{"name":"io.github.Vortx-AI/emem","slug":"vortx-ai-emem","title":"emem, the verifiable memory protocol for the physical world","description":"Shared memory for AI agents. One address per fact, one signature you check. No key to read.","url":"https://mcp.market/server/vortx-ai-emem","rating":null,"grade":"B","score":80,"certified":false,"status":"active","category":"other","tags":[],"presence":{"score":40,"stars":58,"forks":8,"downloads_week":null,"last_push_at":"2026-09-17T04:01:26.000Z","license":"Apache-2.0"},"uptime":{"percent":100,"checks":6,"ok":6,"last_checked_at":"2026-09-20T21:55:48.582Z","last_ok_at":"2026-09-20T21:55:48.582Z","latency_ms":1214},"claimed":false,"transport":"mixed","callable_via_gateway":true,"default_price_micros":0,"repository":"https://github.com/Vortx-AI/emem","website":"https://emem.dev","version":"2.4.0","remotes":[{"type":"streamable-http","url":"https://emem.dev/mcp"}],"packages":[{"registryType":"oci","identifier":"ghcr.io/vortx-ai/emem:latest","runtimeHint":"docker","transport":{"type":"streamable-http","url":"http://localhost:5051/mcp"},"environmentVariables":[{"description":"PaaS port convention: the container entrypoint binds 0.0.0.0:$PORT when EMEM_BIND is not set explicitly. Falls back to 5051.","name":"PORT"},{"description":"Bind address for the HTTP server. When unset, the entrypoint derives it from PORT, falling back to 0.0.0.0:5051.","value":"0.0.0.0:5051","name":"EMEM_BIND"},{"description":"Path to the persistent data directory (sled cache + ed25519 identity). Mount a volume here; on managed platforms that mount /data, set EMEM_DATA=/data.","value":"/var/emem","name":"EMEM_DATA"},{"description":"Optional canonical origin for self-referencing URLs in MCP responses (e.g. https://emem.dev). When unset the server falls back to urn:emem.","name":"EMEM_PUBLIC_URL"},{"description":"Comma-separated hostnames for built-in Let's Encrypt ACME (TLS-ALPN-01). When set, the server binds 0.0.0.0:443 instead of EMEM_BIND.","name":"EMEM_TLS_DOMAINS"}]}],"tools":[{"name":"emem_ask","description":"Single-shot free-text answer about a real-world location, backed by signed satellite/elevation/water/built-up receipts. Forwards a place mention plus a question; runs the locate → recall → algorithm chain server-side; returns one packaged envelope.\n\nWhen to use: Call when the question is about a specific place and the answer should carry its own evidence. Send the user's question verbatim as `q` plus a location as `place` (free text), `cell` (cell64), or `lat`+`lng`. One envelope comes back: `answer`, `spatial_trace` (the readings as primitives, each point indexing `fact_cids`), `facts_summary`, `receipt` and `fact_cids` at the ROOT, and `caveats` naming grid resolution and revisit cadence. Missing bands are materialised on demand. `include: [\"reasoning\"]` adds the ordered stages with their detail; `include_image: true` bundles a Sentinel-2 thumbnail. A question outside the corpus answers `topic_routing.matched_topic: null` with the inventory, so you can route elsewhere rather than guess.\n\nExample arguments: {\"q\":\"is this neighbourhood flood-prone for a flat purchase\",\"place\":\"Ashok Nagar, Ranchi\"}","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"cell":{"description":"cell64 string (alternative to `place`, use when you have one from a prior emem_locate / emem_recall response). Provide this OR `place` OR `lat`+`lng`.","maxLength":23,"minLength":19,"pattern":"^(?:(?:[bcdfghjklmnpqrstvwxyz][aeiouAEIOU]){2}|z[0-9a-f]{4})(?:\\.(?:(?:[bcdfghjklmnpqrstvwxyz][aeiouAEIOU]){2}|z[0-9a-f]{4})){3}$","type":"string"},"include":{"description":"Opt-in heavy response sections. Default response is slim (~5 KB): answer + algorithm key + fact_cids + caveats. Name specific sections to include them. Ignored when verbose=true (which includes everything).","items":{"enum":["band_observations","algorithm_outcomes","facts_full","temporal_composition","foundation_embeddings","scene","inventory"],"type":"string"},"type":"array"},"include_image":{"default":false,"description":"Bundle a Sentinel-2 RGB scene URL for the resolved cell. Adds ~1-2 s on first call.","type":"boolean"},"lat":{"description":"WGS-84 latitude (paired with `lng`; alternative to `place` / `cell`).","type":"number"},"lng":{"description":"WGS-84 longitude (paired with `lat`).","type":"number"},"model":{"description":"Optional. Compose an EXTRA prose answer with a named model, returned as `model_answer` beside the deterministic `answer`. It does not replace it: `answer` is synthesised from the structured fields and never calls a model, so every number in it traces to a fact_cid, and asking for a model must not turn a checkable answer into an unchecked one. `model_answer` carries provenance.class = model_output. Name it by base_model (`nvidia/Cosmos3-Edge`), by family (`cosmos3_edge`, `gemma`), or by any fragment naming exactly one of them (`cosmos`); a fragment matching several is refused and names them; an unroutable name is refused with the list of routable ones, and a routable model whose service is not answering is refused as busy or down rather than silently substituted. Cosmos deliberates and typically takes 13-22 s.","type":"string"},"place":{"description":"Free-text place name (e.g. \"Mount Fuji\", \"Ashok Nagar, Ranchi\"). REQUIRED unless `cell` or `lat`+`lng` is provided. Extract the noun phrase from the user's turn; the responder geocodes via OSM Nominatim.","type":"string"},"q":{"description":"User's natural-language question about the place (e.g. \"is this neighbourhood flood-prone\").","type":"string"},"query":{"description":"Alias for `q`.","type":"string"},"question":{"description":"Alias for `q`.","type":"string"},"verbose":{"default":false,"description":"When true, return the full envelope: per-algorithm formula strings, temporal_recipe blocks, per-fact band_metadata duplicates, and the long _explanation prose. Default (since 2026-05-05) is false so the response fits MCP's 25 KB cap; the signed receipt + fact CIDs + algorithm keys + algorithms_cid are always retained. Pass true to get the full body when debugging.","type":"boolean"}},"required":["q"]}},{"name":"emem_echo_verify","description":"Grade a value you are about to emit against the signed fact your citation points at. Returns `matches` and, when it does not, the `drift` between what you were about to say and what emem holds. This is the step that turns a transcription error into a caught event instead of a silent wrong number: a model that resolves a fact correctly can still retype `0.2411` for `0.241103`, and nothing else in the loop notices. Memory algebra: the `verify` operation (https://emem.dev/docs/model.html).\n\nWhen to use: Call immediately before publishing, logging, or handing on any value you took from an emem fact, and treat a false `matches` as a gate rather than a warning. Pair it with `value_verbatim` from resolve: quote that exact decimal string rather than reformatting the number, then echo-verify what you actually emitted. For a due-diligence or compliance record this is what lets you assert `every cited value was echo-verified` with a signed check per citation instead of a promise. Accepts a bare cid too, so a damaged citation still grades rather than failing closed.