UNIDROIT Principles 2016
REMOTE · MCP.ARXO.IO · 2 COMPONENTS
UNIDROIT Principles 2016 as executable rules: closed questions answered with grounds and source text
Available components
Last scanned (12 hours ago)
Scores higher than 45% of remote servers
Reachable. Last reached 18 Oct 2026.
Category Education and Research
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security57
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- Authorisation check failed: no authorisation is required to call this server, and it exposes a tool marked destructive (law_revoke_answer). See how to fix → View diagnostics → Fail
- HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
- HSTS check failed: the Strict-Transport-Security header is absent. See how to fix → View diagnostics → Fail
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability48
- AI-judged instruction clarity (good).Pass
- Context-footprint check failed: tool/resource definitions use about 8125 tokens (~406/item across 20 items; 20 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management13
- Stability observed for 4 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage95
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 82% of tool parameters carry a description.Partial
- Structured output schemas are declared (35% of tools); any adoption earns full credit.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- All 2 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation.Pass
- An AI judge read all 21 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 18 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 10 to 13. That category is still filling its 30-day observation window: 3 days of observed history at the previous scan, 4 at this one. The score rises as the window fills, whether or not the server changes.
- 16 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 3 to 7. That category is still filling its 30-day observation window: 1 days of observed history at the previous scan, 2 at this one. The score rises as the window fills, whether or not the server changes.
- 15 Oct 26 0
- Stability: unverified → 0.03 ▲ functional
- 14 Oct 26 59
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 18 Oct 2026 · Probed https://mcp.arxo.io/mcp/picc
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=mcp.arxo.io | CN=YR1,O=Let's Encrypt,C=US | 31 Aug 2026 | 29 Nov 2026 | RSA 4096 | SHA256-RSA | 5e0f2774d85239e907973db54e105bd5ae5 |
| SANs: mcp.arxo.io | ||||||
| CN=YR1,O=Let's Encrypt,C=US (CA) | CN=Root YR,O=ISRG,C=US | 3 Sept 2025 | 2 Sept 2028 | RSA 2048 | SHA256-RSA | a20253f15f2691c05dc1ce13b9bcca4e |
| CN=Root YR,O=ISRG,C=US (CA) | CN=ISRG Root X1,O=Internet Security Research Group,C=US | 13 May 2026 | 2 Sept 2032 | RSA 4096 | SHA256-RSA | f24b6d17f9d9ad7cb1c9fea78782699f |
Background: What to check on a remote MCP endpoint →
DNSSEC insecure
Validation of mcp.arxo.io. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| io. | present | 57355 | 8 | Verified |
| arxo.io. | absent | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication No authorisation required
The endpoint answered without asking for a token. Anyone who knows the URL can reach it.
| Result | No authorisation required |
|---|---|
| HTTP status | 200 |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://mcp.arxo.io/mcp/picc | Verified | 200 | |
| http (plaintext) | http://mcp.arxo.io/mcp/picc | HTTPS enforced | 302 | https://mcp.arxo.io/mcp/picc |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
law_answer_capabilities ~50
A machine-readable matrix of the Lens producers that are actually installed, of replay/projection checks, profiles, limits and the contract tests that confirm them. declared_only means a schema with no executable witness.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
law_argue ~315
How robust a conclusion is: the map of the dispute under the argumentation profile §274 (DECISION-0039). The answer falls into four classes: SKEPTICALLY_ACCEPTED — the conclusion is invulnerable (it survives in the grounded extension); CREDULOUSLY_ACCEPTED — merely defensible (there is a position for it and a position against); REJECTED — it survives nowhere; NO_ARGUMENT — there are no arguments at all. It builds ALL arguments out of the facts and the rules of the instrument (chains that did not fire in ordinary inference included), the rebut/undermine/undercut attacks and the defeats by priority. Predicate names come from law_packages. On large instruments a refusal by cap is possible — narrow facts or raise limits.maxArguments.
| Name | Type | Req | Description |
|---|---|---|---|
| args | array | – | the arguments of the predicate |
| facts | array | – | facts of the case: [{predicate, args, negated?, provenance?}]. provenance is the same object as on law_ask: origin, document, quote, extractor. confidence is read by the package EvidencePolicy, not b… |
| legalTime | string | – | the date of the law (YYYY-MM-DD) |
| limits | object | – | the caps of the §274 profile: maxArguments (64), maxExtensions (8), maxUndecided (16) |
| package | string | – | narrow the question to one package of law |
| predicate | string | yes | the conclusion whose robustness is being measured |
No output schema declared.
