AVCS MCP server

Read from the package source without running it. The installed server may list more.

• avcs.approval.record

  Record a reviewer verdict on a checkpoint, signed with the reviewer's local key. Requires role >= reviewer.

• avcs.blame

  Who currently owns an entity (file:<path> or symbol:<path>#<name>) and WHY — the accepted head op with actor, intent title, and purpose. Stronger than git blame.

• avcs.blame.lines

  Per-line provenance: the op that last wrote each line, with actor, intent and purpose. Why THIS line is here.

• avcs.checkpoint.createwrite action

  Freeze a verified (ops + policy + materializer + evidence) state vector for a view.

• avcs.conflict.list

  List the conflicts that require a human/owner decision in a view.

• avcs.contention.check

  Other actors' live concurrent ops and overlapping lease holders for given keys. Run while editing, so overlap surfaces before finalize.

• avcs.context.build

  Assemble working context for a scope under a byte budget: provenance, decisions, risks, history. Deterministic truncation.

• avcs.decision.recall

  Prior human decisions for a conflict key plus the policies they taught. Read precedent before re-deciding.

• avcs.decision.record

  Record a human owner's conflict resolution. Owner-confirmed and signed with their local key; an agent cannot forge it.

• avcs.diff

  Diff two views/lines. format 'paths' (default) or 'patch' (unified diff).

• avcs.evidence.attach

  Attach machine-checkable evidence (test/typecheck/lint/...) to operations. Behavior changes need a passing test to be accepted.

• avcs.governance.status

  Read-only review state for a view: protection rules, head, your role, and the effective approvals.

• avcs.guide

  How to use AVCS: the canonical loop, agent rules, tool index, error recovery. Call this first.

• avcs.history

  History of one entity in causal order. Paged: limit (default 20) + cursor.

• avcs.integration.status

  Idempotent lookup of an integration ticket's recorded verdict on a remote hub (polling companion to avcs.integration.submit).

• avcs.integration.submitwrite action

  Submit a checkpoint to the integration queue. Verdict is advanced, conflict, needs_evidence or queued — never 'pull and redo'.

• avcs.intent.createwrite action

  Open an intent: the goal + constraints + allowed scopes for a unit of work. Agents must work within an intent.

• avcs.intent.list

  List intents in the repo. Bounded: limit (default 50).

• avcs.intent.read

  Read an intent (goal, constraints, allowed scopes). An agent should read this BEFORE proposing operations so it works within the constraints.

• avcs.key.list

  Which actors this machine can sign as, and which public keys the repo trusts. Ids only, never key material.

• avcs.key.provision

  Mint a local signing key for an actor so its decisions and hub writes can be signed. Idempotent.

• avcs.lease.request

  Request a soft write-lease over entity scopes BEFORE editing, to avoid duplicating another agent's in-flight work. Returns the lease oid, or the conflicting holders.

• avcs.line.createwrite action

  Fork a long-lived line (e.g. 'v1.x') from another at its current state. It inherits history to the fork, then diverges.

• avcs.line.list

  List the lineage lines in the repo (besides the implicit 'main').

• avcs.metrics

  In-process metrics snapshot for this server (reduce cache hit/miss, reduce.ms timing, materialize.calls).

• avcs.object.show

  Read an object by oid. Blobs return decoded content (utf8 text or base64); other types return the structured object.

• avcs.operation.backport

  Cherry-pick an operation onto another line: mints a new op carrying the change, with derivedFrom provenance. Source line untouched.

• avcs.operation.propose

  Propose a semantic change (MVP: file writes). Declare effects honestly — policy gates on them. baseText/baseBlobOid authors a 3-way-mergeable edit_file.

• avcs.release.cut

  Cut a release: a conflict-free checkpoint plus evidence, SBOM and artifact references. Refuses if the view has open conflicts.

• avcs.repair.context

  Minimal repair packet for ops whose validation failed: failing output, related decisions, a fix instruction. Cheaper than re-reading the repo.

• avcs.session.start

  Begin a work session for an agent/human against an intent. Returns a session id used on every operation.

• avcs.sync.land

  Land work on a protected head in one call: push, merge-check, checkpoint, integrate. Result is landed or a conflict packet.

• avcs.sync.pull

  Pull objects from the hub (conflict-free gossip). dryRun reports what would arrive without importing.

• avcs.sync.push

  Push local objects to the hub. Returns how many were accepted and how many the gate rejected.

• avcs.validate.runwrite action

  Run validation commands against a view and attach treeHash-bound evidence. Pass dir to reuse an existing build environment.

• avcs.view.materialize

  Reduce a view's operation graph into a tree, per-op status and open conflicts — how an agent checks that its work merges.

• avcs.workspace.land

  Land a workspace onto its base line: its isolated ops join the base view and merge there. Idempotent.

• avcs.workspace.list

  List this repo's workspaces: `workspaces` names them all, `landed` the subset joined onto the base view. The rest stay isolated.

• avcs.workspace.projectwrite action

  Write a view to a directory on disk, so build/test loops outside validate.run need no CLI.

• Code scan85 source files scanned25/25
• –Live reliabilityno gateway calls yet and no remote to proben/a
• –Tool poisoningtools not inspected (local package is not executed); not countedn/a
• Auth qualitylocal package, no credentials required12/15
• Maintenancelast push 13 days ago15/15
• Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

AVCS: common questions

Is AVCS MCP server safe?

Yes, by our scan: it is graded A (92/100). Read the AVCS safety report

How do I install AVCS?

It runs on your machine. Copy the Claude Code, Claude Desktop or Cursor config from the install section.

Does AVCS need an API key?

No secret keys are declared. It reads 1 setting from the environment.

Is AVCS maintained?

The last commit was 13 days ago (2026-09-08). The latest release is v0.42.0.

What can I use instead of AVCS?

Servers from other publishers that do the same job: Citra MCP server.