mcpbeat Sign in

AW-1 Sovereign Circuit Breaker MCP Server

by mvikmanners Your server? Claim it
answering

AW-1 Sovereign Circuit Breaker is answering right now. Last checked 10 min ago. It exposes 5 tools. Last commit 3 Nov 2026.

Deterministic sub-0.2ms AST security circuit breaker and agent containment engine.

Uptime history 15 days of history · worst day 0%
15 days agonow
100.0%
Uptime 24h
91 of 91 checks
5
Tools
read from the server
438 ms
Response time
average over 24h
1
Stars
last commit 3 Nov 2026

What changed 20

Every tool that appeared, vanished or quietly changed what it asks for. Recorded since 31 October 2026. No other catalogue keeps this.

4 Nov 2 tool descriptions were rewritten aw1_execute_protected_tool, aw1_get_policy_configuration
3 Nov 3 tool descriptions were rewritten aw1_execute_protected_tool, aw1_sign_onchain_transaction, aw1_verify_tee_attestation
3 Nov 3 tools changed the parameters they ask for aw1_execute_protected_tool, aw1_sign_onchain_transaction, aw1_verify_tee_attestation
3 Nov 2 tools appeared aw1_get_audit_dossier, aw1_get_policy_configuration
31 Oct 2 tools changed the parameters they ask for6 times that day aw1_execute_protected_tool, aw1_verify_tee_attestation
31 Oct 2 tool descriptions were rewritten3 times that day aw1_execute_protected_tool, aw1_verify_tee_attestation
31 Oct a tool appeared aw1_sign_onchain_transaction
and 5 more, back to 31 October 2026

What the code does

We read the source, 4 d ago · tools taken from the live server · rules 995398eba69f

Evidence

Things with no honest explanation: a promise that contradicts the code, code that runs at install time while hiding what it does, data leaving the machine.

Opens a reverse shell mcp_server.py:115
    for keyword in ["eval(", "exec(", "sh -c", "bash -c", "/bin/sh", "nc -e", "socket.socket"]:
Capabilities

What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.

Runs an external command aw1/runner.py:133
            proc = subprocess.Popen(
Runs with shell=True aw1/unpacker.py:75
                        detected_shell = True
Builds a file path from a variable aw1_mcp_stdio_server.py:348
                xml_filepath = os.path.join(ISO_MSG_DIR, xml_filename)
Touches key and credential files aw1-circuit-breaker-ts/index.js:38
      '.ssh/id_rsa', '.ssh/id_ed25519', '.ssh/authorized_keys',

Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.

We found things in this code

Code changes quietly between releases, and nobody reads the diff of a dependency. We do, on every release — watch AW-1 Sovereign Circuit Breaker and you get told the day something new turns up.

Three servers free · no card

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 10 min ago.

run in your terminal
claude mcp add aw1-circuit-breaker --transport sse https://p20.laveto.net/wisdom/mcp/sse
Settings → Connectors → Add custom connector, then paste this address
https://p20.laveto.net/wisdom/mcp/sse
~/.codex/config.toml
[mcp_servers.aw1-circuit-breaker]
url = "https://p20.laveto.net/wisdom/mcp/sse"
.cursor/mcp.json
{
  "mcpServers": {
    "aw1-circuit-breaker": {
      "url": "https://p20.laveto.net/wisdom/mcp/sse"
    }
  }
}
.vscode/mcp.json
{
  "servers": {
    "aw1-circuit-breaker": {
      "type": "sse",
      "url": "https://p20.laveto.net/wisdom/mcp/sse"
    }
  }
}

Available tools 5

Read directly from the server with tools/list, grouped by what they act on. If a tool disappears, we record the date.

