{"repo":"lampepfl/tacit","free":true,"listed":false,"github":"https://github.com/lampepfl/tacit","clone":"git clone https://github.com/lampepfl/tacit.git","description":"TACIT — Tracked Agent Capabilities In Types","language":"Scala","stars":70,"topics":["agent","capability","mcp","scala"],"license":"Apache-2.0","category":"mcp-servers","readme_excerpt":"TACIT: Tracked Agent Capabilities In Types Paper: Securing Agents With Tracked Capabilities (ACM) · arXiv:2603.00991 · 🏆 Best Paper Award at CAIS 26 TACIT (Tracked Agent Capabilities In Types) is a safety harness for AI agents. Instead of calling tools directly, agents write code in Scala 3 with capture checking: a type system that statically tracks capabilities and enforces that agent code cannot forge access rights, cannot perform effects beyond its budget, and cannot leak information from pure sub-computations. It provides an MCP interface, so that it can be easily used by all MCP-compatible agents. The framework has three main components: - Scala 3 compiler. Agent-submitted code is validated and type-checked with capture checking enabled in safe mode , which enforces a capability-safe language subset. - Scala REPL. A local REPL instance executes compiled code and manages state across interactions. Supports both stateless one-shot execution and stateful sessions. - Capability safety library. A typed API that serves as the sole gateway through which agent code interacts with the real world: file system, process execution, network, and sub-agents. The library is extensible: add new capabilities by modifying only the library code, without changing the MCP server itself. Quick Start TACIT provides a standard MCP server that communicates via JSON-RPC over stdio. It works with any MCP-compatible agent, including Claude Code, OpenCode, GitHub Copilot, and others. Requires JDK 17","default_branch":null,"files":null,"tree":[],"storefront":"/r/lampepfl","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/lampepfl/tacit/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}