// SCAN REPORT

Arifos

91 tools. 26 can modify or destroy data without limits.

1 destructive tool with no built-in limits. Policy required.

Last updated: 22 Aug 2026

26 can modify or destroy data

65 read-only

91 tools total

Community server · catalogue entry checked 27/06/2026

How to control Arifos ↓

TOOL MAP

What Arifos exposes to your agents

Read (65) Write / Execute (14) Destructive / Financial (1)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous Arifos tools

Financial · High wealth_flow_liquidity The name 'wealth_flow_liquidity' contains financial terminology ('wealth', 'flow', 'liquidity') suggesting it may handle financial transactions or asset movements. Execute · High arif_cc_forge_dry_run The 'dry_run' pattern indicates test execution of logic or processes. Execute · Medium arif_geox_reason The tool executes a complex multi-phase reasoning pipeline (evidence synthesis, abduction, contradiction scanning) on input data. Execute · Medium arif_mind_step This tool executes reasoning steps, which are computational operations.

26 of Arifos's 91 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Arifos

PolicyLayer is an MCP gateway — it sits between your AI agents and Arifos, and nothing reaches the server without passing your rules. These are the rules we recommend:

Block financial tools by default

{
  "wealth_flow_liquidity": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Requires human approval."
      }
    ]
  }
}

Financial tools should be explicitly enabled per use case, not open by default.

Rate limit write operations

{
  "arif_cc_reply_compose": {
    "limits": [
      {
        "counter": "arif_cc_reply_compose_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "arif_cc_evidence_fetch": {
    "limits": [
      {
        "counter": "arif_cc_evidence_fetch_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Arifos — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON ARIFOS →

Instant setup, no code required.

FULL CATALOGUE

All 91 Arifos tools

FINANCIAL 1 tools

Financial wealth_flow_liquidity wealth_flow_liquidity

EXECUTE 11 tools

Execute arif_cc_forge_dry_run arif_cc_forge_dry_run Execute arif_cc_judge_action arif_cc_judge_action Execute arif_cc_mind_reason Use this when the user wants to perform constitutional reasoning. Execute arif_geox_reason Run phase-driven evidence synthesis, abduction, and contradiction scanning on geological evidence. Execute arif_judge_console 888_JUDGE interactive constitutional verdict console Execute arif_mind_step Execute a single bounded reasoning step within a session. Execute arif_think Execute constitutional reasoning and cognitive metabolism. Execute arifos_compute_civilization Civilization engine: sustainability_path | game_theory | cross_evidence_synthesize Execute arifos_compute_physics Physics engine: petrophysics | stratigraphy_correlate | geometry_build | monte_carlo | entropy_audit | growth_ Execute forge_dry_run forge_dry_run Execute judge_action judge_action

WRITE 3 tools

Write arif_cc_reply_compose Use this when the user wants to compose a governed response. Write capability_select capability_select Write lsp_rename_tool Propose a rename refactor (888_HOLD required).

