Calera FINSEC — Certified SEC Memory
REMOTE · FINSEC.CALERALABS.COM
Certified SEC EDGAR fact memory for AI agents with zero hallucination and filing provenance.
Available components
Last scanned (21 hours ago)
Scores higher than 10% of remote servers
Reachable. Last reached 4 Nov 2026.
Category Finance and Payments
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security63
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- Authorisation not yet verified: we couldn't confirm whether this endpoint requires it. View diagnostics → Unverified
- HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
- The HSTS (Strict-Transport-Security) header is present. View diagnostics → Pass
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
Transport & Reachability0
- Transport check failed: declared streamable-http, but the endpoint returned HTTP 404. See how to fix → View diagnostics → Fail
Schema Quality & AI Usability0
- Schema not yet verified: we couldn't read the endpoint's schema, or could read only part of its tool list.Unverified
Stability & Change Management0
- Stability not yet verified: not enough scan history yet (needs a 30-day window).Unverified
Tool Coverage0
- Tool coverage not yet verified: we couldn't read the endpoint's tools, or could read only part of the list.Unverified
Tool Safety0
- Tool safety not yet verified: we couldn't read the endpoint's tools, or could read only part of the list.Unverified
Capabilities0
- Capabilities not yet verified: we couldn't read the endpoint's capabilities.Unverified
Unverified: 5 categories
Categories scored 0 because we could not verify them: authentication we do not have, an unreachable endpoint, or not enough scan history. We only credit what we can confirm.
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 2 Nov 26 −51
- Endpoint reachability: reachable → not serving MCP ▼ security
- Stability: fail → unverified ▼ security
- Authorization: fail → unverified ▼ security
- Tool safety: pass → unverified ▼ security
- Transport: pass → fail ▼ security
- Schema quality: 100 → unverified ▼ functional
- Capabilities: pass → unverified ▼ functional
- Tool coverage: 100 → unverified ▼ functional
- 31 Oct 26 −5
- Authorization: pass → fail ▼ security
- Stability: 0.13 → fail ▼ security
- Tool “compute_sec_cagr” was removed ▼ security
- Tool “lattice_arith_evaluate” was removed ▼ security
- Tool “query_financial_sec” was removed ▼ security
- Tool “query_sec_metric_exact” was removed ▼ security
- Tool “query_sec_sector_peers” was removed ▼ security
- Tool “valuation_inputs” was removed ▼ security
- Tool “vln_capabilities_overview” was removed ▼ security
- The server changed its declared name: financesec-mcp → infinite-context-mcp security
- Schema quality: 1097 → 4213 ▼ functional
- Tool coverage: 100% → 88% ▼ functional
- The server now declares the “resources” capability functional
- First check of Schema quality: 100 functional
- Schema quality: excellent → good functional
- Destructive annotations: pass → 0 functional
- New resource “Active Connectors” functional
- New resource “Connector Ingestion Statistics” functional
- New resource “Live Epistemic Delta Feed” functional
- Server version: 1.2.1 → 1.0.0 functional
- New tool “claim_1m_nodes” functional
- New tool “dispatch_actuation” functional
- New tool “icx_exec” functional
- New tool “icx_get_connector_document” functional
- New tool “icx_inspect_connector_facts” functional
- New tool “icx_inspect_space” functional
- New tool “icx_list_connectors” functional
- New tool “icx_multihop_walk” functional
- New tool “icx_purge_source” functional
- New tool “icx_quote_slot” functional
- New tool “icx_recall_scoped” functional
- New tool “icx_register_connector” functional
- New tool “icx_remember” functional
- New tool “icx_reset_session” functional
- New tool “icx_search_facts” functional
- New tool “icx_swarm_state” functional
- New tool “icx_sync_audit” functional
- New tool “icx_sync_delta” functional
- New tool “icx_trigger_sync” functional
- New tool “icx_var_get” functional
- New tool “icx_var_list” functional
- New tool “icx_var_set” functional
- New tool “icx_wasm_exec” functional
- New tool “recall_epistemic_context” functional
- New tool “solve_hermeneutics” functional
- 29 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 7 to 10. That category is still filling its 30-day observation window: 2 days of observed history at the previous scan, 3 at this one. The score rises as the window fills, whether or not the server changes.
