# Bee by HEOSSI (pypi · bee-sdk)

Bee by HEOSSI: governed multimodal intelligence - chat, code, security, research, documents, memory.

- Trust score: 24/100 (low)
- Change this week: −23
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-08-03

## Components

- pypi · `bee-sdk`: 24/100 (this document), [markdown](https://verifymcp.io/servers/heossihq-bee-public/bee-sdk.md), [page](https://verifymcp.io/servers/heossihq-bee-public/bee-sdk)

## Channel facts

- Registry: `pypi`
- Package: `bee-sdk`
- Version: `0.6.9`
- Transport: `stdio`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-08-03.

- **Supply Chain Security**: 50/100
  - Malware scan not yet available for this package.
  - No known CVEs affecting this package version or its production dependencies.
  - Runs hatchling.build at install time, a recognised native-build step with no shell scripting around it.
  - No production dependencies, so there is no dependency health to assess.
- **Provenance & Transparency**: 45/100
  - Source repository is publicly reachable at the declared URL.
  - Provenance check failed: no build-provenance attestation is published.
  - Clear OSI-approved license (Apache-2.0).
  - Actively maintained (last published 0 days ago).
  - Disclosure check failed: no security disclosure policy was found in the source repository.
- **Schema Quality & AI Usability**: 0/100
  - Schema quality not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.
- **Stability & Change Management**: 0/100
  - Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.
- **Tool Coverage**: 0/100
  - Tool coverage not yet verified: we do not have a sandbox capture of the tool definitions this version of the package serves yet.
- **Capabilities**: 0/100
  - Protocol version not yet verified: we do not have a sandbox capture of the MCP handshake this version of the package performs yet.

**Unverified: 4 categories.** Categories scored 0 because our sandbox run of this package has not given us the schema these checks need to read. That is a gap on our side rather than a finding about the package, and we only credit what we can confirm, so the score stands at 0 until the capture succeeds. We are working through the fleet, so this normally clears without any action from you.

## Install

### Claude

```bash
claude mcp add heossihq-bee-public -- uvx bee-sdk
```

### Codex

```bash
codex mcp add heossihq-bee-public -- uvx bee-sdk
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "heossihq-bee-public": {
      "type": "local",
      "command": [
        "uvx",
        "bee-sdk"
      ],
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add heossihq-bee-public --command uvx --arg bee-sdk
```

### Hermes

```yaml
mcp_servers:
  heossihq-bee-public:
    command: "uvx"
    args: ["bee-sdk"]
```

### Other

```json
{
  "mcpServers": {
    "heossihq-bee-public": {
      "command": "uvx",
      "args": [
        "bee-sdk"
      ]
    }
  }
}
```

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-08-03 (score 24, −46)

- [security regression] Malware scan: pass → unverified
- [security] Stability: Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.
- [functional regression] Schema quality: 100 → unverified
- [functional regression] Tool coverage: 100 → unverified
- [functional regression] Capabilities: pass → unverified
- [functional] Package version: 0.6.8 → 0.6.9

### 2026-08-02 (score 70, +15)

- [security improvement] Malware scan: unverified → pass

### 2026-08-01 (score 55, −8)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-31 (score 63, +34)

- [functional improvement] Tool coverage: unverified → 100
- [functional improvement] Schema quality: unverified → 100
- [functional] First check of Schema quality: pass
- [functional] First check of Schema quality: fail
- [functional] First check of Tool coverage: 83
- [functional] First check of Schema quality: good
- [functional] Package version: 0.6.4 → 0.6.8

### 2026-07-30 (score 29, −18)

- [security regression] Malware scan: pass → unverified
- [functional] Schema quality: Schema quality not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.
- [functional] Tool coverage: Tool coverage not yet verified: we do not have a sandbox capture of the tool definitions this version of the package serves yet.
- [functional] Package version: 0.6.3 → 0.6.4

### 2026-07-28 (score 47, 0)

- [functional] Schema quality: Schema quality not yet verified: our sandbox run of this package did not complete, so we have no schema to assess.
- [functional] Tool coverage: Tool coverage not yet verified: our sandbox run of this package did not complete, so we have no tool definitions to assess.

### 2026-07-26 (score 47)

First indexed and scored.

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

## MCP tools (14)

### `bee_chat` (~124 tokens)

Ask Bee

Use for general or specialist questions that do not require a more specific Bee tool. Returns generated text from the selected domain and model tier. The gateway enforces the API key's plan, tenant policy, token allowance, and usage metering.

Input parameters:

- `domain` (string): Optional domain specialist (defaults to general).
- `max_tokens` (integer): Max response tokens
- `message` (string, required): The question or request
- `model` (string): Optional Bee model tier. Limited to your plan. Default: bee-cell.
- `temperature` (number): Sampling temperature (optional)

### `bee_code` (~130 tokens)

Code Assistant

Use for code explanation, bug fixing, refactoring, or test generation. Returns text and proposed code; it does not read files, execute commands, or modify a repository. Choose the intended operation with action.

Input parameters:

- `action` (string, required): What to do with the code
- `code` (string, required): The code
- `error` (string): Error message / bug description (for action=fix)
- `focus` (string): What to optimise for (for action=refactor)
- `framework` (string): Test framework (for action=write_tests)
- `language` (string): Programming language

### `bee_security` (~138 tokens)

Security Assistant

Use for defensive code audits, threat models, authorized penetration-test support, or smart-contract review. Returns analysis and remediation guidance only; it does not scan a target or execute exploits and refuses unauthorized weaponization.

