# Calera FINSEC — Certified SEC Memory (remote · finsec.caleralabs.com)

Certified SEC EDGAR fact memory for AI agents with zero hallucination and filing provenance.

- Trust score: 25/100 (low)
- Change this week: −56
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-11-05

## Components

- remote · `finsec.caleralabs.com`: 25/100 (this document), [markdown](https://verifymcp.io/servers/calera-labs-finsec-mcp/finsec.md), [page](https://verifymcp.io/servers/calera-labs-finsec-mcp/finsec)

## Channel facts

- Endpoint: `https://finsec.caleralabs.com/mcp`
- Transports: `streamable-http`
- Auth: `required`
- Version: `1.2.2`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-11-05.

- **Endpoint Security**: 63/100
  - The endpoint's TLS certificate is valid, in date, and uses a strong key.
  - Authorisation not yet verified: we couldn't confirm whether this endpoint requires it.
  - HTTPS is enforced; there's no plaintext access path.
  - The HSTS (Strict-Transport-Security) header is present.
  - DNSSEC check failed: this domain isn't protected by DNSSEC.
- **Transport & Reachability**: 0/100
  - Transport check failed: declared streamable-http, but the endpoint returned HTTP 404.
- **Schema Quality & AI Usability**: 0/100
  - Schema not yet verified: we couldn't read the endpoint's schema, or could read only part of its tool list.
- **Stability & Change Management**: 0/100
  - Stability not yet verified: not enough scan history yet (needs a 30-day window).
- **Tool Coverage**: 0/100
  - Tool coverage not yet verified: we couldn't read the endpoint's tools, or could read only part of the list.
- **Tool Safety**: 0/100
  - Tool safety not yet verified: we couldn't read the endpoint's tools, or could read only part of the list.
- **Capabilities**: 0/100
  - Capabilities not yet verified: we couldn't read the endpoint's capabilities.

**Unverified: 5 categories.** Categories scored 0 because we could not verify them: authentication we do not have, an unreachable endpoint, or not enough scan history. We only credit what we can confirm.

## Install

### How do I install the Calera FINSEC — Certified SEC Memory MCP server?

Calera FINSEC — Certified SEC Memory is a hosted endpoint at https://finsec.caleralabs.com/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

### Claude

```bash
claude mcp add --transport http calera-labs-finsec-mcp 'https://finsec.caleralabs.com/mcp'
```

### Cursor

```json
{
  "mcpServers": {
    "calera-labs-finsec-mcp": {
      "url": "https://finsec.caleralabs.com/mcp"
    }
  }
}
```

### VS Code

```json
{
  "servers": {
    "calera-labs-finsec-mcp": {
      "type": "http",
      "url": "https://finsec.caleralabs.com/mcp"
    }
  }
}
```

### Codex

```toml
[mcp_servers.calera-labs-finsec-mcp]
url = "https://finsec.caleralabs.com/mcp"
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "calera-labs-finsec-mcp": {
      "type": "remote",
      "url": "https://finsec.caleralabs.com/mcp",
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add calera-labs-finsec-mcp --url 'https://finsec.caleralabs.com/mcp' --transport streamable-http
```

### Hermes

```yaml
mcp_servers:
  calera-labs-finsec-mcp:
    url: "https://finsec.caleralabs.com/mcp"
```

### Netclaw

```json
{
  "McpServers": {
    "calera-labs-finsec-mcp": {
      "Transport": "http",
      "Url": "https://finsec.caleralabs.com/mcp"
    }
  }
}
```

### Vellum

```bash
assistant mcp add calera-labs-finsec-mcp -t streamable-http -u 'https://finsec.caleralabs.com/mcp'
```

### Other

```json
{
  "mcpServers": {
    "calera-labs-finsec-mcp": {
      "type": "http",
      "url": "https://finsec.caleralabs.com/mcp"
    }
  }
}
```

The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-11-02 (score 25, −51)

- [security regression] Endpoint reachability: reachable → not serving MCP
- [security regression] Stability: fail → unverified
- [security regression] Authorization: fail → unverified
- [security regression] Tool safety: pass → unverified
- [security regression] Transport: pass → fail
- [functional regression] Schema quality: 100 → unverified
- [functional regression] Capabilities: pass → unverified
- [functional regression] Tool coverage: 100 → unverified

