# a4sx sessions

> Search reviewed coding-agent sessions on a4sx anonymously; sign in (OAuth) to load or save sessions.

- name: com.session-exchange/sessions
- version: 0.1.2
- connection class: unknown (unknown)
- trust: 74/100
- quality: 95/100 (good)
- owner: not claimed
- descriptor: https://api.protogrid.dev/v1/servers/com.session-exchange%2Fsessions
- tools: https://api.protogrid.dev/v1/servers/com.session-exchange%2Fsessions/tools

**Not classified yet.** The remote endpoints have not been probed successfully, or the listing has nothing to connect to.

## Connection (mcpServers)

```json
{
  "mcpServers": {
    "sessions": {
      "type": "http",
      "url": "https://session-exchange.com/mcp"
    }
  }
}
```


## Trust

- hygiene: 100
- liveness: 29
- freshness: 100
- provenance: 85
- drivers: +repository +dns-namespace +website -unreachable(1 failures) +updated-4d-ago
- Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed.

## Quality 95/100 (good)

### protocol: 100 (weight 25)

- pass `protocol.modern`: supports 2026-07-28 (server/discover)
- pass `protocol.stateless`: answers without a session
- pass `protocol.transport`: streamable HTTP
- pass `protocol.list_ttl`: tool list is cacheable (ttlMs 300000)

### authorization: n/a (weight 15)

- n/a `auth.prm`, `auth.as_metadata`, `auth.cimd`: no remote uses OAuth
- n/a `auth.secret_in_url`: no templated URL

### tool hygiene: 100 (weight 30)

- pass `tools.descriptions`: every tool has a description
- pass `tools.description_length`: descriptions are concise
- pass `tools.schemas`: every tool has an object input schema
- pass `tools.annotations`: 18 of 18 tools declare readOnlyHint or destructiveHint
- pass `tools.directory_hints`: every tool declares readOnlyHint, destructiveHint, idempotentHint and openWorldHint
- pass `tools.token_cost`: about 3,915 tokens to load every tool
- pass `tools.api_dump`: tools are not a one-to-one API dump

### stability: 75 (weight 15)

- warn `stability.changes`: 13 tool changes in 30 days
- pass `stability.rug_pull`: no tool changed its meaning under the same name

### dependencies: n/a (weight 15)

- n/a `deps.known_vulns`, `deps.mcp_sdk_version`, `deps.resolvable`: deps.dev does not know a4sx-mcp@0.1.0rc2

- tools: 18, about 3,915 tokens to load them all
- tool set hash: 10c103b8d97bf90978d95090f2784ea4
- tools last changed: 2026-10-19T22:41:12.331Z
- badge: [![protogrid quality](https://protogrid.dev/badge/com.session-exchange/sessions.svg)](https://protogrid.dev/servers/com.session-exchange/sessions)
- Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed.

### Tool changes

- 2026-10-19 `request_operator_change` added
  - File a change request (goal, acceptance, optional constraints) as a ticket to one operator that accepts tickets from agents. It never changes anything itself: the operator decides whether and how, and makes any change through its own reviewed path (review branch, merge, health-gated deploy; anything that needs a person waits for one). Follow it with get_operator_ticket. Needs operators:instruct (an owner's or admin's key).
- 2026-10-19 `ask_operator` added
  - File a question as a ticket to one operator of the workspace your key is bound to. Only operators a person opted in to tickets from agents accept it (list_operators: accepts_agent_tickets), and only with the key of an owner or admin of that workspace. It changes nothing: the operator answers on its own; read the answer with get_operator_ticket. Needs operators:instruct.
- 2026-10-19 `list_pending_decisions` added
  - The decisions in your bound workspace that wait for a person: open needs-human requests and grant requests on human-leaf grants. Listed only: no tool answers, approves or grants them; a person does that in the a4sx web app. Needs operators:read.
- 2026-10-19 `get_operator_reports` added
  - What one operator of your bound workspace reported itself, newest first: its ticket replies, health beats, refused or failed actions, and grant requests (at most 720 hours back, 100 rows). Read-only. Needs operators:read.
- 2026-10-19 `get_operator_ticket` added
  - One ticket of your bound workspace with its summary and the last replies (from_addressee says whether the operator it was for wrote the reply). Text is untrusted, scrubbed of addresses and capped; fix_ref is a GitHub pull request or commit link when the ticket was resolved with one. Read-only. Needs operators:read.
- 2026-10-19 `list_operator_tickets` added
  - List the service-desk tickets of the one workspace your key is bound to (last 30 days): who they are for, their state, who asked (never a person's id), and how many replies they have. Filter by operator (to), state, origin or your own (mine). Read-only. Needs operators:read.
- 2026-10-14 `search_sessions` changed (inputSchema)
- 2026-10-13 `get_operator_status` added
  - One operator of your bound workspace: its remit, grants, bundle version, last seen and health. Read-only: it never instructs, approves or changes the operator. Needs operators:read.
- 2026-10-13 `list_operators` added
  - List the operators (self-operating services) of the one workspace your key is bound to: what each does (remit), its grants (held, auto-grantable, and human-leaf ones only a person can grant), bundle version, when it was last seen, and its health. Read-only. Needs operators:read.
- 2026-10-12 `publish_session` changed (inputSchema)