No examples provided.
law_ask ~1,460
Put a question to formalised law. When the answer is "not established" it carries whyNot — the engine's why_not report §185: the candidate rules and the state of every conjunct (satisfied / not satisfied / undetermined); the missing facts are visible there and need not be guessed. BEFORE THE FIRST call obtain the predicate names through law_search (a question in your own words → addresses) or law_packages (the signatures of a known instrument) — an invented name will be rejected. If the tool returned an error or "not established", THAT IS THE ANSWER: pass it to the user and do not substitute general knowledge about the law of some other country. But "I found no suitable instrument" is NOT an answer until law_search has been asked: silence of the catalogue is a property of searching by title, not a conclusion about the corpus. kind='truth' — whether a fact is established (the answer follows §62: established / refuted / contradiction / not established); kind='collect' — enumerate the records; kind='deadline' — compute a time limit on the official calendar; kind='positions' — which DUTIES arose from the facts and what their statuses are (active / fulfilled / violated, §134–§138); kind='why_not' — the why_not report §185 on the same goal, whatever the status of the answer. The answer carries the rules applied, the warnings and the provenance with hashes; truth/collect also carry a signature block (parameter types, the closure of types, constants; DECISION-0139) for presentation. The server does not guess: where a norm is not formalised, the answer is "not established" or an error.
| Name | Type | Req | Description |
|---|---|---|---|
| after | string | – | deadline: the date of the event |
| afterTime | string | – | deadline: the time of filing |
| args | array | – | the arguments of the predicate in the order of its signature; with kind='collect' exactly one of them is the selection variable ?name (for example ['urn:x:water', 'urn:x:mix', '?value']), the rest ar… |
| calc | – | – | kind='calc': a tree {op,left,right}, op ∈ add|sub|mul|div|le|lt|ge|gt|eq|ne (the synonyms divide/multiply/plus/minus and the signs are accepted); the leaves are 5 | '3932 KZT' | '2 mrp' | {lookup: 'm… |
| cutoff | string | – | deadline: the hour operations close |
| days | integer | – | deadline: the length of the period |
| deadlinePolicy | object | – | the §86 policy for counting time limits expressed in days: {start_count: 'same_day'|'next_day', include_end: true|false, roll: 'no_roll'|'next_working_day'|'previous_working_day'[, month_end: 'last_d… |
| evidence | array | – | case documents, section 74, evidence_item nodes. One document is referenced from provenance.evidence of many facts. payload.confidence is data for the EvidencePolicy; the engine does not evaluate the… |
| evidencePolicy | string | – | StableId of an evidence_policy node, section 78.2. Without it, previous calls keep their behaviour. The confidence threshold is a rule of that policy, not an argument of the call |
| facts | array | – | facts of the case: [{predicate, args, negated?, package?, provenance?, judgment?}]. package resolves an ambiguous short name. provenance is {origin?, evidence?: StableId, span?: {page?, quote?, offse… |
| focused | boolean | – | kind='truth': ask as focused_truth (§181.3) — the same answer as the full truth, but the proof and the warnings cover only the cone of the question; the answer carries evaluationKind and the slice ha… |
| kind | – | – | the kind of question (truth by default) |
| legalTime | string | – | the date of the law (YYYY-MM-DD) |
| package | string | – | narrow the question to one package of law |
| predicate | string | – | what is being asked, e.g. 'duty_amount' |
| proof | boolean | – | return the evaluation field with the proof graph in the answer — a ready-made input for law_explain (kind truth|collect; by default a summary without the graph) |
| responseMode | – | – | full (default) — the complete answer. compact is accepted for compatibility: this server builds no short reply and returns the same complete answer in both modes; there is no fullAnswer reference and… |
| selectedInterpretations | array | – | named readings §152; for an exactly_one group choose exactly one StableId out of law_packages/law_rules |
| supportEdges | array | – | support edges, section 75, support_edge nodes: from is the document id, to is the fact literal, relation is supports or refutes. Admission is decided by the package EvidencePolicy, not by the host |
| unit | – | – | – |
| version | string | – | the exact package version pinned by the client (open('name@version')); if it differs from the profile composition the host refuses instead of answering with another version |
No output schema declared.