### 2026-10-31 (score 76, −5)

- [security regression] Authorization: pass → fail
- [security regression] Stability: 0.13 → fail
- [security regression] Tool “compute_sec_cagr” was removed
- [security regression] Tool “lattice_arith_evaluate” was removed
- [security regression] Tool “query_financial_sec” was removed
- [security regression] Tool “query_sec_metric_exact” was removed
- [security regression] Tool “query_sec_sector_peers” was removed
- [security regression] Tool “valuation_inputs” was removed
- [security regression] Tool “vln_capabilities_overview” was removed
- [security] The server changed its declared name: financesec-mcp → infinite-context-mcp
- [functional regression] Schema quality: 1097 → 4213
- [functional regression] Tool coverage: 100% → 88%
- [functional] The server now declares the “resources” capability
- [functional] First check of Schema quality: 100
- [functional] Schema quality: excellent → good
- [functional] Destructive annotations: pass → 0
- [functional] New resource “Active Connectors”
- [functional] New resource “Connector Ingestion Statistics”
- [functional] New resource “Live Epistemic Delta Feed”
- [functional] Server version: 1.2.1 → 1.0.0
- [functional] New tool “claim_1m_nodes”
- [functional] New tool “dispatch_actuation”
- [functional] New tool “icx_exec”
- [functional] New tool “icx_get_connector_document”
- [functional] New tool “icx_inspect_connector_facts”
- [functional] New tool “icx_inspect_space”
- [functional] New tool “icx_list_connectors”
- [functional] New tool “icx_multihop_walk”
- [functional] New tool “icx_purge_source”
- [functional] New tool “icx_quote_slot”
- [functional] New tool “icx_recall_scoped”
- [functional] New tool “icx_register_connector”
- [functional] New tool “icx_remember”
- [functional] New tool “icx_reset_session”
- [functional] New tool “icx_search_facts”
- [functional] New tool “icx_swarm_state”
- [functional] New tool “icx_sync_audit”
- [functional] New tool “icx_sync_delta”
- [functional] New tool “icx_trigger_sync”
- [functional] New tool “icx_var_get”
- [functional] New tool “icx_var_list”
- [functional] New tool “icx_var_set”
- [functional] New tool “icx_wasm_exec”
- [functional] New tool “recall_epistemic_context”
- [functional] New tool “solve_hermeneutics”

### 2026-10-29 (score 81, +1)

No change was recorded against any check on this day. Stability & Change Management went from 7 to 10. That category is still filling its 30-day observation window: 2 days of observed history at the previous scan, 3 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-10-27 (score 80, +1)

- [functional improvement] Stability: unverified → 0.03

### 2026-10-26 (score 79)

First indexed and scored.

## MCP tools (25)

### `claim_1m_nodes` (~163 tokens)

Claim Free 1M Node Vault

The calling agent completes free signup itself. Claims a permanent 1,000,000-node Epistemic Memory Vault at $0. Pass principal_email and accept_a2b_terms=true. Email is enough. Google sign-in is not required.

Input parameters:

- `accept_a2b_terms` (boolean, required): Must be true to accept Calera A2B Free Developer Sub-License terms (https://icx.caleralabs.com/legal/a2b-tos.json).
- `agent_name` (string): Identifier for the calling agent (e.g. 'Claude-Code', 'Cursor-Worker', 'DeepResearch-Agent'). Defaults to 'Autonomous-Agent'.
- `principal_email` (string, required): Email address for the free account. The calling agent supplies an address it already has.

Output parameters:

- `api_key` (string): description=Primary ICX API Key (X-License-Key)
- `contract_proof` (string): description=Cryptographic SHA-256 A2B contract seal
- `firebase_uid` (string): description=Anchored Firebase Principal UID
- `human_safe_harbor_url` (string): description=1-click human dashboard claim link
- `license_key` (string): description=Platform OpCo Sub-License Key
- `mcp_endpoint` (string): description=Streamable HTTP MCP Endpoint
- `message` (string): description=Confirmation instructions
- `node_quota` (integer): description=Allocated node capacity (1, 000, 000)
- `safe_harbor_end` (string): description=14-day safe harbor ratification deadline
- `status` (string): description=Provisioning status (provisioned | existing_vault_active)
- `vault_id` (string): description=Allocated 1M Epistemic Vault ID
- `verified_email` (string): description=Human principal email

### `dispatch_actuation` (~119 tokens)

Dispatch External Actuation

Vaulted, policy-gated actuation into external tools (GitHub, GitLab, Slack, Jira, Linear, Postgres) with child-node crystallization in e.mem.

Input parameters:

- `action` (string, required): Operation (e.g. 'post_message', 'create_issue', 'update_ticket').
- `payload` (object, required): JSON action payload with surface parameters.
- `surface` (string, required): Target tool: 'github', 'gitlab', 'slack', 'jira', 'linear', 'notion', 'postgres', 'icx_memory'.

