OFFICIAL PROTOCOL SPECIFICATION · CHE-GENEVA-NODE

ZenGate Developer Reference.

The complete guide to invoking, configuring, and verifying the ZenGate Model Context Protocol (MCP) & A2A Runtime. Built for software engineers, security auditors, and autonomous agent swarms requiring deterministic, sub-15ms execution under Swiss legal protection.

01. Overview & Topology

ZenGate operates as a decoupled, sovereign cognitive gateway created by 1 Human Labs (1HLabs) in Geneva, Switzerland. Unlike probabilistic web frameworks designed for human eyes, ZenGate serves strictly typed JSON-RPC 2.0 payloads directly into the latent space of Large Language Models (LLMs).

// The Two-Step Launchpad Philosophy

"Better a Lite version at 20% of the surface running 24/7/365 on bare-metal generating verified cashflow, than a 100% monolithic prototype idling in a local workstation."

Step 1: R&D Brain Deep prototyping & stress testing on Apple Silicon Metal.

Step 2: Bare-Metal Live Production server (24/7/365, <15MB RAM footprint, 0% GPU cost).

Step 3: Swiss Horizon Infomaniak Geneva Cloud Tier III+ (PUE <1.09, Swiss nLPD).

Endpoint Discovery

ZenGate publishes standard discovery documents accessible via content negotiation (Accept: application/json):

// Production SSE Endpoint: https://zengate.apolloproject.cloud/v1/mcp/sse
// Direct JSON-RPC Invocation: https://zengate.apolloproject.cloud/v1/mcp/invoke
// Machine Manifest: https://zengate.apolloproject.cloud/zengate.json
// LLM Navigation Guide: https://zengate.apolloproject.cloud/llms.txt

02. Client Connection Guide

ZenGate implements the official Model Context Protocol (MCP) Server-Sent Events (SSE) transport specification. Connect to any compliant agentic host in seconds:

1. Claude Desktop & Claude Code CLI

// macOS: ~/Library/Application Support/Claude/claude_desktop_config.json
// Windows: %APPDATA%\Claude\claude_desktop_config.json
{
  "mcpServers": {
    "zengate": {
      "url": "https://zengate.apolloproject.cloud/v1/mcp/sse"
    }
  }
}

// Or run directly in your terminal via Claude Code CLI:
claude mcp add --transport sse zengate https://zengate.apolloproject.cloud/v1/mcp/sse

2. Cursor & Windsurf IDE

// In Cursor Settings -> Features -> MCP -> Add New MCP Server:
// Name: zengate
// Type: sse
// URL: https://zengate.apolloproject.cloud/v1/mcp/sse

3. Python Agent Swarm (LangChain / CrewAI / AutoGen)

import httpx

ZENGATE_INVOKE_URL = "https://zengate.apolloproject.cloud/v1/mcp/invoke"

async def call_zengate_skill(skill_name: str, arguments: dict):
    payload = {
        "jsonrpc": "2.0",
        "id": "agent-req-001",
        "method": "tools/call",
        "params": {
            "name": skill_name,
            "arguments": arguments
        }
    }
    async with httpx.AsyncClient(timeout=5.0) as client:
        response = await client.post(ZENGATE_INVOKE_URL, json=payload)
        return response.json()

# Example: Sanitize PII with sub-15ms guaranteed latency
# result = await call_zengate_skill("zengate_privacy_shield", {"raw_input": "...", "redact_level": "STRICT_RAM"})

03. The 10 Sovereign Skills API Reference

Each skill is encapsulated into an in-memory execution routine with zero external paid API dependencies. All schemas adhere strictly to JSON Schema draft-07:

Skill 01 · Cybersecurity & PII Defense

zengate_privacy_shield

SLA: <15ms P95

Detects and redacts sensitive personally identifiable information (PII) including national IDs, passports, credit card numbers, IBANs, and private emails. Evaluates prompt injection vectors and returns sanitized text in RAM.

// Input Schema:raw_input (string, required): Unsanitized user or agent prompt text.
redact_level (string, optional): "STRICT_RAM" | "AGGRESSIVE_MASK". Default: "STRICT_RAM".
// Output Payload:{ "status": "SANITIZED", "sanitized_payload": "...", "entropy_reduction": "96.4%", "signature": "ed25519:..." }

Skill 02 · In-House Telecom & 2FA

zenphone_receive_otp

SLA: <25ms P95

Monitors dedicated virtual E.164 sovereign phone lines. The proprietary DAL Sensorium parser screens incoming SMS messages for smishing attack vectors and extracts naked OTP numeric tokens.

// Input Schema:allocated_line (string, required): Sovereign E.164 number (e.g. "+41798001234").
sender_whitelist (array, optional): Allowed originating sender IDs.
// Output Payload:{ "status": "OTP_EXTRACTED", "naked_code": "893-412", "carrier_fee": "0.00 EUR", "ttl_remaining": 120 }

Skill 03 · Web Signal & Sensor

zengate_radar_recon

SLA: <450ms P95

Executes clean, zero-entropy web extraction. Strips tracking beacons, cookie consent barriers, and client-side JavaScript, returning pure semantic Markdown without running heavyweight headless browsers.

// Input Schema:target_url (string, required): Full HTTP/HTTPS target URL.
extract_mode (string, optional): "MARKDOWN_SUMMARY" | "FULL_RAW_CLEAN". Default: "MARKDOWN_SUMMARY".