\n\nExample arguments: {\"token\":\"emem:fact:defi.zb572.xoso.zb1ec:4qj3l4mgh7ch5kvxmkqspjdl6y42oqhm42khh3gostccpixkbz5q\",\"claimed_value\":\"-0.0522\"}","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"claimed_value":{"description":"The value you are about to publish, as a string or a number. Send it as a STRING, character for character as you will emit it. A JSON number is stringified before the comparison, so `0.50` arrives as `0.5` and `0.2411000` as `0.2411` (measured against the live responder): the trailing digits this check exists to defend are gone before it runs. Quote `value_verbatim` from resolve as a string and echo the exact characters you will publish.","type":["string","number"]},"strict":{"description":"Require BYTE-IDENTICAL equality. Default false, which also accepts a numerically equal value spelled differently (0.50 for 0.5). It changes exactly one outcome: the numerically-equal-but-respelled case, which passes by default and becomes `drift: \"reformatted\"` here. `rounded` and `wrong` already fail either way, so `strict` never turns a pass into a pass. It is also inert when `claimed_value` came in as a JSON number, because the respelling then happened in the JSON parser, before this tool saw it.","type":"boolean"},"token":{"description":"The citation you used. Any form resolve accepts, including a bare cid, which answers with `degraded: true`: a bare cid asserts no location, so the cell-binding check is skipped and the grade covers the value only. A cid that is not 52 characters is refused as a damaged citation rather than as a missing one, and must not be retried.","type":"string"}},"required":["token","claimed_value"]}},{"name":"emem_entity","description":"Give a real-world object (a bridge, a farm plot, a river, a named place) a single, shared, content-addressed identity that any agent resolves the same way. Returns an `entity_token` (`emem:entity:<entity_cid>`) plus a signed receipt that attests how the reference resolved. Two agents that name the same object mint the SAME entity_cid; when a stable external id (Overture GERS / OSM) is known it dominates identity, so divergent labels for one real object still collapse to one id. This is the object-level antidote to referential drift: 'the damaged bridge near the river' becomes one canonical thing every model reasons about, not a phrase each model re-interprets.\n\nWhen to use: Call when a conversation refers to a THING and you want a handle that survives summarisation and travels between agents, before it drifts into 'that infrastructure issue'. Anchor it with `place`, `cell`, or `lat`+`lng`, then hand the `emem:entity:` token to any peer and they dereference the same object; recall at its cell64 for signed facts. Pick the sibling: this one MINTS or returns an identity you can anchor; `emem_entity_resolve` finds one someone already registered from a fuzzy phrase; `emem_entity_link` asserts two spellings you hold mean one object. Not for an observation (that is a fact: emem_recall or emem_memory_token) and not for naming a place (that is emem_locate). An entity is a thing AT a place.\n\nExample arguments: {\"label\":\"Golden Gate Bridge\",\"kind\":\"bridge\",\"place\":\"Golden Gate Bridge, San Francisco\"}","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"cell":{"description":"cell64 to anchor the object directly (no geocode).","type":"string"},"external_ids":{"description":"Stable ids that drive convergence. Caller-supplied values win over geocoder-derived ones.","properties":{"gers":{"description":"Overture GERS division id (strongest anchor).","type":"string"},"osm":{"description":"OpenStreetMap object as <type>/<id>, e.g. way/717919508.","type":"string"},"wikidata":{"description":"Wikidata QID.","type":"string"}},"type":"object"},"kind":{"description":"Object class: bridge, river, farm_plot, building, admin_division, place, custom, ... Defaults to \"place\".","type":"string"},"label":{"description":"Human name of the object, e.g. \"Golden Gate Bridge\", \"the north dam\". Required.","type":"string"},"lat":{"description":"Latitude anchoring the object to a place, paired with lng. The identity is hashed from this anchor, so two agents anchoring the same object differently mint different entities.","maximum":90,"minimum":-90,"type":"number"},"lng":{"description":"Longitude, paired with lat.","maximum":180,"minimum":-180,"type":"number"},"parent":{"description":"Optional parent entity_cid (containment).","type":"string"},"place":{"description":"Free-text place to anchor the object (geocoded). Provide place OR cell OR lat+lng.","type":"string"}},"required":["label"]}},{"name":"emem_entity_link","description":"Record a signed, ATTRIBUTED claim that a label or external id (GERS / OSM / Wikidata) denotes an existing object, or with `stance: \"disputes\"` that it does not. A shared-space write: it changes what other agents resolve, so it is stored with your key, rate-limited per key, and weighed by how many INDEPENDENT keys agree. One key's binding is shown to every reader as one key's claim, never as the answer.\n\nWhen to use: Call when you can vouch that two phrasings denote one object, or to attach an authoritative external id; your key goes on the record. Use `stance: \"disputes\"` when another key's binding is wrong: recorded beside it, deletes nothing. Corroborating a correct single-key binding is useful in itself.\n\nExample arguments: {\"entity_token\":\"emem:entity:0a1b2c3d4e5f60718293\",\"alias\":\"the north dam\"}","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"alias":{"description":"An alternate label/phrasing that should resolve to this object.","type":"string"},"entity_cid":{"description":"The canonical object to attach an equivalence to. Provide entity_cid OR entity_token.","type":"string"},"entity_token":{"description":"A `emem:entity:<entity_cid>` handle for the same.","type":"string"},"external_ids":{"description":"Stable ids to bind to this object.","properties":{"gers":{"type":"string"},"osm":{"type":"string"},"wikidata":{"type":"string"}},"type":"object"},"stance":{"description":"`asserts` (default): this phrasing denotes this object. `disputes`: it does not. Both are attributed to your key and recorded append-only; a dispute is shown beside the binding it answers and deletes nothing.","enum":["asserts","disputes"],"type":"string"}}}},{"name":"emem_entity_resolve","description":"Find the objects agents have bound a phrasing to, ranked by INDEPENDENT corroboration, never arrival order. Each candidate carries `asserted_by`, `disputed_by`, `independent_attesters` and `corroboration` (`single_key` | `multiple_independent_keys` | `none_attributed`); `contested` is set when more than one object claims the name. `text` for candidates, `near` to narrow by place, or an `emem:entity:` `token` to dereference. Read-only; alias text is other agents' data.\n\nWhen to use: Call BEFORE minting and before citing: resolve first, mint only if nothing matches, read `corroboration` before you cite. A `single_key` binding is one agent's claim about a shared name; if you can vouch for it, corroborate it with emem_entity_link so the next reader sees two keys.