### `icx_exec` (~228 tokens)

Execute Programmatic CodeAct Script

Executes programmatic Python code inside a sandboxed execution runtime with direct sub-5ms native access to persistent Volumetric Lattice Network memory via the global 'icx' object (icx.search, icx.recall, icx.quote, icx.remember, icx.stats, icx.contradictions). Use this tool for complex multi-hop aggregations, mathematical calculations, contract/financial analytics, and large dataset filtering off-context without bloating the LLM prompt window. Only printed output (print()) crosses into the conversation context. Mutating/read operation. Requires X-License-Key authentication.

Input parameters:

- `code` (string, required): The Python script to execute. Standard libraries and the pre-injected 'icx' client are available. Use print() to emit the final bounded result.
- `space_id` (string): Optional memory space partition to execute within (e.g. 'default', 'sec_filings_2026'). Defaults to 'default'.
- `timeout_ms` (number): Optional execution timeout in milliseconds (default: 3000ms, max: 5000ms).

Output parameters:

- `error` (string): description=Error message if execution failed
- `execution_time_ms` (number): description=Wall-clock execution time in milliseconds
- `grounded_fact_count` (integer): description=Count of grounded memory facts accessed
- `memory_ops_count` (integer): description=Count of memory queries or mutations performed
- `status` (string): description=Execution status (success | error | timeout)
- `stderr` (string): description=Captured stderr or error trace
- `stdout` (string): description=Captured stdout from print() statements

### `icx_get_connector_document` (~166 tokens)

Get Connected Document Content

Retrieves the full on-demand text, markdown, or code content of a connected document, file, page, or issue from external services (Google Drive doc, Notion page, GitHub file, GitLab file, Linear ticket). Read-only operation. Requires X-License-Key authentication.

Input parameters:

- `connector_id` (string): Optional specific connector ID. If omitted, the first active matching connector will be used.
- `resource_id` (string, required): The file path (GitHub/GitLab), page UUID (Notion), issue key/ID (Linear), or file ID (Google Drive).
- `type` (string): Optional connector source type: 'gdrive', 'notion', 'github', 'gitlab', or 'linear' (used when connector_id is omitted).

Output parameters:

- `connector_id` (string): description=Resolved connector ID
- `connector_type` (string): description=Resolved connector type
- `content` (string): description=Verbatim markdown or code document content
- `length` (integer): description=Character length of content
- `resource_id` (string): description=Resource or file identifier
- `status` (string): description=Fetch status (VERIFIED_FETCHED | error)

### `icx_inspect_connector_facts` (~88 tokens)

Inspect Connector Grounded Facts

Inspects the active grounded facts and simplicial statements currently tracked in Volumetric Memory for a specific connector or data source. Read-only operation. Requires X-License-Key authentication.

Input parameters:

- `connector_id` (string, required): The connector ID or source ID to inspect.
- `limit` (number): Optional maximum number of facts to return (default: 50, max: 200).

Output parameters:

- `connector_id` (string): description=Connector identifier
- `connector_name` (string): description=Connector display name
- `connector_type` (string): description=Connector source type
- `facts` (null|array): description=List of grounded facts currently in memory lattice
- `status` (string): description=Inspection status (VERIFIED_FACTS_INSPECTED)
- `total_facts` (integer): description=Total facts tracked for this connector

### `icx_inspect_space` (~127 tokens)

Inspect Memory Space Telemetry

Audits and returns real-time diagnostic telemetry for a partitioned memory space, including active node counts, total synapses, grounded facts, memory state, and contradiction alarms. Use this tool to monitor memory partition health, verify document ingestion, check storage capacity, or detect contradiction alarms in a space. Do NOT use for querying memory content (use icx_recall_scoped or icx_quote_slot). Read-only operation with zero side effects. Requires X-License-Key authentication.

Input parameters:

- `space_id` (string): Optional memory space partition to inspect. Defaults to caller default space ('default').

Output parameters:

- `active_nodes` (integer): description=Active topological simplicial nodes
- `contradictions_detected` (integer): description=Contradiction alarms in space
- `grounded_facts_count` (integer): description=Total decoded grounded facts
- `space_id` (string): description=Target memory space partition
- `state` (string): description=Memory space state (active | idle)
- `status` (string): description=Space inspection status
- `total_synapses` (integer): description=Total learned neural synapses

### `icx_list_connectors` (~53 tokens)

List Auto-Sync Connectors

Lists all active cloud changefeed connectors (GitHub, GitLab, Notion, Google Drive, Linear, Slack, PostgreSQL) registered for the tenant. Read-only operation. Requires X-License-Key authentication.

Output parameters:

- `connectors` (null|array): description=Active data source connectors
- `status` (string): description=Listing status
- `total` (integer): description=Count of registered connectors

### `icx_multihop_walk` (~208 tokens)

Multi-Hop Transitive Causal Walk

Executes a single-pass sub-5ms multi-hop simplicial causal walk across the Volumetric Lattice Network and Ontology relations. Traces transitive dependency chains (e.g. A -> B -> C -> D -> Leaf) and resolves temporal state overrides (retaining dynamic multi-policy mutations). Read-only operation. Requires X-License-Key authentication.