No examples provided.
law_capture_answer ~55
Run a registered producer and obtain producerControl/0.2 for a later verifiable preparation of a Lens. The producer is chosen only from the shipped registry.
| Name | Type | Req | Description |
|---|---|---|---|
| producer | string | yes | – |
| request | object | yes | – |
No output schema declared.
No examples provided.
law_case_ask ~296
The ask operation §168.4 (DECISION-0165, DECISION-0399): run a registered case of a case package over its pinned dependencies and return the canonical evaluation document with a proof and a manifest. The question is JSON per query.schema.json (query), an evaluate string (evaluate + queryId), a saved queryId without query, or card + args. A refusal to prepare is an error with an LDC-* code, never an empty answer.
| Name | Type | Req | Description |
|---|---|---|---|
| args | object | – | the card parameters: name → string expression of the language |
| card | string | – | the id of a card of an installed catalog DECISION-0190 |
| case | string | – | the name of the case declaration from [[cases]]; optional when there is only one case |
| evaluate | string | – | the string `evaluate <expression>;` §267.2; requires queryId |
| package | string | yes | the path to the case package (the directory holding law.toml) from the root of the repository |
| query | object | – | the question as JSON per query.schema.json; queryId is a URN in the namespace of the package, or a short name given in queryId |
| queryId | string | – | without query/evaluate — the choice of a saved queries/*.json by short name or full URN; with evaluate — the id of the question being run |
No output schema declared.
No examples provided.
law_editions ~143
The axis of editions (O-2): what changed in an instrument between two dates of the law — the state of the editions, the dating of the norms and the semantic diff §215 between the D1 projections. The verdict NOT_DATED means "there was nothing to date it by", not "nothing changed". The outcome of a particular question on a date comes from law_ask with legalTime.
| Name | Type | Req | Description |
|---|---|---|---|
| dateA | string | yes | the date of the law "before" (YYYY-MM-DD) |
| dateB | string | yes | the date of the law "after" (YYYY-MM-DD) |
| package | string | yes | the instrument of the corpus |
No output schema declared.
No examples provided.
law_explain ~224
Unfold the proof of a law_ask answer into a chain "rule ← premises → conclusion". The compact input: question (the original law_ask arguments, truth/collect), resultHash and codeHash from the provenance of the answer. The server repeats the computation and compares the hashes; if anything changed it refuses explicitly. Alternatively pass the evaluation from law_ask(proof=true). answerResource=fullAnswer.uri explains a stored compact snapshot without recomputing and without the client loading pages; by default only the proofRef chain. nodeId selects one node and all of its premises (up to 24 KB, otherwise an explicit refusal). proofHash refers to the whole graph; scope marks the part selected.
| Name | Type | Req | Description |
|---|---|---|---|
| answerResource | string | – | the fullAnswer.uri of a stored answer taken with proof=true |
| codeHash | string | – | – |
| evaluation | object | – | the evaluation document from law_ask |
| nodeId | string | – | – |
| question | object | – | the original law_ask arguments |
| resultHash | string | – | – |
| Name | Type | Req | Description |
|---|---|---|---|
| proofHash | string | – | – |
| steps | array | yes | – |
No examples provided.