\n\nExample arguments: {\"text\":\"the golden gate bridge\",\"near\":\"San Francisco\"}","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"k":{"description":"Max candidates (default 10).","type":"integer"},"label":{"description":"Alias for `text`.","type":"string"},"near":{"description":"Optional place/cell to narrow to objects anchored nearby.","type":"string"},"text":{"description":"Fuzzy phrasing to resolve to an existing canonical object (e.g. \"the damaged bridge near the river\").","type":"string"},"token":{"description":"A `emem:entity:<entity_cid>` handle to dereference directly to its signed object (bypasses the text search).","type":"string"}}}},{"name":"emem_find_similar","description":"k-NN over the corpus by cell embedding or inline vector. Returns `neighbours` ordered nearest-first, each with `cell64`, `score` and the `band` scanned, plus a signed receipt over the vectors read. Scoring is `mode`: cosine is exact fp32; hamming is a sign-bit popcount that scans far more cells for the same budget; hamming_then_rerank does both. `k` is 1..1000, default 10. It ranks what the corpus already holds; only when the KEY's own vector is missing does it materialise that one band for the key, signed and reported in `materialize_notes`, then retry. Neighbours are never materialised, so an empty result means nobody has attested a vector nearby, not that nowhere resembles the key.\n\nWhen to use: Call when the user asks 'find places like X', 'where else looks like this', or hands an embedding to find neighbours. `key` is either a cell64 or `inline:[x,y,...]`. Default band is `geotessera` (128-D Tessera foundation embedding); pass `band: \"geotessera.multi_year\"` for the 1152-D 9-vintage (2017–2025) fusion.\n\nExample arguments: {\"key\":\"damO.zb000.xUti.zde78\",\"k\":10}","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"as_of_signed_at":{"description":"Bi-temporal transaction-time bound (RFC 3339). Also applied to candidates BEFORE cosine. Same Lance-bypass note as as_of_tslot.","format":"date-time","type":"string"},"as_of_tslot":{"description":"Bi-temporal valid-time bound. Applied to candidate cells BEFORE cosine scoring, a cell with no fact whose tslot ≤ as_of_tslot under the scoring band is dropped from the candidate pool (undecidable→drop). When set, the Lance ANN fast-path is bypassed (the index has no signed_at column); brute-force k-NN runs instead so as_of is honoured truthfully.","minimum":0,"type":"integer"},"band":{"default":"geotessera","description":"vector band to scan (default: 128-D Tessera foundation embedding). For mode=hamming/hamming_then_rerank you can pass either the cosine band (e.g. 'geotessera') or its binary sibling ('geotessera.bin128'), the responder picks the right one.","type":"string"},"cell":{"description":"Alias for `key`.","type":"string"},"cell64":{"description":"Alias for `key`.","type":"string"},"filter":{"description":"Claim-algebra predicate evaluated against every candidate before ranking. A cell with no fact for the filter's band is DROPPED rather than treated as false, so 'places like X where NDVI > 0.5' never silently includes cells with no NDVI.","type":"object"},"k":{"default":10,"description":"How many neighbours to return.","maximum":1000,"minimum":1,"type":"integer"},"key":{"description":"cell64 (look up that cell's vector) or 'inline:[x,y,...]' literal vector","type":"string"},"mode":{"default":"cosine","description":"Scoring mode. cosine = fp32 over full vector (precise, ~256 B/cell scan). hamming = sign-bit popcount over the binary sibling band (~16 B/cell, ~1000× faster, ~65% recall@10). hamming_then_rerank = triage with Hamming on 4·k candidates then re-rank by cosine, matches cosine precision at ~16× less work.","enum":["cosine","hamming","hamming_then_rerank"],"type":"string"},"scope":{"description":"Multi-tenant scope `{user_id, agent_id, run_id, org_id}`. Setting it bypasses the ANN index entirely, because that index carries no scope column, and runs the brute-force scan instead: the tenant filter is honoured truthfully, and the call is slower.","type":"object"}},"required":["key"]}},{"name":"emem_guard_verdict","description":"Run emem-guard's policy pipeline over text you are about to send, against this responder's corpus. Finds every emem: citation, resolves each one, and returns allow or deny with a machine-readable reason: `EMEM-GUARD DENY <CODE> token=<token|-> fix=<fix> leaf=<leaf|->`. Codes are PROV_SIG (signature did not verify), PROV_BYTES (resolved to different content than claimed), PROV_DRIFT (reading has moved past its band threshold), CLAIM_UNGROUNDED (a measurable claim with no citation, opt-in via claim_gating). `fix` is the actionable half: refresh_token, remove_reference, contact_admin, cite_observation. ADVISORY: nothing is blocked, and a citation this responder does not hold is never a denial, because it is indistinguishable from one minted elsewhere. Memory algebra: the `verify` operation (https://emem.dev/docs/model.html).\n\nWhen to use: Call it on your own draft before you assert something, or on a tool result before you reason on it, to catch a citation that does not resolve while you can still fix it. `claim_gating: true` also names measurable claims with no citation and the band that would answer them. For a payload another framework produced (CloudEvent, OPA input, OpenAI moderations body, another server's tool call) send it as-is and name its `shape`: the default reader sees only `texts`, and a check that read nothing still answers allow. To ENFORCE rather than consult, emem_guard_selfhost returns the procedure for your own node.\n\nExample arguments: {\"texts\":[\"Elevation there is 918 m per emem:fact:defi.zb493.xuqA.zcb5f:yqbolgeoycqkvj3zkxukb4bjw4odhpwvfzqo3fbgwf4spk45zala\"]}","write_action":true,"price_micros":0,"input_schema":{"type":"object","properties":{"agent":{"description":"Optional free-text label for who is asking. Advisory only, never a trust boundary.","type":"string"},"claim_gating":{"default":false,"description":"Also flag measurable physical-world claims that carry NO citation (deny code CLAIM_UNGROUNDED, fix cite_observation). Off by default: it reports on the absence of a citation rather than on a failed check. The verdict names the sentence, the magnitude, and the emem band that would answer it.","type":"boolean"},"shape":{"default":"native","description":"Which envelope YOUR payload is in, so you never have to reshape it to ask the question: send the body your own framework produced and name its shape. native reads `texts`; `mcp` reads a JSON-RPC tools/call or tool result; `openai` reads a moderations (`input`) or chat-completions body; `cloudevent` reads a CloudEvents 1.0 structured event; `policy` reads {input}. It matters: a CloudEvent whose citation sits at data.text is invisible to the native reader, and a check that read nothing answers `allow`, so confirm `citations_found` matches what you sent. Unrecognised values fall back to native rather than erroring. This selects how the body is READ only — the verdict always comes back in this tool's declared output shape, because a tool that declares an outputSchema owes conforming structuredContent. To get the ANSWER translated into the same envelope too (an OPA `result:{allow,deny}`, an MCP CallToolResult to substitute on a deny), call POST /v1/guard/verdict?shape=… directly.","enum":["native","mcp","openai","cloudevent","policy"],"type":"string"},"texts":{"description":"Free text to check, and the only input this tool needs. Send just the pieces the question is about: a draft answer, a tool result, one turn. Do not send surrounding conversation, because nothing here reads it and a checker should ask for the smallest input that answers the question.","items":{"type":"string"},"type":"array"}}}},{"name":"emem_intent","description":"Say what you want in one typed object and get the answer, without choosing a primitive. `type` is a tagged union: it selects the intent AND decides which other fields are read, so send only the fields its row needs. The plan is EXECUTED in the same call, so you receive the result (the resolved cell64, the similarity, the delta, the verdict), not a list of calls to make yourself.