Skip to content

Open standard Hosted MCP

The standard your agents load on every turn.

Two products · one story

The standard is a public document anyone can read, adopt, and improve. The hosted MCP is a subscription service that streams that standard to your agents as versioned tools and resources.

Same vocabulary, three workflows: Navigator for new features, Investigator for defects, Sentinel for assurance — loaded by whichever harness your engineers already use: Cursor, Claude Code, Windsurf, or anything that speaks MCP. The MCP carries context and workflows. It does not replace your AUTH, gateways, tests, or CI.

New to the term? Agentic engineering is the discipline this standard serves — written for engineers who already know how software should be built.

Three workflows. Equal weight.

Every coding task is one of three things. AADM gives each its own lane — so the agent picks the right workflow for the question being asked, not whichever instinct fires first.

I

Navigator

Delivery · building something new

Turn a vague feature ask into layer-aware slices — with authorization, ownership, and acceptance criteria baked in before any code is written.

What you get

  • Scope work across UDALI layers so ownership is clear before the first commit
  • Map AUTH controls and acceptance criteria into the plan, not after the fact
  • Gate readiness with structured checklists instead of ad-hoc review threads

II

Investigator

Defects · something is broken

Find what's actually wrong before changing anything. Path A recon classifies the failure; Path B diagnosis is gated until proof crosses the router.

What you get

  • Evidence-first recon: classify the failure before proposing any code change
  • Structured Path A / Path B flow prevents speculative rewrites and scope creep
  • Guardrails block timeout inflation, premature fixes, and multi-file drift

III

Sentinel

Assurance · proving it's aligned

Show — in language an auditor or compliance lead accepts — that the controls you say you have are actually in place across every seam.

What you get

  • Trace AUTH controls, UDALI placement, and evidence across every seam
  • Vertical and horizontal audit programs so releases are defensible, not vibes
  • Findings hand off to Investigator or Navigator when action is needed

What it deliberately does not do

  • 01 Run business logic or mutate your database
  • 02 Issue compliance certificates or legal verdicts
  • 03 Replace code review, CI, or server-side authorization
  • 04 Store long-lived secrets — credentials are your deployment concern

When you'd use it

Connect the MCP in your IDE so the agent loads the same standard every session — UDALI placement, AUTH references, build intent, troubleshooter discipline — instead of improvising from random doc snippets.

Any MCP-capable IDE works. Cursor and Claude Code are the most common; Windsurf, Cline, and others connect the same way over Streamable HTTP.

Three pieces. Each does one job.

A read-only standard-context server for AI coding tools: AADM definitions, UDALI/AUTH doctrine, prompts, and structured tools so agents plan, route, and troubleshoot the AADM way — without running your product or enforcing security in production.

01 Source of truth

Your app repo

Real code, authorization enforcement, tests, CI, evidence. This is where “done” is actually proven.

02 Governance context

The hosted MCP

Teaches and structures agent behavior against the AADM standard — workflows, doctrine, gates. Does not run your product.

03 Open document

Public standard

Human-readable templates, definitions, and education in the aadm-standard repo. Free to read, free to adopt.

The MCP does not replace your application. It does not scan your repo for pass/fail compliance. It gives agents consistent framing and checklists — your apps and CI still prove enforcement. For the fuller picture of how these pieces relate to the harness, the agent, and the person accountable for the result, see agentic engineering.

Three surfaces your agents read.

A

Markdown the agent reads

Resources

AADM definition, UDALI layers, AUTH and SEAM catalogs, TRACE spine, audit templates, troubleshooting modes, architecture doctrine slices.

Examples

aadm://auth/… · aadm://seams/…

B

Packaged workflows

Prompts

Capabilities overview, troubleshooter mode, skill-library pairing, and other packaged workflows the agent invokes directly.

Examples

Invoked from the IDE

C

Typed JSON responses

Tools

Structured calls that guide the agent. Each returns deterministic JSON for orchestrators — names match the running server's tools/list.

Examples

standard_brief · route_lane · debug_defect · plan_delivery · fetch_auth

Transport is HTTP Streamable MCP at /mcp (plus /health for liveness). Connect from any MCP client with your org's URL and auth.

What engineers get out of it on a normal day.

  1. 01

    Slice a feature into layer-aware work items

    Ordered vertical slices with UDALI placement, AUTH tags, and acceptance criteria per slice.

  2. 02

    Scope attestation dimensions per slice

    Declare vertical depth and horizontal seams so the agent knows what to check, not guess.

  3. 03

    Get required seam tiers back

    Know exactly which boundaries need proof before release — not “tests pass and we hope.”

  4. 04

    Route defects through evidence-gated investigation

    Classify before fixing. No speculative rewrites, no premature code changes.

  5. 05

    Prove alignment before release with structured audit programs

    Bind evidence per seam so releases are defensible, not vibes.

Quick MCP reference for engineers.

The hosted service speaks Streamable HTTP: POST with Accept: application/json, text/event-stream. A browser GET to the MCP path without that header often returns 406 — expected.

MCP service · JSON-RPC

(not the marketing page)

https://mcp.aadm.io

Smoke · initialize
curl -s -X POST https://mcp.aadm.io/mcp \
  -H "Content-Type: application/json" \
  -H "Accept: application/json, text/event-stream" \
  -d '{"jsonrpc":"2.0","id":1,"method":"initialize","params":{"protocolVersion":"2024-11-05","capabilities":{},"clientInfo":{"name":"smoke","version":"1.0.0"}}}'

Step 0 · in your app repo

npx aadm-init-repo --minimal scaffolds .aadm/config.json in your app repo. Init guide →

Optional — the hosted MCP works standalone without a repo config.

Subscription covers the running service, updates, and subscriber guides — see https://aadm.io/mcp .

Open standard. Hosted bridge.

One living standard, visible to everyone who ships with you. The text stays public so your org, partners, and community can discuss changes, propose updates, and stay on the same page — like any mature open project.

Pay for uptime and evolution, not a zip file. Hosted MCP is a separate subscription so the endpoint your agents call stays online, versioned, and maintained. You get operational continuity instead of self-hosting a moving target.

Your production AUTH, gateways, tests, and CI stay authoritative. MCP is how agents load the standard's context and workflows predictably.

What you get

  • A

    Open standard

    Always readable, adoptable, and improvable in public. No paywall on the definitions.

  • B

    Hosted MCP

    Versioned tools and resources for subscribers' agents. Someone ships fixes and keeps the service current.

Two paths · one rail

Read it in public.
Run it in production.

The standard is free to read and lives in public. When your agents need versioned context they can load on every turn, connect the hosted MCP.

Project · AADM v1
Transport · Streamable HTTP / MCP
Hosted at · mcp.aadm.io