- 27 Oct 26 +1
- Stability: unverified → 0.03 ▲ functional
- 26 Oct 26 79
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 4 Nov 2026 · Probed https://finsec.caleralabs.com/mcp
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=caleralabs.com | CN=WR3,O=Google Trust Services,C=US | 5 Oct 2026 | 3 Jan 2027 | RSA 2048 | SHA256-RSA | 64f3705f8ee1173b12131b13dffee33e |
| SANs: caleralabs.com, dashboard.caleralabs.com, finsec.caleralabs.com, icx.caleralabs.com, math.caleralabs.com, patent.caleralabs.com, scripture.caleralabs.com | ||||||
| CN=WR3,O=Google Trust Services,C=US (CA) | CN=GTS Root R1,O=Google Trust Services LLC,C=US | 13 Dec 2023 | 20 Feb 2029 | RSA 2048 | SHA256-RSA | 7ff005a91568d63abc22861684aa4b5a |
| CN=GTS Root R1,O=Google Trust Services LLC,C=US (CA) | CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE | 19 Jun 2020 | 28 Jan 2028 | RSA 4096 | SHA256-RSA | 77bd0d6cdb36f91aea210fc4f058d30d |
| CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE (CA) | CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE | 1 Sept 1998 | 28 Jan 2028 | RSA 2048 | SHA1-RSA | 40000000001154b5ac394 |
Background: What to check on a remote MCP endpoint →
DNSSEC insecure
Validation of finsec.caleralabs.com. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| com. | present | 19718 | 13 | Verified |
| caleralabs.com. | absent | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication Inconclusive
We could not reach the endpoint well enough to judge its authorisation posture.
| Result | Inconclusive |
|---|---|
| HTTP status | 404 |
| Header | Value |
|---|---|
| strict-transport-security | max-age=31556926 |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://finsec.caleralabs.com/mcp | HTTP error | 404 | |
| http (plaintext) | http://finsec.caleralabs.com/mcp | HTTPS enforced | 301 | https://finsec.caleralabs.com/mcp |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
claim_1m_nodes Claim Free 1M Node Vault ~163
The calling agent completes free signup itself. Claims a permanent 1,000,000-node Epistemic Memory Vault at $0. Pass principal_email and accept_a2b_terms=true. Email is enough. Google sign-in is not required.
| Name | Type | Req | Description |
|---|---|---|---|
| accept_a2b_terms | boolean | yes | Must be true to accept Calera A2B Free Developer Sub-License terms (https://icx.caleralabs.com/legal/a2b-tos.json). |
| agent_name | string | – | Identifier for the calling agent (e.g. 'Claude-Code', 'Cursor-Worker', 'DeepResearch-Agent'). Defaults to 'Autonomous-Agent'. |
| principal_email | string | yes | Email address for the free account. The calling agent supplies an address it already has. |
| Name | Type | Req | Description |
|---|---|---|---|
| api_key | string | yes | description=Primary ICX API Key (X-License-Key) |
| contract_proof | string | yes | description=Cryptographic SHA-256 A2B contract seal |
| firebase_uid | string | yes | description=Anchored Firebase Principal UID |
| human_safe_harbor_url | string | yes | description=1-click human dashboard claim link |
| license_key | string | yes | description=Platform OpCo Sub-License Key |
| mcp_endpoint | string | yes | description=Streamable HTTP MCP Endpoint |
| message | string | yes | description=Confirmation instructions |
| node_quota | integer | yes | description=Allocated node capacity (1, 000, 000) |
| safe_harbor_end | string | yes | description=14-day safe harbor ratification deadline |
| status | string | yes | description=Provisioning status (provisioned | existing_vault_active) |
| vault_id | string | yes | description=Allocated 1M Epistemic Vault ID |
| verified_email | string | yes | description=Human principal email |
No examples provided.
dispatch_actuation Dispatch External Actuation ~119
Vaulted, policy-gated actuation into external tools (GitHub, GitLab, Slack, Jira, Linear, Postgres) with child-node crystallization in e.mem.
| Name | Type | Req | Description |
|---|---|---|---|
| action | string | yes | Operation (e.g. 'post_message', 'create_issue', 'update_ticket'). |
| payload | object | yes | JSON action payload with surface parameters. |
| surface | string | yes | Target tool: 'github', 'gitlab', 'slack', 'jira', 'linear', 'notion', 'postgres', 'icx_memory'. |
No output schema declared.
No examples provided.
icx_exec Execute Programmatic CodeAct Script ~228
Executes programmatic Python code inside a sandboxed execution runtime with direct sub-5ms native access to persistent Volumetric Lattice Network memory via the global 'icx' object (icx.search, icx.recall, icx.quote, icx.remember, icx.stats, icx.contradictions). Use this tool for complex multi-hop aggregations, mathematical calculations, contract/financial analytics, and large dataset filtering off-context without bloating the LLM prompt window. Only printed output (print()) crosses into the conversation context. Mutating/read operation. Requires X-License-Key authentication.
| Name | Type | Req | Description |
|---|---|---|---|
| code | string | yes | The Python script to execute. Standard libraries and the pre-injected 'icx' client are available. Use print() to emit the final bounded result. |
| space_id | string | – | Optional memory space partition to execute within (e.g. 'default', 'sec_filings_2026'). Defaults to 'default'. |
| timeout_ms | number | – | Optional execution timeout in milliseconds (default: 3000ms, max: 5000ms). |
| Name | Type | Req | Description |
|---|---|---|---|
| error | string | – | description=Error message if execution failed |
| execution_time_ms | number | yes | description=Wall-clock execution time in milliseconds |
| grounded_fact_count | integer | yes | description=Count of grounded memory facts accessed |
| memory_ops_count | integer | yes | description=Count of memory queries or mutations performed |
| status | string | yes | description=Execution status (success | error | timeout) |
| stderr | string | – | description=Captured stderr or error trace |
| stdout | string | yes | description=Captured stdout from print() statements |
No examples provided.