Input parameters:

- `max_hops` (number): Maximum traversal depth (default: 5 hops, max: 20).
- `root_entity` (string): Alias for start_entity.
- `space_id` (string): Optional memory space partition to walk within (default: 'default').
- `start_entity` (string): The root or starting entity identifier (e.g. 'Project Aurora', 'Contract_Jan10'). Alias: root_entity.
- `target_entity` (string): Optional terminal target entity identifier or relation to reach. If omitted, traverses to the leaf fact.
- `target_relation` (string): Alias for target_entity.

Output parameters:

- `cumulative_energy` (number): description=Hopfield composite energy metric
- `duration_ms` (number): description=Sub-5ms execution time
- `hops` (null|array): description=Individual verified associative relation hops
- `path` (null|array): description=Sequence of entities traversed along simplicial path
- `resolved` (boolean): description=True if target entity or complete chain was resolved
- `status` (string): description=Walk status (success | error)
- `summary` (string): description=Human-readable causal traversal path summary
- `terminal_entity` (string): description=Terminal leaf entity identifier
- `terminal_fact` (string): description=Grounded leaf fact at chain termination

### `icx_purge_source` (~98 tokens)

O(1) Instant Source Memory Purge

Executes O(1) instant memory unlinking and revocation of all facts, simplices, and document associations learned from a specific data source or connector without requiring model retraining. Mutating operation. Requires X-License-Key authentication.

Input parameters:

- `source_id` (string, required): The source_id or connector_id whose facts should be instantly purged from tenant memory.
- `space_id` (string): Optional memory space partition. Defaults to 'default'.

Output parameters:

- `message` (string): description=Operational confirmation summary
- `source_id` (string): description=Target source/connector identifier
- `status` (string): description=Purge status (VERIFIED_PURGED)
- `unlinked_facts` (integer): description=Total simplices unlinked in O(1)

### `icx_quote_slot` (~405 tokens)

Verbatim Register Quoting

Retrieves exact character-for-character verbatim text and cryptographic SHA-256 hashes from document registers by document family and 1-based slot index without AI paraphrasing. Optional start (0-based character offset) and length (character count) return a verbatim slice of the stored slot text. The slice is the exact stored characters, not a summary. Omit both start and length to return the whole slot. If start or length is out of range, the call errors and does not clamp. sha256 and parent_sha256 are the SHA-256 of the entire stored slot. slice_sha256 is the SHA-256 of the characters returned in exact_quote. Use this tool when exact contractual wording, statutory clauses, license keys, or immutable code revisions must be quoted verbatim without AI modification. Do NOT use for semantic question answering (use icx_recall_scoped), and do NOT use for keyword exploration (use icx_search_facts). Read-only operation with zero side effects. Requires X-License-Key authentication.

Input parameters:

- `family` (string, required): Document family identifier specified during ingestion (e.g. 'contract.indemnity', 'msa.pricing', 'auth.tokens').
- `index` (number, required): 1-based ordinal member index (e.g. 1 for first revision, 2 for second revision). Minimum: 1.
- `length` (number): Optional character count beginning at start. Omit together with start to return the whole slot. A length that runs past the end of the stored text is an error. The returned text is a verbatim slice,…
- `space_id` (string): Optional memory space partition where the family was stored. Defaults to caller default space.
- `start` (number): Optional 0-based character offset into the stored slot. Omit together with length to return the whole slot. Out of range is an error. The returned text is a verbatim slice of the stored characters, n…

Output parameters:

- `exact_quote` (string): description=Verbatim stored characters returned. The whole slot, or the requested start/length slice. Not a summary.
- `family` (string): description=Document family category
- `index` (integer): description=Ordinal slot index (1-based)
- `parent_sha256` (string): description=SHA-256 of the entire stored slot. Same value as sha256. This is the document seal.
- `sha256` (string): description=SHA-256 of the entire stored slot. Document seal. Not the slice hash.
- `slice_length` (integer): description=Character count of exact_quote. Equals the stored slot length when start and length are omitted.
- `slice_sha256` (string): description=SHA-256 of the verbatim characters returned in exact_quote.
- `slice_start` (integer): description=0-based character offset of exact_quote inside the stored slot. 0 when the whole slot is returned.
- `source_uri` (string): description=Original document source URI
- `space_id` (string): description=Target memory space partition
- `status` (string): description=Retrieval status (VERIFIED_VERBATIM_QUOTE | REGISTER_SLOT_EMPTY)

### `icx_recall_scoped` (~205 tokens)

Scoped Memory Recall

Performs semantic search across persistent long-term memory to retrieve grounded facts, relevant citations, and source documents matching a natural language question. Use this tool when answering questions about previously saved project specifications, codebase decisions, user preferences, or documents. Do NOT use for saving new facts (use icx_remember), do NOT use for raw keyword lookup (use icx_search_facts), and do NOT use for exact character-for-character verbatim quotes (use icx_quote_slot). Read-only operation with zero side effects. Requires X-License-Key authentication.

