This release is a pre-release and may not be stable for production use.
Bicameral MCP
bicameral-mcp is the MCP transport client for the local bicameral-bot
daemon. It exposes agent-friendly tools, maps them into canonical
ToolRequest envelopes, sends those requests to the daemon, and returns daemon
ToolResponse payloads.
MCP is not the Bicameral daemon, Decision Ledger, code graph, dashboard, integration runtime, setup wizard, telemetry sink, or governance engine.
Current Contract
The cutover target is the bot-owned ToolRequest protocol:
MCP tool call
-> ToolRequest(command + AuthorityContext)
-> bicameral-bot daemon validation and governance policy
-> ToolResponse(status + result + governance_result)
MCP performs a daemon capability handshake at startup. It refuses to start when the daemon's ToolRequest protocol version is unsupported. After protocol compatibility is established, individual commands may still return daemon capability errors while bot parity is being implemented.
Configuration
Set the bot daemon endpoint with:
export BICAMERAL_DAEMON_URL=http://127.0.0.1:37373
Optional context:
export BICAMERAL_ACTOR_ID="$(whoami)"
export BICAMERAL_WORKSPACE="$PWD"
export BICAMERAL_POLICY_SCOPE=default
Run the MCP server:
bicameral-mcp
Print supported tool names without contacting the daemon:
bicameral-mcp tools
Supported Tools
MCP exposes only ToolRequest-backed tools:
| MCP tool | Bot command |
|---|---|
bicameral.ingest |
ingest.submit_local |
bicameral.preflight |
preflight.run |
bicameral.bind |
binding.create |
bicameral.binding.inspect |
binding.inspect |
bicameral.review.accept_candidate |
review.accept_candidate |
bicameral.review.reject_candidate |
review.reject_candidate |
bicameral.review.approve_signoff |
review.approve_signoff |
bicameral.review.reject_signoff |
review.reject_signoff |
bicameral.review.resolve_compliance |
review.resolve_compliance |
bicameral.history |
history.list |
bicameral.search |
search.query |
Prompts And Skills
MCP may expose MCP prompts for generic Bicameral workflows over supported tools, such as preflight, binding, ingest, history, and search.
Repo-local skills are outside MCP. Keep repo/team behavior in repo skills: when to run Bicameral, which ADRs to read, contribution policy, factory attestation, and workflows that span beyond Bicameral MCP.
Retired From MCP
The v0.2 direct MCP payload surface is not preserved. Removed or unsupported legacy behavior includes:
link_commitratifyresolve_collisionremove_decisionremove_sourcevalidate_symbolsget_neighbors- setup wizard, reset, update, diagnose, usage, feedback, and telemetry
- dashboard hosting
- local ledger/event/graph/source/integration runtimes
Missing bot-backed behavior is intentionally unavailable in MCP rather than emulated locally.
Previous implementation history can be inspected at:
0827444c80d45fe3474f68002166e1fc35708eda
Development
Focused cutover checks:
python -m pytest tests/test_toolrequest_thin_client.py -q
python -m build
Metadata
Release files for bicameral-mcp 2026.6.9.dev103138
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | Actions |
|---|---|---|---|---|
| bicameral_mcp-2026.6.9.dev103138.tar.gz | 89.6 kB | With provenance | Details for bicameral_mcp-2026.6.9.dev103138.tar.gz |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Actions Reset |
|---|---|---|---|---|
| bicameral_mcp-2026.6.9.dev103138-py3-none-any.whl | Python 3 | none | any | Details for bicameral_mcp-2026.6.9.dev103138-py3-none-any.whl |
Total release size: 100.8 kB
Release files / bicameral_mcp-2026.6.9.dev103138.tar.gz
| Download URL | bicameral_mcp-2026.6.9.dev103138.tar.gz |
|---|---|
| Size | 89.6 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
8ae2b01c50c064f9c6f3cb111023ba491681ca34b95236ee21cc96d11c02afc6
|
|
BLAKE2b-256 checksum How to use checksums |
2f31adbe343d7335581f5e306f3d6dea421f8184e4b8d6ab383eb00128e84731
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/6.1.0 CPython/3.13.12
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Jun 9, 2026.
Transparency logRelease files / bicameral_mcp-2026.6.9.dev103138-py3-none-any.whl
| Download URL | bicameral_mcp-2026.6.9.dev103138-py3-none-any.whl |
|---|---|
| Size | 11.1 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
d9f5f38c24351ee508ceb6a5ce2d5060f85037300253c0d888a46c255fd8e8c0
|
|
BLAKE2b-256 checksum How to use checksums |
ca762ae5d1320b283d0801b03b389ce5e0f5985e8c4ec4e9d4649c07da551287
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/6.1.0 CPython/3.13.12
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Jun 9, 2026.
Transparency logSecurity for bicameral-mcp 2026.6.9.dev103138
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
Full provenance
All 2 files in this release have been uploaded with provenance metadata.
Attestation for bicameral_mcp-2026.6.9.dev103138.tar.gz
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Jun 9, 2026.
Transparency logA note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.