Irigate

Documentation

Agent Selection

Exact tool selection, upstream selectors, reverse selection, mixed semantics, and agent attribution.

Agent URLs connect to an already-running broker profile. They do not define profile fields such as name or upstreams.

Exact tools selection

Use tools= for the narrowest and recommended path:

http://127.0.0.1:8765/mcp?tools=context7__resolve-library-id,context7__query-docs

Exact tool selection activates only the referenced upstreams and exposes only the named tools. It never supports ! exclusions because excluding one tool cannot avoid starting its upstream.

Upstream selection

Use positive upstreams= selection when a client needs an upstream’s complete tool surface:

http://127.0.0.1:8765/mcp?upstreams=context7,code-review-graph

Omitting both tools and upstreams exposes all configured upstreams unchanged.

Reverse selection

Prefix an upstream with ! when the agent starts that MCP server directly and wants every other configured Irigate upstream:

http://127.0.0.1:8765/mcp?upstreams=!code-review-graph

Reverse-only selection starts from all currently configured upstreams, so a profile reload can broaden it when a new upstream is added. Prefer tools= when least privilege matters.

Mixed selection

Positive and reverse upstream selectors may be mixed. Positive names form the base set and exclusions are subtracted regardless of order:

http://127.0.0.1:8765/mcp?upstreams=context7,code-review-graph,!code-review-graph

This selects only context7.

Workspace inputs are explicit

Agent URLs can carry <upstream>.workspace only when that upstream is explicitly selected by a positive upstreams= token or required by an exact tools= selector. The parser rejects implicit, reverse-only, excluded, duplicate, unknown, empty, missing-required, relative, and unauthorized workspace forms and stores only the canonical directory.

The first successful response binds the canonical mapping to the MCP session ID, and later requests cannot change it. Irigate renders that mapping into each selected isolated worker’s local argument list and includes it in the worker’s non-raw context fingerprint.

Agent attribution

Add agent= to attribute valid tool calls in the runtime report:

http://127.0.0.1:8765/mcp?upstreams=code-review-graph&agent=codex

Agent labels are metadata, not authentication. Omitted labels are grouped as anonymous, and Irigate does not infer identity from client headers.

Rejected examples

These fail closed:

  • Repeated selector parameters such as ?tools=a&tools=b.
  • Unknown upstream or tool names.
  • Malformed selector tokens.
  • Unrelated query parameters.
  • Empty final selection sets.
  • Invalid or repeated agent labels.

Continue with Operations to inspect tools and runtime reports from the command line.