Internal Safety Override
- Status: active for local design and scoped local implementation.
- Tools must default to least privilege.
- Network-capable tools must be disabled until explicitly approved.
- Destructive tools require dry-run and confirmation.
Tool Orchestration MCP
Tool Registry Fields
{
"name": "string",
"description": "string",
"permission": "read_local|write_local|execute_local|automate_app|network|high_impact",
"side_effects": false,
"dry_run": true,
"input_schema": {},
"output_schema": {},
"redaction": "string",
"approval_required": false
}
Tool Classes
Read local:
- File read, search, metadata, local app state.
Write local:
- Patch file, create note, update memory.
Execute local:
- Tests, formatters, safe scripts.
Automate app:
- Browser, Office, desktop UI.
Network:
- External docs, APIs, cloud.
High impact:
- Send, publish, deploy, delete, buy, account/security changes.
MCP Server Guidelines
- Bind to loopback only.
- Use explicit schemas.
- Bound output length.
- Redact secrets at source.
- Separate read tools from write tools.
- Add dry-run to risky tools.
- Log tool summaries, not raw sensitive payloads.
1---2name: tool-orchestration-mcp3description: Use to design Jarvis tool registry and local MCP-style tool orchestration with typed schemas, permissions, dry-run modes, audit logs, loopback-only services, and safe tool execution.4---56## Internal Safety Override78- Status: active for local design and scoped local implementation.9- Tools must default to least privilege.10- Network-capable tools must be disabled until explicitly approved.11- Destructive tools require dry-run and confirmation.1213# Tool Orchestration MCP1415## Tool Registry Fields1617```json18{19 "name": "string",20 "description": "string",21 "permission": "read_local|write_local|execute_local|automate_app|network|high_impact",22 "side_effects": false,23 "dry_run": true,24 "input_schema": {},25 "output_schema": {},26 "redaction": "string",27 "approval_required": false28}29```3031## Tool Classes3233Read local:34- File read, search, metadata, local app state.3536Write local:37- Patch file, create note, update memory.3839Execute local:40- Tests, formatters, safe scripts.4142Automate app:43- Browser, Office, desktop UI.4445Network:46- External docs, APIs, cloud.4748High impact:49- Send, publish, deploy, delete, buy, account/security changes.5051## MCP Server Guidelines5253- Bind to loopback only.54- Use explicit schemas.55- Bound output length.56- Redact secrets at source.57- Separate read tools from write tools.58- Add dry-run to risky tools.59- Log tool summaries, not raw sensitive payloads.60
brathod1432