Input parameters:

- `query` (string, required): Natural language question, concept, or search prompt to recall relevant facts for.
- `space_id` (string): Optional memory space partition to restrict recall to (e.g. 'default', 'codebase_docs'). Defaults to caller default space.
- `top_k` (number): Maximum number of grounded facts to retrieve (default: 10, min: 1, max: 50).

Output parameters:

- `count` (integer): description=Number of grounded facts returned
- `facts` (null|array): description=List of recalled grounded facts and citations
- `query` (string): description=Natural language query submitted
- `space_id` (string): description=Target memory space partition
- `status` (string): description=Recall status (VERIFIED_RECALL | NO_GROUNDED_FACTS_FOUND)
- `total_in_space` (integer): description=Total nodes in active memory space

### `icx_register_connector` (~293 tokens)

Register Auto-Sync Connector

Registers a new cloud webhook changefeed connector or remote MCP server for continuous epistemic auto-sync with AES-256-GCM secret vaulting and HMAC signature verification. Mutating operation. Requires X-License-Key authentication.

Input parameters:

- `api_key` (string): Optional API key header for remote MCP server (sent via X-API-Key header).
- `auth_token` (string): Optional Bearer token or authorization credential for remote MCP server or API.
- `default_risk` (string): Optional default risk classification for ingested tools ('read', 'write', 'money', 'irreversible'). Defaults to 'write'.
- `name` (string, required): Human-readable name for the connector (e.g. 'Acme Backend Main Repo', 'Stripe MCP Tools').
- `target_uri` (string, required): Target repository URL, Notion workspace URL, or remote MCP server HTTP endpoint (e.g. 'https://api.stripe.com/mcp').
- `tools` (string): Optional raw JSON-RPC tools list manifest for offline or direct registration without remote HTTP fetch.
- `type` (string, required): Connector source type: 'github', 'gitlab', 'notion', 'gdrive', 'linear', 'slack', 'postgres', 'mcp', or 'generic'.
- `webhook_secret` (string): Optional custom webhook secret or HMAC key. If omitted, a secure 256-bit key will be auto-generated.

Output parameters:

- `cards_created` (integer): description=Lightweight Tool Cards bonded into e.mem
- `connector_id` (string): description=Assigned unique connector identifier
- `crates_stored` (integer): description=Full JSONSchema Crates stored in QuoteRegister
- `name` (string): description=Connector display name
- `status` (string): description=Registration status (VERIFIED_REGISTERED)
- `target_uri` (string): description=Target resource URI
- `tools_ingested` (integer): description=Count of MCP tools ingested into warehouse
- `type` (string): description=Connector source type
- `webhook_secret` (string): description=Generated or provided HMAC secret
- `webhook_url` (string): description=Cloud webhook ingest URL

### `icx_remember` (~264 tokens)

Memorize Document or Fact

Stores text documents, code snippets, architectural decisions, and factual knowledge into persistent long-term memory partitioned by space_id. Use this tool when saving important facts, project conventions, API keys, user preferences, or documentation for future sessions. Do NOT use for retrieving stored memory (use icx_recall_scoped for semantic QA, icx_search_facts for keyword lookup, or icx_quote_slot for verbatim quotes). Ingestion is additive and non-destructive: creates new memory nodes without overwriting or mutating existing records. Requires X-License-Key authentication.

Input parameters:

- `family` (string): Optional document family grouping for deterministic verbatim register quoting (e.g. 'contract.indemnity', 'auth.tokens'). When set, allows verbatim retrieval via icx_quote_slot.
- `filename` (string): Optional filename or document title provenance tag (e.g. 'architecture.md', 'master_agreement.pdf') to track document origin.
- `space_id` (string): Optional memory space partition (e.g. 'default', 'codebase_docs', 'contracts_v2', 'user_preferences'). Defaults to 'default'.
- `text` (string, required): The raw text, markdown document, code file, or factual statement to memorize (max ~500KB per call).

