The catalogue contract
Las is the local catalogue and policy-preserving federation layer for Wisent agent tools: it discovers an operator-approved set of sibling MCP servers, verifies their signed release contracts, and exposes them through one stdio MCP server and one CLI whose catalogue and federation operations are read-only.
What Las promises#
The surface registry and workspace paths are compiled into source, and a valid manifest proves authorization by a configured trust key with byte and schema binding; each child performs its own authorization and product checks.
A local coding agent can use many Wisent products — browser automation, credential capabilities, compute status, research metadata, communications, quality tooling, and proposal workflows. Registering every MCP server individually creates collisions and inconsistent launch/security configuration, and blindly aggregating whatever a child advertises would turn local binary or schema drift into an authority escalation.
Las answers with one deterministic catalogue: children launch from a static repository-owned registry, every ordinary surface is bound to an Ed25519-verified, expiring, sequence-watermarked release manifest, and each child tool is exposed under a deterministic `<surface>__<tool>` name through a single stdio endpoint.
Who it serves#
- Local Wisent operators who need one catalogue of configured agent surfaces.
- Coding-agent integrators connecting a single stdio MCP endpoint instead of many sibling processes.
- Security and release operators binding exact child commands, code/binary digests, environment names, tool names, schemas, and credential templates.
- Incident responders checking which child starts, handshakes, and exposes the signed tool count without invoking its tools.
Current status#
Public development source for Node.js 18+ under Apache-2.0. Las expects a coordinated local Wisent workspace and operator-provisioned signed release files. No stable package publication, hosted organization catalogue, managed installation, or availability SLA is currently promised.