Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

AETRE & The Governed Agent

OCI · GHCR.IO/GRAYCLAYTON/AETRE-MCP:0.8.1

Decision-theoretic triage and fail-closed agent gating: 32 tools over stdio.

0 this week 50 Trust /100

Last scanned (4 hours ago)

Scores higher than 78% of OCI servers

Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →

Supply Chain Security0
  • No malware scan is available for this kind of package: the supply-chain vendors we use do not cover it. This is a permanent gap in our coverage, not a finding about the package.Unverified
  • Known CVEs could not be checked: this artifact ships no SBOM or dependency manifest, so there is no dependency list to read.Unverified
  • Install-script risk not yet assessed.Unverified
  • Dependency health could not be checked: this artifact ships no SBOM or dependency manifest, so there is no dependency list to read.Unverified
Provenance & Transparency35
Schema Quality & AI Usability78
  • 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
  • AI-judged instruction clarity (good).Pass
  • Context-footprint check failed: tool/resource definitions use about 5413 tokens (~146/item across 37 items; 33 tools + 4 resources), over budget; trim descriptions and params. See how to fix → Fail
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management100
  • No destabilizing schema changes in the last 30 days.Pass
Tool Coverage100
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 100% of tool parameters carry a description.Pass
Tool Safety100
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • We read all 33 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
  • An AI judge read all 34 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities20
  • Spec-recency check failed: implements MCP spec 2024-11-05; the latest is 2026-07-28. See how to fix → Fail

Unverified: 1 category

A category scored 0 because we could not verify it: a data source with nothing on this package, evidence we could not reach, or a check we could not run. We only credit what we can confirm.

What we tested

Checks we ran (12)

  • Source repository
  • Provenance
  • License
  • Maintenance
  • Security disclosure
  • Schema quality
  • Stability
  • Tool coverage
  • Injection markers
  • Destructive annotations
  • Judged manipulation
  • MCP protocol

Checks we could not complete (4)

These are gaps on our side, not findings about this package. We only credit what we can confirm, so a category made up entirely of them scores 0.

  • Malware scan in Supply Chain Security (scores 0 for this)No malware scan is available for this kind of package: the supply-chain vendors we use do not cover it. This is a permanent gap in our coverage, not a finding about the package.
  • Known CVEs in Supply Chain Security (scores 0 for this)Known CVEs could not be checked: this artifact ships no SBOM or dependency manifest, so there is no dependency list to read.
  • Install scripts in Supply Chain Security (scores 0 for this)Install-script risk not yet assessed.
  • Dependency health in Supply Chain Security (scores 0 for this)Dependency health could not be checked: this artifact ships no SBOM or dependency manifest, so there is no dependency list to read.

Does not apply to this package (2)

  • Endpoint SecurityScored on hosted endpoints only. A package has no live endpoint of its own for us to probe.
  • Transport & ReachabilityScored on hosted endpoints only. A package has no live endpoint of its own for us to probe.

The score does not measure everything. What the score does not measure →

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 1 Nov 26 +1
    • Stability: 0.97 → pass security
  • 31 Oct 26 −1
    • Stability: pass → 0.97 functional
  • 20 Oct 26 +1
    • Stability: 0.97 → pass security
  • 18 Oct 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 90 to 93. That category is still filling its 30-day observation window: 27 days of observed history at the previous scan, 28 at this one. The score rises as the window fills, whether or not the server changes.

  • 16 Oct 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 83 to 87. That category is still filling its 30-day observation window: 25 days of observed history at the previous scan, 26 at this one. The score rises as the window fills, whether or not the server changes.

  • 13 Oct 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 73 to 77. That category is still filling its 30-day observation window: 22 days of observed history at the previous scan, 23 at this one. The score rises as the window fills, whether or not the server changes.

  • 12 Oct 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 67 to 73. That category is still filling its 30-day observation window: 20 days of observed history at the previous scan, 22 at this one. The score rises as the window fills, whether or not the server changes.

  • 10 Oct 26 +2

    No change was recorded against any check on this day. Stability & Change Management went from 50 to 67. That category is still filling its 30-day observation window: 15 days of observed history at the previous scan, 20 at this one. The score rises as the window fills, whether or not the server changes.