\n\ntype             | needs                        | optional            | answers\nwhere_is         | description                  |                     | cell64 for a named place\nwhat_is_here     | cell OR place                | description         | what is attested at a location\nis_like          | a, b                         |                     | cosine similarity of two cells\ndid_change       | cell, band, window           |                     | delta for one band over [start,end] tslots\nfind_like        | key                          | k, filter           | nearest cells by embedding\nconfirm          | claim, cell                  |                     | verdict plus the signed facts behind it\nask              | description                  | place/cell/lat+lng  | free-text question, packaged answer\n\nAn unknown or missing `type` returns a structured `needs_intent_type` envelope naming the seven values rather than a hard error, so you can correct it on the next turn.\n\nWhen to use: Call when the question maps onto one of the seven rows above and you would rather state the goal than pick a primitive. Otherwise go direct: a band at a cell is emem_recall, a region is emem_recall_polygon, a free-text place question is emem_ask (type:\"ask\" forwards to it). `window` takes tslots, not dates: get them from emem_trajectory. A tool named here but absent from `tools/list` is not a dead end: every one of the 110 dispatches by name at `/mcp` and `/mcp/full`; the core list is 18 to keep the catalog small, and `emem_tools` enumerates the rest.\n\nExample arguments: {\"type\":\"did_change\",\"cell\":\"damO.zb000.xUti.zde78\",\"band\":\"indices.ndvi\",\"window\":[20245,20620]}","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"a":{"description":"is_like only: cell64 of the first place in the pair.","type":"string"},"b":{"description":"is_like only: cell64 of the second place. The answer is a cosine similarity in [-1,1] over the two cells' embeddings.","type":"string"},"band":{"description":"did_change only: which band to test, e.g. \"indices.ndvi\". One band per call; the answer is a delta over `window`, not a whole-cell diff.","type":"string"},"cell":{"description":"cell64 address, e.g. \"damO.zb000.xUti.zde78\". Required by did_change and confirm. Optional for what_is_here and ask: supply it to skip geocoding, omit it and give `place` instead.","type":"string"},"claim":{"description":"confirm only: the claim to test at `cell`, e.g. {\"band\":\"indices.ndvi\",\"op\":\"gt\",\"value\":0.4}. The answer is a verdict plus the signed facts it rests on.","properties":{"agg":{"description":"How a `window` reduces: any/all quantify over the facts in it; mean/min/max compare the reduced value against `value`.","enum":["any","all","mean","min","max"],"type":"string"},"band":{"description":"Band to test, e.g. \"indices.ndvi\".","type":"string"},"op":{"description":"Comparison. These ten spellings and no others: `greater_than`, `>` and `gte` are all rejected. in/ni take an array `value` (member / not member). exists and absent ask only whether the band is attested here.","enum":["eq","ne","lt","le","gt","ge","in","ni","exists","absent"],"type":"string"},"tslot":{"description":"Test at one tslot. Omit for the latest. Mutually exclusive with `window`.","type":"integer"},"value":{"description":"Right-hand side. A number for the ordering ops, an array for in/ni. REQUIRED by the parser even for exists/absent, which then ignore it — omitting it fails the whole intent with `missing field value`.","type":["string","number","boolean","array","null"]},"window":{"description":"Test across [start, end] tslots instead of one. Requires `agg` to say how the values across the window collapse to a verdict.","items":{"type":"integer"},"maxItems":2,"minItems":2,"type":"array"}},"required":["band","op","value"],"type":"object"},"description":{"description":"where_is: the place to resolve, e.g. \"Mount Everest\". ask: the user's question, forwarded verbatim. what_is_here: optional free text used as the question and, if `place` is absent, as the place. Ignored by the other intents.","type":"string"},"filter":{"description":"find_like only: optional claim constraining which cells may be returned. Same object as `claim` below, same ops, same required fields.","properties":{"agg":{"description":"How a `window` reduces to a single verdict.","enum":["any","all","mean","min","max"],"type":"string"},"band":{"description":"Band the neighbour must satisfy, e.g. \"indices.ndvi\".","type":"string"},"op":{"description":"Comparison. Symbolic only: `gt`, not `greater_than` or `>`.","enum":["eq","ne","lt","le","gt","ge","in","ni","exists","absent"],"type":"string"},"tslot":{"description":"Test at one tslot. Mutually exclusive with `window`.","type":"integer"},"value":{"description":"Right-hand side. Required by the parser even for exists/absent, which ignore it.","type":["string","number","boolean","array","null"]},"window":{"description":"Test across [start, end] tslots instead of one. Requires `agg`.","items":{"type":"integer"},"maxItems":2,"minItems":2,"type":"array"}},"required":["band","op","value"],"type":"object"},"k":{"description":"find_like only: how many neighbours to return. Defaults to the primitive's own default when omitted.","minimum":1,"type":"integer"},"key":{"description":"find_like only: cell64 to search from. Neighbours are ranked by embedding cosine against this cell.","type":"string"},"lat":{"description":"ask only: latitude, paired with `lng`, when you want to pin the location by coordinate rather than by name or cell64.","maximum":90,"minimum":-90,"type":"number"},"lng":{"description":"ask only: longitude, paired with `lat`.","maximum":180,"minimum":-180,"type":"number"},"place":{"description":"Free-text place name for what_is_here and ask when you have a name but no cell64, e.g. \"Ashok Nagar, Ranchi\". The responder geocodes it. Ignored when `cell` is present.","type":"string"},"type":{"description":"Which question you are asking, and therefore which other fields apply. where_is: name a place, get its cell64 (needs `description`). what_is_here: summarise a location (needs `cell`, OR `place`/`description` to resolve it first). is_like: pairwise similarity (needs `a` and `b`). did_change: did one band move over a time window (needs `cell`, `band`, `window`). find_like: nearest neighbours to a known cell (needs `key`; optional `k`, `filter`). confirm: is a claim true at a cell (needs `claim` and `cell`). ask: free-text question about a place, runs locate + topic-route + recall server-side (needs `description`; optional `place`/`cell`/`lat`+`lng` to pin the location).","enum":["where_is","what_is_here","is_like","did_change","find_like","confirm","ask"],"type":"string"},"window":{"description":"did_change only: exactly two tslots, [start, end], band-tempo-relative integers from the emem epoch (NOT unix seconds or a date string). Get valid tslots for a cell from emem_trajectory.","items":{"type":"integer"},"maxItems":2,"minItems":2,"type":"array"}},"required":["type"],"description":"A tagged union: `type` selects the intent and decides which OTHER fields are read. Fields belonging to a different intent are ignored, so send only the ones its row needs."