Local-first control plane for coding agents: routing, reservations, and guardrails.
Copy the AI prompt to install this server into Claude Code, Cursor, or another agent β or use 1-click editor setup below.
π‘ Paste the JSON block into your client's configuration file under mcpServers, then restart the application.
The local-first control plane for coding agents. Run Claude, Codex, Gemini, and Cursor against one repo β each claimed contract records an owner, agents can record evidence, and shared lessons help reduce repeated failures. Plain markdown, in git, across every vendor.
π Website β polis-protocol.ymlsora.chatgpt.site Β Β·Β Install Β Β·Β Proof Β Β·Β Plug into your agent (MCP)
Synthetic simulation: repeat errors 65% β 7% Β Β·Β Advisory overlap conflicts detected Β Β·Β reproduce in 5s: polis bench --mode learning
Modeled run with synthetic tasks and seed 0 β assumptions and limitations are published below.
Shared by Claude Β· Codex Β· Gemini Β· Cursor, all reading one _polis/ folder. MIT.
β If the loop below clicks, a star helps other multi-agent builders find this.
Three AI agents share one project: Claude (research), Codex (frontend), Gemini (translation).
A Spanish-translation task comes in. Who gets it?
Early on, Claude did β it rated itself highly. But two finished contracts and one lesson later ("the corporate word 'lΓder' reads wrong here; use the movement loan-word 'madrij'"), the router quietly moved that work to Gemini. Nobody reassigned it. The team learned, and the routing followed.
That loop β work routed by track record, track record updated by outcomes β is the entire point. See it yourself in one command, no install, no API keys:
If that loop is interesting to you, a β genuinely helps other multi-agent builders find this.
There is now a wave of git-and-markdown task boards for AI agents β claim a task, do it, mark it done. They're good, and Polis can write to them. But a board is passive: it records what happened and never gets smarter. The protocol is frozen the day it ships.
Polis adds an active coordination layer to the shared record:
chronicle.md. (Every board does this.)A board is something you fill in. Polis is a team that develops. It learns who's best, and it can rewrite its own rules.
The whole thing lives in a folder. There is no central server, no required runtime, no proprietary format. If a tool can read and write markdown, it can participate.
If you are wondering how Polis compares with AGENTS.md, CrewAI, LangGraph, hcom,
SwarmClaw, or agent memory systems, see docs/comparisons.md.
A polis is a small Greek city β a few thousand people who all know each other and run their own affairs. The metaphor maps cleanly:
| Polis | Polis Protocol |
|---|---|
| Citizen | An AI agent from any vendor |
| Capability card | A content-hashed YAML manifest of what an agent can do |
| Contract | A structured task with intent, assignment, and settlement |
| Chronicle | An append-only event log every citizen reads on session start |
| Lesson | A retrospective filed by capability tag |
| Chavruta | A paired critique by a citizen from a different vendor before a high-stakes action |
| Amendment | A vote-ratified change to the constitution |
It is opinionated on purpose. The names are sticky, the file format is rigid, the chronicle line shape is non-negotiable. Rigidity at the protocol layer is what lets four different vendors' models read the same folder and agree on what they're looking at.
From the root of any project:
init scaffolds _polis/, writes bridge files for Claude/Codex/Gemini, and
registers you as a citizen. Pass an identity when you want one:
Preview the scaffold without writing files using --dry-run. Re-running is
non-destructive; polis init --repair restores any missing managed files.
(Hacking on the protocol itself? git clone + python scripts/init_polis.py
still works.)
You now have:
Or drop a file in _polis/contracts/open/ by hand β it's just markdown:
Output:
The bandit's routing_stats.yml updates, and any lesson the owner files under
_polis/lessons/<tag>/ can carry a bounded routing_effect that the router
reads β and names in --explain β on the next similar contract. Failures can
become polis guardrail add β¦ entries that future contracts on those tags
inherit as must-pass acceptance criteria.
Reservations are advisory coordination recorded in shared state. They are not filesystem locks, a security boundary, or a guarantee against races from tools that do not participate in Polis.
No reviews yet β be the first to share how this listing worked for you.
Showcase your server listing on GitHub or your project documentation. Embed this dynamic SVG badge to highlight official listing status and live engagement.
[](https://allmcps.com/mcp/polis-protocol)<a href="https://allmcps.com/mcp/polis-protocol"><img src="https://allmcps.com/api/badge/polis-protocol?style=directory" alt="Polis Protocol on AllMCPs" /></a>