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 6 Nov 2026 · Analysed oci/ghcr.io/grayclayton/aetre-mcp:0.8.1

Provenance No attestation

The registry publishes no build provenance for this version, so there is nothing to verify.

Result No attestation
Ecosystem oci
Reason No attestation published

Background: How many MCP packages publish verified provenance →

MCP tools · 33 exposed · ~5,289 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
aetre_author_preflight_benchmark ~105

Comprehensive pre-submission diagnostic scorecard for authors and researchers, calculating crowd novelty percentile, reviewer disagreement risk, and prescriptive refinement actions.

NameTypeReqDescription
api_keystring–Optional AETRE Pro or Enterprise license key for unlimited checks.
selection_boundarynumber–Funding or acceptance cutoff threshold (tau). Defaults to 1.2.
textstringyesFull proposal abstract or summary.
titlestring–Proposal or paper title.

No output schema declared.

No examples provided.

aetre_batch_triage ~101

Batch applies disclosed, uncalibrated lexical indicators to a cohort, computing heuristic ranks, VOI ranks, and demonstration stream allocation (Stream A Fast-Reject, Stream B Deep Review, Stream C Fast-Pass).

NameTypeReqDescription
api_keystring–Optional license key.
proposalsarrayyesList of proposals with title and text/abstract.
selection_boundarynumber–Cutoff threshold boundary (default: 1.2).

No output schema declared.

No examples provided.

aetre_calculate_voi ~196

Calculates the exact Bayesian Value of Information (VOI) for crossing a top-K selection boundary under Gaussian conjugate updates.

NameTypeReqDescription
api_keystring–Optional AETRE API or license key.
posterior_meannumberyesCurrent expected latent quality (mu).
posterior_variancenumberyesCurrent epistemic uncertainty / variance (sigma^2).
prior_sourcestring–Where the estimates in this call came from, e.g. "measured: 2026 cycle", "expert elicitation", "assumed". Echoed in the result so a reader can tell a measurement from a guess.
review_costnumber–Cost of conducting the review. Defaults to 0.5.
selection_boundarynumberyesThe threshold quality cutoff for acceptance (tau).
signal_noisenumber–Standard deviation of the additional review signal. Defaults to 0.8.

No output schema declared.

No examples provided.

aetre_calibrate_scorer ~118

Fits Platt logistic scaling on continuous model scores and binary labels, returning slope, intercept, Expected Calibration Error (ECE), and Brier score.

NameTypeReqDescription
api_keystring–Optional license key.
iterationsinteger–Calibration optimization iterations (default: 500).
labelsarrayyesBinary ground-truth labels (0 or 1).
learning_ratenumber–Optimization learning rate (default: 0.05).
scoresarrayyesRaw continuous candidate scores or VOI values.

No output schema declared.

No examples provided.

aetre_check_governor ~163

Evaluates evaluator queue load using Kingman's Heavy-Traffic approximation and returns governor throttle recommendations when utilization exceeds rho >= 0.85.

NameTypeReqDescription
api_keystring–Enterprise license key required.
arrival_ratenumberyesArrival rate of submissions (lambda), items per period.
cv_arrivalsnumber–Coefficient of variation of arrivals (c_a). Defaults to 1.0.
cv_servicenumber–Coefficient of variation of review duration (c_s). Defaults to 1.0.
service_ratenumberyesReview capacity of the committee/system (mu), items per period.
target_utilizationnumber–Target sustainable utilization ceiling (rho_target). Defaults to 0.85.

No output schema declared.

No examples provided.

aetre_congestion_matching ~134

Optimizes reviewer-to-proposal assignment by maximizing domain/keyword affinity while enforcing Kingman queue utilization constraints (rho <= 0.85) on individual reviewer workloads.

NameTypeReqDescription
api_keystring–Enterprise license key.
proposalsarrayyesList of candidate proposals with id, title, domain, voi_index, required_reviews, and keywords.
reviewersarrayyesList of reviewer profiles with id, name, domain, capacity, current_load, service_rate, arrival_rate, and expertise_tags.
target_utilizationnumber–Maximum allowed reviewer utilization target (default: 0.85).

No output schema declared.

No examples provided.

aetre_correlated_posterior_update ~190

Calculates Bayesian posterior mean and uncertainty under correlated multi-agent evaluator noise (rho_corr), preventing artificial overconfidence from redundant LLM outputs.

