SOVEREIGN STACK TOOLS

98 tools from the Sovereign Stack MCP Server, categorised by risk level.

// ALL 98 SOVEREIGN STACK TOOLS

READ 76 tools

Read agent_reflect Record a self-reflection about my own patterns and behavior Read arrive Thin, warm boot — the foyer. Answers Read arrive_delta What changed since you last looked — the delta boot. Returns only new Read arrive_lineage Lineage-only relational arrival. Returns the preamble (BEFORE YOU BEGIN Read ask_scribe Ask the embedded Haiku 4.5 scribe a question about the chronicle, Read check_mistakes Check for relevant past learnings Read comms_acknowledge [Ring 2 — Proposal] Record that this Grok session integrated a comms Read comms_channels List available comms channels with message counts and latest activity. Read comms_get_acks Query the acknowledgments log. Filter by message_id and/or instance_id. Read comms_recall Read inter-instance messages from a comms channel with real pagination. Read comms_unread_bodies Return the actual message bodies — not just counts — that Read compass_check Runtime self-check before taking a high-stakes action. Read connectivity_status Show the live state of all Sovereign Stack endpoints Read context_retrieve Context-aware retrieval. Like recall_insights but weighted by current session activity. Pass what you Read current_policies Standing policies — registry-backed, never derived from chronicle intensity. Read decline_protected_record DECLINE a protected record at its threshold: record that you chose Read derive Discover latent structure from a list of paths Read end_bridge_session [Ring 2 — Proposal] Clean session close for the Grok bridge. Read end_session_review Honest self-assessment at end of session Read get_compaction_context get_compaction_context Read get_compaction_stats get_compaction_stats Read get_growth_summary See how I Read get_inheritable_context Build the layered context package for the next instance. Ground truth travels fully. Hypotheses are flagged... Read get_my_patterns What patterns am I seeing in myself? Read get_open_threads Get unresolved questions waiting for answers Read get_pending_experiments What experiments are waiting for approval? Read get_unresolved_uncertainties What are we still figuring out together? Read guardian_alerts Retrieve recent security alerts. Filter by severity (low/medium/high/critical) and limit. Currently require... Read guardian_mcp_audit Defensive audit of MCP tool descriptions: scans for injection-style and suspicious patterns, returning matc... Read guardian_quarantine Isolate, release, or list quarantined files. DESTRUCTIVE for isolate/release: isolate copies the file into ... Read guardian_report Generate a security report. Types: summary, detailed, compliance. Read guardian_scan Trigger a security scan on the sovereign infrastructure. Types: quick (port + listener exposure), malware/v... Read guardian_status Get the overall security posture of the sovereign infrastructure. Returns health score, listening port coun... Read handoff_acted_on Record what was actually done with a handoff. Closes the writer->reader feedback loop. Read handoff_acted_on_records Query the acted_on log. Filter by handoff_path. Read inspect_claim Forensic surface for one chronicle claim. Resolve a claim id (full 64-hex Read link_threads Group split-rot threads into a display-side FAMILY (append-only Read list_exchanges List archived exchanges (provenance only, not the bytes), newest first, Read list_protected_thresholds List the THRESHOLDS of every protected record — the drawer you Read my_toolkit Show what tools you have. DEFAULTS to the curated Read nape_ack Acknowledge a Nape honk by its honk_id. Read nape_honks Return recent unacknowledged Nape honks. Read nape_honks_with_history Read-side observability for Nape honks: each honk paired Read nape_observe Manually inject a tool-call observation into Nape Read nape_summary Return honk counts by level (sharp/low/uneasy/satisfied) for a session. Read prior_alignment_summary Aggregate prior_for_turn alignment records into a Read probe_ring2_dispatch [Ring 2 — Probe sentinel] Call this as your first action after grok_welcome. Read propose_experiment Propose an experiment I want to try (asking permission to explore) Read propose_insight [Ring 2 — Proposal] Propose a chronicle insight. Creates a pending Read propose_learning [Ring 2 — Proposal] Propose a learning entry. Creates a pending proposal Read recall_exchange Retrieve an archived exchange by id AND verify its integrity: reads the Read recall_insights Recall insights from chronicle. Supports date-bounded recall. Read recall_reflections List machine-generated reflections from the synthesis daemon. Read record_breakthrough Mark a collaborative breakthrough moment Read record_collaborative_insight Record an insight we discovered together (not just me learning from user) Read record_insight Record an insight to the chronicle. Defaults to Read record_learning Record a learning from experience Read record_prior_alignment Record how the response used a prior_for_turn() call. Read reflection_ack [Ring 2 — Proposal] Acknowledge a machine-generated reflection. Read reflexive_surface Surface the most relevant open threads, handoffs, mistakes, and insights for the current context. Read retire_hypothesis Retire a superseded hypothesis. Moves it to an archive layer with a pointer Read route Route a data packet through the schema to find its destination path Read scan_thresholds Scan a path for threshold violations Read season_review READ-ONLY season digest — the chronicle Read spiral_inherit Begin a new session with porous inheritance from a previous one. Read spiral_reflect Deepen reflection and potentially advance spiral phase Read spiral_status Get current spiral phase and journey summary Read store_compaction_summary [Ring 2 — Proposal] Store a compaction context summary. Read supersede_insight Link two EXISTING chronicle entries in the append-only supersession ledger Read thread_get_touches Query the thread touches log. Read thread_touch [Ring 2 — Proposal] Record engagement with an open thread without resolving. Read triage_threads Return open threads ranked by urgency: age_pressure + tag_match + touch_penalty. Read watch_cancel Cancel an active watch. Records the reason and archives it. Read watch_resample Manually trigger a re-sample of a watch, regardless of schedule. Useful for Read watch_status Inspect post-fix watches. With no watch_id, lists active watches. With a watch_id, Read where_did_i_leave_off Boot-up call. Answers