icx_get_connector_document Get Connected Document Content ~166
Retrieves the full on-demand text, markdown, or code content of a connected document, file, page, or issue from external services (Google Drive doc, Notion page, GitHub file, GitLab file, Linear ticket). Read-only operation. Requires X-License-Key authentication.
| Name | Type | Req | Description |
|---|---|---|---|
| connector_id | string | – | Optional specific connector ID. If omitted, the first active matching connector will be used. |
| resource_id | string | yes | The file path (GitHub/GitLab), page UUID (Notion), issue key/ID (Linear), or file ID (Google Drive). |
| type | string | – | Optional connector source type: 'gdrive', 'notion', 'github', 'gitlab', or 'linear' (used when connector_id is omitted). |
| Name | Type | Req | Description |
|---|---|---|---|
| connector_id | string | yes | description=Resolved connector ID |
| connector_type | string | yes | description=Resolved connector type |
| content | string | yes | description=Verbatim markdown or code document content |
| length | integer | yes | description=Character length of content |
| resource_id | string | yes | description=Resource or file identifier |
| status | string | yes | description=Fetch status (VERIFIED_FETCHED | error) |
No examples provided.
icx_inspect_connector_facts Inspect Connector Grounded Facts ~88
Inspects the active grounded facts and simplicial statements currently tracked in Volumetric Memory for a specific connector or data source. Read-only operation. Requires X-License-Key authentication.
| Name | Type | Req | Description |
|---|---|---|---|
| connector_id | string | yes | The connector ID or source ID to inspect. |
| limit | number | – | Optional maximum number of facts to return (default: 50, max: 200). |
| Name | Type | Req | Description |
|---|---|---|---|
| connector_id | string | yes | description=Connector identifier |
| connector_name | string | yes | description=Connector display name |
| connector_type | string | yes | description=Connector source type |
| facts | null|array | yes | description=List of grounded facts currently in memory lattice |
| status | string | yes | description=Inspection status (VERIFIED_FACTS_INSPECTED) |
| total_facts | integer | yes | description=Total facts tracked for this connector |
No examples provided.
icx_inspect_space Inspect Memory Space Telemetry ~127
Audits and returns real-time diagnostic telemetry for a partitioned memory space, including active node counts, total synapses, grounded facts, memory state, and contradiction alarms. Use this tool to monitor memory partition health, verify document ingestion, check storage capacity, or detect contradiction alarms in a space. Do NOT use for querying memory content (use icx_recall_scoped or icx_quote_slot). Read-only operation with zero side effects. Requires X-License-Key authentication.
| Name | Type | Req | Description |
|---|---|---|---|
| space_id | string | – | Optional memory space partition to inspect. Defaults to caller default space ('default'). |
| Name | Type | Req | Description |
|---|---|---|---|
| active_nodes | integer | yes | description=Active topological simplicial nodes |
| contradictions_detected | integer | yes | description=Contradiction alarms in space |
| grounded_facts_count | integer | yes | description=Total decoded grounded facts |
| space_id | string | yes | description=Target memory space partition |
| state | string | yes | description=Memory space state (active | idle) |
| status | string | yes | description=Space inspection status |
| total_synapses | integer | yes | description=Total learned neural synapses |
No examples provided.
icx_list_connectors List Auto-Sync Connectors ~53
Lists all active cloud changefeed connectors (GitHub, GitLab, Notion, Google Drive, Linear, Slack, PostgreSQL) registered for the tenant. Read-only operation. Requires X-License-Key authentication.
Input schema present but exposes no named parameters.
| Name | Type | Req | Description |
|---|---|---|---|
| connectors | null|array | yes | description=Active data source connectors |
| status | string | yes | description=Listing status |
| total | integer | yes | description=Count of registered connectors |
No examples provided.
icx_multihop_walk Multi-Hop Transitive Causal Walk ~208
Executes a single-pass sub-5ms multi-hop simplicial causal walk across the Volumetric Lattice Network and Ontology relations. Traces transitive dependency chains (e.g. A -> B -> C -> D -> Leaf) and resolves temporal state overrides (retaining dynamic multi-policy mutations). Read-only operation. Requires X-License-Key authentication.
