MCP server
developerInstall the HISS CoilOps MCP server — Claude Code, Codex, generic clients — plus all ten tools.
What it is
@hiss/mcp-server is a local stdio MCP server (built on @modelcontextprotocol/sdk 1.29.0) that exposes CoilOps as agent tools: generation, validation, scoring, fuse audits, capsule compilation, drift checks, share cards, and hash-verified receipts. Every tool is a deterministic local computation — no network, no keys, no broker connection — and every tool accepts an optional nowIso for replayable output.
Install
Claude Code
# build once from the repo root
pnpm install && pnpm --filter @hiss/mcp-server build
# add to Claude Code
claude mcp add hiss -- node /ABSOLUTE/PATH/TO/hiss/mcp-server/dist/index.jsCodex CLI
# ~/.codex/config.toml
[mcp_servers.hiss]
command = "node"
args = ["/ABSOLUTE/PATH/TO/hiss/mcp-server/dist/index.js"]Generic MCP client (Claude Desktop, Cursor, …)
{
"mcpServers": {
"hiss": {
"command": "node",
"args": ["/ABSOLUTE/PATH/TO/hiss/mcp-server/dist/index.js"]
}
}
}The build bundles @hiss/core and the MCP SDK into one self-contained dist/index.js, so the server runs with plain node from anywhere.
The ten tools
| Tool | Input | Output |
|---|---|---|
| hiss_generate_coil | prompt (required), executionMode? (non-agentic only), nowIso? | A validated CoilManifest + Coil Health + receipt, from the deterministic mock strategist — no network, no keys. |
| hiss_validate_coil | coil, nowIso? | Full validation verdict { valid, issues[] } plus a validation receipt. |
| hiss_score_coil | coil, nowIso? | Coil Health 0–100 with all nine components — a structure/readiness heuristic, never a return forecast. |
| hiss_create_receipt | coil, kind? (coil_manifest | validation | risk_fuse), nowIso? | A canonical-JSON SHA-256 CoilReceipt. |
| hiss_compile_robinhood_capsule | coil, maxTotalNotionalUsd?, userAcknowledgedAgenticMode?, nowIso? | An Execution Capsule + capsule receipt. paper_only Coils refuse; agentic mode needs the explicit acknowledgment flag. |
| hiss_risk_audit | coil, nowIso? | Per-fuse audit (kind, binding, description), required-set coverage, missing fuses, issues, fuseChecksum, receipt. |
| hiss_drift_check | coil, currentWeightsBps?, nowIso? | DriftReport; breaches attach preview-only rebalance proposals requiring human confirmation. |
| hiss_export_share_card | coil, shareUrlBase?, nowIso? | ShareCardPayload + receipt — a thesis artifact, never a performance claim. |
| hiss_verify_receipt | receipt, coil | { ok, mismatches[] } — recomputes manifestHash, fuseChecksum, coilId, and the liveOrderSent invariant. |
| hiss_explain_oracle_policy | (none) | The versioned HISS oracle policy: health states, staleness limits, sequencer rules. |
All tools carry readOnlyHint: true / openWorldHint: false annotations — they read and compute, they do not touch the outside world. Clients should still treat annotations as hints, per the MCP spec.
Test with the Inspector
npx @modelcontextprotocol/inspector node mcp-server/dist/index.js
# opens the Inspector UI: list tools, call them with sample payloads,
# and exercise edge cases (invalid coils, missing fuses, paper_only capsules)Safety rails, surfaced from @hiss/core
paper_onlyCoils refuse to compile capsules.agentic_mcp_enabledcompiles only with the explicituserAcknowledgedAgenticMode: trueflag — a mode string alone never unlocks it.- Risk fuses are binding; capsules cannot compile without the mandatory set.
Prefer HTTP? The same operations are available as the Agent tools API.