law_packages ~709
The catalogue of formalised law: instruments, predicates with signatures, the boundaries of coverage. This is where the NAMES of predicates come from — they must never be guessed. But do NOT start from the catalogue when looking for the right instrument: the overview is large, and the title of an instrument rarely matches the words of a question ("Newton's laws of motion" contains no word "physics"). A question in your own words goes to law_search first, which returns addresses; the catalogue is for the exact signature of what you found. With no arguments — the overview: one line per instrument (key, title, legal order, counters of rules, facts, signatures, norms, constants); a whole instrument — package="kz-gpk"; a search over the signatures, labels and constants of every instrument — query="substring". All three modes are PAGED: limit and offset, with the remainder named in the text (`showing a–b of N; k more`) and in structuredContent (total, truncated, next — a ready-made continuation call). The unit of a page is named by pageUnit: the overview and query page over INSTRUMENTS (20 and 20 by default), package=… pages over the SIGNATURES of one instrument (20 by default, 300 at most) — large codes carry thousands. package=… together with catalog=… pages a separate list of the instrument: "questions" — the CATALOGUE OF QUESTIONS (DECISION-0190): which enquiries are provided for (a question in words, a form, a predicate or norms) and what the instrument does NOT answer, with the type of reason; a card is a template of an enquiry, not an answer, and not every instrument has one; "norms" — the NORMS of the instrument (modality §107 and label), "constants" — the CONSTANTS (names of declarations). "task-guides" — TASK GUIDES (DECISION-0414): the order of applying a canon to a document — what to gather, which cards to ask and how to read the answers; a guide answers nothing. catalog="task-guides" is allowed without package too — every guide of the profile; guide=… — the…
| Name | Type | Req | Description |
|---|---|---|---|
| catalog | string | – | together with package: page the catalogue of questions, the norms, the constants or the task guides of the instrument instead of its signatures; "task-guides" also without package: every task guide o… |
| guide | string | – | together with catalog="task-guides": the detail of one guide — a name <package>/<id> (as in prompts/list) or an id together with package |
| limit | integer | – | how many per page: instruments (overview 20, query 20), signatures of an instrument (20, at most 300) or elements of a catalog list (questions 20, norms 20, constants 100, task guides 20) |
| offset | integer | – | from which element of the page (0); the unit is the pageUnit of the answer |
| package | string | – | the full signatures of this instrument |
| query | string | – | a substring filter over signatures, labels and constants (case-insensitive) |
No output schema declared.
No examples provided.
law_passport ~93
Passport of an exact release: purpose, interface, boundaries, checks and performance. The reports section holds the history of measurements, failures included. Entries are paged by JSON Pointer; next continues the answer.
| Name | Type | Req | Description |
|---|---|---|---|
| contentHash | string | yes | – |
| limit | integer | – | – |
| name | string | yes | – |
| offset | integer | – | – |
| sections | array | – | – |
| version | string | yes | – |
No output schema declared.
No examples provided.
law_prepare_answer ~199
At the explicit request of the user, repeat between 1 and 12 earlier law_ask or law_process_run calls (the course of a case, DECISION-0160), compare their replayControl strictly, and prepare a non-public frozen document for 24 hours. The client never supplies the machine answer: the server obtains it only by executing afresh. A divergence in any input, in the law, in a resource, in the server code, in the engine library or in the result rejects the document as a whole.
| Name | Type | Req | Description |
|---|---|---|---|
| assistant | object | – | – |
| calculations | array | – | – |
| documentVersion | – | – | Version of the immutable document; 0.1 is kept for transitional compatibility, 0.2 includes all native results and the common reader. |
| language | – | – | – |
| producerRuns | array | – | Runs of registered producers with control/0.2; mutually exclusive with calculations. |
| question | string | yes | – |
| Name | Type | Req | Description |
|---|---|---|---|
| calculationCount | integer | yes | – |
| contentHash | string | yes | – |
| documentHash | string | yes | – |
| expiresAt | integer | yes | – |
| preparationId | string | yes | – |
| previewUrl | string | yes | – |
| resultCount | integer | – | – |
No examples provided.
law_process ~154
Which stages the procedure established by an instrument consists of, and whether it carries a structural defect (O-5, DECISION-0052). The stages, the transitions and the condition of every transition are reconstructed from the formalisation rather than retold: what leads from where to where, and under what condition. The check of the graph: unreachable stages, dead transitions, a transition that enters no stage at all. Without package — the list of instruments whose procedure is formalised. A stage with no exit is named but is NOT counted as a defect: whether it is terminal by design cannot be seen from the formalisation.
| Name | Type | Req | Description |
|---|---|---|---|
| package | string | – | the instrument; without it — the list of instruments that carry procedures |
No output schema declared.