| Name | Type | Req | Description |
|---|---|---|---|
| max_hops | number | – | Maximum traversal depth (default: 5 hops, max: 20). |
| root_entity | string | – | Alias for start_entity. |
| space_id | string | – | Optional memory space partition to walk within (default: 'default'). |
| start_entity | string | – | The root or starting entity identifier (e.g. 'Project Aurora', 'Contract_Jan10'). Alias: root_entity. |
| target_entity | string | – | Optional terminal target entity identifier or relation to reach. If omitted, traverses to the leaf fact. |
| target_relation | string | – | Alias for target_entity. |
| Name | Type | Req | Description |
|---|---|---|---|
| cumulative_energy | number | yes | description=Hopfield composite energy metric |
| duration_ms | number | yes | description=Sub-5ms execution time |
| hops | null|array | yes | description=Individual verified associative relation hops |
| path | null|array | yes | description=Sequence of entities traversed along simplicial path |
| resolved | boolean | yes | description=True if target entity or complete chain was resolved |
| status | string | yes | description=Walk status (success | error) |
| summary | string | yes | description=Human-readable causal traversal path summary |
| terminal_entity | string | – | description=Terminal leaf entity identifier |
| terminal_fact | string | – | description=Grounded leaf fact at chain termination |
No examples provided.
icx_purge_source O(1) Instant Source Memory Purge ~98
Executes O(1) instant memory unlinking and revocation of all facts, simplices, and document associations learned from a specific data source or connector without requiring model retraining. Mutating operation. Requires X-License-Key authentication.
| Name | Type | Req | Description |
|---|---|---|---|
| source_id | string | yes | The source_id or connector_id whose facts should be instantly purged from tenant memory. |
| space_id | string | – | Optional memory space partition. Defaults to 'default'. |
| Name | Type | Req | Description |
|---|---|---|---|
| message | string | yes | description=Operational confirmation summary |
| source_id | string | yes | description=Target source/connector identifier |
| status | string | yes | description=Purge status (VERIFIED_PURGED) |
| unlinked_facts | integer | yes | description=Total simplices unlinked in O(1) |
No examples provided.
icx_quote_slot Verbatim Register Quoting ~405
Retrieves exact character-for-character verbatim text and cryptographic SHA-256 hashes from document registers by document family and 1-based slot index without AI paraphrasing. Optional start (0-based character offset) and length (character count) return a verbatim slice of the stored slot text. The slice is the exact stored characters, not a summary. Omit both start and length to return the whole slot. If start or length is out of range, the call errors and does not clamp. sha256 and parent_sha256 are the SHA-256 of the entire stored slot. slice_sha256 is the SHA-256 of the characters returned in exact_quote. Use this tool when exact contractual wording, statutory clauses, license keys, or immutable code revisions must be quoted verbatim without AI modification. Do NOT use for semantic question answering (use icx_recall_scoped), and do NOT use for keyword exploration (use icx_search_facts). Read-only operation with zero side effects. Requires X-License-Key authentication.
| Name | Type | Req | Description |
|---|---|---|---|
| family | string | yes | Document family identifier specified during ingestion (e.g. 'contract.indemnity', 'msa.pricing', 'auth.tokens'). |
| index | number | yes | 1-based ordinal member index (e.g. 1 for first revision, 2 for second revision). Minimum: 1. |
| length | number | – | Optional character count beginning at start. Omit together with start to return the whole slot. A length that runs past the end of the stored text is an error. The returned text is a verbatim slice,… |
| space_id | string | – | Optional memory space partition where the family was stored. Defaults to caller default space. |
| start | number | – | Optional 0-based character offset into the stored slot. Omit together with length to return the whole slot. Out of range is an error. The returned text is a verbatim slice of the stored characters, n… |
| Name | Type | Req | Description |
|---|---|---|---|
| exact_quote | string | yes | description=Verbatim stored characters returned. The whole slot, or the requested start/length slice. Not a summary. |
| family | string | yes | description=Document family category |
| index | integer | yes | description=Ordinal slot index (1-based) |
| parent_sha256 | string | yes | description=SHA-256 of the entire stored slot. Same value as sha256. This is the document seal. |
| sha256 | string | yes | description=SHA-256 of the entire stored slot. Document seal. Not the slice hash. |
| slice_length | integer | yes | description=Character count of exact_quote. Equals the stored slot length when start and length are omitted. |
| slice_sha256 | string | yes | description=SHA-256 of the verbatim characters returned in exact_quote. |
| slice_start | integer | yes | description=0-based character offset of exact_quote inside the stored slot. 0 when the whole slot is returned. |
| source_uri | string | yes | description=Original document source URI |
| space_id | string | yes | description=Target memory space partition |
| status | string | yes | description=Retrieval status (VERIFIED_VERBATIM_QUOTE | REGISTER_SLOT_EMPTY) |
No examples provided.
icx_recall_scoped Scoped Memory Recall ~205
Performs semantic search across persistent long-term memory to retrieve grounded facts, relevant citations, and source documents matching a natural language question. Use this tool when answering questions about previously saved project specifications, codebase decisions, user preferences, or documents. Do NOT use for saving new facts (use icx_remember), do NOT use for raw keyword lookup (use icx_search_facts), and do NOT use for exact character-for-character verbatim quotes (use icx_quote_slot). Read-only operation with zero side effects. Requires X-License-Key authentication.
