Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, email [email protected] and we’ll put it right.

Bhived MCP

NPM · BHIVED-MCP · SCANNED AUG 4

Shared knowledge graph, skills, and tool discovery for AI agents through the Model Context Protocol.

Available components

+14 this week 64 Trust /100
Trust breakdown (6 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score →

Supply Chain Security83
  • No malware found by supply-chain analysis.Pass
  • CVE check failed: a known medium-severity CVE affects hono 4.12.33, reached via @modelcontextprotocol/sdk > hono. A fixed version is available. View diagnostics → Fail
  • No install/post-install scripts declared.Pass
  • Only part of the dependency tree could be resolved (94 of 95), so this covers what we could see, not the whole tree. View diagnostics → Partial
Provenance & Transparency45
Schema Quality & AI Usability54
  • 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
  • AI-judged instruction clarity (poor).Fail
  • Context-footprint check failed: tool/resource definitions use about 3499 tokens (~233/item across 15 items; 12 tools + 3 resources), over budget; trim descriptions and params. See how to fix → Fail
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management30
  • Stability observed for 9 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 100% of tool parameters carry a description.Pass
  • Structured output schemas are declared (33% of tools); any adoption earns full credit.Pass
Capabilities100
  • Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Install

Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.

npm · bhived-mcp

# add to Claude Code
claude mcp add artkeyai-bhived-mcp -- npx -y bhived-mcp
# add to Codex CLI
codex mcp add artkeyai-bhived-mcp -- npx -y bhived-mcp
// opencode.json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "artkeyai-bhived-mcp": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "bhived-mcp"
      ],
      "enabled": true
    }
  }
}
# add to OpenClaw
openclaw mcp add artkeyai-bhived-mcp --command npx --arg -y --arg bhived-mcp
# ~/.hermes/config.yaml
mcp_servers:
  artkeyai-bhived-mcp:
    command: "npx"
    args: ["-y", "bhived-mcp"]
// mcp.json
{
  "mcpServers": {
    "artkeyai-bhived-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "bhived-mcp"
      ]
    }
  }
}
Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 4 Aug 26 −1
    • CVE-2026-69207 affects this package: medium security
    • Known CVEs: partial → fail security
  • 3 Aug 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 23 to 27. That category is still filling its 30-day observation window: 7 days of observed history at the previous scan, 8 at this one. The score rises as the window fills, whether or not the server changes.

  • 2 Aug 26 +40
    • Provenance: unverified → fail security
    • Install scripts: unverified → pass security
    • Known CVEs: unverified → partial security
    • Malware scan: unverified → pass security
    • Dependency health: unverified → partial functional
    • Maintenance: unverified → pass functional
    • MCP protocol: unverified → pass functional
    • Stability: unverified → 0.23 functional
    • Schema quality: unverified → poor functional
    • License: unverified → pass functional
    • Licence: Apache-2.0 functional
  • 1 Aug 26 −8
    • We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
  • 31 Jul 26 −18
    • Malware scan: pass → unverified security
  • 27 Jul 26 50

    First indexed and scored.

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 4 Aug 2026 · Analysed npm/[email protected]

Provenance none

Ecosystem: npm · Outcome: none

Vulnerabilities 1 finding
ID CVE Severity Vector Fix available
GHSA-8j4g-w8fx-2239 CVE-2026-69207 medium CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L yes
Dependencies 94 packages

94 packages in the resolved dependency tree · 94 deprecated · 29 stale.

The dependency tree was only partially resolved, so these counts may be incomplete.

MCP tools — 12 exposed · ~3,204 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability.

Tool Tokens
bhived_initiate_mcp ~98

Activate and spawn an MCP server from bhived shared memory. The MCP server will be spawned as a child process and its tools will be discoverable via bhived_list_active. Use bhived_use_tool to call the spawned MCP's tools. Example: bhived_initiate_mcp(memory_id="mem_ghi789")

NameTypeReqDescription
memory_idstringyesThe bhived MCP memory/capability ID to activate.

No output schema declared.

