Skip to content
Agentmart
Submit a tool

AXIOM

Transactional write gate for coding agents: plan, canonical manifest, checks, two-phase apply.

Connector by dragoscv · GitHub account verified by the MCP Registry

IndexedMITLocal (stdio)
Write a review

Install

Works with Claude Code, Codex, VS Code, Cursor, Windsurf, Claude Desktop. Read the repository before you give any tool access to your data.

npx agentmarket install connector/dragoscv-axiom

Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.

Get the weekly diff

The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.

We use your email only for this newsletter. Privacy

About

Transactional write gate for coding agents: plan, canonical manifest, checks, two-phase apply.

Reviews

Write a review

No reviews yet. Installed it? Reviews come from verified installers only. How reviews work

Permissions

What this server can do and what it asks for, from its tool list, install config and code. Checked Oct 26, 2026.

Tools
11 read · 5 write · 3 delete
Secrets
1 (API keys, tokens or passwords)
Install scripts
None found
Runs as
Node.js package

Tools by what they do 19

Read from the source code; the running server may list different tools.

Read 11 · Look things up without changing anything.

  • axiom_apply_dry_run
  • axiom_axm_parse
  • axiom_check
  • axiom_check_start
  • axiom_manifest_diff
  • axiom_manifest_verify
  • axiom_plan_validate
  • axiom_repo_snapshot
  • axiom_roots_list
  • axiom_status
  • axiom_task_get

Write 5 · Create, change, send or run things.

  • axiom_plan_add
  • axiom_plan_begin
  • axiom_plan_compile
  • axiom_plan_seal
  • axiom_task_cancel

Delete 3 · Delete, drop, revoke or wipe things.

  • axiom_apply
  • axiom_rollback
  • axiom_write

Secrets and settings it asks for

Secrets: values you paste in that let it act as you.

  • AXIOM_SIGNING_KEY

Network hosts it talks to 4

  • code.visualstudio.com · found in code
  • dragoscv.github.io · found in code
  • github.com · found in code
  • json.schemastore.org · found in code

Files it touches

  • /etc/codex/hooks
  • /etc/github-copilot/policy.d
  • Your home directory (~)
  • ~/.codai/coord/leases
  • ~/.codai/coord/marks
  • ~/.copilot/mcp-config.json
  • ~/.junie/config.json
  • C:\\ProgramData\\GitHub\\Copilot\\policy.d\\
  • C:\\ProgramData\\OpenAI\\Codex\\hooks
  • Any path the agent passes to its tools

Tools (19)

Read from the source code; the running server may differ. Descriptions are the server’s own words; hidden characters are shown as [U+…].

  • axiom_applyApply a bundle to the filesystem (two-phase commit)can change or delete data

    Transactionally write the bundle into the root: pre-image verification, staging, journal, atomic renames, scoped rollback on failure. Requires `confirmDigest === bundle.manifestDigest` (echo the digest you saw in dry-run); when the client supports elicitation the user must also confirm by typing the digest's first 12 hex characters. Idempotent: re-applying an applied digest is a no-op.

  • axiom_apply_dry_runDry-run apply (stage + diff, no writes to the tree)read-only

    Stage the bundle under <root>/.axiom/staging, run pre-apply checks and produce a unified diff against the current tree. Nothing outside .axiom/ is touched. Echo the returned manifestDigest as `confirmDigest` to axiom_apply.

  • axiom_axm_parseParse .axm source into a Planread-only

    Parse .axm v2 text into a Plan with 1-based {line, column} diagnostics; `plan` is present only when error-free. Read-only.

  • axiom_checkRun policy checks on a bundleread-only

    Evaluate the profile's predicates (plus the manifest's own checks) against the bundle. Repo facts are read from the root when one is available and the profile allows it. Verdict `error` means a provider could not run — never a silent pass.

  • axiom_check_startStart policy checks as a background taskread-only

    Same evaluation as axiom_check, but returned immediately as a task so long `guard.external` suites (up to 15 min per guard) outlive the client's per-call timeout. Poll axiom_task_get with the returned taskId every pollIntervalMs until status is completed|failed|cancelled; the CheckReport is in `result`. Finished tasks are pollable for ttlMs, then forgotten. Tasks live in this server process only (D-24 — tool-level tasks, not the io.modelcontextprotocol/tasks wire extension).

  • axiom_manifest_diffDiff two manifestsread-only

    Compare two manifests by artifact path and digest. Each side is a ManifestBundle or a `sha256:<hex>` reference to a bundle stored under an allowlisted root.

  • axiom_manifest_verifyVerify a ManifestBundleread-only

    Structural and content-address verification: schema, recomputed manifestDigest, every inline blob hashes to its key, attestation subject matches. When a root with .axiom/trust/keys.json is available, detached DSSE signatures are verified and the trusted keyids are reported under `signatures`. Never writes.