Input parameters:

- `context` (string): Authorised-engagement scope (for task=pentest_assist)
- `framework` (string): Framework (for task=threat_model): STRIDE, PASTA, LINDDUN
- `input` (string, required): Code, system description, contract source, or finding
- `language` (string): Language (for code_audit / smart_contract_review)
- `task` (string, required): Security task

### `bee_research` (~116 tokens)

Research Assistant

Use to draft a NISQ-honest quantum-circuit design or critique an ML/CS paper. Returns research text or sample framework code; it does not submit QPU work. Use bee_quantum_reasoning_run for a durable hosted Lab job.

Input parameters:

- `focus` (string): Critique focus (for paper_critique)
- `framework` (string): Quantum framework (for quantum_design)
- `input` (string, required): The task to design, or the abstract to critique
- `task` (string, required): Research task

### `bee_verify_provenance` (~73 tokens)

Verify Agent Provenance

Use to verify a Bee agentic coding session by session_id. Returns verification status, sealed-turn count, and ML-DSA-65 (NIST FIPS 204) signature details; it does not alter or replay the session.

Input parameters:

- `session_id` (string, required): The agent session id to verify

### `bee_usage` (~83 tokens)

Account & Usage

Use to inspect the authenticated caller's Bee plan and metered consumption. Returns pooled tokens, per-tier allowances, reset times, and a 24-hour or 7-day breakdown. It never changes billing, credits, or entitlements.

Input parameters:

- `window` (string): Breakdown window: 'day' (24h) or 'week' (7d). Default 'day'.

### `bee_documents_search` (~66 tokens)

Search Documents

Use to retrieve relevant excerpts from the authenticated tenant's hosted Bee document library. Returns ranked chunks and source labels without changing the library; requires a RAG-entitled plan.

Input parameters:

- `k` (integer): How many chunks to return
- `query` (string, required): What to search for

### `bee_documents_add` (~77 tokens)

Add Document

Use only when the user intends to persist supplied text in the authenticated tenant's hosted Bee knowledge base. Creates a searchable document and consumes the plan's document allowance; it does not read local files by itself.

Input parameters:

- `content` (string, required): The document text to ingest
- `source` (string): A name / source label for the document

### `bee_memory_search` (~66 tokens)

Search Memory

Use to recall facts, preferences, projects, or skills from the authenticated user's Bee memory. Returns ranked memories without changing them and honors the user's memory setting and tenant policy.

Input parameters:

- `query` (string, required): What to recall
- `top_k` (integer): How many memories to return

### `bee_memory_add` (~76 tokens)

Remember

Use only when the user intends Bee to persist a fact for future conversations. Writes to the authenticated user's memory, honors opt-in and tenant policy, and automatically suppresses near-duplicates.

Input parameters:

- `content` (string, required): The fact to remember (≤ 4000 chars)
- `kind` (string): What kind of memory this is

### `bee_quantum_reasoning_run` (~98 tokens)

Run Quantum Reasoning

Use only after the user chooses an eligible hosted quantum product. Creates a durable, tenant-encrypted, metered Quantum Reasoning Lab job that may incur simulator or QPU cost. Returns a job record; inspect it with bee_quantum_reasoning_get.

Input parameters:

- `model` (string, required)
- `product` (string, required)
- `prompt` (string, required): The problem and decision criteria
- `provider_connection_id` (string)

### `bee_quantum_reasoning_jobs` (~73 tokens)

List Quantum Reasoning Jobs

Use to list the authenticated tenant's retained Quantum Reasoning Lab jobs and capabilities. Returns paginated metadata without creating or changing jobs.

Input parameters:

- `cursor` (string): Opaque cursor from the previous page
- `limit` (integer)
- `model` (string)
- `status` (string)

### `bee_quantum_reasoning_get` (~57 tokens)

Get Quantum Reasoning Job

Use to inspect one tenant-scoped Lab job. Returns status, candidates, scores, result, QPU or fallback evidence, usage, and receipt ID without changing the job.

Input parameters:

- `job_id` (string, required): Job UUID

### `bee_quantum_reasoning_remove` (~51 tokens)

Cancel or Delete Quantum Reasoning Job

Use only after explicit user intent to cancel an eligible queued job or permanently erase content from a terminal job. This is a destructive, tenant-scoped operation.

Input parameters:

- `job_id` (string, required)

## Diagnostics

Captured diagnostic sections: Provenance, Install scripts, Dependencies. The full working is on the page: https://verifymcp.io/servers/heossihq-bee-public/bee-sdk#diagnostics

## Score history

- 2026-08-03: 24
- 2026-08-02: 70
- 2026-08-01: 55
- 2026-07-31: 63
- 2026-07-30: 29
- 2026-07-29: 47
- 2026-07-28: 47
- 2026-07-27: 47
- 2026-07-26: 47

## Links

- PyPI project: https://pypi.org/project/bee-sdk/
- Socket report: https://socket.dev/pypi/package/bee-sdk
- Repository: https://github.com/heossihq/bee-public
- Website: https://bee.heossi.com/
- Changelog RSS feed: https://verifymcp.io/servers/heossihq-bee-public/bee-sdk/changelog.xml
- Changelog JSON feed: https://verifymcp.io/servers/heossihq-bee-public/bee-sdk/changelog.json
- HTML version of this page: https://verifymcp.io/servers/heossihq-bee-public/bee-sdk