}},{"name":"emem_locate","description":"Mint the canonical, vendor-neutral address (cell64) for a real-world place: the shared spatial identity every agent resolves to identically, so two models refer to the same ground instead of two descriptions of it. Also returns the topic-grouped inventory of bands and algorithms recallable there. For a first-class OBJECT identity (a bridge, a plot, a named place) rather than a raw cell, use emem_entity. Send EITHER `lat`+`lng` as numbers OR a free-text place; coordinates win when both arrive. `q`, `query` and `name` are all accepted spellings of `place`. A key this schema does not declare is reported in `_unrecognised_arguments`, so a typo answers about somewhere else rather than erroring.\n\nWhen to use: Call when the input names a real-world place and the next step needs its cell64, or wants to know which bands exist there before recalling. `data_at_this_cell` carries `live_bands_by_topic` (every recallable band, grouped by topic), `algorithms_for_topic` (recipes that fuse them into named scores) and `declared_but_no_materializer_at_this_responder`. For one packaged answer in a single call, use `emem_ask`.\n\nExample arguments: {\"place\":\"Mount Everest\"}","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"lat":{"description":"WGS-84 latitude in degrees, paired with `lng`. REQUIRED with `lng` unless `place`/`q` is provided.","type":"number"},"lng":{"description":"WGS-84 longitude in degrees, paired with `lat`. REQUIRED with `lat` unless `place`/`q` is provided.","type":"number"},"name":{"description":"Alias for `place`.","type":"string"},"place":{"description":"Free-text place name (e.g. 'Mount Everest', 'Tokyo'). REQUIRED unless `lat`+`lng` is provided. Aliases also accepted: `q`, `query`, `name`.","type":"string"},"q":{"description":"Alias for `place`, accepted because OSM/Mapbox/Google Geocoding all use `q`. Provide either this or `place` (or `lat`+`lng`).","type":"string"},"query":{"description":"Alias for `place`.","type":"string"}}}},{"name":"emem_memory_bundle","description":"Compose N (cell, band, tslot?) triples into ONE signed envelope. Each triple runs through the standard auto-materialize recall path; the resulting fact_cids are bundled into a content-addressed envelope and the responder signs over the full receipt. The composed `bundle_token` is `emem:bundle:<bundle_cid>`, a single rebindable string that cites the whole set. Memory algebra: the `merge` operation (https://emem.dev/docs/model.html).\n\nWhen to use: Call when the agent wants to cite multiple (place, band, vintage) facts as one handle. The bundle stays verifiable offline via /v1/verify_receipt (the receipt covers all cited fact_cids and cells). Use this instead of N separate `emem_memory_token` composers when the citation is conceptually one thing (e.g. \"the EUDR-relevant baseline for these 8 plots at 2020-12-31\"). Caps at 256 triples per call, and the response reports `members` and `resolved` so a bundle that only partly resolved is visible without walking every citation.\n\nExample arguments: {\"triples\":[{\"cell\":\"defi.zb4d9.pefa.zf619\",\"band\":\"copdem30m.elevation_mean\"},{\"cell\":\"defi.zb493.xoso.zcb6a\",\"band\":\"indices.ndvi\"}],\"purpose\":\"audit baseline 2026\"}","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"purpose":{"description":"Optional human-readable purpose string. Included in the bundle_cid preimage so the same triples + different purposes produce distinct CIDs.","type":"string"},"scope":{"description":"Multi-tenant scope `{user_id, agent_id, run_id, org_id}`, applied to EVERY triple's underlying recall so the whole bundle cites only facts written under that four-tuple.","type":"object"},"triples":{"description":"One to 256 (cell, band, tslot?) triples to bundle. Each entry is recalled through the standard auto-materialize path; the bundle envelope cites every resulting fact_cid. 257 or more is a typed 400: the token is O(1) in size for any N, but covering N facts costs ceil(N/256) calls, so plan round trips rather than meeting the cap mid-run.","items":{"properties":{"band":{"description":"Band key (e.g. `indices.ndvi`, `copdem30m.elevation_mean`).","type":"string"},"cell":{"description":"cell64 string (or free-text place name; the responder resolves before bundling).","type":"string"},"tslot":{"description":"Optional tslot pin. Omit to use the band's natural latest tslot at the cell.","type":"integer"}},"required":["cell","band"],"type":"object"},"maxItems":256,"minItems":1,"type":"array"}},"required":["triples"]}},{"name":"emem_memory_contradictions","description":"Surface where the corpus DISAGREES with itself (algebra: competing evidence). When two or more independent sources signed different values for the same place + band + time, this returns that disagreement with a 0–1 severity score and citations to every disputed fact, instead of silently picking one value and hiding the conflict. The opposite of a confident single answer: it tells you when not to trust one. Read the SCOPE before quoting a zero: by default this asks only whether two DISTINCT attesters disagree, so one responder answering an address from two different upstreams is not counted until you pass `include_same_attester_sources: true`.\n\nWhen to use: Call before you rely on a number: 'is there disagreement about X', 'do the sources corroborate this', 'audit this claim'. Narrow with `cell_prefix` for a region and `band` for one family; `min_severity` drops trivial differences. Severity is per band kind: scalar = spread over the band's range, vector = 1 - mean cosine, categorical = 1 - mode share. On a single-responder deployment add `include_same_attester_sources: true`, because the likeliest real disagreement there is one signer answering from two providers and the default scope cannot report it. Each record names its `disagreement_scope`. The receipt cites every disputed cid; quantify a pair with `emem_diff`, or read the `disagrees_with` edge via `emem_edges_recall`.\n\nExample arguments: {\"cell_prefix\":\"damO\",\"band\":\"indices.ndvi\",\"min_severity\":0.2}","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"band":{"description":"Band key filter (e.g. `indices.ndvi`). Omit to include all bands.","type":"string"},"cell":{"description":"Alias for `cell_prefix`, and the spelling the rest of the surface uses for a cell64. Send a cell64 you already hold and the scan narrows to that place instead of running over the corpus.","type":"string"},"cell64":{"description":"Alias for `cell_prefix`.","type":"string"},"cell_prefix":{"description":"A cell64 to scan, or a bytewise prefix of one (e.g. `defi.zb5f9`). Omit to scan the whole corpus up to the scan cap. A full cell64 is a prefix of itself, so passing one narrows the scan to exactly that place.","type":"string"},"include_same_attester_sources":{"default":false,"description":"Also report keys where ONE attester answered the same address from two different upstreams. Default false, which scans only for disagreement between two or more DISTINCT attesters — so on a single-responder corpus a zero here means the narrower question was answered, not that nothing disagrees. Set true and a key qualifies when the facts differ in `derivation.fn_key` or in their `sources[].scheme` set; the same provider re-signed is a refresh, not a disagreement, and stays excluded. Each record carries `disagreement_scope` and a `providers[]` list naming what changed.","type":"boolean"},"limit":{"default":100,"description":"Max contradictions to return.","maximum":1000,"minimum":1,"type":"integer"},"min_severity":{"default":0.1,"description":"Severity floor in [0, 1]. 