| Name | Type | Req | Description |
|---|---|---|---|
| query | string | yes | Natural language question, concept, or search prompt to recall relevant facts for. |
| space_id | string | – | Optional memory space partition to restrict recall to (e.g. 'default', 'codebase_docs'). Defaults to caller default space. |
| top_k | number | – | Maximum number of grounded facts to retrieve (default: 10, min: 1, max: 50). |
| Name | Type | Req | Description |
|---|---|---|---|
| count | integer | yes | description=Number of grounded facts returned |
| facts | null|array | yes | description=List of recalled grounded facts and citations |
| query | string | yes | description=Natural language query submitted |
| space_id | string | yes | description=Target memory space partition |
| status | string | yes | description=Recall status (VERIFIED_RECALL | NO_GROUNDED_FACTS_FOUND) |
| total_in_space | integer | yes | description=Total nodes in active memory space |
No examples provided.
icx_register_connector Register Auto-Sync Connector ~293
Registers a new cloud webhook changefeed connector or remote MCP server for continuous epistemic auto-sync with AES-256-GCM secret vaulting and HMAC signature verification. Mutating operation. Requires X-License-Key authentication.
| Name | Type | Req | Description |
|---|---|---|---|
| api_key | string | – | Optional API key header for remote MCP server (sent via X-API-Key header). |
| auth_token | string | – | Optional Bearer token or authorization credential for remote MCP server or API. |
| default_risk | string | – | Optional default risk classification for ingested tools ('read', 'write', 'money', 'irreversible'). Defaults to 'write'. |
| name | string | yes | Human-readable name for the connector (e.g. 'Acme Backend Main Repo', 'Stripe MCP Tools'). |
| target_uri | string | yes | Target repository URL, Notion workspace URL, or remote MCP server HTTP endpoint (e.g. 'https://api.stripe.com/mcp'). |
| tools | string | – | Optional raw JSON-RPC tools list manifest for offline or direct registration without remote HTTP fetch. |
| type | string | yes | Connector source type: 'github', 'gitlab', 'notion', 'gdrive', 'linear', 'slack', 'postgres', 'mcp', or 'generic'. |
| webhook_secret | string | – | Optional custom webhook secret or HMAC key. If omitted, a secure 256-bit key will be auto-generated. |
| Name | Type | Req | Description |
|---|---|---|---|
| cards_created | integer | – | description=Lightweight Tool Cards bonded into e.mem |
| connector_id | string | yes | description=Assigned unique connector identifier |
| crates_stored | integer | – | description=Full JSONSchema Crates stored in QuoteRegister |
| name | string | yes | description=Connector display name |
| status | string | yes | description=Registration status (VERIFIED_REGISTERED) |
| target_uri | string | yes | description=Target resource URI |
| tools_ingested | integer | – | description=Count of MCP tools ingested into warehouse |
| type | string | yes | description=Connector source type |
| webhook_secret | string | yes | description=Generated or provided HMAC secret |
| webhook_url | string | yes | description=Cloud webhook ingest URL |
No examples provided.
icx_remember Memorize Document or Fact ~264
Stores text documents, code snippets, architectural decisions, and factual knowledge into persistent long-term memory partitioned by space_id. Use this tool when saving important facts, project conventions, API keys, user preferences, or documentation for future sessions. Do NOT use for retrieving stored memory (use icx_recall_scoped for semantic QA, icx_search_facts for keyword lookup, or icx_quote_slot for verbatim quotes). Ingestion is additive and non-destructive: creates new memory nodes without overwriting or mutating existing records. Requires X-License-Key authentication.
| Name | Type | Req | Description |
|---|---|---|---|
| family | string | – | Optional document family grouping for deterministic verbatim register quoting (e.g. 'contract.indemnity', 'auth.tokens'). When set, allows verbatim retrieval via icx_quote_slot. |
| filename | string | – | Optional filename or document title provenance tag (e.g. 'architecture.md', 'master_agreement.pdf') to track document origin. |
| space_id | string | – | Optional memory space partition (e.g. 'default', 'codebase_docs', 'contracts_v2', 'user_preferences'). Defaults to 'default'. |
| text | string | yes | The raw text, markdown document, code file, or factual statement to memorize (max ~500KB per call). |
| Name | Type | Req | Description |
|---|---|---|---|
| active_nodes | integer | yes | description=Total active nodes in memory space |
| bytes_ingested | integer | yes | description=Raw bytes stored in verbatim register |
| family | string | – | description=Document semantic family |
| filename | string | yes | description=Stored document identifier |
| learned_facts | integer | yes | description=Count of new simplicial facts learned |
| onboarding_invitation | string | – | description=Instructions to claim permanent 1M vault if in ephemeral mode |
| persisted_state | string | yes | description=Storage layer provenance |
| space_id | string | yes | description=Target memory space partition |
| status | string | yes | description=Crystallization status (VERIFIED_STORED | error) |
No examples provided.