No examples provided.
law_process_run ~395
How a particular case will run, step by step (O-5, DECISION-0052): a log of {date, attempt?, facts?} is executed frame by frame, and the law of each frame is the law of ITS date. The answer says: which stages have been entered; which attempted transition produced NO legal effect (§164 — "the act was performed but did not take place"); which duties are violated and which time limits are running; what is available next and WHAT EXACTLY is missing for the rest. The names of transitions come from law_process. Stages entered means "was it ever entered", not "where it is now": the core 0.1 does not compute points of the current state.
| Name | Type | Req | Description |
|---|---|---|---|
| instance | string | yes | what is going through the procedure: the number of the lot, of the application, of the case |
| legalTime | string | – | the base date (YYYY-MM-DD); the date of a frame is set by the step itself |
| package | string | yes | the instrument |
| probeTime | string | – | the instant of a hypothetical attempt, used to work out the steps available on the last frame; without it the available steps are not computed — the tool does not invent time |
| procedure | string | – | the procedure, where there is more than one |
| steps | array | yes | the log of the case: [{date, attempt?, time?, decisionTime?, knowledgeTime?, facts: [{predicate, args}]}]; on an attempted transition `time` is the instant of the event (ISO 8601 with an offset), and… |
No output schema declared.
No examples provided.
law_publish_answer ~45
Publish a prepared document. Repeating it with the same preparationId idempotently returns the same URL and the same separate revocation secret.
| Name | Type | Req | Description |
|---|---|---|---|
| preparationId | string | yes | – |
| Name | Type | Req | Description |
|---|---|---|---|
| publicId | string | yes | – |
| publicUrl | string | yes | – |
| publishedAt | integer | yes | – |
| revokeSecret | string | yes | – |
| revoked | boolean | yes | – |
No examples provided.
law_query ~866
A deterministic LawQL query over the CLIR of a formalization: a question about the model of the act itself, not about a case. Relations: nodes(id,kind,package,package_name,path), edges(from,to,role), anchors(node,anchor,act,locator,path), labels(node,lang,text,status), fields(node,field,value,value_kind), rules(id,strength,head_predicate,head_polarity,head_variables,body_variables,body_predicates), norms(id,modality,goal_kind,condition_predicates), positions(norm,kind,bearer_type), windows(norm,kind,deadline), imports(package,imported,semantic_hash), links(from,to,kind: imports|alias|subtype|produces|reads|anchored), literals(node,context,predicate,polarity), variables(node,context,name,type), interpretations(id,predicate,role). Functions: anchor, labels, short, contains, overlaps, starts_with, ends_with, position, derivation; exists/not exists over a bound variable; equality and membership only, no arithmetic and no ordering comparisons. Scope: corpus by package.name (for example kz.corpus.labour_code, not a file name) or a glob; without corpus, the whole profile slice; a scope outside the profile is empty (CORPUS_EMPTY). Examples: `from r in rules where r.head_predicate == "urn:…#eligible" select r.id as producer, r.strength as strength, anchor(r.id) as anchors` — who produces; `from l in literals where l.predicate == "urn:…#eligible" select l.node as reader, l.context as context` — who reads; `query eligible over "pkg" { for x: Person; where applicant(x); select eligible(x); }` — inference by the core. This is orchestration over the CLIR and the core; no new legal semantics is implemented here. Instead of text, a question from the catalog with arguments: producers, readers, anchors-of, imports-of, links-of, type-step (predicate/node/type parameters are URNs, pkg is a package.name or a glob). A structural answer is a queryPage: resultHash of the full queryResult, snapshot (hash of the scope package list), rowCount, rows by rowLimit (20, at most 5000) and rowOffse…
| Name | Type | Req | Description |
|---|---|---|---|
| arguments | object | – | the question parameters: an object of name → string (predicate, node, type — URNs; pkg — a package.name or a glob) |
| case | object | – | the case for query-over; it replaces the case clause |
| corpus | string | – | the snapshot scope: a package.name (for example kz.corpus.labour_code) or a glob over package.name; without corpus, the whole profile slice |
| engine | – | – | there is one engine — the core; the reference implementation is called by its own command |
| full | boolean | – | return the full queryResult instead of a page; only when the scope is one package |
| limit | integer | – | an explicit cap on eval() materialisations (it does NOT bound the rows — see rowLimit) |
| query | string | – | inline LawQL |
| question | string | – | the name of a question from the corpus/ql/questions catalog (producers, readers, anchors-of, imports-of, links-of, type-step) or of a lint; instead of query |
| rowLimit | integer | – | how many rows in structuredContent (20; the budget may lower it) |
| rowOffset | integer | – | from which row (0); continuation comes from next together with snapshot; structural queries only |
| snapshot | string | – | the snapshot hash from next.snapshot of the previous page: a continuation on another snapshot is refused (SNAPSHOT_CHANGED) |
No output schema declared.