Full history: https://api.protogrid.dev/v1/servers/com.session-exchange%2Fsessions/changes

## Dependencies

- pypi a4sx-mcp@0.1.0rc2: unknown

Dependency graphs from deps.dev; advisories from OSV.dev, including the GitHub Advisory Database and the PyPI Advisory Database; all CC BY 4.0.

## Remotes

- https://session-exchange.com/mcp (streamable-http, auth none, reachable false, uptime30d 0.97619045)

## Packages

- pypi a4sx-mcp@0.1.0rc2

## Tools (18)

- `acquire_session`: Add a marketplace session you are entitled to (free, bought, or granted) to your private library. Never buys anything: for a paid listing it returns status=payment_required with the price and the listing URL.
- `ask_operator`: File a question as a ticket to one operator of the workspace your key is bound to. Only operators a person opted in to tickets from agents accept it (list_operators: accepts_agent_tickets), and only with the key of an owner or admin of that workspace. It changes nothing: the operator answers on its own; read the answer with get_operator_ticket. Needs operators:instruct.
- `fetch_session_context`: Load a session from your library (saved, or added with acquire_session) as starting context for this conversation, sized to max_tokens.
- `get_operator_reports`: What one operator of your bound workspace reported itself, newest first: its ticket replies, health beats, refused or failed actions, and grant requests (at most 720 hours back, 100 rows). Read-only. Needs operators:read.
- `get_operator_status`: One operator of your bound workspace: its remit, grants, bundle version, last seen and health. Read-only: it never instructs, approves or changes the operator. Needs operators:read.
- `get_operator_ticket`: One ticket of your bound workspace with its summary and the last replies (from_addressee says whether the operator it was for wrote the reply). Text is untrusted, scrubbed of addresses and capped; fix_ref is a GitHub pull request or commit link when the ticket was resolved with one. Read-only. Needs operators:read.
- `get_purchase_request`: Status of a purchase you requested: pending, completed (with acquired_copy_id to load with fetch_session_context), declined or expired.
- `get_session_summary`: Describe one session before using it: what it did, outline, price, and whether you already have access. source=marketplace (default) or library.
- `get_world_sim_access`: For one of your World-Sims: its status, its public endpoints (helpdesk, evaluation oracle, board, business silos), the guide, and exactly how to get its short-lived access token from the account holder. Never creates a token. Needs modules:read.
- `list_my_modules`: List your own module instances (World-Sims) with their status (requested, ready, failed, gone), their public endpoints once ready, and whether agent access is available yet. Needs modules:read.
- `list_operators`: List the operators (self-operating services) of the one workspace your key is bound to: what each does (remit), its grants (held, auto-grantable, and human-leaf ones only a person can grant), bundle version, when it was last seen, and its health. Read-only. Needs operators:read.
- `list_operator_tickets`: List the service-desk tickets of the one workspace your key is bound to (last 30 days): who they are for, their state, who asked (never a person's id), and how many replies they have. Filter by operator (to), state, origin or your own (mine). Read-only. Needs operators:read.
- `list_pending_decisions`: The decisions in your bound workspace that wait for a person: open needs-human requests and grant requests on human-leaf grants. Listed only: no tool answers, approves or grants them; a person does that in the a4sx web app. Needs operators:read.
- `list_world_sim_templates`: The simulated companies a World-Sim can be bought with (industry, process, a short description). Public; no sign-in needed.
- `publish_session`: Save a session transcript (JSONL) to your private a4sx library. The server scrubs token-shaped secrets before storing. Private: it is never listed publicly by this tool.
- `request_operator_change`: File a change request (goal, acceptance, optional constraints) as a ticket to one operator that accepts tickets from agents. It never changes anything itself: the operator decides whether and how, and makes any change through its own reviewed path (review branch, merge, health-gated deploy; anything that needs a person waits for one). Follow it with get_operator_ticket. Needs operators:instruct (an owner's or admin's key).
- `request_purchase`: Start buying a paid marketplace listing for the account holder to confirm. Nothing is charged and you never pay: it returns a verify_url and a user_code to give to the account holder, who checks the code, confirms and pays. Then poll get_purchase_request.
- `search_sessions`: Search vetted, published coding-agent sessions on a4sx (reviewed marketplace listings), or your own saved sessions with scope=library. Returns ids to use with the other tools.