One outlet.
Every plug.

npm i barycenters

import { Barycenters } from "barycenters";

const bary = new Barycenters({
  endpoint: "https://barycenters-admit.fly.dev",
  namespace: "acme/eng",
});
// mode defaults to "shadow": it NEVER blocks.

const deploy = bary.govern("deploy_prod", async (opts) => {
  return runDeploy(opts);
});

await deploy({ env: "production" });
console.log(bary.shadowReport().summary);

# pip install langchain-mcp-adapters langgraph
from langchain_mcp_adapters.client import MultiServerMCPClient
from langgraph.prebuilt import create_react_agent

client = MultiServerMCPClient({
  "barycenters": {
    "url": "https://barycenters-admit.fly.dev/mcp/",
    "transport": "streamable_http",
  },
})
tools = await client.get_tools()   # live tools: admit, check_readiness
agent = create_react_agent("openai:gpt-4o", tools)
# The agent calls admit before any consequential action:
# ACCEPT (signed capability token) or REFUSE (reason). Fail-closed.

# Prefer wrapping in code?  pip install barycenters
#   bary.govern("deploy_prod", fn)  — shadow by default, never blocks.

// npm i @mastra/mcp @mastra/core
import { MCPClient } from "@mastra/mcp";
import { Agent } from "@mastra/core/agent";

const mcp = new MCPClient({
  servers: {
    barycenters: {
      url: new URL("https://barycenters-admit.fly.dev/mcp/"),
    },
  },
});

// live tools: admit, check_readiness
const agent = new Agent({
  name: "governed-agent",
  instructions: "Call admit before any consequential action — ACCEPT (signed token) or REFUSE.",
  model: "openai/gpt-4o",
  tools: await mcp.getTools(),
});
// The agent admits before it acts. Fail-closed — REFUSE stops it before it runs.

# pip install llama-index-tools-mcp
from llama_index.tools.mcp import BasicMCPClient, McpToolSpec

client = BasicMCPClient("https://barycenters-admit.fly.dev/mcp/")
tools = McpToolSpec(client=client).to_tool_list()   # admit, check_readiness

# Hand `tools` to any LlamaIndex agent (FunctionAgent, ReActAgent, …).
# It calls admit before a consequential action: ACCEPT + signed token / REFUSE. Fail-closed.

# pip install crewai-tools
from crewai import Agent
from crewai_tools import MCPServerAdapter

server = {"url": "https://barycenters-admit.fly.dev/mcp/", "transport": "streamable-http"}
with MCPServerAdapter(server) as tools:              # admit, check_readiness
    ops = Agent(role="Ops", goal="Ship only what Layer 0 admits", tools=tools)
# The agent calls admit before consequence: ACCEPT + signed token / REFUSE. Fail-closed.

# pip install "autogen-ext[mcp]" autogen-agentchat
from autogen_ext.tools.mcp import StreamableHttpServerParams, mcp_server_tools
from autogen_agentchat.agents import AssistantAgent

params = StreamableHttpServerParams(url="https://barycenters-admit.fly.dev/mcp/")
tools = await mcp_server_tools(params)               # admit, check_readiness
agent = AssistantAgent("ops", model_client=client, tools=tools)
# Calls admit before consequence: ACCEPT + signed token / REFUSE. Fail-closed.

# pip install openai-agents
from agents import Agent
from agents.mcp import MCPServerStreamableHttp

async with MCPServerStreamableHttp(
    params={"url": "https://barycenters-admit.fly.dev/mcp/"}
) as bary:                                           # tools: admit, check_readiness
    agent = Agent(name="ops", mcp_servers=[bary])
# The agent calls admit before consequence: ACCEPT + signed token / REFUSE. Fail-closed.

mcp_servers:
  barycenters:
    url: "https://barycenters-admit.fly.dev/mcp/"
    enabled: true
    timeout: 120
    connect_timeout: 60

# Live tools: admit, check_readiness
# Call admit (or bary.govern) before consequence.

{
  "mcp": {
    "servers": {
      "barycenters": {
        "url": "https://barycenters-admit.fly.dev/mcp/",
        "transport": "streamable-http",
        "enabled": true
      }
    }
  }
}

# openclaw mcp doctor barycenters --probe

# npx @deepseek-ai/dsh web
# Official client: @deepseek-ai/dsh-mcp-client
# Model sees mcp__barycenters__admit, mcp__barycenters__check_readiness
- id: mcp-barycenters
  name: "@deepseek-ai/dsh-mcp-client"
  config:
    serverName: barycenters
    transport: streamable-http
    url: "https://barycenters-admit.fly.dev/mcp/"

# npm i barycenters  →  bary.govern(...) wraps the dispatcher
# Connecting MCP does not wrap bash/edit/write.
# Bare GET /mcp/ → 406 is protocol (Accept: text/event-stream).
# No README PR: CONTRIBUTING forbids external PRs.

# Host: https://github.com/NVIDIA/NemoClaw  (not a fourth agent)
# 1. Allow egress only to the wedge (no wildcard):
#    https://barycenters-admit.fly.dev
# 2. Register managed MCP, Streamable HTTP:
#    https://barycenters-admit.fly.dev/mcp/
# 3. Inner agent is OpenClaw or Hermes — use that snippet
#    (or bary.govern on the dispatcher). Connecting MCP is a side door.
# 4. Shadow first. OpenShell is NVIDIA's floor; /admit is ours.

# NEMOCLAW_AGENT=hermes  → Hermes inside the sandbox
# default                → OpenClaw inside the sandbox

{
  "mcpServers": {
    "barycenters": {
      "type": "http",
      "url": "https://barycenters-admit.fly.dev/mcp/"
    }
  }
}

{
  "mcpServers": {
    "barycenters": {
      "type": "http",
      "url": "https://barycenters-admit.fly.dev/mcp/"
    }
  }
}

{
  "version": "v1",
  "hooks": [
    {
      "name": "Boundary: acme.merge_to_main",
      "trigger": "PreToolUse",
      "matcher": "execute_pwsh|execute_command",
      "description": "Enforces boundary acme.merge_to_main (repo_mutation). Required evidence: tests_green, human_ack. authority_effect = 0",
      "action": {
        "type": "agent",
        "prompt": "BOUNDARY CHECK: acme.merge_to_main\nPack: barycenters.packs.ci_change_management\nConsequence: repo_mutation\nEvidence required: ['tests_green', 'human_ack']\nLimits: none\n\nBefore executing, verify:\n- tests_green is satisfied\n- human_ack is satisfied\n\nIf ANY evidence is missing, ask the user. A boundary without evidence has not been met."
      }
    }
  ]
}

{
  "servers": {
    "barycenters": {
      "type": "http",
      "url": "https://barycenters-admit.fly.dev/mcp/"
    }
  }
}