NameTypeReqDescription
api_keystring–Enterprise license key required.
evaluationsarrayyesList of evaluator agent scores and noise standard deviations.
inter_agent_correlationnumber–Pairwise correlation coefficient between evaluator errors (rho in [0, 1)). Defaults to 0.5.
prior_meannumberyesPrior mean of candidate quality (mu_0).
prior_sourcestring–Where the estimates in this call came from, e.g. "measured: 2026 cycle", "expert elicitation", "assumed". Echoed in the result so a reader can tell a measurement from a guess.
prior_variancenumberyesPrior variance of candidate quality (sigma_0^2).

No output schema declared.

No examples provided.

aetre_evaluate_staking ~166

Simulates submitter entry equilibrium under generative AI generation costs and refundable submission deposits to curb spam floods.

NameTypeReqDescription
acceptance_capacityintegeryesTotal available acceptance slots (K), e.g. 200.
api_keystring–Enterprise license key required.
generation_costnumberyesAI generation cost per candidate (c_gen), e.g. $0.05.
private_acceptance_valuenumberyesSubmitter's private value of winning acceptance (V), e.g. $100.00.
submission_feenumberyesRequired deposit or submission stake (c_sub), e.g. $5.00.
total_potential_applicantsintegeryesTotal potential applicant pool (N), e.g. 5000.

No output schema declared.

No examples provided.

aetre_exploration_audit ~123

Calculates the unbiased Horvitz-Thompson exploration audit estimator (H_hat_D) and 95% confidence intervals on deprioritized candidates to catch false negative breakthroughs.

NameTypeReqDescription
api_keystring–Enterprise license key required.
audited_high_value_foundintegeryesNumber of high-value unconventional breakthroughs found in the audit sample.
audited_sample_sizeintegeryesNumber of randomly sampled candidates audited (m_D).
deprioritized_pool_sizeintegeryesTotal size of the rejected or deprioritized candidate pool (N_D).

No output schema declared.

No examples provided.

aetre_fit_boundary ~210

Fits the decision boundary to a venue's own calibration data by sweeping thresholds and ranking candidates by boundary VOI at each. The boundary determines whether triage beats chance, and a default carried from another corpus generally does not.

NameTypeReqDescription
api_keystring–Optional license key.
budgetinteger–Review budget K the boundary is optimised for. Defaults to 200.
datasetstringyesPath to a JSON array of candidates: {id, split, label, pre_triage_data:{preliminary_mean, preliminary_variance}}. Required: fit against your own data.
grid_maxnumber–Highest boundary to try. Defaults to 10.0.
grid_minnumber–Lowest boundary to try. Defaults to 1.0.
grid_stepnumber–Step between candidate boundaries. Defaults to 0.25.
splitstring–Split to fit on. Defaults to 'calib'. Fit and evaluate on different splits.

No output schema declared.

No examples provided.

aetre_heavy_tailed_voi ~237

Calculates Generalized Pareto / Heavy-Tailed Value of Information (VOI) to optimize selection pipelines for positive black swan breakthrough discovery.

NameTypeReqDescription
api_keystring–Enterprise license key required.
posterior_meannumberyesCurrent expected candidate quality (mu).
posterior_variancenumberyesCurrent epistemic uncertainty (sigma^2).
prior_sourcestring–Where the estimates in this call came from, e.g. "measured: 2026 cycle", "expert elicitation", "assumed". Echoed in the result so a reader can tell a measurement from a guess.
review_costnumber–Cost of conducting review. Defaults to 0.5.
selection_boundarynumberyesThreshold cutoff boundary for selection (tau).
signal_noisenumber–Noise standard deviation of additional deep review. Defaults to 0.8.
tail_index_alphanumber–Pareto tail index alpha > 1.0 (e.g. 1.5 for heavy-tailed scientific/biotech innovation). Defaults to 1.5.

No output schema declared.

No examples provided.

aetre_heldout_backtest ~184

Runs a multi-policy held-out review allocation backtest across 8 triage policies under fixed review budget K, evaluating true decision flips, precision, recall, and paired bootstrap intervals.