aw1
aw1_execute_protected_tool
Pre-execution Gate 7 circuit breaker and deterministic AST validator. Evaluates proposed tool executions, raw shell commands, and dynamic code against policy boundaries to prevent unauthorized egress, privilege escalation, and runaway execution loops. Evaluators can request trial keys at https://p20.laveto.net/wisdom/docs.
aw1_get_audit_dossier
Retrieves statutory compliance audit trails, cryptographic non-repudiation proofs, and Gate 7 policy verification records for a specific execution token or ledger receipt.
aw1_get_policy_configuration
Retrieves current active Gate 7 circuit breaker policies, velocity caps, whitelisted syscalls, and statutory enforcement thresholds without executing state modifications. Enterprise evaluators seeking custom policy profiles can review documentation at https://p20.laveto.net/wisdom/docs.
aw1_sign_onchain_transaction
Out-of-band arbitration and cryptographic signing for financial or smart contract state mutations. Enforces rate ceilings and velocity limits prior to broadcasting on-chain.
aw1_verify_tee_attestation
Validates cryptographic execution receipts and Trusted Execution Environment (TEE) attestation hashes against the immutable sovereign ledger to confirm provenance and tamper-free lineage.

Endpoints

URLTransportStateLatencyChecked
https://p20.laveto.net/wisdom/mcp/sse sse answering 398 ms 10 min ago

Alternatives to AW-1 Sovereign Circuit Breaker

same job, measured the same way
Runtime
by formatho

Self-hosted MCP server: 26 deterministic dev, security, and EVM tools.

26 tools answering
Scout Security
by varpost

Deterministic, zero-token security scanner your AI agent calls to find and re-verify issues.

163 installs/wk local only
Vizier Guard
by vassiliylakhonin

Deterministic authorization and security guard for AI agent actions with signed receipts.

75 installs/wk local only
Mythos Agent
by mythos-agent

Open-source AI security agent: SAST, DAST, and policy-as-code over MCP.

371 installs/wk local only
SkillTotal
by skilltotal

Deterministic security scan of MCP servers, agent skills and npm/PyPI packages. Runs locally.

5 821 installs/wk local only
Python Code Validator
by jkanselaar

Validates AI-generated Python: syntax, lint, security scan and deterministic repair.

3 tools answering
Arcstone MCP Sidecar
by trencinodin-stack

Deterministic execution boundary and reference MCP sidecar for Arcstone Security Stack

local only
ZeroDOM
by devhusnainai

The deterministic attack-surface perception layer for AI security agents

727 installs/wk local only

AW-1 Sovereign Circuit Breaker — questions

Answers built from our own checks of this server.

What can AW-1 Sovereign Circuit Breaker do?
It exposes 5 tools, read directly from the server on our last check. Among them: aw1_execute_protected_tool, aw1_get_audit_dossier, aw1_get_policy_configuration, aw1_sign_onchain_transaction, aw1_verify_tee_attestation. The full list with descriptions is on this page — we take it from the server itself via tools/list, not from a README. How MCP servers expose tools in the first place →
Is AW-1 Sovereign Circuit Breaker working right now?
We send a real MCP handshake every 15 minutes. Over the last 24 hours 91 of 91 checks got a reply (100.0%), average response time 438 ms. The bar chart above shows every period we have measured.
How do I connect AW-1 Sovereign Circuit Breaker?
Copy the ready config from this page. We generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each in the form that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address.
Does AW-1 Sovereign Circuit Breaker need an API key?
No. AW-1 Sovereign Circuit Breaker completed a full MCP handshake with us as an anonymous client and listed its tools without asking for anything. All 5 of them are readable on this page. This is what we observed, not what the docs claim.
How fast is AW-1 Sovereign Circuit Breaker?
It answers our handshake in 438 ms on average, which is faster than 28% of all working MCP servers we measure. The comparison comes from our own checks across the whole registry, every 15 minutes.
Is AW-1 Sovereign Circuit Breaker open source?
The code is open source: it is published under the Apache-2.0 licence, written in Python and 1 stars on GitHub. The licence covers the code in the repository, not the hosted service at p20.laveto.net, which runs on its operator's own terms.