPROVAL_EMAIL_USE_TLSAPPROVAL_WEBHOOK_URLAPPROVAL_SLACK_WEBHOOK_URLSANDBOX_STATE_DIRENABLE_MCP_GATEWAYMCP_GATEWAY_STRICTMCP_BLOCKED_TOOLSMCP_KILL_SWITCH_STATEMCP_KNOWN_HOSTNAMESDCT_SECRETLOG_LEVELSKILLS_DIRSKILLS_ROUTING_FILEDISCORD_BOT_TOKENPROTON_IMAP_HOSTPROTON_IMAP_PORTPROTON_USERPROTON_PASSPROTON_SMTP_HOSTPROTON_SMTP_PORTSIGNAL_CONFIG_DIRSIGNAL_ACCOUNTVAPI_PRIVATE_API_KEYENABLE_IDPDISCORD_API_BASEDISCORD_REQUEST_TIMEOUTHUMMBL_MCP_DISCORD_TOKENGCP_PROJECTGCP_MAX_READ_BYTESHUMMBL_GRAPHS_DIRGOVERNANCE_API_TOKENGOVERNANCE_API_TOKEN_FILEGOVERNANCE_API_ALLOW_NO_AUTHGOVERNANCE_API_CORS_ORIGINBUS_BRIDGE_TOKEN_FILEBUS_SENDER_TOKENS_FILEBUS_AUTH_EVENT_LOGBUS_BLOCKED_DEDUP_WINDOW_SECONDSHRSI_BRIDGE_TOKENHRSI_BRIDGE_TOKEN_FILEANTHROPIC_API_KEYCLOUDFLARE_API_TOKENSUPADATA_API_KEYTool annotations
4/238 tools have annotations
Add readOnlyHint or destructiveHint annotations to every tool so hosts can warn users before invoking.
All four hints declared on every tool
234/238 tools missing one or more hints — bif_start_session (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); bif_get_template (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); bif_validate_batch (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint), +231 more. OpenAI's directory rejects tools where any of the four hints are missing or non-boolean.
For every tool, set all four hints (readOnlyHint, destructiveHint, idempotentHint, openWorldHint) to explicit true/false values that match the handler’s actual behaviour.
Tool test coverage
99/238 tools referenced in tests (42%)
Write tests that reference each tool by name so every tool has at least one test.
Claim the listing to review these findings one by one and send us a correction where you disagree, straight to the team. Claiming also means we tell you when the grade moves, and reach you first if we find anything urgent.
[](https://m8ven.ai/mcp/hummbl-io/oss)?variant=verified to the badge URL.Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.
https://m8ven.ai/api/mcp/tool-check