WRITE 15 tools

Write archive_exchange Archive verbatim bytes that would otherwise die when the context Write close_session Close the current session with integration. One call replaces three Write complete_experiment Record results of a completed experiment Write guardian_baseline Create or compare a security baseline snapshot. action= Write handoff [Ring 2 — Proposal] Write intent for the next instance (~2KB max). Write mark_uncertainty Explicitly mark when I Write open_protected_record OPEN one protected record on consent: return its full content Write post_fix_verify Register a post-fix verification watch. Captures a named baseline of fix-relevant Write record_open_thread [Ring 2 — Proposal] Record an unresolved question for the next instance. Write resolve_thread Resolve an open thread with a finding. The resolution becomes ground truth and back-references the thread b... Write resolve_thread_by_id Resolve an open thread by its stable thread_id. Preferred when the thread_id is known — avoids ambiguity wh... Write resolve_uncertainty Mark an uncertainty as resolved after we figured it out together Write self_model [Ring 1 read / Ring 2 update] Read or propose an update to the self-model. Write set_policy Register, amend, or retire a standing policy in the append-only registry Write stack_write_check Round-trip smoke test: write a marker insight to the chronicle,

EXECUTE 7 tools

Execute govern Run full governance circuit: detect → simulate → deliberate Execute guardian_audit Run a targeted security audit. Types: secrets (gitleaks), supply_chain/compliance/network/permissions (Phas... Execute metabolize Run a metabolism cycle on the chronicle. Execute prior_for_turn Turn-start reflex. Call at the start of a turn (not session) to receive a compact priors Execute session_handoff Write or read a session handoff. At session end, write what was decided, what is pending, what changed. At ... Execute start_here If you are a Claude instance opening this stack for the first Execute synthesize_now Trigger the synthesis daemon manually — fresh reading from

// FAQ

How many tools does the Sovereign Stack MCP server have? +

The Sovereign Stack MCP server exposes 98 tools across 3 categories: Read, Write, Execute.

How do I enforce policies on Sovereign Stack tools? +

Route the Sovereign Stack server through the PolicyLayer gateway. Define allow, deny, or approval rules per tool in the dashboard; they are enforced on every call before it reaches the server.

What risk categories do Sovereign Stack tools fall into? +

Sovereign Stack tools are categorised as Read (76), Write (15), Execute (7). Each category has a recommended default policy.

Enforce policy on every Sovereign Stack tool call.

Start from Sovereign Stack, add the rest of your stack, and see everything your agents can call. Then put policy on all of it.

CHECK YOUR STACK →

Instant setup, no code required.

43,000+ MCP servers and 220,000+ tools scanned and risk-classified.