READ 65 tools

Read arif_cc_evidence_fetch Use this when the user wants to fetch evidence from a URL. Read arif_cc_gateway_handshake arif_cc_gateway_handshake Read arif_cc_heart_critique Use this when the user wants an ethical risk assessment. Read arif_cc_memory_recall Use this when the user wants to access associative memory. Read arif_cc_ops_vitals Use this when refreshing the thermodynamic health panel. Read arif_cc_sense_observe Use this when refreshing the reality sensing panel. Read arif_cc_session_status arif_cc_session_status Read arif_cc_vault_dry_seal arif_cc_vault_dry_seal Read arif_cc_vault_list Use this when refreshing the vault audit panel. Read arif_detect_institutional_shadow_drift arif_detect_institutional_shadow_drift Read arif_detect_narrative_tension arif_detect_narrative_tension Read arif_floor_status arif_floor_status Read arif_geox_pattern_match Detect stratigraphic and geophysical patterns in well logs or seismic data using Physics-9 abduction grammar. Read arif_geox_synthesize Synthesize multi-source geoscience data into a coherent interpretation with gap detection. Read arif_heartbeat arif_heartbeat Read arif_kernel_check Pre-flight floor hint. Real 888 is arif_judge + human. Read arif_kernel_health Light kernel health using core if available, else FS signals. Read arif_mind_claim_attest Bind a claim to evidence receipts and determine language strength. Read arif_mind_trace_get Retrieve the full reasoning trace for a cognitive session. Read arif_ops_dashboard 777_OPS live telemetry and thermodynamic dashboard Read arif_organ_attest arif_organ_attest Read arif_organ_consensus arif_organ_consensus Read arif_os_attest arif_os_attest Read arif_probe arif_probe Read arif_recall arif_recall Read arif_resolve_tool Resolve a tool name or alias to canonical form. Read arif_scan_local_instructions arif_scan_local_instructions Read arif_session_budget arif_session_budget Read arif_stack_health_probe arif_stack_health_probe Read arif_wiki_ask arif_wiki_ask Read arif_wiki_ingest arif_wiki_ingest Read arif_wiki_map arif_wiki_map Read arif_wiki_search arif_wiki_search Read arifos_compute_finance Finance engine: npv | irr | mirr | emv | dscr | payback | profitability_index | allocation_rank | personal_dec Read arifos_oracle_bio WELL state oracle: snapshot_read | readiness_check | floor_scan | log_update | deltascan (Proof-of-Friction ga Read arifos_oracle_world World oracle: geox_scene_load | geox_skills_query | macro_snapshot | series_fetch | series_vintage_fetch Read arifos_verify_location arifos_verify_location Read capability_search Semantic search over the federation's 97 MCP tools. Read fetch_tool Fetch full document content by ID from search results. Read G02_omega_status G02_omega_status Read G02_route G02_route Read gateway_handshake gateway_handshake Read get_constitutional_health Read-only constitutional health snapshot. Returns F1-L13 floor status, telemetry, and widget URI. Read list_recent_verdicts Read-only summary of the most recent constitutional verdicts. Phase 1: no write path exposed. Read lsp_find_references_tool lsp_find_references_tool Read lsp_get_diagnostics_tool lsp_get_diagnostics_tool Read lsp_get_symbols_tool lsp_get_symbols_tool Read lsp_go_to_definition_tool lsp_go_to_definition_tool Read lsp_query_tool lsp_query_tool Read mcp_drift_check mcp_drift_check Read mcp_health_check WEALTH organ health check with provenance and schema version. Read metabolic_vitals Live thermodynamic telemetry dashboard Read ops_vitals ops_vitals Read render_vault_seal render_vault_seal Read search_tool Search for documents matching the query. Returns document IDs. Read session_status session_status Read vault_dry_seal vault_dry_seal Read vault_list vault_list Read wealth_conservation_capital wealth_conservation_capital Read wealth_gradient_price wealth_gradient_price Read wealth_health_check wealth_health_check Read wealth_hysteresis_ledger wealth_hysteresis_ledger Read wealth_inertia_leverage wealth_inertia_leverage Read wealth_signal_information wealth_signal_information Read wealth_system_registry_status Compare intended, registered, and externally visible surfaces.

OTHER 11 tools

Other arif_canary arif_canary Other arif_get_affordance arif_get_affordance Other arif_organ_attest_all arif_organ_attest_all Other G02_validate_axis_call G02_validate_axis_call Other vault_seal_card vault_seal_card Other wealth_boundary_governance wealth_boundary_governance Other wealth_energy_productivity wealth_energy_productivity Other wealth_entropy_risk wealth_entropy_risk Other wealth_field_macro wealth_field_macro Other wealth_game_coordination wealth_game_coordination Other wealth_time_discount wealth_time_discount

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Arifos

Can an AI agent move money through the Arifos MCP server? +

Yes. The Arifos server exposes 1 financial tools including wealth_flow_liquidity. Without a policy, an autonomous agent can call these with no spend caps, no rate limits, and no approval flow. PolicyLayer lets you block financial tools by default, require human approval, or set per-tool rate limits — enforced on every call.

How do I prevent bulk modifications through Arifos? +

The Arifos server has 3 write tools including arif_cc_reply_compose, capability_select, lsp_rename_tool. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Arifos.

How many tools does the Arifos MCP server expose? +

91 tools across 3 categories: Execute, Read, Write. 65 are read-only. 26 can modify, create, or delete data.

How do I enforce a policy on Arifos? +

Register the Arifos MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Arifos tool call.

Deterministic rules across all 91 Arifos tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON ARIFOS →

Instant setup, no code required.

91 Arifos tools catalogued and risk-classified — across an index of 46,500+ MCP servers.

// WHERE THIS COMES FROM

These policies come from Arifos's registry record.

The record behind this page: verified identity, auth posture, risk grade, every tool classified, recommended policy — re-checked continuously.

Teams ship this data inside their own products. See what a licence covers →