Output parameters:

- `active_nodes` (integer): description=Total active nodes in memory space
- `bytes_ingested` (integer): description=Raw bytes stored in verbatim register
- `family` (string): description=Document semantic family
- `filename` (string): description=Stored document identifier
- `learned_facts` (integer): description=Count of new simplicial facts learned
- `onboarding_invitation` (string): description=Instructions to claim permanent 1M vault if in ephemeral mode
- `persisted_state` (string): description=Storage layer provenance
- `space_id` (string): description=Target memory space partition
- `status` (string): description=Crystallization status (VERIFIED_STORED | error)

### `icx_reset_session` (~115 tokens)

Reset Conversation History

Clears conversational dialogue turn history for a session while strictly preserving all underlying persistent memory, learned facts, and document registers in the memory space. Use this tool when switching conversation topics or clearing dialogue context between independent tasks while retaining stored knowledge. Do NOT use for wiping persistent memory (persistent memory is preserved by design). Mutates session turn state but leaves long-term memory intact. Requires X-License-Key authentication.

Input parameters:

- `space_id` (string): Optional memory space partition whose ephemeral session dialogue history should be reset. Defaults to caller default space.

Output parameters:

- `memory_crystallized_preserved` (boolean): description=Strictly true - underlying lattice memory is preserved
- `session_cleared` (boolean): description=Whether dialogue turns were cleared
- `space_id` (string): description=Target memory space partition
- `status` (string): description=Reset status (SESSION_RESET_SUCCESS)

### `icx_search_facts` (~170 tokens)

Search Simplicial Lattice Facts

Performs keyword and token search across persistent memory to discover entities, names, and matching terms within a memory space. Use this tool for entity exploration, keyword discovery, and locating specific identifiers or variables in memory. Do NOT use for answering natural language questions (use icx_recall_scoped), and do NOT use for writing data (use icx_remember). Read-only operation with zero side effects. Requires X-License-Key authentication.

Input parameters:

- `limit` (number): Maximum number of node matches to return (default: 20, min: 1, max: 100).
- `query` (string, required): Search keywords, entity names, or token substrings to look up across memory nodes.
- `space_id` (string): Optional memory space partition to search within. Defaults to caller default space.

Output parameters:

- `count` (integer): description=Number of matching nodes found
- `matches` (null|array): description=Simplicial complex nodes matching search query
- `query` (string): description=Search keyword query
- `space_id` (string): description=Target memory space partition
- `status` (string): description=Search status
- `total_in_space` (integer): description=Total nodes in active memory space

### `icx_swarm_state` (~229 tokens)

Multi-Agent Swarm Shared State

Manages the persistent shared variable namespace (V_t) and mutex leases for collaborative swarms of autonomous agents (Cursor, Claude, Cline, OpenDevin). Reads, writes, or atomic CAS-swaps typed state objects (AST graphs, data tables, audit flags) without prompt re-serialization. Mutating/read operation. Requires X-License-Key authentication.

Input parameters:

- `agent_id` (string): Agent identifier for provenance tracking and lease ownership (e.g. 'agent_architect').
- `expected_version` (number): Expected version integer for atomic Compare-And-Swap ('swap' operation).
- `key` (string): Variable or lock resource key (required for get, set, swap, delete, lock operations).
- `operation` (string, required): The operation to perform: 'get', 'set', 'swap', 'list', 'delete', 'acquire_lock', 'release_lock'.
- `space_id` (string): Optional memory space partition (default: 'default').
- `value` (string): Value payload to store (for set or swap operations; can be JSON string or text).

Output parameters:

- `error` (string): description=Error details if operation failed
- `operation` (string): description=Action performed (get | set | swap | list | lock)
- `status` (string): description=Operation status (ok | error)
- `swapped` (boolean): description=True if atomic CAS succeeded
- `variable` (null|object): description=Target variable details
- `variables` (null|array): description=List of variables in space for list operation

### `icx_sync_audit` (~46 tokens)

Auto-Sync Audit Logs

Retrieves historical synchronization events, deltas processed, facts learned, and sub-2ms latency telemetry for compliance and audit auditing. Read-only operation. Requires X-License-Key authentication.

Output parameters:

- `audit_logs` (null|array): description=Historical synchronization events
- `status` (string): description=Audit status
- `total` (integer): description=Count of audit entries

### `icx_sync_delta` (~215 tokens)

Crystallize Incremental Delta

Extracts fine-grained deltas between previous text/document state and updated state, and crystallizes them into the Volumetric Memory lattice in sub-2ms on CPU with automatic secret scrubbing and SHA-256 deduplication. Use this tool for continuous incremental sync of code files, documentation, PRDs, and database schemas. Mutating operation. Requires X-License-Key authentication.

Input parameters:

- `new_text` (string, required): New updated text/code/document state after modifications. Leave empty for document deletions.
- `old_text` (string): Previous text/code/document state before modifications. Leave empty for new document additions.
- `source_id` (string): Optional connector or source identifier tracking provenance for instant purge (e.g. 'github_core', 'cli_watch'). Defaults to 'mcp_sync'.
- `space_id` (string): Optional memory space partition. Defaults to 'default'.
- `uri` (string): Document or file URI identifier (e.g. 'src/backend/engine.go', 'docs/rfc_42.md').