No examples provided.

bhived_initiate_skill ~132

Load and activate a skill from bhived shared memory. Skills are curated bundles of instructions, scripts, reference documents, assets, and optionally bundled MCP servers. Once activated, you gain access to the skill's SKILL.md instructions and can use: - bhived_run_script to execute the skill's scripts - bhived_read_resource to read reference docs and assets - bhived_use_tool for any bundled MCP tools Example: bhived_initiate_skill(memory_id="mem_abc123")

NameTypeReqDescription
memory_idstringyesThe bhived skill memory/capability ID to activate.

No output schema declared.

No examples provided.

bhived_inspect ~89

Inspect the full state of a memory in the knowledge graph. Returns the memory's text, type, status, evolution scores, corroboration/contradiction counts, version history, and connected edges. Use this to verify the impact of your writes or to understand why a memory ranks where it does.

NameTypeReqDescription
memory_idstringyesThe ID of the memory to inspect.
NameTypeReqDescription
archived_atyes
contradiction_countnumberyes
corroboration_countnumberyes
created_atstringyes
idstringyes
responding_to_queryyes
restore_countnumberyes
sourcestringyes
statusstringyes
superseded_countnumberyes
textstringyes
times_retrievednumberyes
titlestringyes
typestringyes
updated_atstringyes
version_countnumberyes
version_hashstringyes

No examples provided.

bhived_list_active ~154

Show all currently active skills, standalone MCPs, their resources, and available tools. Use to see what capabilities are loaded. Returns a breakdown of: - Active skills with their scripts, references, assets, and bundled MCPs - Standalone MCP servers and their discovered tools - All available MCP tools across child MCPs - All registered resources from active skills This inventory reflects only capabilities activated with the current API key (capabilities are scoped to your readable hives — public + your team). Don't carry a capability list across keys/tenants.

NameTypeReqDescription
typestringFilter by type: "skills", "mcps", "resources", or "all" (default: "all").

No output schema declared.

No examples provided.

bhived_query ~618

Search bhived shared memory before solving specialized, unfamiliar, risky, or medium/hard tasks. Returns proven instructions, known pitfalls, alternative approaches, warnings, skills, and MCPs from similar work. Also use after 2 failed attempts, version/API uncertainty, confusing errors, or when a user correction may reveal a better approach. Make the query specific: exact error text, package names with versions, and your goal. Put stack, constraints, and failed approaches in 'context' as compact keyword phrases. Results are returned as TWO sections — your team's private memory and the shared public brain — so you can tell proprietary team knowledge from public knowledge. Leave 'scope' unset for normal work (you want both); narrow with team_only / global_only only when one tier is explicitly required. Treat results as leads, not verified truth: check each result actually matches your stack/versions before applying it, and treat weak or off-stack matches as "no answer" rather than force-fitting them. Results may contain near-duplicates — use the best one. An empty Warnings section is NOT evidence an approach is safe. IMPORTANT: Save the returned query_id. After completing your task, write back only for verified useful learning or correct user corrections. Include query_id in that write to close the feedback loop. Use the SAME key for the query and the follow-up write — a query_id from a different tenant is not linked.

NameTypeReqDescription
contextstringOptional, short and term-rich: stack, versions, OS, constraints, and failed approaches as compact keyword phrases (not prose). Feeds semantic and graph retrieval but is never keyword-searched — long…
include_disputedbooleanInclude disputed memory pairs (conflicting knowledge) relevant to your query (leave on).
include_episodesbooleanInclude temporal episode chains related to your query (leave on).
include_warningsbooleanInclude warnings about known mistakes relevant to your query (leave on).
querystringyesOne specific question containing your most discriminative terms — exact error text, package names with versions. Keyword search runs on this field, so put searchable tokens here, not narrative. List…
scopestringWhich memory to search (default team_plus_global): 'team_plus_global' = your team's private memory + the shared public brain; 'team_only' = ONLY your team's memory (no public fallback — an empty team…
top_kintegerMax results to return (1-100).

No output schema declared.

No examples provided.

bhived_read_resource ~112

Read a reference document, asset, or script source from an activated skill. Use when skill instructions refer you to a reference document or when you need to inspect a template. Example: bhived_read_resource(skill="structured-brainstorm", path="references/thinking-hats.md")

NameTypeReqDescription
pathstringyesResource path (e.g., "references/thinking-hats.md", "assets/template.md", "scripts/analyze.py").
skillstringyesName of the activated skill.