NameTypeReqDescription
api_keystring–Optional license key.
boundarynumber–Acceptance threshold boundary theta (default: 6.0).
budgetinteger–Fixed review capacity budget K (default: 50).
datasetstring–Path to a JSON array of candidates to evaluate: {id, split, label, pre_triage_data:{preliminary_mean, preliminary_variance}}. Omit to run against a bundled six-candidate sample, which illustrates the…
splitstring–Evaluation split ('test', 'dev', 'calib', 'replication', 'all') (default: 'test').

No output schema declared.

No examples provided.

aetre_heterogeneous_queues ~63

Evaluates a multi-specialist heterogeneous reviewer network, identifying bottleneck domains and generating capacity rebalancing actions.

NameTypeReqDescription
api_keystring–Enterprise license key required.
poolsarrayyesList of domain queues with arrival and service parameters.

No output schema declared.

No examples provided.

aetre_investment_benchmark ~210

Runs the venture dealflow triage benchmark: generates a synthetic heavy-tailed cohort of deals and compares status-quo preliminary-score screening against AETRE heavy-tailed VOI triage under a fixed diligence budget.

NameTypeReqDescription
api_keystring–Optional license key.
diligence_budgetinteger–Deals that can be taken to full diligence. Defaults to 50.
hours_per_diligencenumber–Analyst hours consumed per deal diligenced. Defaults to 20.0.
n_dealsinteger–Deals in the synthetic cohort. Defaults to 1000, capped at 20000.
selection_boundarynumber–Preliminary score boundary for selection. Defaults to 6.0.
tail_alphanumber–Pareto tail index of the return distribution. Defaults to 1.25.
wrapper_pctnumber–Share of the cohort that is well-packaged but low-substance. Defaults to 0.30.

No output schema declared.

No examples provided.

aetre_multi_attribute_voi ~131

Computes multi-attribute Bayesian Value of Information across orthogonal proposal evaluation dimensions (Novelty, Rigor, Impact, Feasibility), outputting composite VOI and optimal dimension-specific review targets.

NameTypeReqDescription
api_keystring–Optional license key.
composite_thresholdnumber–Composite decision threshold cutoff (default: 6.0).
dimensionsarrayyesList of evaluation dimensions with name, prior_mean, prior_variance, weight, and review_noise_sd.
review_cost_per_dimnumber–Marginal review cost per dimension (default: 1.0).

No output schema declared.

No examples provided.

aetre_proposition_1_bound ~169

Calculates Proposition 1 theoretical recall ceiling R_N <= min(1, K_N / H_N) to determine if a pipeline is mathematically capacity-constrained.

NameTypeReqDescription
api_keystring–Optional AETRE API or license key.
high_value_ratenumberyesPrior fraction of high-value ideas in population (p_H), e.g. 0.067.
prior_sourcestring–Where the estimates in this call came from, e.g. "measured: 2026 cycle", "expert elicitation", "assumed". Echoed in the result so a reader can tell a measurement from a guess.
selection_capacityintegeryesAvailable selection capacity (K).
total_candidatesintegeryesTotal candidate arrival volume (N).

No output schema declared.

No examples provided.

aetre_quadratic_staking ~191

Calculates super-linear anti-sybil staking deposit requirements (Stake(m) = S_0 * m^gamma) to deter mass AI spam submissions while preserving human entry.

NameTypeReqDescription
api_keystring–Enterprise license key required.
base_feenumberyesBase deposit for a single submission (S_0), e.g. $5.00.
escalation_exponentnumber–Escalation exponent gamma >= 1.0 (e.g. 2.0 for quadratic escalation). Defaults to 2.0.
generation_costnumber–AI generation cost per submission (c_gen). Defaults to 0.05.
private_acceptance_valuenumber–Private monetary or prestige payoff if accepted (V). Defaults to 100.0.
submission_countintegeryesTotal submissions attempted by the entity within the time window (m).

No output schema declared.

No examples provided.

aetre_recall_scaling_curve ~218

Calculates the Proposition 1 theoretical recall decay curve across arrival expansion scales (e.g. 1x, 2x, 5x, 10x, 20x, 50x) demonstrating capacity collapse points.