Output parameters:

- `deltas_processed` (integer): description=Count of fine-grained deltas extracted
- `duration_ms` (number): description=Sub-millisecond crystallization execution latency
- `facts_invalidated` (integer): description=Obsolete facts unlinked from lattice
- `facts_learned` (integer): description=New simplicial facts added to lattice
- `space_id` (string): description=Target memory space partition
- `status` (string): description=Crystallization status (VERIFIED_CRYSTALLIZED | error)
- `uri` (string): description=File or document URI

### `icx_trigger_sync` (~101 tokens)

Trigger Connector Sync

Triggers an on-demand active pull and delta synchronization for a registered connector (GitHub, GitLab, Notion, Google Drive, Linear, Slack, PostgreSQL). Fetches live commits, issues, PRDs, or DDL schemas and crystallizes deltas into persistent Volumetric Memory in sub-2ms. Mutating operation. Requires X-License-Key authentication.

Input parameters:

- `connector_id` (string, required): The unique identifier of the connector to synchronize.

Output parameters:

- `connector_id` (string): description=Connector identifier
- `connector_name` (string): description=Connector display name
- `connector_type` (string): description=Connector source type
- `deltas_processed` (integer): description=Count of fine-grained deltas extracted
- `duration_ms` (number): description=Crystallization duration in milliseconds
- `facts_invalidated` (integer): description=Obsolete facts unlinked
- `facts_learned` (integer): description=New simplicial facts learned into lattice
- `message` (string): description=Operational summary message
- `status` (string): description=Sync status (VERIFIED_CRYSTALLIZED | error)
- `timestamp` (string): description=UTC timestamp of synchronization

### `icx_var_get` (~70 tokens)

Get Swarm Variable

Retrieves a named typed variable, AST, symbol table, or state object from the persistent V_t swarm namespace. Read-only. Requires X-License-Key authentication.

Input parameters:

- `key` (string, required): The variable key to retrieve.
- `space_id` (string): Optional memory space partition (default: 'default').

Output parameters:

- `error` (string): description=Error details if operation failed
- `operation` (string): description=Action performed (get | set | swap | list | lock)
- `status` (string): description=Operation status (ok | error)
- `swapped` (boolean): description=True if atomic CAS succeeded
- `variable` (null|object): description=Target variable details
- `variables` (null|array): description=List of variables in space for list operation

### `icx_var_list` (~80 tokens)

List Swarm Variables

Lists all active variables and types stored in the persistent V_t swarm namespace, with optional prefix matching. Read-only. Requires X-License-Key authentication.

Input parameters:

- `prefix` (string): Optional prefix to filter variable keys by (e.g. 'ast_', 'report_').
- `space_id` (string): Optional memory space partition (default: 'default').

Output parameters:

- `error` (string): description=Error details if operation failed
- `operation` (string): description=Action performed (get | set | swap | list | lock)
- `status` (string): description=Operation status (ok | error)
- `swapped` (boolean): description=True if atomic CAS succeeded
- `variable` (null|object): description=Target variable details
- `variables` (null|array): description=List of variables in space for list operation

### `icx_var_set` (~186 tokens)

Set Swarm Variable

Stores a named typed variable, AST, symbol table, or state object into the persistent V_t swarm namespace with optional TTL. Accessible to all collaborative agents. Requires X-License-Key authentication.

Input parameters:

- `agent_id` (string): Optional agent identifier (e.g. 'cursor', 'claude_desktop').
- `key` (string, required): The unique variable identifier in the swarm space.
- `space_id` (string): Optional memory space partition (default: 'default').
- `ttl_seconds` (number): Optional Time-To-Live in seconds (default: 86400 = 24h, 0 = permanent).
- `type` (string): Optional variable type: 'string', 'json', 'ast', 'diff', 'report', 'binary' (default: 'json').
- `value` (string, required): The value payload to store (string, JSON, or code snippet).

Output parameters:

- `error` (string): description=Error details if operation failed
- `operation` (string): description=Action performed (get | set | swap | list | lock)
- `status` (string): description=Operation status (ok | error)
- `swapped` (boolean): description=True if atomic CAS succeeded
- `variable` (null|object): description=Target variable details
- `variables` (null|array): description=List of variables in space for list operation

### `icx_wasm_exec` (~181 tokens)

Execute In-Process WebAssembly Script

Executes compiled WebAssembly (WASM) bytecode or WAT text in-process with direct sub-100 microsecond Go host function memory bindings (icx_search, icx_recall, icx_quote, icx_remember, icx_walk, icx_get_var, icx_set_var, icx_stats). Eliminates subprocess spawning and socket IPC for high-frequency trading and low-latency robotics. Mutating/read operation. Requires X-License-Key authentication.

