# HarperZ9/telos [Health: Active]

**Category:** 💻 Developer Tools  
**Repository:** https://github.com/HarperZ9/telos  
**GitHub Stars:** 4  
**npm Downloads (last month):** 197  
**Views:** 3  
**Installs:** 0  
**Upvotes:** 0  
**Directory Page:** https://allmcps.com/mcp/harperz9-telos

## Description
Local-first Project Telos MCP tool line for inspectable AI work: source intake, workspace context, routing ledgers, action receipts, and MATCH / DRIFT / UNVERIFIABLE verification packets across 5 stdio servers.

## Claude Desktop Quick Installation
Install path detected from listing signals. Uses `npx` (confidence: high):

```json
"mcpServers": {
  "telos": {
    "command": "npx",
    "args": ["-y","project-telos-mcp"]
  }
}
```

## Documentation

## What HarperZ9/telos does

HarperZ9/telos combines agent-facing MCP tools with a command-line interface for inspectable local work. Its 50 tools cover several distinct tasks:

- Reading HTML pages, feeds, sitemaps, and selected public APIs.
- Reviewing a GitHub Actions run through the `gh` CLI.
- Running static accessibility and performance checks against an HTML file.
- Driving Chrome or Windows applications only after an explicit permission grant.
- Recording gated actions and refusals in a hash-chained log.
- Creating and checking proof packets for actions, research claims, measurements, and build invariants.

The package is published as `project-telos-mcp` and runs on Node.js 20 or newer without npm dependencies.

## How it works

The MCP process communicates over stdio with an MCP host. A host can start it with `npx -y project-telos-mcp`, or a global installation can provide the `telos` and `telos-mcp` commands.

Web intake runs locally and reads HTML as served, without executing page JavaScript. Fetches honor `robots.txt` and Crawl-delay, and each result records the URL, timestamp, status, and SHA-256 of the fetched bytes. Reddit access uses the official API with the operator's app credentials; single X posts use the X oEmbed endpoint. Other supported public sources include Hacker News, GitHub, arXiv, and Wikipedia.

Control operations are permission-gated. A grant must be issued from an interactive terminal, preventing an agent shell from granting itself access. Consequential actions require confirmation, and password, one-time-code, and card fields are refused. Action records can be signed with a locally initialized Ed25519 key, while proof packets recompute their embedded inputs and report `MATCH`, `DRIFT`, or `UNVERIFIABLE`.

## Setup and configuration

For an MCP host, configure `npx` as the command and pass `-y` and `project-telos-mcp` as arguments. The package can also be installed globally:

```bash
npm install -g project-telos-mcp
telos reach doctor
```

Use `telos reach doctor` to inspect available intake channels and credential requirements. Reddit requires `REDDIT_CLIENT_ID` and `REDDIT_CLIENT_SECRET` when that source is used. The repository's multi-server demonstration expects related Project Telos repositories beside one another and uses `PROJECT_TELOS_PUBLIC` for their parent directory.

## Tools and capabilities

`telos reach` fetches pages, feeds, sitemaps, and supported public APIs while producing fetch receipts. `ci-triage --gh-run owner/repo#run_id` identifies whether a run failed at a blocking step or only produced warnings; it does not diagnose the underlying test.

`accessibility-doctor --html FILE` performs 14 static checks covering items such as language, viewport, landmarks, focus styling, reduced motion, skip links, and labels. `performance-doctor --html FILE` performs 14 byte-budget checks. Neither command opens a browser.

`native-control` can navigate Chrome through DevTools Protocol and control Windows applications through UI Automation, subject to grants and risk tiers. `proof.mjs` creates packets, and `proof.mjs verify` checks whether their inputs and values still match.

## Limitations and notes

Web fetching does not render JavaScript, so login-protected pages and bot checks can produce empty results. Browser and app control is narrower than dedicated browser automation servers, and Windows app control is Windows-only. Static HTML doctors do not provide browser-based audits. Proof packets are hash-checked but unsigned; signed action-log chain heads require local key initialization. The CI tool classifies failure steps and warnings without diagnosing test failures.

_Full upstream README: https://allmcps.com/mcp/harperz9-telos/readme_