Arbora

The process the operator runs to open the Knuckles agent platform.
_{MCP · REST · A2A · identity policy · fleet supervision · hosted interfaces}

Documentation · Capabilities · Interfaces · Status

Overview

Run Arbora when an MCP client, HTTP application, A2A peer, or hosted interface needs one authenticated way into the platform. One serving lifecycle composes the same application services across transports, applies identity and tenant policy, and keeps tool discovery tied to the live fleet catalog.

Arbora is the platform edge and composition root. It is not the agent harness, the durable database, a connector implementation, or the browser UI.

Key Capabilities

• Serve local MCP over stdio and authenticated MCP over streamable HTTP.
• Project the same governed operations through REST and unary A2A.
• Discover, admit, supervise, and route the MCP connector fleet.
• Apply identity, tenant, action-policy, idempotency, and provenance controls.
• Host Agent Web UI and coordinate terminal, desktop, messaging, and attended browser capabilities.
• Generate deployment configuration and report live readiness through /health.

Documentation

Start with the visual platform guide, then use the task-oriented references:

• Start Arbora
• Review capabilities
• Choose an interface
• Understand the architecture
• Check live status
• Configure a deployment

Architecture

The boundary is deliberate: Arbora authenticates, composes, routes, supervises, and projects. Each sibling remains the source of truth for its own domain.

Quick Start

Requires Python 3.12–3.14 and uv. Install the bundled runtime, generate the local profile, and register its stdio launcher with Codex:

uv tool install "arbora[webui]"
setup-config generate --profile tiny
setup-config doctor --profile tiny
setup-config codex

The doctor command is the first observable result: it reports whether the local profile and required authorities are ready before a listener starts. Arbora then appears as the arbora MCP server in Codex. Other MCP clients can start the same local transport directly:

arbora --transport stdio

Network deployments use the identity, TLS, and authorization settings in the deployment guide.

Contributing

Issues and pull requests are welcome. Read AGENTS.md for source boundaries and quality gates. Report vulnerabilities through GitHub Security Advisories.

Development

Run scripts/bootstrap.sh, then follow CONTRIBUTING.md for the hooks, tests, and branch and pull-request flow.

License

Arbora is released under the MIT License.