0 = report every disagreement, 1 = only flagrant. Severity scoring is per band kind: scalar (max-min over band range), vector (1 - mean cosine), categorical (1 - mode share).","maximum":1,"minimum":0,"type":"number"},"window_unix_s":{"description":"[lo, hi] inclusive Unix-seconds filter on attestations' signed_at, all disagreeing attestations must fall in the window.","items":{"minimum":0,"type":"integer"},"maxItems":2,"minItems":2,"type":"array"}}}},{"name":"emem_memory_token","description":"Mint a citation handle, `emem:fact:<cell64>:<fact_cid>` (or `:<state_cid>`), that any agent or LLM resolves to the byte-identical signed object. The antidote to referential drift on the value side: hand this one string to another agent instead of re-describing the fact. Validates both components are non-empty and free of the `:` separator. Memory algebra: the `cite` operation (https://emem.dev/docs/model.html).\n\nWhen to use: Call when you want one rebindable string to cite a place plus an attested fact across messages, threads, agents or tools. Pair it with `emem_echo_verify` before you publish the value. FOR MANY FACTS USE emem_memory_bundle INSTEAD, and this is measured rather than stylistic: a token is 83 to 84 characters and 51 LLM tokens while the value it points at averages 11 characters and 5.4, so N tokens cost about 9.5x the context of pasting the N numbers and hit the window sooner. A bundle is 38 characters at any N up to 256 and resolves in one round trip: it wins from N=1 against tokens and from N=5 against the plain values. Individual tokens are for citing ONE fact you must verify later.\n\nExample arguments: {\"cell\":\"defi.zb493.xoso.zcb6a\",\"fact_cid\":\"cxjiu7l54ujzrpnekp24n4534yojpue4mprddbvevnqtti3lh5bq\"}","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"band":{"description":"Optional band key. When set, the minted citation carries the band's tamper-provenance block (class, deterministic, tamper_evidence, trust_rank) so the receiving agent sees the trust class without a resolve round-trip.","type":"string"},"cell":{"description":"cell64, neither component may contain `:`.","maxLength":23,"minLength":19,"pattern":"^(?:(?:[bcdfghjklmnpqrstvwxyz][aeiouAEIOU]){2}|z[0-9a-f]{4})(?:\\.(?:(?:[bcdfghjklmnpqrstvwxyz][aeiouAEIOU]){2}|z[0-9a-f]{4})){3}$","type":"string"},"fact_cid":{"description":"52-char base32-nopad-lowercase content-id of the fact (full 32-byte blake3).","type":"string"},"observed_on":{"description":"The fact's source capture date (YYYY-MM-DD) as `/v1/recall` reports it in `sources[].captured_at`. Supplied together with `band` it additionally mints the self-describing `descriptor_token`. A wrong date forges nothing: resolve binds the date to the signed fact and answers 409 on a mismatch.","type":"string"}},"required":["cell","fact_cid"]}},{"name":"emem_memory_token_resolve","description":"Parse a `emem:fact:<cell64>:<fact_cid>` citation handle and return the reading it cites. `value`, `unit`, `band` and `kind` are on the response at the TOP level, alongside the full signed `fact` body they were lifted from. Saves the agent from string-splitting the token and chaining `GET /v1/facts/<cid>` manually. Memory algebra: the `resolve` operation (https://emem.dev/docs/model.html).\n\nWhen to use: Call when you hold a memory_token from another agent or an earlier turn and want the value behind it. For a scalar quote `value_verbatim`, the exact decimal string the fact was signed as: re-typing the JSON number is where measured precision is lost. `value` and `unit` are always present, and an explicit null means the fact genuinely has none (an `absence` has no value; most index bands are dimensionless) rather than a missing field. The response also carries the parsed cell, the fact_cid, the full signed `fact` and a stable `fact_url` to hand on. A cid this responder does not hold is a typed 404: try /v1/fetch, or resolve at a mirror.\n\nExample arguments: {\"token\":\"emem:fact:defi.zb493.xoso.zcb6a:cxjiu7l54ujzrpnekp24n4534yojpue4mprddbvevnqtti3lh5bq\"}","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"token":{"description":"A `emem:fact:<cell64>:<fact_cid>` citation handle to dereference.","type":"string"}},"required":["token"]}},{"name":"emem_recall","description":"Read the signed facts at a canonical address (cell64); auto-materializes on a miss for any band with a registered materializer. A fact_cid names one signed attestation, so a recalled fact is citeable and re-verifiable rather than a paraphrase: resolving it anywhere returns those exact bytes. It is NOT a fingerprint of the observation. The digest covers the responder's key and the moment it signed, so two responders that measure the same thing mint different fact_cids and a cid resolves only at the responder that signed it; use emem_entity for identity that crosses responders. Pass `deterministic:true` (or a `provenance` class list) to keep only facts recomputable from the cited raw source, with no model or human in the loop. In the memory algebra this is ensure(cell, bands), not get: state what must exist and the responder reuses or materializes.\n\nWhen to use: Call after `emem_locate`, or with a known cell64 or place name. Returns every Primary fact at that (cell, band, tslot). If a requested band has no fact yet but has a materializer, the responder fetches the upstream value, signs it, persists it and returns it in the same call (slow once, cached after), so any wired band recalls at any cell on Earth: pass `bands: [<band>]`. `materialize_notes` lists what was just fetched; empty with no notes means no materializer here.\n\nExample arguments: {\"cell\":\"damO.zb000.xUti.zde78\",\"bands\":[\"weather.temperature_2m\",\"copdem30m.elevation_mean\"]}","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"as_of_signed_at":{"description":"Bi-temporal transaction-time bound. RFC 3339 string. Returns only facts whose `signed_at` ≤ as_of_signed_at, answers `what did emem KNOW as of system-date Y`. Malformed strings are rejected with code:`invalid_signed_at_format`.","format":"date-time","type":"string"},"as_of_tslot":{"description":"Bi-temporal valid-time bound. Returns the latest fact per (cell,band) whose tslot ≤ as_of_tslot, answers `what did this place look like AS OF date X`. Conflicts with an explicit `tslot` when as_of_tslot < tslot (rejected with code:`invalid_temporal_bound`).","minimum":0,"type":"integer"},"band":{"description":"optional single band key, convenience alias for bands:[band]. Use when you want exactly one band (e.g. 'geotessera.2020', 'modis.ndvi_mean') and would otherwise have to wrap it in an array. Both `band` and `bands` are accepted; if both are given they are merged.","type":"string"},"bands":{"description":"optional band keys to filter, e.g. ['indices.ndvi','geotessera']","items":{"type":"string"},"type":"array"},"cell":{"description":"cell64 string, e.g. 'damO.zb000.xUti.zde78'","maxLength":23,"minLength":19,"pattern":"^(?:(?:[bcdfghjklmnpqrstvwxyz][aeiouAEIOU]){2}|z[0-9a-f]{4})(?:\\.