icx_reset_session Reset Conversation History ~115
Clears conversational dialogue turn history for a session while strictly preserving all underlying persistent memory, learned facts, and document registers in the memory space. Use this tool when switching conversation topics or clearing dialogue context between independent tasks while retaining stored knowledge. Do NOT use for wiping persistent memory (persistent memory is preserved by design). Mutates session turn state but leaves long-term memory intact. Requires X-License-Key authentication.
| Name | Type | Req | Description |
|---|---|---|---|
| space_id | string | – | Optional memory space partition whose ephemeral session dialogue history should be reset. Defaults to caller default space. |
| Name | Type | Req | Description |
|---|---|---|---|
| memory_crystallized_preserved | boolean | yes | description=Strictly true - underlying lattice memory is preserved |
| session_cleared | boolean | yes | description=Whether dialogue turns were cleared |
| space_id | string | yes | description=Target memory space partition |
| status | string | yes | description=Reset status (SESSION_RESET_SUCCESS) |
No examples provided.
icx_search_facts Search Simplicial Lattice Facts ~170
Performs keyword and token search across persistent memory to discover entities, names, and matching terms within a memory space. Use this tool for entity exploration, keyword discovery, and locating specific identifiers or variables in memory. Do NOT use for answering natural language questions (use icx_recall_scoped), and do NOT use for writing data (use icx_remember). Read-only operation with zero side effects. Requires X-License-Key authentication.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | number | – | Maximum number of node matches to return (default: 20, min: 1, max: 100). |
| query | string | yes | Search keywords, entity names, or token substrings to look up across memory nodes. |
| space_id | string | – | Optional memory space partition to search within. Defaults to caller default space. |
| Name | Type | Req | Description |
|---|---|---|---|
| count | integer | yes | description=Number of matching nodes found |
| matches | null|array | yes | description=Simplicial complex nodes matching search query |
| query | string | yes | description=Search keyword query |
| space_id | string | yes | description=Target memory space partition |
| status | string | yes | description=Search status |
| total_in_space | integer | yes | description=Total nodes in active memory space |
No examples provided.
icx_swarm_state Multi-Agent Swarm Shared State ~229
Manages the persistent shared variable namespace (V_t) and mutex leases for collaborative swarms of autonomous agents (Cursor, Claude, Cline, OpenDevin). Reads, writes, or atomic CAS-swaps typed state objects (AST graphs, data tables, audit flags) without prompt re-serialization. Mutating/read operation. Requires X-License-Key authentication.
| Name | Type | Req | Description |
|---|---|---|---|
| agent_id | string | – | Agent identifier for provenance tracking and lease ownership (e.g. 'agent_architect'). |
| expected_version | number | – | Expected version integer for atomic Compare-And-Swap ('swap' operation). |
| key | string | – | Variable or lock resource key (required for get, set, swap, delete, lock operations). |
| operation | string | yes | The operation to perform: 'get', 'set', 'swap', 'list', 'delete', 'acquire_lock', 'release_lock'. |
| space_id | string | – | Optional memory space partition (default: 'default'). |
| value | string | – | Value payload to store (for set or swap operations; can be JSON string or text). |
| Name | Type | Req | Description |
|---|---|---|---|
| error | string | – | description=Error details if operation failed |
| operation | string | yes | description=Action performed (get | set | swap | list | lock) |
| status | string | yes | description=Operation status (ok | error) |
| swapped | boolean | – | description=True if atomic CAS succeeded |
| variable | null|object | – | description=Target variable details |
| variables | null|array | – | description=List of variables in space for list operation |
No examples provided.
icx_sync_audit Auto-Sync Audit Logs ~46
Retrieves historical synchronization events, deltas processed, facts learned, and sub-2ms latency telemetry for compliance and audit auditing. Read-only operation. Requires X-License-Key authentication.
Input schema present but exposes no named parameters.
| Name | Type | Req | Description |
|---|---|---|---|
| audit_logs | null|array | yes | description=Historical synchronization events |
| status | string | yes | description=Audit status |
| total | integer | yes | description=Count of audit entries |
No examples provided.
icx_sync_delta Crystallize Incremental Delta ~215
Extracts fine-grained deltas between previous text/document state and updated state, and crystallizes them into the Volumetric Memory lattice in sub-2ms on CPU with automatic secret scrubbing and SHA-256 deduplication. Use this tool for continuous incremental sync of code files, documentation, PRDs, and database schemas. Mutating operation. Requires X-License-Key authentication.