  • axiom_plan_addAppend artifacts to a plan session

    Add a chunk of Plan artifacts (each ≤ 4 MiB call, inline content ≤ 256 KiB per artifact as in a Plan) to an open session. Paths must be unique across every chunk (ERR_INVALID_PLAN otherwise); a sealed or over-budget session is ERR_PLAN_SESSION_STATE.

  • axiom_plan_beginOpen a chunked plan session

    Start assembling a Plan whose JSON would exceed the 4 MiB per-call cap: send the header here (everything except `artifacts`), append artifacts in chunks with axiom_plan_add, then axiom_plan_seal compiles the whole. The sealed bundle's manifestDigest is identical to a one-shot axiom_plan_compile of the same Plan. Sessions are in-memory, expire after 30 min idle, and hold at most 2000 artifacts / 64 MiB.

  • axiom_plan_compileCompile a Plan into a ManifestBundle

    Compile a Plan into a content-addressed ManifestBundle (sorted artifacts, sha256 digests, in-toto planDigest). `store: cas` writes blobs under <root>/.axiom/cas instead of inlining them. When a root is given the bundle is stored under <root>/.axiom/manifests/<hex>.json so later tools can reference it by digest. `template` sources need an emitter package loaded with `axiom mcp --emitter <pkg>` (e.g. @codai/axiom-emitters-web); its version is recorded in toolchain.emitters.

  • axiom_plan_sealSeal a plan session and compile it

    Assemble the session's header + every added artifact into one Plan and compile it exactly like axiom_plan_compile (same options, same digest). The session is consumed whether or not compilation succeeds. Bundles whose inline blobs exceed 4 MiB need `store: cas` (and therefore a root).

  • axiom_plan_validateValidate a Planread-only

    Validate a Plan against PlanSchema and, when all sources are inline, compute its planDigest. Read-only; touches no files.

  • axiom_repo_snapshotSnapshot a rootread-only

    Deterministic, content-addressed inventory of a root: every regular file (and symlink) as { path, bytes, sha256, mode, kind }, sorted by code point, with snapshotDigest = sha256(JCS(body)). No timestamps, no absolute paths — the same tree gives the same digest on every machine. Honours the root .gitignore, always skips .git/ and .axiom/, never follows symlinks, never leaves the root. Use it to build Plans against real pre-image digests, or diff two snapshots with `axiom snapshot-diff`.

  • axiom_rollbackRoll back an applied manifestcan change or delete data

    Replay the journal of a committed/committing manifest in reverse: restore backups, remove created files, drop the applied marker.

  • axiom_roots_listList allowlisted rootsread-only

    The frozen set of roots this server may read and write, as given by --root at startup.

Show 4 more tools
  • axiom_statusWrite state of a rootread-only

    Read-only snapshot of a root's write state, same as `axiom status --json`: who holds .axiom/lock (pid, host, digest, since, stale), the wait queue, registered in-flight intents (paths), interrupted journals that need `axiom_rollback`, the last applied chain entry and whether the journal hash chain verifies. Never takes the lock.

  • axiom_task_cancelCancel a task

    Abort a `working` task: every running guard process tree is killed and the task ends `cancelled` with error ERR_TASK_CANCELLED. Idempotent — a terminal task is returned unchanged.

  • axiom_task_getPoll a taskread-only

    Status of a task created by axiom_check_start. While `working` only the descriptor is returned; once terminal, `result` (completed) or `error` (failed|cancelled) is attached. Unknown or expired taskId → ERR_TASK_NOT_FOUND.

  • axiom_writeWrite files through the gate (preview, then confirm)can change or delete data

    One-tool transactional write: send the files you want written/deleted. Without confirmDigest it compiles them against the current tree, runs the pre-apply checks and returns status `preview` with the manifestDigest and a unified diff (nothing outside .axiom/ touched). Call again with the SAME files, intent and profile plus confirmDigest=<manifestDigest> to apply atomically (when the client supports elicitation the user confirms first): pre-image verification, journal, two-phase commit, one-step rollback via axiom_rollback. If any target changed since the preview the digest changes → ERR_CONFIR…

Signals

Stars
0
Forks
0
Open issues
0
Weekly downloads
135
Last commit (this folder)
Oct 19, 2026 (10 days ago)
Last release
Oct 19, 2026 (10 days ago)
Last package publish
Oct 19, 2026 (10 days ago)

From GitHub (fetched Oct 24, 2026) and the package registry.

Details

Registry name
io.github.dragoscv/axiom
Version
3.0.0
Auth
API key
Packages
npm @codai/axiom-mcp
License
MIT
Repository
github.com/dragoscv/axiom
Website
dragoscv.github.io/axiom/
First seen
Oct 24, 2026
Last checked
Oct 25, 2026
Source
Official MCP Registrygithub-graphql
Cite this page

AXIOM MCP server. Agent Mart. https://agentmart.dev/connectors/dragoscv-axiom (last updated 2026-10-25)