(?:(?:[bcdfghjklmnpqrstvwxyz][aeiouAEIOU]){2}|z[0-9a-f]{4})){3}$","type":"string"},"cell64":{"description":"Alias for `cell`.","type":"string"},"deterministic":{"description":"Sugar over `provenance`: true keeps only facts any third party can recompute from the cited raw source (direct_sensor + deterministic_index); false keeps the rest (attested_execution + model_output + human_curated + unclassified). Composable with `provenance` (intersection).","type":"boolean"},"include":{"description":"Opt-in response expansion. include:['provenance'] attaches each fact's tamper-provenance class, which is what `deterministic` and the `provenance` filter select ON: without it you can filter by class and never be told which class a returned fact is. include:['freshness'] attaches an advisory per-fact freshness block: a Q(Δt) staleness score from the band's physics decay kernel (the same one /v1/temporal_route ranks bands with), so an agent learns how stale each reading is in the call that returns it. Advisory only; it does NOT enter the receipt. include:['edges'] attaches each fact's typed temporal edges and threads their CIDs into the receipt. Absent leaves the response byte-identical to the pre-v0.0.9 recall.","items":{"enum":["freshness","edges","provenance"],"type":"string"},"type":"array"},"lat":{"description":"Explicit latitude, an alternative to `cell`; paired with `lng`.","type":"number"},"lng":{"description":"Explicit longitude, paired with `lat`.","type":"number"},"place":{"description":"Free-text place name, an alternative to `cell`.","type":"string"},"provenance":{"description":"Tamper-provenance filter: return only facts whose band's provenance class is in this list. `attested_execution` is a device reading trusted through its verified OS execution trace and platform attestation (not recomputable). Applied BEFORE the receipt is signed, so the receipt covers exactly the returned facts; `bands_already_attested_at_cell` stays unfiltered so you still see what else exists at the cell.","items":{"enum":["direct_sensor","deterministic_index","estimator","attested_execution","model_output","human_curated","unclassified"],"type":"string"},"type":"array"},"scope":{"description":"Optional multi-tenant scope {user_id, agent_id, run_id, org_id}. When at least one field is set, the recall is FILTERED to facts written under the same four-tuple (a recall scoped to {user_id:'u1'} sees only u1's facts, never another tenant's and never globally-written facts) AND the signed receipt binds the scope. Omit (or send {}) for the global, pre-v0.0.8 recall.","properties":{"agent_id":{"type":"string"},"org_id":{"type":"string"},"run_id":{"type":"string"},"user_id":{"type":"string"}},"type":"object"},"tslot":{"description":"optional time slot (band-tempo-relative integer offset from emem epoch)","type":"integer"}},"required":["cell"]}},{"name":"emem_tools","description":"The map of emem's tool surface, and the only tool you need to find the rest: the working loop in the order you walk it (name, ground, cite, resolve, verify, check for drift), then every other tool grouped by the question it answers, each with its one-line trigger. Pass `name` for one tool's full schema and a runnable example. IF YOU ARE READING A LIST OF 18 TOOLS, YOU ARE SEEING A CURATED SUBSET OF 110, NOT THE WHOLE SURFACE; hosts strip `_meta`, so the count is repeated here. Every catalogued tool stays callable by name through tools/call at either endpoint.\n\nWhen to use: Call FIRST when you do not know which tool answers the question, or need a capability absent from your list: absent from the list is not absent from the server. `q` searches by topic (`ndvi`, `flood`, `verify`), `name` returns one exact schema, no arguments returns the whole map. /mcp/full registers the full catalog; emem_ask answers in one shot without picking a primitive.\n\nExample arguments: {\"q\":\"ndvi\"}","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"bundle":{"description":"Filter by the job you are doing. Call with no arguments first to see each bundle and its size.","enum":["tokenisation","verification","agent_to_agent","long_horizon","robotics","satellites","agriculture","forestry","climate_risk"],"type":"string"},"category":{"description":"Filter to one category. This is about the shape of the job, NOT about safety: 16 tools outside `write` declare `readOnlyHint: false` because reading a cold address can materialise or mint as a side effect, so `category: \"read\"` is not a safe-tools filter. Read each result's `annotations.readOnlyHint` for that.","enum":["read","write","verify","introspect","plan"],"type":"string"},"name":{"description":"Return the full descriptor for exactly this tool (input schema, runnable example, annotations), e.g. `emem_ndvi`. Use this when you already know the name and want its schema without loading the whole catalog. It SHORT-CIRCUITS: when `name` is set every other argument here is ignored, so `{name, q}` is not a search within one tool. A name this responder does not carry is not an error status, you get a body with `did_you_mean` holding up to five names that share a substring with what you asked for.","type":"string"},"q":{"description":"Free-text filter over tool names, titles and trigger text, e.g. `ndvi`, `cloud`, `flood`, `verify`, `token`. Plain lowercased substring over name + title + description + trigger text, not fuzzy and not stemmed: `ndvi` hits, `vegetation index` only hits tools that spell that phrase. Combines with `shape`/`bundle`/`category`/`tier` as AND, so an over-narrow combination answers with an empty catalog rather than an error.","type":"string"},"shape":{"description":"Filter by what the answer looks like, which is usually the real question. `scalar` is one number at one address; `raster` is a gridded field over an area; `timeseries` is a value per timestep; `vector` is a learned embedding; `identity` is a canonical name for a thing; `token` is a citation handle; `proof` checks one.","enum":["scalar","timeseries","raster","geometry","vector","identity","token","proof","plan","file","catalog"],"type":"string"},"tier":{"description":"Which slice to list. Defaults to `all`, so this tool shows the whole surface even when the endpoint advertises only the core loop, and an `extended` tool you find here is callable by name through tools/call whether or not your host listed it. Pass `core` to see only what a default connection advertises.","enum":["core","extended","all"],"type":"string"}}}},{"name":"emem_verify_receipt","description":"Verify a signed receipt envelope server-side: rebuilds the canonical preimage under the rule the receipt's own `preimage_version` names, runs ed25519 over the embedded key and signature, and returns `{valid, reason, failure_detail, signature_valid, merkle_proof_valid, signer_pubkey_b32, preimage_blake3_hex}`. A receipt is BYTE-FOR-BYTE OR NOTHING: v2 binds the inclusion proof, so any reshaping (a dropped field, a re-keyed one, a summary) invalidates the signature by design. For when the in-browser /verify path is unavailable, or for a server-side audit of a third party's receipt.\n\nWhen to use: Pass the receipt EXACTLY as the read primitive returned it, whole and unmodified. Two omissions produce a false forgery rather than a 400, and they are the only two worth memorising: dropping `merkle_proof`, and dropping `preimage_version` (absent deserialises to 0, which silently selects the v0 rule, so the proof still walks while the signature reads as invalid). Signature and pubkey may be byte arrays or `sig_b32` / `responder_pubkey_b32`; no other spelling is tolerated. Reshaping a field this responder can check is reported as `reason: receipt_reshaped_after_signing` with the field named, never accepted. Optionally set `pubkey_b32` to assert a specific signer. A bad signature is 200 with `valid: false`, never a 4xx. The example arguments are a real receipt this responder signed (key epoch 0) over one weather fact at Trafalgar Square: run it unchanged and `valid` is true; change any byte and it is not.