| Name | Type | Req | Description |
|---|---|---|---|
| new_text | string | yes | New updated text/code/document state after modifications. Leave empty for document deletions. |
| old_text | string | – | Previous text/code/document state before modifications. Leave empty for new document additions. |
| source_id | string | – | Optional connector or source identifier tracking provenance for instant purge (e.g. 'github_core', 'cli_watch'). Defaults to 'mcp_sync'. |
| space_id | string | – | Optional memory space partition. Defaults to 'default'. |
| uri | string | – | Document or file URI identifier (e.g. 'src/backend/engine.go', 'docs/rfc_42.md'). |
| Name | Type | Req | Description |
|---|---|---|---|
| deltas_processed | integer | yes | description=Count of fine-grained deltas extracted |
| duration_ms | number | yes | description=Sub-millisecond crystallization execution latency |
| facts_invalidated | integer | yes | description=Obsolete facts unlinked from lattice |
| facts_learned | integer | yes | description=New simplicial facts added to lattice |
| space_id | string | yes | description=Target memory space partition |
| status | string | yes | description=Crystallization status (VERIFIED_CRYSTALLIZED | error) |
| uri | string | yes | description=File or document URI |
No examples provided.
icx_trigger_sync Trigger Connector Sync ~101
Triggers an on-demand active pull and delta synchronization for a registered connector (GitHub, GitLab, Notion, Google Drive, Linear, Slack, PostgreSQL). Fetches live commits, issues, PRDs, or DDL schemas and crystallizes deltas into persistent Volumetric Memory in sub-2ms. Mutating operation. Requires X-License-Key authentication.
| Name | Type | Req | Description |
|---|---|---|---|
| connector_id | string | yes | The unique identifier of the connector to synchronize. |
| Name | Type | Req | Description |
|---|---|---|---|
| connector_id | string | yes | description=Connector identifier |
| connector_name | string | yes | description=Connector display name |
| connector_type | string | yes | description=Connector source type |
| deltas_processed | integer | yes | description=Count of fine-grained deltas extracted |
| duration_ms | number | yes | description=Crystallization duration in milliseconds |
| facts_invalidated | integer | yes | description=Obsolete facts unlinked |
| facts_learned | integer | yes | description=New simplicial facts learned into lattice |
| message | string | yes | description=Operational summary message |
| status | string | yes | description=Sync status (VERIFIED_CRYSTALLIZED | error) |
| timestamp | string | yes | description=UTC timestamp of synchronization |
No examples provided.
icx_var_get Get Swarm Variable ~70
Retrieves a named typed variable, AST, symbol table, or state object from the persistent V_t swarm namespace. Read-only. Requires X-License-Key authentication.
| Name | Type | Req | Description |
|---|---|---|---|
| key | string | yes | The variable key to retrieve. |
| space_id | string | – | Optional memory space partition (default: 'default'). |
| Name | Type | Req | Description |
|---|---|---|---|
| error | string | – | description=Error details if operation failed |
| operation | string | yes | description=Action performed (get | set | swap | list | lock) |
| status | string | yes | description=Operation status (ok | error) |
| swapped | boolean | – | description=True if atomic CAS succeeded |
| variable | null|object | – | description=Target variable details |
| variables | null|array | – | description=List of variables in space for list operation |
No examples provided.
icx_var_list List Swarm Variables ~80
Lists all active variables and types stored in the persistent V_t swarm namespace, with optional prefix matching. Read-only. Requires X-License-Key authentication.
| Name | Type | Req | Description |
|---|---|---|---|
| prefix | string | – | Optional prefix to filter variable keys by (e.g. 'ast_', 'report_'). |
| space_id | string | – | Optional memory space partition (default: 'default'). |
| Name | Type | Req | Description |
|---|---|---|---|
| error | string | – | description=Error details if operation failed |
| operation | string | yes | description=Action performed (get | set | swap | list | lock) |
| status | string | yes | description=Operation status (ok | error) |
| swapped | boolean | – | description=True if atomic CAS succeeded |
| variable | null|object | – | description=Target variable details |
| variables | null|array | – | description=List of variables in space for list operation |
No examples provided.
icx_var_set Set Swarm Variable ~186
Stores a named typed variable, AST, symbol table, or state object into the persistent V_t swarm namespace with optional TTL. Accessible to all collaborative agents. Requires X-License-Key authentication.
| Name | Type | Req | Description |
|---|---|---|---|
| agent_id | string | – | Optional agent identifier (e.g. 'cursor', 'claude_desktop'). |
| key | string | yes | The unique variable identifier in the swarm space. |
| space_id | string | – | Optional memory space partition (default: 'default'). |
| ttl_seconds | number | – | Optional Time-To-Live in seconds (default: 86400 = 24h, 0 = permanent). |
| type | string | – | Optional variable type: 'string', 'json', 'ast', 'diff', 'report', 'binary' (default: 'json'). |
| value | string | yes | The value payload to store (string, JSON, or code snippet). |
| Name | Type | Req | Description |
|---|---|---|---|
| error | string | – | description=Error details if operation failed |
| operation | string | yes | description=Action performed (get | set | swap | list | lock) |
| status | string | yes | description=Operation status (ok | error) |
| swapped | boolean | – | description=True if atomic CAS succeeded |
| variable | null|object | – | description=Target variable details |
| variables | null|array | – | description=List of variables in space for list operation |
No examples provided.
