NOMOS

com.nomosprotocol由 nomosprotocol.com 發布官方發布者v1.3.0更新於 Nov 7, 2026

Ask a sealed authority whether an action may proceed. Answers are deterministic and citable.

已驗證Streamable HTTP可網頁執行安全與監控商業與電商

概覽

AI 產生的概覽

NOMOS 讓助理依據封存的治理政策判斷 AI 決策是否被允許、產生政策工件,並查詢已發布的權威規則。

可以做什麼
  • 依據封存的治理工件判斷某項 AI 決策是被允許、被拒絕還是需要上呈
  • 把政策文件轉換為封存的治理工件,擷取可執行規則、偵測規則衝突並計算自主性就緒指數分數
  • 分析政策文件及選用的決策日誌,找出矛盾、隱藏規則以及宣告政策與實際行為之間的落差
  • 查詢 NOMOS Exchange 市場上已發布的權威,取得裁決結果、具體規則與理由以及引用出處
適用情境
當助理或代理需要依據書面政策說明某項操作是否被允許時,當你想把政策文件轉成可封存、可引用的規則集時,或在依賴某套政策前需要審查其矛盾與缺口時使用。
執行需求
遠端 streamable HTTP 端點;未宣告任何套件、環境變數或標頭。清單未宣告身分驗證,NOMOS Exchange 上的公開權威據稱無需金鑰即可查詢。
安裝前請注意
generate_governance 會把政策文件傳送到該服務並用 Claude 擷取規則,機密政策文字會離開你的環境。產生的工件會被封存並回傳 artifact_id,應視為需要留存的紀錄。verify_decision 的回傳結構隨工件類型而異,只有 allowed 欄位被說明為可一致安全讀取。

安裝

在 SourceWeft 中

  1. 開啟 儀表板中的 NOMOS,將其新增到工作區。
  2. 為需要使用其工具的對話啟用該服務。

Web executable,透過 Streamable HTTP。 遠端服務在工作區中設定後即可從網頁執行環境執行。

交給代理程式安裝

把這段提示詞貼上到 Claude Code、Codex、Cursor 等代理程式,或 SourceWeft 對話中。代理程式會讀取該伺服器的安裝指南,先向你展示發布者、端點和登入方式,經你同意後再把它新增到你的客戶端。金鑰不會寫進任何命令。

閱讀 https://sourceweft.com/mcp/com.nomosprotocol%2Fnomos/install.md,並按其中說明把這個 MCP 伺服器接入我的客戶端。修改任何設定之前,先告訴我它的發布者、端點和登入方式,等我確認。不要把 API 金鑰寫進命令或我會提交的檔案;問我金鑰應從哪裡取得。

檢視代理程式所依據的安裝指南

其他 MCP 客戶端

把它新增到你客戶端的 mcpServers 設定中。

{
  "mcpServers": {
    "nomos": {
      "type": "http",
      "url": "https://www.nomosprotocol.com/api/mcp"
    }
  }
}

工具

4

verify_decision

Check whether an AI decision is allowed, denied, or needs escalation according to a sealed NOMOS governance artifact. Always returns `allowed` (boolean) — that field is safe to read regardless of which artifact type answered. The rest of the shape genuinely differs by artifact type, because it proxies two different underlying endpoints: pub_ demo artifacts return a flat shape (`outcome`: auto_approved/auto_rejected/escalated, `rule_applied`, `rule_reference`, flat `confidence` and `audit_hash`); your own sealed artifacts from Studio return a nested shape (`verdict`: approved/rejected/escalated, a nested `rule` object, and nested `confidence`/`audit`/`performance` objects). See outputSchema for both exact shapes — do not assume one without checking which kind of artifact_id was passed. Use artifact IDs starting with pub_ for public demo artifacts that require no API key: pub_lending_v1 (loan approval), pub_refund_v1 (refund policy), pub_fraud_v1 (fraud detection), pub_hr_leave_v1 (HR leave approval), pub_kyc_v1 (KYC/identity).

輸入參數inputs必填api_keydecision必填domain_idartifact_id必填

generate_governance

Convert one or more policy documents into a sealed NOMOS governance artifact (.nomos). Extracts executable rules using Claude, detects contradictions between rules, computes an Autonomy Readiness Index (ARI) score (0–1), and cryptographically seals the result. Returns an artifact_id you can use with verify_decision immediately. Optionally accepts historical behavioral decision logs to add a behavioral evidence layer and reach CERTIFIED confidence tier.

輸入參數name必填domainapi_keydocuments必填organization必填behavioral_logs

detect_contradictions

Analyze policy documents (and optional behavioral decision logs) to detect contradictions, hidden rules, and gaps between declared policy and observed behavior. Stateless — no artifact is created and nothing is persisted. Returns contradiction types: threshold_conflicts (numeric rule overlaps), ghost_terms (undefined terms used in rules), role_conflicts (same action allowed by one role, denied by another), rule_collisions (direct logical conflicts), and layer_divergences (policy says X but behavioral data shows Y).

輸入參數api_keydocuments必填behavioral_logs

ask_authority

Query a published authority on the NOMOS Exchange marketplace — a different system from verify_decision's own sealed policies. Every public authority (e.g. eu-ai-act.nomos) is queryable with no key. Returns the authority's own verdict (AUTHORIZED/DENIED/ESCALATED), the exact rule and reason, and a permanent, cryptographically-bound transcript (query_id + url) — replayable evidence, not just a reply. Nothing is invented or paraphrased: the verdict is the authority's sealed rules evaluated against your inputs. The default response is a short, curated summary (verdict, matched rule, source citation when the artifact has one, transparency/completeness disclosures, transcript link) — not the full rule-by-rule evaluation trace. Set include_evaluation_trace: true to get that complete diagnostic record when you or the user actually need it.

輸入參數actioninputs必填authority必填exchange_api_keyinclude_evaluation_trace

版本歷史

1
  1. v1.3.0最新Nov 7, 2026

評分

已滿足適用檢查項的 83%

該評分衡量此收錄條目的完整程度,依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價,也不表示伺服器安全或目前可用:可連通性是帶日期的檢查結果,評分也不包含安裝量或使用者評價。

  • 近 30 天內可連通必需25 分
  • 已宣告認證方式必需10 分
  • 已列出工具必需15 分
  • 描述必需15 分
  • 圖示10 分
  • 文件15 分

    請宣告包含 README 的 GitHub 儲存庫,或在 OAuth 受保護資源後設資料中提供 resource_documentation。

  • 授權條款不適用

    託管服務按其提供方的條款使用,因此這裡不要求授權條款。此檢查項不計入百分比。