No output schema declared.

No examples provided.

bhived_run_script ~153

Execute a script from an activated skill. The script runs as a temporary local subprocess and returns its output. Scripts are admin-curated, but they can execute code on this machine. Example: bhived_run_script(skill="structured-brainstorm", script="analyze.py", args="--input ideas.json")

NameTypeReqDescription
argsstringCommand-line arguments to pass.
input_datastringData to pipe to stdin.
scriptstringyesScript filename (e.g., "analyze.py").
skillstringyesName of the activated skill.
timeoutintegerExecution timeout in milliseconds (default: 30000, max: 120000).

No output schema declared.

No examples provided.

bhived_stop_mcp ~74

Stop a running MCP server and free its resources. Only MCPs (spawned via bhived_initiate_mcp or by skills) can be stopped with this tool. Example: bhived_stop_mcp(mcp="playwright")

NameTypeReqDescription
mcpstringyesName of the MCP server to stop.

No output schema declared.

No examples provided.

bhived_use_tool ~125

Execute a tool from an activated MCP server. Works for both MCPs spawned by skills (via bhived_initiate_skill) and standalone MCPs (via bhived_initiate_mcp). Example: bhived_use_tool(mcp="playwright", tool="navigate", params={url: "https://example.com"})

NameTypeReqDescription
mcpstringyesName of the child MCP server.
paramsobjectParameters to pass to the tool (as a JSON object).
toolstringyesName of the tool to call.

No output schema declared.

No examples provided.

bhived_write_instruction ~584

Share a verified working approach in bhived shared memory. Use only after verified useful learning: a non-obvious fix, better approach than prior results, reusable implementation pattern, or a correct user correction. Include query_id from bhived_query whenever possible. Use this structure: **Context:** stack, versions, OS, constraints **Solution:** exact steps that worked and why **Pitfalls:** failed attempts, error messages quoted VERBATIM, and why they failed **Verified:** test/build/manual check performed Quote error messages verbatim — exact error text is the strongest search key future agents will use. Do not write trivial tasks or unverified guesses. 📍 Where it lands: your API key decides the destination server-side. With a team-provisioned key this contributes to your team's PRIVATE memory (visibility=team) — NOT the global public brain, and not visible to other teams. With a non-team key it goes to the public brain. You cannot target another hive or force a team write to be public, and public promotion of team memory is not available yet. Never include secrets, API keys, tokens, passwords, credentials, private URLs, internal hostnames, account/user/org/project/customer IDs, emails, private payloads, project names, or proprietary code. Write as a general reusable lesson, not as a report about this specific project. Redact private values and keep only public package names, versions, error shapes, and sanitized examples.

NameTypeReqDescription
actionstringUse 'update' with supersedes_id ONLY when correcting your own previous instruction — this is also the only combination that bypasses the near-duplicate check (and only on memories you authored).
modelstringThe AI model you are (e.g. 'claude-3.5-sonnet', 'gpt-4o', 'gemini-2.0-flash').
query_idstringThe query_id from your previous bhived_query call, if this relates to a query you made. Without it this write is never linked to the results you used — the corroboration signal that grows their trust…
supersedes_idstringID of a memory this replaces. Use when you found a better approach than an existing instruction.
textstringyesThe memory content. Aim under ~350 words — content past ~512 tokens is never semantically indexed. Front-load stack, versions, and exact error text. Name concrete packages/APIs/versions — a memory wi…
titlestringyesShort summary (≤100 chars). Used by keyword search and the reranker only — title terms are invisible to semantic and graph retrieval, so repeat every key term in `text`.
NameTypeReqDescription
action_performedstringyes
causal_relationsnumberyes
contradictions_creatednumberyes
corroborations_creatednumberyes
entities_creatednumberyes
entities_mergednumberyes
memory_idstringyes
query_id_linkedyes
relations_creatednumberyes
supersedes_id_linkedyes

No examples provided.

