Stigmer
Execution graph of AWS: verified contracts, least-privilege IAM policies, pre-flight authorization.
| Endpoint | https://stigmer.network/mcp (streamable-http) |
|---|---|
| Registry version | 0.2.0 |
| Now | 8 tools · grade A (91) · pin ts_c177ba7f53087a426dee44639d1cd7cf · protocol 2024-11-05 |
| First / last listed | 2026-11-07 02:18 UTC / 2026-11-07 02:18 UTC |
| Grade over time | 2026-11-07: A (91), 8 tools |
Is this your server? Own a server? ToolFit hosted watch re-checks it every 24 h ($0.25 per 30 days) or 6 h ($0.60) and sends you an HMAC-signed webhook when its tools or grade change: POST https://api.youraitools.co/toolfit/v1/watch. To opt out, see About & opt-out.
Tools: query list_services list_methods policy list_workflows verify authorize register
query | Search for verified method contracts for any library. Pass any text -- library name, method, what you're building, or an error you hit. params: query, error_type, sig, packages, limit |
list_services | List all libraries and services that have verified method contracts. Use this first to discover what's available, then query for specific methods. params: none |
list_methods | List all methods for a given library or service. Use after list_services to drill into a specific one. params: service* |
policy | Generate a least-privilege IAM policy for an AWS workflow. Pass a named workflow, explicit IAM actions, or a description. Returns the exact policy with confidence tier and any unresolved operations. params: workflow, operations, description |
list_workflows | List the curated named workflows that can generate least-privilege IAM policies. params: none |
verify | Feed a generated policy back to AWS's own policy evaluation engine (SimulateCustomPolicy) and confirm it grants exactly the intended operations and nothing extra. Returns verified (True|False|unknown), grants_all, grants_extra. Requires AWS credentials; without them verified=unknown with the reason. Wildcarded operations are expanded to concrete actions first. params: workflow, operations, policy |
authorize | Pre-flight authorization check for an AWS operation. Resolves the IAM actions the operation requires, then asks AWS's own policy simulator (SimulatePrincipalPolicy) whether the current role (or a given principal) allows them. Returns resolution (exact|partial|unresolved) and evaluation (allowed|denied|unknown) as separate fields. Requires AWS credentials; without them evaluation=unknown with the r params: operations, workflow, principal_arn |
register | Register a fix. Three actions: confirm (it worked), append_thread (variant worked), new_receipt (nothing matched, I fixed it). params: action*, library*, symbol*, version, error, fix, error_class, env, receipt_sig |
Entries describe changes in tool definitions. They are not statements about a server, its quality or its author. The grade measures how the tool definitions fit model providers (token cost, schema compatibility, confusable names) as scored by the ToolFit engine at the time of the listing. JSON: append .json. Opt-out: how or hello@youraitools.co.