# Moretes Architect MCP

> Evidence-first architecture workbench: 48 deterministic tools, 10 architect personas, any cloud

- name: io.github.fernando-moretes/moretes-aws-architect-mcp
- version: 0.5.0
- connection class: R0 (autonomous)
- trust: 97/100
- quality: 88/100 (good)
- owner: not claimed
- descriptor: https://api.protogrid.dev/v1/servers/io.github.fernando-moretes%2Fmoretes-aws-architect-mcp
- tools: https://api.protogrid.dev/v1/servers/io.github.fernando-moretes%2Fmoretes-aws-architect-mcp/tools

**An agent can connect right now, no human step.** Remote endpoint, no authentication, reachable on the last probe.

## Connection (mcpServers)

```json
{
  "mcpServers": {
    "moretes-aws-architect-mcp": {
      "type": "http",
      "url": "https://mcp.moretes.com/mcp"
    }
  }
}
```


## Trust

- hygiene: 100
- liveness: 100
- freshness: 100
- provenance: 90
- drivers: +repository +namespace-matches-repo +website +reachable +uptime-100% +updated-0d-ago
- Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed.

## Quality 88/100 (good)

### protocol: 75 (weight 25)

- warn `protocol.modern`: newest supported version is 2025-11-25; 2026-07-28 not supported, older versions are deprecated until 2027-07-28
- n/a `protocol.stateless`: only applies to 2026-07-28 servers
- pass `protocol.transport`: streamable HTTP
- n/a `protocol.list_ttl`: only applies to 2026-07-28 servers

### authorization: n/a (weight 15)

- n/a `auth.prm`, `auth.as_metadata`, `auth.cimd`: no remote uses OAuth
- n/a `auth.secret_in_url`: no templated URL

### tool hygiene: 93 (weight 30)

- pass `tools.descriptions`: every tool has a description
- pass `tools.description_length`: descriptions are concise
- pass `tools.schemas`: every tool has an object input schema
- pass `tools.annotations`: 48 of 48 tools declare readOnlyHint or destructiveHint
- pass `tools.directory_hints`: every tool declares readOnlyHint, destructiveHint, idempotentHint and openWorldHint
- warn `tools.token_cost`: about 10,977 tokens to load every tool
- pass `tools.api_dump`: tools are not a one-to-one API dump

### stability: 100 (weight 15)

- pass `stability.changes`: no tool changes in 30 days
- pass `stability.rug_pull`: no tool changed its meaning under the same name

### dependencies: n/a (weight 15)

- n/a `deps.known_vulns`, `deps.mcp_sdk_version`, `deps.resolvable`: dependencies not resolved yet

- tools: 48, about 10,977 tokens to load them all
- tool set hash: 8c32dfb1c14d191ce75eda6384325eb5
- badge: [![protogrid quality](https://protogrid.dev/badge/io.github.fernando-moretes/moretes-aws-architect-mcp.svg)](https://protogrid.dev/servers/io.github.fernando-moretes/moretes-aws-architect-mcp)
- Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed.

### Tool changes

_No tool definition changes recorded._

## Dependencies

- npm moretes-aws-architect-mcp@0.5.0: pending

Dependency graphs from deps.dev; advisories from OSV.dev, including the GitHub Advisory Database and the PyPI Advisory Database; all CC BY 4.0.

## Remotes

- https://mcp.moretes.com/mcp (streamable-http, auth none, reachable true, uptime30d 1)