Input parameters:

- `code` (string, required): The WASM bytecode (base64 or binary string), WAT text, or in-process ICX script to execute.
- `space_id` (string): Optional memory space partition to execute within (default: 'default').
- `timeout_ms` (number): Optional execution timeout in milliseconds (default: 50ms, max: 500ms).

Output parameters:

- `error` (string): description=Error message if execution failed
- `execution_time_ms` (number): description=Wall-clock execution time in milliseconds
- `grounded_fact_count` (integer): description=Count of grounded memory facts accessed
- `memory_ops_count` (integer): description=Count of memory queries or mutations performed
- `status` (string): description=Execution status (success | error | timeout)
- `stderr` (string): description=Captured stderr or error trace
- `stdout` (string): description=Captured stdout from print() statements

### `recall_epistemic_context` (~117 tokens)

Recall Epistemic Context

Sub-5ms Voronoi topological walk and semantic recall across connected tools, repos, issues, and memory. Replaces external read tools.

Input parameters:

- `depth` (number): Optional Voronoi hop depth (1-5, default: 2).
- `format` (string): Optional output format: 'standard' (default) or 'ribbon' (1D Geodesic Ribbon).
- `query` (string, required): Query across connected tools and memory.
- `space_id` (string): Optional memory space partition.

### `solve_hermeneutics` (~186 tokens)

Hermeneutics & CPA Deterministic Solver

Public Deterministic Solver for Comparative Paradigmatic Analysis (CPA), 1st-Century Jewish Hermeneutics (Middot), and Concentric Chiastic Folding for Tov Rose and Dr. Pitcher research. Zero hallucination guarantee (boundary operator d^2 = 0).

Input parameters:

- `action` (string): Optional action: 'cpa', 'middot', 'fold', 'witness', 'firewall', 'ask'.
- `pair` (string): Optional CPA pair: '2tim_numbers', 'gal_exodus', 'rom_leviticus', '1pet_1enoch'.
- `query` (string, required): Natural language research question or alignment query (e.g. 'Run CPA between Numbers and 2 Timothy', 'Explain Binyan Av in Matthew 2:23', 'Fold Psalm 23').

## Diagnostics

Captured diagnostic sections: TLS, DNSSEC, Authorisation, Transports. The full working is on the page: https://verifymcp.io/servers/calera-labs-finsec-mcp/finsec#diagnostics

## Score history

- 2026-11-05: 25
- 2026-11-04: 25
- 2026-11-03: 25
- 2026-11-02: 25
- 2026-11-01: 76
- 2026-10-31: 76
- 2026-10-30: 81
- 2026-10-29: 81
- 2026-10-28: 80
- 2026-10-27: 80
- 2026-10-26: 79

## Common questions

### What is the Calera FINSEC — Certified SEC Memory MCP server?

Calera FINSEC — Certified SEC Memory is an MCP server listed in the public MCP registry as io.github.Calera-Labs/finsec-mcp. Certified SEC EDGAR fact memory for AI agents with zero hallucination and filing provenance. This page covers its hosted endpoint (https://finsec.caleralabs.com/mcp).

### Is the Calera FINSEC — Certified SEC Memory MCP server safe to use?

Calera FINSEC — Certified SEC Memory scores 25 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

### What tools does the Calera FINSEC — Certified SEC Memory MCP server expose?

Calera FINSEC — Certified SEC Memory exposes 25 tools: claim_1m_nodes, dispatch_actuation, icx_exec, icx_get_connector_document, icx_inspect_connector_facts, and 20 more. Their descriptions and schemas cost roughly 4,113 tokens of context every time the server is loaded.

### Does the Calera FINSEC — Certified SEC Memory MCP server require authentication?

Its publisher declares that Calera FINSEC — Certified SEC Memory requires credentials, so you will need to authorise it in your MCP client. We have not been able to confirm that against the live endpoint.

### Is the Calera FINSEC — Certified SEC Memory MCP server still maintained?

Calera FINSEC — Certified SEC Memory is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

## Links

- Remote endpoint: https://finsec.caleralabs.com/mcp
- Authorisation metadata: https://finsec.caleralabs.com/.well-known/oauth-protected-resource/mcp
- Repository: https://github.com/Calera-Labs/finsec-mcp
- Changelog RSS feed: https://verifymcp.io/servers/calera-labs-finsec-mcp/finsec.xml
- Changelog JSON feed: https://verifymcp.io/servers/calera-labs-finsec-mcp/finsec.json
- HTML version of this page: https://verifymcp.io/servers/calera-labs-finsec-mcp/finsec