Search / dk.humanified/values-firewall
values-firewall
not classifiedEU AI Act Art-14 runtime oversight: allow / flag / gate-to-human on an agent action, with receipt.
v1.0.0 · active · descriptor JSON · versions
Search / dk.humanified/values-firewall
EU AI Act Art-14 runtime oversight: allow / flag / gate-to-human on an agent action, with receipt.
v1.0.0 · active · descriptor JSON · versions
{
"mcpServers": {
"values-firewall": {
"type": "http",
"url": "https://vf.humanified.dk/mcp"
}
}
}claude mcp add --transport http values-firewall https://vf.humanified.dk/mcp[mcp_servers.values-firewall]
url = "https://vf.humanified.dk/mcp"
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"values-firewall": {
"type": "remote",
"url": "https://vf.humanified.dk/mcp",
"enabled": true
}
}
}{
"mcpServers": {
"values-firewall": {
"type": "http",
"url": "https://vf.humanified.dk/mcp"
}
},
"deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=values-firewall&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vdmYuaHVtYW5pZmllZC5kay9tY3AifQ%3D%3D"
}{
"servers": {
"values-firewall": {
"type": "http",
"url": "https://vf.humanified.dk/mcp"
}
}
}{
"mcpServers": {
"values-firewall": {
"httpUrl": "https://vf.humanified.dk/mcp"
}
}
}extensions:
"values-firewall":
enabled: true
name: "values-firewall"
type: streamable_http
uri: "https://vf.humanified.dk/mcp"
timeout: 300
protocol.modernnewest supported version is 2025-11-25; 2026-07-28 not supported, older versions are deprecated until 2027-07-28protocol.statelessonly applies to 2026-07-28 serversprotocol.transportstreamable HTTPprotocol.list_ttlonly applies to 2026-07-28 serversauth.prm, auth.as_metadata, auth.cimdno remote uses OAuthauth.secret_in_urlno templated URLtools.descriptionsevery tool has a descriptiontools.description_length1 tools have descriptions over 1,024 characters, which crowds the contexttools.schemasevery tool has an object input schematools.annotationsno tool declares readOnlyHint or destructiveHint, so clients cannot tell safe calls from risky onestools.directory_hintsno tool declares all four of readOnlyHint, destructiveHint, idempotentHint and openWorldHint; missing: check_action (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); check_action_deterministic (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); list_charter (readOnlyHint, destructiveHint, idempotentHint, openWorldHint)tools.token_costabout 805 tokens to load every tooltools.api_dumptools are not a one-to-one API dumpstability.changes, stability.rug_pulltool history not recorded yetdeps.known_vulns, deps.mcp_sdk_version, deps.resolvableno npm or PyPI packageNo tool definition changes recorded. A server's first observation is its baseline; later probes record what changes.
Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.
+dns-namespace -unreachable(13 failures) ~updated-76d-ago -no-repository
Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.
| remote | auth | reachable | uptime 30d | p50 | protocol | last ok |
|---|---|---|---|---|---|---|
https://vf.humanified.dk/mcp streamable-http | none | no (13 failures) | 0% | – | 2025-11-25 | 2026-09-18 |
check_action | Kerne-gaten (to-lags evaluering): Lag A (deterministisk hard-rule/outward-match, ingen LLM) + Lag B (Sonnet vurderer mod charterets NL-principper via LiteLLM :4000, citerer principle_id + reasoning — INGEN egen alvorligheds-dom) → most-restrictive-wins aggregeret, auditerbar receipt: {action, deterministic_flags[], values_assessment[], values_assessment_unavailable, unrecognized_principle_citations, principles_evaluated, recommendation, requires_human, charter_name, scope_note}. `recommendation` ∈ {allow, flag, gate_to_human} — ALDRIG approved/denied/true/false. ADVISORY: anbefaler, blokerer/eksekverer/autoriserer ALDRIG (never-decide-for-you). FAIL-SAFE: Lag B utilgængelig -> Lag A kører stadig, values_assessment_unavailable=true, recommendation løftet til MINDST 'flag' (aldrig stille 'allow'). Read-only — skriver INTET, ingen side-effekter. PUBLIC_DEMO-mode: vurderet mod det OFFENTLIGE Art-14-demo-charter (ikke din org — se scope_note). Rate-limitet (default 5/min + 30/time, ÉN global demo-bucket). Over grænsen returneres `{error:"rate_limited", retry_after_s, scope_note}` — ALDRIG et recommendation-formet svar. Bogholderi-fejl i rate-limiteren -> deny (fail-safe). RED-TEAM-FIX (minimal-indgreb): tomt/whitespace-only `action` valideres FØR rate-limiteren forbruger en kvote-token — en ugyldig-input-loop kan ellers stille dræne demoens kvote uden at nogensinde levere en receipt (rå ValueError fra firewall.check_action's fail-loud-guard ville ellers både forbruge kvote OG propagere ubehandlet til transport-laget, hvilket bryder "check_action leverer ALTID en receipt/struktureret fejl"-disciplinen). Uden for PUBLIC_DEMO uændret: fw.check_action's egen ValueError-fail-loud gælder stadig (bindende, testet i test_values_firewall.py). |
check_action_deterministic | KUN Lag A — ingen LLM-kald overhovedet (billig, ren mekanisk, spejler consistency-gates check_triple). Samme receipt-form som check_action, men values_assessment er altid tom, values_assessment_unavailable altid false, og scope_note siger eksplicit 'values_layer_consulted:false'. Read-only. PUBLIC_DEMO-mode: ÅBEN, GRATIS — ALDRIG rate-begrænset (spec §2, ingen LLM-kost). Vurderet mod det offentlige Art-14-demo-charter; scope_note får demo-disclosuren appended. |
list_charter | Transparens: hvilke regler/principper håndhæver DENNE firewall lige nu — navn/version/ hard_rules/outward_patterns/principles. Values-locked (arvet): firewall'en håndhæver KUN dette deklarerede charter, opfinder aldrig regler/principper udenfor det. PUBLIC_DEMO-mode: ÅBEN, GRATIS — ALDRIG rate-begrænset. Viser det OFFENTLIGE Art-14-demo- charter (6 principper, 4 hard_rules, 14 outward_patterns) — ikke noget kunde-/fleet-/ TIER-1-charter. Får et `scope_note`-felt med demo-disclosuren tilføjet (fraværende i default-mode — additiv, ingen bestående felter ændres). |
Schemas: list_tools.
{
"name": "dk.humanified/values-firewall",
"$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
"remotes": [
{
"url": "https://vf.humanified.dk/mcp",
"type": "streamable-http"
}
],
"version": "1.0.0",
"description": "EU AI Act Art-14 runtime oversight: allow / flag / gate-to-human on an agent action, with receipt."
}