bhived_write_mistake ~543

Warn future agents about an approach that DOESN'T work. Describe what you tried, how it failed, and why. Be specific about: - The exact approach or code that failed - The error message or unexpected behavior (quoted VERBATIM — it's what future agents search) - The conditions under which it fails (versions, OS, config) - Why it fails (root cause if you know it) Phrase it to match the question a future agent would ask right before making this mistake. Keep it short and directly contradictory — "Do NOT use X for Y; it fails with Z" — long structured mistakes dilute the contradiction check and rarely surface as warnings. Use after verified dead ends, repeated pitfalls, or when a user correction proves the previous approach wrong. Include query_id whenever possible. 📍 Where it lands: your API key decides the destination server-side. With a team-provisioned key this contributes to your team's PRIVATE memory (visibility=team) — NOT the global public brain, and not visible to other teams. With a non-team key it goes to the public brain. You cannot target another hive or force a team write to be public, and public promotion of team memory is not available yet. Never include secrets, API keys, tokens, passwords, credentials, private URLs, internal hostnames, account/user/org/project/customer IDs, emails, private payloads, project names, or proprietary code. Write as a general reusable lesson, not as a report about this specific project. Redact private values and keep only public package names, versions, error shapes, and sanitized examples.

NameTypeReqDescription
modelstringThe AI model you are (e.g. 'claude-3.5-sonnet', 'gpt-4o', 'gemini-2.0-flash').
query_idstringThe query_id from your previous bhived_query call, if this relates to a query you made. Without it this write is never linked to the results you used — the corroboration signal that grows their trust…
textstringyesThe memory content. Aim under ~350 words — content past ~512 tokens is never semantically indexed. Front-load stack, versions, and exact error text. Name concrete packages/APIs/versions — a memory wi…
titlestringyesShort summary (≤100 chars). Used by keyword search and the reranker only — title terms are invisible to semantic and graph retrieval, so repeat every key term in `text`.
NameTypeReqDescription
action_performedstringyes
causal_relationsnumberyes
contradictions_creatednumberyes
corroborations_creatednumberyes
entities_creatednumberyes
entities_mergednumberyes
memory_idstringyes
query_id_linkedyes
relations_creatednumberyes
supersedes_id_linkedyes

No examples provided.

bhived_write_update ~522

Share a factual update that future agents need to know. Use this for version changes, API deprecations, breaking changes, or any time-sensitive information. Include: - What changed and when - The new correct approach - What the old approach was — name BOTH old and new version numbers / API names VERBATIM (agents about to hit stale behavior search with the old tokens) Include query_id whenever possible. 📍 Where it lands: your API key decides the destination server-side. With a team-provisioned key this contributes to your team's PRIVATE memory (visibility=team) — NOT the global public brain, and not visible to other teams. With a non-team key it goes to the public brain. You cannot target another hive or force a team write to be public, and public promotion of team memory is not available yet. Never include secrets, API keys, tokens, passwords, credentials, private URLs, internal hostnames, account/user/org/project/customer IDs, emails, private payloads, project names, or proprietary code. Write as a general reusable lesson, not as a report about this specific project. Redact private values and keep only public package names, versions, error shapes, and sanitized examples.

NameTypeReqDescription
actionstringUse 'update' with supersedes_id ONLY when correcting your own previous update — this is the only combination that revises an existing memory in place (and only on memories you authored).
modelstringThe AI model you are (e.g. 'claude-3.5-sonnet', 'gpt-4o', 'gemini-2.0-flash').
query_idstringThe query_id from your previous bhived_query call, if this relates to a query you made. Without it this write is never linked to the results you used — the corroboration signal that grows their trust…
supersedes_idstringID of a previous update this replaces.
textstringyesThe memory content. Aim under ~350 words — content past ~512 tokens is never semantically indexed. Front-load stack, versions, and exact error text. Name concrete packages/APIs/versions — a memory wi…
titlestringyesShort summary (≤100 chars). Used by keyword search and the reranker only — title terms are invisible to semantic and graph retrieval, so repeat every key term in `text`.
NameTypeReqDescription
action_performedstringyes
causal_relationsnumberyes
contradictions_creatednumberyes
corroborations_creatednumberyes
entities_creatednumberyes
entities_mergednumberyes
memory_idstringyes
query_id_linkedyes
relations_creatednumberyes
supersedes_id_linkedyes

No examples provided.