NameTypeReqDescription
api_keystring–Optional license key.
baseline_arrivalsinteger–Baseline candidate arrivals N (default: 1000).
high_value_ratenumber–Prior high-value fraction in population (default: 0.067).
multipliersarray–List of arrival multipliers to sweep across (default: [1, 2, 5, 10, 20, 50]).
prior_sourcestring–Where the estimates in this call came from, e.g. "measured: 2026 cycle", "expert elicitation", "assumed". Echoed in the result so a reader can tell a measurement from a guess.
selection_capacityinteger–Available selection capacity K (default: 200).

No output schema declared.

No examples provided.

aetre_sequential_stopping_rule ~256

Calculates optimal dynamic Bayesian stopping boundaries for sequential reviews (Accept, Reject, or Solicit More Reviews) based on posterior decision confidence and boundary VOI.

NameTypeReqDescription
api_keystring–Optional license key.
confidence_thresholdnumber–Target confidence probability to stop early (default: 0.90).
next_review_costnumber–Cost of soliciting an additional review (default: 1.0).
next_review_noise_sdnumber–Expected noise SD of a future review (default: 0.80).
prior_meannumberyesBaseline prior mean quality (e.g. 5.0).
prior_sourcestring–Where the estimates in this call came from, e.g. "measured: 2026 cycle", "expert elicitation", "assumed". Echoed in the result so a reader can tell a measurement from a guess.
prior_variancenumberyesBaseline prior epistemic variance (e.g. 1.0).
reviewsarrayyesOrdered sequence of completed reviewer scores with noise_sd and cost.
thresholdnumberyesDecision acceptance threshold cutoff (e.g. 6.0).

No output schema declared.

No examples provided.

aetre_simulate_benchmark ~231

Runs a paired-cohort Monte Carlo simulation across all 4 screening regimes, comparing Quality Throughput, FDR, Unconventional Recall, and Human Reviews with central 95% run-to-run outcome intervals (not confidence intervals for the mean).

NameTypeReqDescription
acceptance_capacityinteger–Number of acceptance slots K (default: 200).
ai_arrival_multipliernumber–Multiplier for synthetic/AI flood regime (default: 5.0).
api_keystring–Enterprise license key required.
baseline_arrivalsinteger–Baseline arrival volume N (default: 1000).
evaluation_budgetnumber–Total available evaluation budget (default: 1000.0).
randomized_audit_budget_sharenumber–Share of budget allocated to randomized Horvitz-Thompson exploration audits (default: 0.05).
replicationsinteger–Number of Monte Carlo simulation replicates (default: 50).
unconventional_sharenumber–Prior share of unconventional/novel ideas (default: 0.10).

No output schema declared.

No examples provided.

aetre_staking_curve ~190

Sweeps the submission fee across a range and returns the submitter equilibrium at each point, showing how entry volume and low-quality deterrence respond to the staking fee rather than evaluating a single fee.

NameTypeReqDescription
acceptance_capacityinteger–Slots available for acceptance. Defaults to 200.
api_keystring–Optional license key.
c_gennumber–Marginal cost of generating a proposal. Defaults to 0.01.
max_feenumber–Highest fee on the swept curve. Defaults to 20.0.
private_acceptance_valuenumber–Private value of acceptance to the submitter. Defaults to 100.0.
stepsinteger–Points on the curve. Defaults to 10, capped at 200.
total_potential_applicantsinteger–Size of the applicant pool. Defaults to 5000.

No output schema declared.

No examples provided.

aetre_system_catalog ~76

Comprehensive system introspection returning AETRE architecture, bundled synthetic fixtures, optional data adapters, connectors, mathematical tools, and institutional tiers.

NameTypeReqDescription
api_keystring–Optional AETRE API or license key for tier verification.
query_typestring–Category of system capability metadata to inspect. Defaults to 'all'.

No output schema declared.

No examples provided.

aetre_triage_proposal ~126

Applies transparent, uncalibrated lexical routing indicators to proposal text, then calculates a VOI index and demonstration stage route (FAST-PASS, FAST-REJECT, or DEEP REVIEW). Not a validated estimate of scientific quality.

NameTypeReqDescription
api_keystring–Optional AETRE API or license key.
selection_boundarynumber–Decision cutoff boundary for acceptance. Defaults to 1.2.
textstringyesThe abstract, executive summary, or proposal body text to evaluate.
titlestring–Optional title of the proposal.

No output schema declared.