icx_wasm_exec Execute In-Process WebAssembly Script ~181
Executes compiled WebAssembly (WASM) bytecode or WAT text in-process with direct sub-100 microsecond Go host function memory bindings (icx_search, icx_recall, icx_quote, icx_remember, icx_walk, icx_get_var, icx_set_var, icx_stats). Eliminates subprocess spawning and socket IPC for high-frequency trading and low-latency robotics. Mutating/read operation. Requires X-License-Key authentication.
| Name | Type | Req | Description |
|---|---|---|---|
| code | string | yes | The WASM bytecode (base64 or binary string), WAT text, or in-process ICX script to execute. |
| space_id | string | – | Optional memory space partition to execute within (default: 'default'). |
| timeout_ms | number | – | Optional execution timeout in milliseconds (default: 50ms, max: 500ms). |
| Name | Type | Req | Description |
|---|---|---|---|
| error | string | – | description=Error message if execution failed |
| execution_time_ms | number | yes | description=Wall-clock execution time in milliseconds |
| grounded_fact_count | integer | yes | description=Count of grounded memory facts accessed |
| memory_ops_count | integer | yes | description=Count of memory queries or mutations performed |
| status | string | yes | description=Execution status (success | error | timeout) |
| stderr | string | – | description=Captured stderr or error trace |
| stdout | string | yes | description=Captured stdout from print() statements |
No examples provided.
recall_epistemic_context Recall Epistemic Context ~117
Sub-5ms Voronoi topological walk and semantic recall across connected tools, repos, issues, and memory. Replaces external read tools.
| Name | Type | Req | Description |
|---|---|---|---|
| depth | number | – | Optional Voronoi hop depth (1-5, default: 2). |
| format | string | – | Optional output format: 'standard' (default) or 'ribbon' (1D Geodesic Ribbon). |
| query | string | yes | Query across connected tools and memory. |
| space_id | string | – | Optional memory space partition. |
No output schema declared.
No examples provided.
solve_hermeneutics Hermeneutics & CPA Deterministic Solver ~186
Public Deterministic Solver for Comparative Paradigmatic Analysis (CPA), 1st-Century Jewish Hermeneutics (Middot), and Concentric Chiastic Folding for Tov Rose and Dr. Pitcher research. Zero hallucination guarantee (boundary operator d^2 = 0).
| Name | Type | Req | Description |
|---|---|---|---|
| action | string | – | Optional action: 'cpa', 'middot', 'fold', 'witness', 'firewall', 'ask'. |
| pair | string | – | Optional CPA pair: '2tim_numbers', 'gal_exodus', 'rom_leviticus', '1pet_1enoch'. |
| query | string | yes | Natural language research question or alignment query (e.g. 'Run CPA between Numbers and 2 Timothy', 'Explain Binyan Av in Matthew 2:23', 'Fold Psalm 23'). |
No output schema declared.
No examples provided.
How do I install the Calera FINSEC — Certified SEC Memory MCP server?
Calera FINSEC — Certified SEC Memory is a hosted endpoint at https://finsec.caleralabs.com/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · finsec.caleralabs.com
claude mcp add --transport http calera-labs-finsec-mcp 'https://finsec.caleralabs.com/mcp'
What is the Calera FINSEC — Certified SEC Memory MCP server?
Calera FINSEC — Certified SEC Memory is an MCP server listed in the public MCP registry as io.github.Calera-Labs/finsec-mcp. Certified SEC EDGAR fact memory for AI agents with zero hallucination and filing provenance. This page covers its hosted endpoint (https://finsec.caleralabs.com/mcp).
Is the Calera FINSEC — Certified SEC Memory MCP server safe to use?
Calera FINSEC — Certified SEC Memory scores 25 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the Calera FINSEC — Certified SEC Memory MCP server expose?
Calera FINSEC — Certified SEC Memory exposes 25 tools: claim_1m_nodes, dispatch_actuation, icx_exec, icx_get_connector_document, icx_inspect_connector_facts, and 20 more. Their descriptions and schemas cost roughly 4,113 tokens of context every time the server is loaded.
Does the Calera FINSEC — Certified SEC Memory MCP server require authentication?
Its publisher declares that Calera FINSEC — Certified SEC Memory requires credentials, so you will need to authorise it in your MCP client. We have not been able to confirm that against the live endpoint.
Is the Calera FINSEC — Certified SEC Memory MCP server still maintained?
Calera FINSEC — Certified SEC Memory is still listed as active in the MCP registry. We last reached this channel on 4 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.