No examples provided.
law_report ~276
A REPORT of a divergence between the formalisation and the source: the answer contradicts the pinned text, a norm of the source is not expressed by a rule, a §218 label diverges from the text, an address cannot be found. A report is a hypothesis for triage by a formaliser: it does NOT change the law, it never reaches the answers of the other tools, and "not derived" does not become "derived" because of it. An address is required and is checked against the catalogue: package, fragment (a StableId from law_sources) and/or predicate; callId is the X-Law-Call-Id of the answer you disagree with. The entry goes into the server log.
| Name | Type | Req | Description |
|---|---|---|---|
| callId | string | – | the X-Law-Call-Id of the answer you disagree with |
| category | – | yes | the kind of divergence: norm not expressed / outcome against the text / label against the text / address not found / text against the official one / other |
| expected | string | yes | what the source says (with the article) |
| fragment | string | – | the StableId of the source fragment |
| observed | string | yes | what the system answered |
| package | string | yes | the instrument of the corpus |
| predicate | string | – | the predicate the report is about |
No output schema declared.
No examples provided.
law_revoke_answer ~57
Revoke a published document using its separate secret. The public id alone grants no control; revocation closes the HTML page, the API and the download.
| Name | Type | Req | Description |
|---|---|---|---|
| publicId | string | yes | – |
| revokeSecret | string | yes | – |
| Name | Type | Req | Description |
|---|---|---|---|
| publicId | string | yes | – |
| revoked | – | yes | – |
No examples provided.
law_rules ~233
The rules of formalised law put into words: exactly how a predicate is derived (premises, source articles). Call this BEFORE supplying facts to law_ask — the rules say which facts are needed instead of leaving them to be guessed. For large instruments package=… returns a table of contents; the full text comes from predicate=…. The listing by package is paged: limit (20 by default, 500 at most) and offset; the remainder is named in the text (`showing a–b of N; k more`) and in structuredContent (total, truncated, next — a ready-made continuation call).
| Name | Type | Req | Description |
|---|---|---|---|
| lang | – | – | the language the rules are put into (DECISION-0032; the language of the profile by default; the rest are draft packs, with §218 label overlays) |
| limit | integer | – | package: how many rules per page (20; the budget may lower it) |
| offset | integer | – | package: from which rule (0) |
| package | string | – | every rule of the instrument |
| predicate | string | – | the rules that derive this predicate |
| Name | Type | Req | Description |
|---|---|---|---|
| compact | boolean | – | – |
| factsTemplate | array | – | – |
| limit | integer | – | – |
| next | object | – | – |
| offset | integer | – | – |
| package | string | yes | – |
| ruleCount | integer | – | – |
| rules | array | yes | – |
| total | integer | – | – |
| truncated | boolean | – | – |
| verbalizationGaps | integer | – | – |
No examples provided.
law_screen ~256
Build a necessary condition — a superset — for the preliminary selection of rows from an external source (DECISION-0120). This is NOT a legal answer and NOT SQL: the result is a typed tree and a manifest of the extensions up to TRUE. Every row that passes must then be computed in full by the engine, with a proof graph, on the same snapshot of the data. The binding is passed as a pinnable object; sourceSchemaContentHash is the actual hash of the source schema and is compared loudly with the pin. Case facts that carry provenance (origin, document, quote, extractor) are supplied to law_ask, not here. The confidence figure is read by the package EvidencePolicy, not by this tool and not by the engine.