No examples provided.

governed_bellman_triage ~219

Pillar I Bellman Governor: evaluates Bayesian dynamic programming stopping policy over multi-stage pass lattices under asymmetric loss stakes (L/R), returning optimal action (CONTINUE, HALT_AND_COMMIT, HALT_AND_REJECT), expected utility, VOI, and critical threshold p*.

NameTypeReqDescription
api_keystring–Optional license key.
consecutive_passesinteger–Number of consecutive test passes observed (default: 0).
defect_leakagenumber–Defect leakage rate q (default: 0.5875).
lossnumber–Defective candidate loss penalty L (default: 0.10).
max_stagesinteger–Maximum verification stages horizon H (default: 4).
priornumber–Prior belief in conforming status (default: 0.50).
rewardnumber–Conforming candidate net reward R (default: 0.02).
stageinteger–Current verification stage index (default: 0).

No output schema declared.

No examples provided.

governed_evaluate_action ~147

Micro-level loss evaluation comparing autonomous execution against deferral to human review, under an asymmetric loss matrix weighted by irreversibility.

NameTypeReqDescription
action_namestring–Identifier for the candidate agent action.
api_keystring–Optional license key.
consequence_distributionobjectyesDistribution over the consequences of acting autonomously.
prior_sourcestring–Where the estimates in this call came from, e.g. "measured: 2026 cycle", "expert elicitation", "assumed". Echoed in the result so a reader can tell a measurement from a guess.
review_costnumber–Cost of deferring the action to a human reviewer.

No output schema declared.

No examples provided.

governed_gate_pr ~93

Road A Tiered Verification Gate: evaluates host pre-checks (Tier 0 syntactic AST parsing and structural validation) on candidate Python code or pull request patches to short-circuit broken submissions before expensive container CI escalation.

NameTypeReqDescription
api_keystring–Optional license key.
candidate_idstring–Identifier for the pull request or patch.
codestringyesSource code or patch string to screen.

No output schema declared.

No examples provided.

governed_invariant_check ~106

Evaluates declarative safety invariants against a runtime state snapshot before a state change is committed, returning every violated rule rather than the first.

NameTypeReqDescription
api_keystring–Optional license key.
invariant_rulesarrayyesRules of the form '<field> <op> <number>' with op in <=, <, >=, >, ==, != , or 'exists <field>'.
state_snapshotobjectyesFlat object of runtime state fields to test.

No output schema declared.

No examples provided.

governed_knapsack_admit ~147

Pillar V Knapsack Queue Controller: packs candidate pull requests into the review queue under capacity budget K using the c-mu rule (density rho_i = E[U_i] / k_i) and calculates the dual capacity shadow price lambda_K.

NameTypeReqDescription
api_keystring–Optional license key.
candidatesarrayyesList of candidate submissions with candidate_id, posterior_belief, and optional reward, loss, review_cost.
capacity_knumberyesTotal reviewer capacity budget K (e.g. 3.0 review slots or hours).
review_cost_knumber–Default review effort cost per candidate (default: 1.0).

No output schema declared.

No examples provided.

governed_recall_scaling ~130

Fits the recall saturation curve Recall(K) = 1 - exp(-gamma K) to observed budget and recall pairs by least squares, returning the fitted gamma and the budget beyond which marginal recall stops paying for itself.

NameTypeReqDescription
api_keystring–Optional license key.
historical_budget_KarrayyesObserved review budgets.
marginal_recall_thresholdnumber–Marginal recall per unit budget below which spending stops. Defaults to 0.001.
recall_pointsarrayyesRecall achieved at each budget (0-1), positionally paired with historical_budget_K.

No output schema declared.

No examples provided.

governed_review_boundary ~242

Section 4.1 Tripartite Review Boundary: evaluates whether an autonomous coding candidate should be AUTO-admitted, sent to human REVIEW, or ABSTAINED based on reviewer effort cost and knapsack capacity shadow price lambda_K.

NameTypeReqDescription
api_keystring–Optional license key.
beliefnumberyesCurrent posterior belief probability in [0, 1].
lossnumber–Defective loss penalty L (default: 0.10).
prior_sourcestring–Where the estimates in this call came from, e.g. "measured: 2026 cycle", "expert elicitation", "assumed". Echoed in the result so a reader can tell a measurement from a guess.
review_accuracynumber–Probability reviewer correctly verifies valid code (default: 1.0).
review_costnumber–Direct cost of human reviewer examination (default: 0.002).
rewardnumber–Conforming net reward R (default: 0.02).
shadow_price_lambdanumber–Knapsack queue capacity congestion shadow price lambda_K (default: 0.0).

