Eclipse Tether MCP
Governed robot task authority — signed mandates, bounded envelopes, evidence for every task.
status: in-developmentclass: mcpRobotics GovernanceTrust & Receipts
Vendor: Cyan Eclipse Technologies
What it does
- Physical task authority exists only inside a Herald-signed mandate pinning agent × robot serials × human-authored task-template hashes × workspace envelope × speed/force ceilings × occupancy class × time window
- Enforcement sits at a site bridge that is the only routed path to the robot — the envelope is checked before motion, an expired mandate stops the task, and a human e-stop lands in the terminal HUMAN_OVERRIDE state
- Every session — tasks, refusals, gaps, envelope exits, human overrides — is sealed into a Blackbox-form evidence pack verifiable offline (Tether Proof), with a static conformance checker (Tether Gauge) for mandates and templates before any robot moves
- No T2 direct-motion surface exists in v0/v1; closed platforms (Tesla Optimus and peers) are published wait positions, never a logo wall; a mandate never substitutes for a site risk assessment
- 22 tools across agent, operator and verifier surfaces; the hostile-agent suite (H1–H16) passes in full against the simulator site
Tools
fleet_discover · session_open · task_templates_list · task_dispatch · task_status · task_abort · telemetry_read · image_read · session_close · mandate_register · mandate_revoke · template_register · template_revoke · site_freeze_set · session_reattest · pack_verify · pack_render · pack_compare · gauge_check_mandate · gauge_check_template · gauge_check_pair · gauge_limits_list
Platforms
- MCP over stdio
Certification
Bench verdict: CERTIFIED(simulator)
Certified scope: CERTIFIED(simulator) — Eclipse Bazaar Test Bench 2026-10-25, run 2 (standing): 31 pass of 31 checks. Run 1 PARTIAL (30/31) retained append-only: its sole failure was a bench-assertion defect in H10 (compared full error dicts incl. the caller-echoed tool name), not a product defect. Scope: SIMULATOR ONLY — P0 is ROS 2 + Gazebo + UR-class arm sim, in-process; NO hardware claim of any class is made. Liability counsel gates P1 real motion only. N-CHECK: NOVELTY_PROVEN — rename census 6/22 = 27% (<80%); the mandate-and-bridge mechanism exists in no incumbent (Boston Dynamics ships dispatch in Orbit; nobody ships the signed authority layer).
Not tested:
- Real hardware of any class.
- Real vendor SDKs (Spot / Unitree / UR-RTDE).
- Real e-stop / lease hardware.
- Isaac Sim.
- Multi-robot sessions.
- Hosted / multi-site operation.
- T2 direct motion (refused by design, §3).
- Closed platforms: Tesla Optimus, Figure, Apptronik, Atlas, NEO (no surface exists, §4.1).
- Orbit dispatch (vendor's, not ours, §4.2).
Bench scorecard (evidence): https://eclipsebazaar.com/cards/eclipse-tether-mcp-2026-10-25-2.json
Pricing
Free local v0.1 (P0 simulator); bridge license / certification pricing per spec §12 is an owner decision, not a v0 surface
Install / verify
No install command is published for this product in the catalog or its registry record.
Verify any MCP server in your client configs against this catalog with bazaar check (Eclipse Bazaar MCP / CLI — see llms.txt).