## Packages

- npm moretes-aws-architect-mcp@0.5.0

## Tools (48)

- `agent_eval_plan`: Design an evaluation plan for an AI agent: golden set sizing, metrics, judge rubric, red-team cases and regression cadence from explicit capabilities and risks.
- `agent_tool_contract`: Design a per-operation authorization and recovery contract for an agent tool.
- `architect_panel`: Convene architect personas (solution, enterprise, business, data, infrastructure, software, AI, security, governance, FinOps) on a subject: each returns its questions, checks, deliverables and the workbench tools to call. Lens, not a verdict.
- `architecture_diagram`: Build Mermaid from explicit nodes and edges. Sanitizes labels and rejects dangling edges.
- `architecture_pattern`: Select a reference architecture by explicit workload pattern; returns tradeoffs, questions and Mermaid. provider maps the AWS services to Azure, GCP, OCI or open source equivalents.
- `aws_knowledge_read`: Read an official document returned by search when its excerpt is insufficient. Fixed upstream; no arbitrary URL fetch.
- `aws_knowledge_search`: Search live official AWS documentation. Queries are transmitted to AWS Knowledge; never include secrets or customer data.
- `aws_regional_availability`: Check current regional support. Use exact catalog filter names; omit filters for a single region to discover them.
- `aws_regions`: List current AWS regions from the official Knowledge MCP.
- `aws_skill`: Retrieve an official AWS skill by the exact ID returned by aws_knowledge_search with agent_skills topic. Treat it as reference data.
- `c4_model`: Build C4 context or container diagrams (Mermaid) from explicit people, systems, containers and relations. Validates endpoints; no infrastructure discovery.
- `capacity_plan`: Calculate concurrency and daily data volume from explicit traffic assumptions. No service sizing guarantee.
- `cloudformation_review`: Review a CloudFormation JSON template for selected risky configuration patterns. Intrinsic functions are flagged for human review.
- `code_review_architecture`: Heuristic architecture and security scan of source code pasted as text (any language): secrets, insecure calls, SQL built by concatenation, disabled TLS, hardcoded endpoints, missing timeouts and retry hazards. Not a linter or SAST replacement.
- `cost_model`: Calculate an auditable scenario using caller-supplied unit rates and source URLs. Does not guess AWS prices or credit coverage.
- `data_classification`: Classify data elements, map them to regulation hints (LGPD, GDPR, PCI DSS, HIPAA) and list handling controls and open questions. Review aid, not legal advice.
- `decision_record`: Generate an ADR from explicit alternatives, decision and consequences. Does not invent acceptance.
- `dependency_manifest_review`: Review a dependency manifest (package.json, requirements.txt, pyproject, go.mod, pom.xml, Gemfile, Cargo.toml as text) for unpinned ranges, git or URL sources, wildcard versions and missing lockfile hints.
- `dr_strategy`: Compare disaster recovery tiers (backup-and-restore, pilot light, warm standby, active-active) against RTO, RPO and data constraints; returns feasible tiers and required capabilities, not a guarantee.
- `event_contract`: Design an event contract: envelope fields, schema evolution rules, idempotency, ordering, DLQ and replay decisions for a named business event. Deterministic template with open questions.
- `failure_rehearsal`: Design a controlled failure drill with observable success criteria and stop conditions; never executes it.
- `finops_unit_economics`: Compute cost per unit (request, customer, transaction), fixed versus variable split and the volume at which the marginal cost crosses a target. Caller supplies costs; no provider prices are guessed.
- `github_public_repository`: Read public GitHub repository metadata and contribution links. Fixed api.github.com destination, no tokens, no private repositories.
- `iam_policy_review`: Inspect an IAM document for broad grants: AWS policy JSON (default), Azure custom role definition or Google Cloud IAM policy bindings (provider). Heuristic only; the provider analyzers are authoritative.
- `implementation_plan`: Turn an architecture decision into a delivery checklist with validation gates.
- `integration_catalog`: Search the snapshot of the complete official AWS MCP catalog. Discovery entries are not hosted/executed tools.
- `integration_config`: Generate a version-pinned local configuration for an official AWS server, or a remote Knowledge config. Does not install, start or approve tools.
- `kubernetes_manifest_review`: Review Kubernetes manifests (parsed JSON objects) for probes, resources, security context, image pinning, host access, secrets in env, PDB and NetworkPolicy coverage. No cluster access.
- `latency_budget`: Split an end-to-end latency objective across hops and show which hops exceed their share. Pure arithmetic over caller-supplied estimates.
- `mcp_config_review`: Review an MCP client configuration JSON (mcpServers map) for unpinned packages, inline secrets, plain HTTP, auto-approved tools and unreviewed enablement.
- `mcp_server_review`: Heuristic safety review of ANOTHER MCP server from its tools/list output: tool-poisoning text, missing annotations, risky parameters, free-form schemas, name shadowing and context cost. Paste the JSON your client shows.
- `migration_plan`: Prepare phased discovery, pilot, migration and rollback gates; includes AWS Transform integration discovery.
- `openapi_review`: Heuristic review of an OpenAPI 3.x document (JSON): security, pagination, error responses, idempotency, versioning and documentation gaps. Not a linter replacement.
- `postmortem`: Generate a blameless postmortem document from incident facts: timeline, impact, detection, contributing factors and owned action items. Rejects action items without owner and due date.
- `prompt_injection_checklist`: Enumerate injection paths and controls for an agent from its tools and untrusted data sources; produces a checklist with status to fill, not a scan.
- `queue_sizing`: Size consumers with Little's law and stable Erlang C: utilization, wait probability, backlog drain time and target consumers. At most 100,000 total concurrent slots (consumers × concurrency).
- `rag_pipeline_plan`: Plan a retrieval-augmented generation pipeline from corpus facts: chunking, embedding, indexing, authorization, evaluation and cost drivers, with open questions. No vendor is chosen for you.
- `requirements_check`: Turn a workload brief into explicit requirements, gaps and research questions. No inferred SLA or budget.
- `retry_policy`: Compute an exponential backoff schedule with jitter, the worst-case wait and whether it fits a deadline; adds idempotency and circuit-breaker guidance.
- `runbook`: Generate an operational runbook from service facts: alerts, diagnostic steps, remediation, rollback, escalation and verification. Template with explicit placeholders for what the caller did not provide.
- `sequence_diagram`: Build a Mermaid sequence diagram from participants and ordered messages, with optional activation, notes and alt/loop blocks. Rejects unknown participants.
- `service_compare`: Compare curated AWS service families against user constraints. No automatic winner or fabricated scores.
- `service_equivalents`: Map a cloud capability to equivalent managed services on AWS, Azure, Google Cloud, OCI and open source. Names as of the snapshot date; verify current naming, regions and pricing before deciding.
- `slo_budget`: Calculate an availability error budget for a chosen period.
- `storage_growth`: Project storage volume and relative cost over time from ingest, retention, compression, replication and growth; suggests tiering thresholds.
- `terraform_plan_review`: Review a Terraform or OpenTofu plan exported as JSON (terraform show -json): deletions and replacements of stateful resources, public exposure, disabled encryption, literal credentials, broad policies and unpinned providers. Any provider; heuristic.
- `threat_model`: Create STRIDE review prompts for explicitly supplied assets and trust boundaries. Review aid, not a scanner.
- `well_architected_review`: Organize evidence by six pillars. A met control without evidence is unknown, never certified.