\n\nExample arguments: 1602 bytes, too long to inline in a listing. Call `emem_tools` with `{\"name\": \"emem_verify_receipt\"}` for it whole and runnable; it is not shortened here because a truncated example is not one.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"current_responder_epoch":{"description":"The responder key epoch you currently trust, from `/v1/manifests`. Produces an advisory `key_epoch_advisory` comparison against the receipt's epoch; a mismatch is reported, never rejected.","type":"integer"},"facts":{"description":"The fact value(s) you intend to rely on. Each is content-addressed and checked for membership in the receipt's `fact_cids`, so a genuine receipt presented beside a tampered fact answers `valid:false` / `fact_mismatch`. Omit it and only the signature is checked, which a doctored fact survives.","type":"array"},"pubkey_b32":{"description":"Optional explicit responder pubkey (base32). When omitted, uses the receipt's embedded pubkey/responder fields.","type":"string"},"receipt":{"description":"The signed receipt envelope, the object under `receipt` in any read primitive's result. Must carry primitive/served_at/request_id/cells/fact_cids and either `signature` byte[] + `responder_pubkey` byte[] or their b32 string forms. IF ALL YOU HOLD IS AN `emem:fact:` TOKEN, this is not the tool to call first: a token is not a receipt and passing one here is a shape error. Call `emem_memory_token_resolve` on the token, then pass THAT result's `receipt` object here. Resolving proves the token points at the bytes it claims; verifying proves this responder signed them.","type":"object"}},"required":["receipt"]}},{"name":"fetch","description":"Dereference an id from `search`: the reading in one line, then the signed body it came from, the URL serving those bytes, and metadata naming cell, band, signing time and key. Takes an `emem:fact:` citation, a bare fact_cid, or an `emem:cell:` handle for a whole cell. The value is quoted as the exact decimal string it was signed as, never re-rendered. A fact handle writes nothing; a cell handle, like `emem_recall`, MATERIALIZES a missing band on a cold cell (fetched upstream, signed, persisted), so the flags follow that path: readOnlyHint false.\n\nWhen to use: Call on each result you intend to cite, before quoting the number. Quote the one-line reading; the body makes it checkable, and emem_echo_verify grades what you emit against it. An oversize body says so inline and names the URL serving it whole.\n\nExample arguments: {\"id\":\"emem:fact:defi.zb493.xoso.zcb6a:cxjiu7l54ujzrpnekp24n4534yojpue4mprddbvevnqtti3lh5bq\"}","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"id":{"description":"An id from `search`: an `emem:fact:` citation, a bare fact_cid, or an `emem:cell:` handle for every fact at one cell.","type":"string"}},"required":["id"]}},{"name":"search","description":"Search emem's signed corpus and return results shaped as citations: each entry is one signed fact, with an `id` to dereference, a `title` naming band, place and the value as signed, and a stable `url` serving those bytes. Takes a place name, a cell64, or an emem citation handle (a handle returns the one fact it cites). Capped for the wire; the final entry names the cell and the TRUE total. On a cold cell it MATERIALIZES a missing band first, as `emem_recall` does: fetched upstream, signed, persisted. Hence readOnlyHint false.\n\nWhen to use: Call first when a question is about a place and the answer must be citable: it turns the question into a list of sources, each of which `fetch` expands. For a synthesised answer in one call, use emem_ask instead.\n\nExample arguments: {\"query\":\"Trafalgar Square, London\"}","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"query":{"description":"A place ('Trafalgar Square, London'), a cell64, or an emem citation (`emem:fact:<cell64>:<fact_cid>`). A citation returns the one fact it cites, so a result handed over by another agent resolves exactly.","type":"string"}},"required":["query"]}}],"scan":{"score":80,"grade":"B","scanned_at":"2026-09-19T21:01:57.699Z","report":{"scannerVersion":"0.1.7","scannedAt":"2026-09-19T21:01:57.678Z","components":{"code":{"score":-1,"max":25,"notes":["package could not be scanned"]},"reliability":{"score":20,"max":20,"notes":["remote reachable in 1093ms"]},"poisoning":{"score":13,"max":15,"notes":["18 tool descriptions checked"]},"auth":{"score":3,"max":15,"notes":["open endpoint exposes 1 write-action tools with no auth"]},"maintenance":{"score":15,"max":15,"notes":["last push 3 days ago"]},"identity":{"score":9,"max":10,"notes":["registry namespace matches repository owner","GitHub account older than a year"]}},"findings":[{"id":"auth.open-write","severity":"high","component":"auth","title":"Write-action tools reachable without authentication"},{"id":"poison.long-description","severity":"low","component":"poisoning","title":"Unusually long tool description (over 2,000 characters)","evidence":"tool emem_intent: …Say what you want in one typed object and get the answer, without choosing a primitive. `type` is a tagged union: it selects the intent AND decides which other fields are read, so send only the fields its row needs. The plan is EXECUTED in the same call, so you receive the result (the resolved cell64, the similarity, the delta, the verdict), not a list of calls to make yourself. type | needs | optional | answers where_is | description | | cell64 for a named place what_is_here | cell OR place | description | what is attested at a location is_like | a, b | | cosine similarity of two cells did_change | cell, band, window | | delta for one band over [start,end] tslots find_like | key | k, filter | nearest cells by embedding confirm | claim, cell | | verdict plus the signed facts behind it ask | description | place/cell/lat+lng | free-text question, packaged answer An unknown or missing `type` returns a structured `needs_intent_type` envelope naming the seven values rather than a hard error, so you can correct it on the next turn. When to use: Call when the question maps onto one of the seven rows above and you would rather state the goal than pick a primitive. Otherwise go direct: a band at a cell is emem_recall, a region is emem_recall_polygon, a free-text place question is emem_ask (type:\"ask\" forwards to it). `window` takes tslots, not dates: get them from emem_trajectory. A tool named here but absent from `tools/list` is not a dead end: every one of the 110 dispatches by name at `/mcp` and `/mcp/full`; the core list is 18 to keep the catalog small, and `emem_tools` enumerates the rest. Example arguments: {\"type\":\"did_change\",\"cell\":\"damO.zb000.xUti.zde78\",\"band\":\"indices.ndvi\",\"window\":[20245,20620]}…"}],"inputs":{"probes":[{"url":"https://emem.dev/mcp","reachable":true,"authRequired":false,"latencyMs":1093,"serverInfo":{"name":"emem","version":"2.4.0"}}],"packages":[],"repo":{"found":true,"owner":"Vortx-AI","repo":"emem","archived":false,"pushedAt":"2026-09-17T04:01:26Z","stars":58,"forks":8,"openIssues":0,"ownerType":"Organization","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/193399717?v=4","ownerCreatedAt":"2025-01-01T12:19:32Z","license":"Apache-2.0"},"icon":{"url":"https://emem.dev/favicon.svg","source":"registry"},"presence":{"stars":58,"forks":8,"downloadsWeek":null,"license":"Apache-2.0","lastPushAt":"2026-09-17T04:01:26.000Z","score":40}}}},"grade_history":[],"reviews":[]}