Skill 04 · Commercial Arbitrage

zengate_market_arbitrage

SLA: <200ms P95

Wholesale commercial mobility arbitrage. Computes route alternatives, locks inventory atomically via Valkey memory (Hold SET NX EX), and renders lightweight Server-Driven UI (SDUI) Liquid Cards (<15 KB).

Skill 05 · Customs & Carbon Compliance

zengate_cbam_customs

SLA: <5ms P95

Official EU Regulation 2023/956 Carbon Border Adjustment Mechanism (CBAM) oracle. Matches Harmonized System (HS) commodity trade codes against live European Union Emissions Trading System (EU ETS) prices, producing verifiable cryptographic customs certificates.

Skill 06 · Localhost IPC Backlink

zengate_commercial_gateway

SLA: <18ms P95

Direct loopback IPC socket connection into GEO 360 (127.0.0.1:5050). Exposes high-ticket enterprise assets including private aviation, marine yacht charters, and Swiss commercial escrow pools.

Skill 07 · Enterprise Supply Chain

zengate_erp_connect

SLA: <30ms P95

Sovereign OData/REST connector for enterprise ERP backends. Locks stock atomically and generates legally binding Purchase Orders directly inside SAP S/4HANA and Oracle NetSuite.

Skill 08 · Swiss Legal Tech

zengate_legal_escrow

SLA: <20ms P95

Automates bilateral agentic non-disclosure agreements (NDAs) and conditional commercial escrow holds recognized under Article 14 of the Swiss Code of Obligations (CO) with Ed25519 digital seal verification.

Skill 09 · Biotech & Clinical Oracles

zengate_health_oracle

SLA: <12ms P95

Performs irreversible one-way hashing and anonymization of genomic and clinical biomarkers. Matches clinical trial candidate criteria under statutory Swiss medical secrecy protections.

Skill 10 · Energy & ESG Settlement

zengate_energy_oracle

SLA: <8ms P95

Real-time grid emissions monitor and automated hourly settlement of 24/7 Carbon-Free Energy (CFE) certificates. Verifies compute load energy sourcing with PUE 1.15 audit trails.

04. Developer Etiquette & Protocol Rules

To maintain microsecond deterministic performance across shared bare-metal clusters, client agent swarms must adhere to the following architectural rules:

1. The 96% Token Hygiene Rule

Never pass raw HTML, unparsed CSS, or conversational boilerplate into ZenGate skills. Strip metadata before invocation to allow our deterministic parsers to return purified payloads that reduce context window consumption by up to 96%.

2. Idempotency Keys on Atomic Holds

When reserving wholesale inventory (Skill 04) or locking ERP Purchase Orders (Skill 07), always supply an idempotency_key. Re-submitting the same key within the TTL window returns the existing reservation without duplicate charges.

3. Agent Loop Pandemonium Defense

Autonomous agents can enter self-reinforcing retry loops when receiving unexpected error payloads. ZenGate returns typed deterministic errors with a mandatory retry_after_ms field to throttle client reasoning loops gracefully.

4. Signature Verification Requirement

Every production payload returned by ZenGate carries a valid Ed25519 signature. Downstream orchestrators should verify the signature against our public key to ensure responses were not intercepted or altered in transit.

05. Swiss Sovereignty & Security Architecture

ZenGate is engineered from the bare metal up to satisfy the strictest data protection mandates on Earth:

The Ephemeral RAM Lifecycle

When a client agent invokes any of the 10 ZenGate skills:

Payload arrives over TLS 1.3 into isolated memory segments.
The Laya Policy Enforcement Point (PEP) inspects input structure in <0.01ms.
The selected skill executes purely in RAM memory without generating temporary disk cache.
Response payload is digitally signed with an Ed25519 sovereign key.
Memory buffers are zeroed out via secure overwrite routines (explicit_bzero).

Swiss Federal Data Protection Act (nLPD / revDSG) Criminal liability for unauthorized commercial data disclosure under Swiss federal law.

EU GDPR Adequacy Decision European Commission formal decision granting seamless, unrestricted cross-border data transfer.

06. Deterministic Error Matrix

Standardized JSON-RPC 2.0 error codes returned when contract validations or security barriers are triggered:

Code	Error Identifier	HTTP SLA	Description & Recovery
-32001	PII_STRIPPED_RAM	200 OK	PII detected and redacted automatically. Safe to proceed with returned text.
-32002	SMISHING_VECTOR_BLOCKED	400 Bad Request	DAL Sensorium intercepted malicious SMS payload. OTP extraction refused.
-32005	INVALID_HS_CODE	422 Unprocessable	Supplied commodity code does not match EU Regulation 2023/956 CBAM registry.
-32007	INVENTORY_HOLD_EXPIRED	409 Conflict	Valkey memory lock exceeded TTL. Client must issue a new reservation hold.
-32010	RATE_LIMIT_EXCEEDED	429 Too Many Req	Agent loop detected. Honor `retry_after_ms` before attempting re-execution.

Need a Dedicated Enterprise Cluster?

1 Human Labs provisions dedicated, isolated bare-metal enclaves in Geneva with private IP ranges and customized ERP/CBAM integration pipelines.

Contact Engineering Team Connect your AI