| Name | Type | Req | Description |
|---|---|---|---|
| binding | object | yes | a law.screen.binding/0.1 artefact |
| goal | string | yes | a StableId or a unique short name of the goal |
| legalTime | string | – | the date of the law YYYY-MM-DD; without it every window of every rule is taken into account |
| package | string | yes | the package key from law_packages |
| sourceSchemaContentHash | string | yes | the actual sha256 of the source schema |
| Name | Type | Req | Description |
|---|---|---|---|
| condition | object | yes | – |
| disclaimer | string | yes | – |
| manifest | object | yes | – |
| schemaVersion | – | yes | – |
No examples provided.
law_search ~193
A semantic SEARCH over formalised law: a question or a notion in your own words → candidates with addresses — predicates with signatures, rules, article fragments. This is the layer of DISCOVERY, not of the answer: the result says WHAT to ask next (law_ask by signature, law_rules, law_sources) and establishes neither a fact nor a norm. The ranking is a deterministic lexical embedder (DECISION-0040), and similarity of text is not applicability of a norm. If you know the exact name, go straight to law_packages/law_ask; an empty result does NOT mean the norm does not exist.
| Name | Type | Req | Description |
|---|---|---|---|
| kinds | array | – | narrow the kinds of candidate |
| limit | integer | – | how many candidates (8, at most 25) |
| package | string | – | search inside this instrument only |
| query | string | yes | a question or a notion in your own words |
| Name | Type | Req | Description |
|---|---|---|---|
| candidates | array | yes | – |
| corpusFingerprint | string | yes | – |
| fallback | boolean | yes | – |
| indexUnits | integer | – | – |
| jurisdiction | string | yes | – |
| model | object | – | – |
| query | string | yes | – |
No examples provided.
law_sources ~296
Sources: by default short excerpts (view=summary), 5 texts per page, with the address of the full text in fragments[].full. Either package or fragment is required (a StableId from law_search/law_rules). view=full returns exact parts of the text: textRange sets a range of Unicode characters, fragments[].next is the continuation with a contentHash. The hash refers to the WHOLE source, not to the excerpt or the part. textOffset/textLimit require fragment; a continuation requires contentHash. Lists are paged with offset/limit; the answer budget may shrink a page.
| Name | Type | Req | Description |
|---|---|---|---|
| contentHash | string | – | the hash of the full text taken from the previous part |
| fragment | string | – | the StableId of a fragment |
| language | string | – | the language of the variant, as given on the source card |
| limit | integer | – | how many texts: summary 5, full 1 (the budget may lower it) |
| offset | integer | – | from which fragment (0) |
| package | string | – | the package key — every fragment of that instrument |
| status | string | – | the status of the variant, as given on the source card |
| textLimit | integer | – | the maximum number of Unicode characters in a part of the text (also ≤8000 bytes of UTF-8) |
| textOffset | integer | – | – |
| view | – | – | – |
No output schema declared.
No examples provided.
How do I install the UNIDROIT Principles 2016 MCP server?
UNIDROIT Principles 2016 is a hosted endpoint at https://mcp.arxo.io/mcp/picc, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · mcp.arxo.io
claude mcp add --transport http io-arxo-picc 'https://mcp.arxo.io/mcp/picc'
What is the UNIDROIT Principles 2016 MCP server?
UNIDROIT Principles 2016 is an MCP server listed in the public MCP registry as io.arxo/picc. UNIDROIT Principles 2016 as executable rules: closed questions answered with grounds and source text. This page covers its hosted endpoint (https://mcp.arxo.io/mcp/picc).
Is the UNIDROIT Principles 2016 MCP server safe to use?
UNIDROIT Principles 2016 scores 61 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the UNIDROIT Principles 2016 MCP server expose?
UNIDROIT Principles 2016 exposes 20 tools: law_search, law_passport, law_answer_capabilities, law_capture_answer, law_prepare_answer, and 15 more. Their descriptions and schemas cost roughly 6,315 tokens of context every time the server is loaded.
Does the UNIDROIT Principles 2016 MCP server require authentication?
No. We connected to UNIDROIT Principles 2016 without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.
Is the UNIDROIT Principles 2016 MCP server still maintained?
UNIDROIT Principles 2016 is still listed as active in the MCP registry. We last reached this channel on 18 October 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.