This release is a pre-release and may not be stable for production use.
Arbora
The process the operator runs to open the Knuckles agent platform.
MCP · REST · A2A · identity policy · fleet supervision · hosted interfaces
Documentation · Capabilities · Interfaces · Status
Overview
Run Arbora when an MCP client, HTTP application, A2A peer, or hosted interface needs one authenticated way into the platform. One serving lifecycle composes the same application services across transports, applies identity and tenant policy, and keeps tool discovery tied to the live fleet catalog.
Arbora is the platform edge and composition root. It is not the agent harness, the durable database, a connector implementation, or the browser UI.
Key Capabilities
- Serve local MCP over
stdioand authenticated MCP over streamable HTTP. - Project the same governed operations through REST and unary A2A.
- Discover, admit, supervise, and route the MCP connector fleet.
- Apply identity, tenant, action-policy, idempotency, and provenance controls.
- Host Agent Web UI and coordinate terminal, desktop, messaging, and attended browser capabilities.
- Generate deployment configuration and report live readiness through
/health.
Documentation
Start with the visual platform guide, then use the task-oriented references:
- Start Arbora
- Review capabilities
- Choose an interface
- Understand the architecture
- Check live status
- Configure a deployment
Architecture
| Layer | Authority | Relationship to Arbora |
|---|---|---|
| Agent Web UI | Browser experience and local interaction state | Arbora hosts it and supplies governed application routes. |
| Agent Terminal UI | Terminal and headless interaction | Uses the governed Arbora REST interface. |
| Geniusbot | Desktop cockpit | Uses the governed Arbora gateway for its primary panels. |
| Messaging channels | Chat and voice entrypoints | Arbora hosts and supervises them; agent-utilities owns adapters and routing. |
| Arbora | MCP, REST, A2A, identity policy, fleet supervision | The running process and public door. |
| agent-utilities | Agents, workflows, evaluation, and skills | Arbora invokes its typed control-plane services. |
| epistemic-graph | Durable graph, SQL, RDF, vector, time, reasoning, and provenance | Arbora uses its generated client contracts. |
| agent-connector-sdk | Connector servers, source synchronization, and governed effects | Arbora discovers and routes SDK-based connector services. |
The boundary is deliberate: Arbora authenticates, composes, routes, supervises, and projects. Each sibling remains the source of truth for its own domain.
Quick Start
Requires Python 3.12–3.14 and uv. Install the
bundled runtime, generate the local profile, and register its stdio launcher
with Codex:
uv tool install "arbora[webui]"
setup-config generate --profile tiny
setup-config doctor --profile tiny
setup-config codex
The doctor command is the first observable result: it reports whether the local
profile and required authorities are ready before a listener starts. Arbora
then appears as the arbora MCP server in Codex. Other MCP clients can
start the same local transport directly:
arbora --transport stdio
Network deployments use the identity, TLS, and authorization settings in the deployment guide.
Contributing
Issues and pull requests are welcome. Read AGENTS.md for source boundaries and quality gates. Report vulnerabilities through GitHub Security Advisories.
Development
Run scripts/bootstrap.sh, then follow CONTRIBUTING.md
for the hooks, tests, and branch and pull-request flow.
License
Arbora is released under the MIT License.
1 maintainer
Metadata
1 maintainer
Release files for arbora 0.1.8.dev1
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | |
|---|---|---|---|---|
| arbora-0.1.8.dev1.tar.gz | 2.7 MB | Without provenance | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| arbora-0.1.8.dev1-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 5.7 MB
Release files / arbora-0.1.8.dev1.tar.gz
| Download URL | arbora-0.1.8.dev1.tar.gz |
|---|---|
| Size | 2.7 MB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
d52c4ee0354b16e655dc97a00197384135b6b7d463a3ec0dc4cad2e5b0b4c3b2
|
|
BLAKE2b-256 checksum How to use checksums |
5d011aedac313a7cd67eb280200b0a11bbcbe7a328c1d21fd5ea8d584459ba91
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
uv/0.13.1 {"installer":{"name":"uv","version":"0.13.1","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"26.04","id":"resolute","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}
|
Release files / arbora-0.1.8.dev1-py3-none-any.whl
| Download URL | arbora-0.1.8.dev1-py3-none-any.whl |
|---|---|
| Size | 3.0 MB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
52b1fa734dce72123fe04cafe01feaa1f30d17b8bb5fb4fb60a4e7446f162567
|
|
BLAKE2b-256 checksum How to use checksums |
78f6ae3e5b6aa596edb2da3028c6c14c628fc9c65d350cb1b3729ac4a17cba8c
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
uv/0.13.1 {"installer":{"name":"uv","version":"0.13.1","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"26.04","id":"resolute","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}
|
Security for arbora 0.1.8.dev1
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
No provenance found
None of the files in this release were uploaded with provenance metadata.
A note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.
