NOMOS

com.nomosprotocol由 nomosprotocol.com 发布官方发布者v1.3.0更新于 Nov 7, 2026

Ask a sealed authority whether an action may proceed. Answers are deterministic and citable.

已验证Streamable HTTP可网页运行安全与监控商业与电商

概览

AI 生成的概览

NOMOS 让助手依据封存的治理策略判断 AI 决策是否被允许,生成策略工件,并查询已发布的权威规则。

可以做什么
  • 依据封存的治理工件判断某项 AI 决策是被允许、被拒绝还是需要上报
  • 把策略文档转换为封存的治理工件,提取可执行规则、检测规则冲突并计算自主性就绪指数评分
  • 分析策略文档及可选的决策日志,找出矛盾、隐藏规则以及声明策略与实际行为之间的差距
  • 查询 NOMOS Exchange 市场上已发布的权威,获取裁决结果、具体规则与理由以及引用出处
适用场景
当助手或智能体需要依据书面策略说明某项操作是否被允许时,当你想把策略文档转成可封存、可引用的规则集时,或在依赖某套策略前需要审查其矛盾与缺口时使用。
运行要求
远程 streamable HTTP 端点;未声明任何软件包、环境变量或请求头。清单未声明身份验证,NOMOS Exchange 上的公开权威据称无需密钥即可查询。
安装前请注意
generate_governance 会把策略文档发送到该服务并用 Claude 提取规则,机密策略文本会离开你的环境。生成的工件会被封存并返回 artifact_id,应视为需要留存的记录。verify_decision 的返回结构随工件类型而异,只有 allowed 字段被说明为可统一安全读取。

安装

在 SourceWeft 中

  1. 打开 控制台中的 NOMOS,将其添加到工作区。
  2. 为需要使用其工具的对话启用该服务。

Web executable,通过 Streamable HTTP。 远程服务在工作区中配置后即可从网页运行时运行。

交给智能体安装

把这段提示词粘贴到 Claude Code、Codex、Cursor 等智能体,或 SourceWeft 对话中。智能体会读取该服务器的安装指南,先向你展示发布者、端点和登录方式,经你同意后再把它添加到你的客户端。密钥不会写进任何命令。

阅读 https://sourceweft.com/mcp/com.nomosprotocol%2Fnomos/install.md,并按其中说明把这个 MCP 服务器接入我的客户端。修改任何配置之前,先告诉我它的发布者、端点和登录方式,等我确认。不要把 API 密钥写进命令或我会提交的文件;问我密钥应从哪里获取。

查看智能体所依据的安装指南

其他 MCP 客户端

把它添加到你客户端的 mcpServers 配置中。

{
  "mcpServers": {
    "nomos": {
      "type": "http",
      "url": "https://www.nomosprotocol.com/api/mcp"
    }
  }
}

工具

4

verify_decision

Check whether an AI decision is allowed, denied, or needs escalation according to a sealed NOMOS governance artifact. Always returns `allowed` (boolean) — that field is safe to read regardless of which artifact type answered. The rest of the shape genuinely differs by artifact type, because it proxies two different underlying endpoints: pub_ demo artifacts return a flat shape (`outcome`: auto_approved/auto_rejected/escalated, `rule_applied`, `rule_reference`, flat `confidence` and `audit_hash`); your own sealed artifacts from Studio return a nested shape (`verdict`: approved/rejected/escalated, a nested `rule` object, and nested `confidence`/`audit`/`performance` objects). See outputSchema for both exact shapes — do not assume one without checking which kind of artifact_id was passed. Use artifact IDs starting with pub_ for public demo artifacts that require no API key: pub_lending_v1 (loan approval), pub_refund_v1 (refund policy), pub_fraud_v1 (fraud detection), pub_hr_leave_v1 (HR leave approval), pub_kyc_v1 (KYC/identity).

输入参数inputs必填api_keydecision必填domain_idartifact_id必填

generate_governance

Convert one or more policy documents into a sealed NOMOS governance artifact (.nomos). Extracts executable rules using Claude, detects contradictions between rules, computes an Autonomy Readiness Index (ARI) score (0–1), and cryptographically seals the result. Returns an artifact_id you can use with verify_decision immediately. Optionally accepts historical behavioral decision logs to add a behavioral evidence layer and reach CERTIFIED confidence tier.

输入参数name必填domainapi_keydocuments必填organization必填behavioral_logs

detect_contradictions

Analyze policy documents (and optional behavioral decision logs) to detect contradictions, hidden rules, and gaps between declared policy and observed behavior. Stateless — no artifact is created and nothing is persisted. Returns contradiction types: threshold_conflicts (numeric rule overlaps), ghost_terms (undefined terms used in rules), role_conflicts (same action allowed by one role, denied by another), rule_collisions (direct logical conflicts), and layer_divergences (policy says X but behavioral data shows Y).

输入参数api_keydocuments必填behavioral_logs

ask_authority

Query a published authority on the NOMOS Exchange marketplace — a different system from verify_decision's own sealed policies. Every public authority (e.g. eu-ai-act.nomos) is queryable with no key. Returns the authority's own verdict (AUTHORIZED/DENIED/ESCALATED), the exact rule and reason, and a permanent, cryptographically-bound transcript (query_id + url) — replayable evidence, not just a reply. Nothing is invented or paraphrased: the verdict is the authority's sealed rules evaluated against your inputs. The default response is a short, curated summary (verdict, matched rule, source citation when the artifact has one, transparency/completeness disclosures, transcript link) — not the full rule-by-rule evaluation trace. Set include_evaluation_trace: true to get that complete diagnostic record when you or the user actually need it.

输入参数actioninputs必填authority必填exchange_api_keyinclude_evaluation_trace

版本历史

1
  1. v1.3.0最新Nov 7, 2026

评分

已满足适用检查项的 83%

该评分衡量此收录条目的完整程度,依据注册中心条目、端点与公开来源计算得出。它不是对服务器本身的评价,也不表示服务器安全或当前可用:可连通性是带日期的检查结果,评分也不包含安装量或用户评价。

  • 近 30 天内可连通必需25 分
  • 已声明认证方式必需10 分
  • 已列出工具必需15 分
  • 描述必需15 分
  • 图标10 分
  • 文档15 分

    请声明包含 README 的 GitHub 仓库,或在 OAuth 受保护资源元数据中提供 resource_documentation。

  • 许可证不适用

    托管服务按其提供方的条款使用,因此这里不要求许可证。此检查项不计入百分比。