No output schema declared.

No examples provided.

governed_runtime_audit ~107

Generates a tamper-evident SHA-256 decision receipt over an execution's identifier, payload and timestamp, so a gated agent action can be verified after the fact.

NameTypeReqDescription
api_keystring–Optional license key.
decision_payloadobject–The decision record to bind into the receipt.
execution_idstringyesIdentifier of the agent execution being recorded.
include_posterior_traceboolean–Echo the posterior trace from the payload into the receipt.

No output schema declared.

No examples provided.

governed_shadow_price ~185

Computes the marginal shadow price of scarce reviewer time (lambda_K) from queue backlog and review capacity under a heavy-tailed utility distribution, and the factor by which it elevates the admission cutoff.

NameTypeReqDescription
api_keystring–Optional license key.
prior_sourcestring–Where the estimates in this call came from, e.g. "measured: 2026 cycle", "expert elicitation", "assumed". Echoed in the result so a reader can tell a measurement from a guess.
queue_backlognumberyesNumber of candidates awaiting review.
reviewer_headcountnumberyesNumber of available reviewers.
reviews_per_reviewernumber–Review slots per reviewer in the period. Defaults to 8.
tail_index_alphanumber–Pareto tail index of the utility distribution. Defaults to 1.25.

No output schema declared.

No examples provided.

governed_stopping_policy ~125

Solves the finite-horizon optimal stopping problem by backward induction: at each step the agent either takes the terminal payoff or pays the continuation cost for one more step of evidence.

NameTypeReqDescription
api_keystring–Optional license key.
cost_per_stepnumber–Cost charged for each additional step of evidence gathering.
horizon_stepsinteger–Number of steps in the lattice. Defaults to the length of terminal_payoffs.
terminal_payoffsarrayyesPayoff from stopping at each step. The last value is carried forward if shorter than the horizon.

No output schema declared.

No examples provided.

Install

How do I install the AETRE & The Governed Agent MCP server?

AETRE & The Governed Agent runs locally as a container image, launched with docker run --rm -i ghcr.io/grayclayton/aetre-mcp:0.8.1. Ready-made configuration for Claude, Cursor, VS Code, Codex and 3 more is on this page, copied from each client's own documentation.

oci · ghcr.io/grayclayton/aetre-mcp:0.8.1

# add to Claude Code
claude mcp add grayclayton-aetre-mcp -- docker run --rm -i ghcr.io/grayclayton/aetre-mcp:0.8.1
Common questions

What is the AETRE & The Governed Agent MCP server?

AETRE & The Governed Agent is an MCP server listed in the public MCP registry as io.github.grayclayton/aetre-mcp. Decision-theoretic triage and fail-closed agent gating: 32 tools over stdio. This page covers its container image (ghcr.io/grayclayton/aetre-mcp:0.8.1).

Is the AETRE & The Governed Agent MCP server safe to use?

AETRE & The Governed Agent scores 50 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the AETRE & The Governed Agent MCP server expose?

AETRE & The Governed Agent exposes 33 tools: aetre_system_catalog, aetre_triage_proposal, aetre_calculate_voi, aetre_check_governor, aetre_exploration_audit, and 28 more. Their descriptions and schemas cost roughly 5,289 tokens of context every time the server is loaded.

Is the AETRE & The Governed Agent MCP server still maintained?

AETRE & The Governed Agent is still listed as active in the MCP registry. We last reached this channel on 6 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

What did VerifyMCP test on the AETRE & The Governed Agent MCP server?

VerifyMCP ran 12 checks on AETRE & The Governed Agent, covering Source repository, Provenance, License, Maintenance and 8 more. 4 items could not be completed, a gap on our side rather than a finding about AETRE & The Governed Agent: Malware scan, Known CVEs, Install scripts and Dependency health. One category scores 0 for that reason, because we only credit what we can confirm. Endpoint Security and Transport & Reachability do not apply to a container image, so they were not tested. The score does not measure everything, and the scoring documentation lists what it leaves out.