The ORACLE-H MCP server provides a human-in-the-loop validation gateway, requiring human approval via Telegram before AI agents execute critical, destructive, or irreversible actions.

Core Tools:

• oracle_validate — Submit an action for human approval, providing:

  • A precise technical description, rationale, and projected impact

  • An optional financial amount at stake (USD)

  • A configurable TTL/timeout (default: 5 minutes)

  • Returns a request_id for tracking

• oracle_poll_status — Check the status of a submitted request (poll every 10–15s), receiving one of:

  • approved → proceed

  • rejected → abort

  • expired → no response in time; abort or retry

Key Use Cases:

• Destructive operations (deleting files, dropping databases, force-pushing to git)

• External writes (sending emails, posting to APIs)

• Financial transactions (payments, billing changes)

• Infrastructure changes (deployments, DNS, environment variables)

Additional Highlights:

• Increases AI workflow reliability from ~81.5% to ~99.6% by adding human checkpoints

• Secured via bearer token authentication and HMAC-SHA256 signed webhooks

• Compatible with Claude Desktop, Cursor, VS Code extensions (Cline, Roo Code, GitHub Copilot), n8n, Zed, Continue.dev, and LangGraph

Enables human-on-the-loop validation by sending notifications to Telegram, allowing users to approve or reject critical, destructive, or irreversible actions before an AI agent executes them.

Agent → oracle_validate → Human gets Telegram alert → Approve/Reject → Agent proceeds

# Test immediately with the public demo key
ORACLE_SIGNATURE_KEY=demo-signature-key-change-in-production
ORACLE_BASE_URL=https://oracle-h.online

{
 "mcpServers": {
 "oracle-h": {
 "command": "npx",
 "args": ["-y", "oracle-h-mcp"],
 "env": {
 "ORACLE_SIGNATURE_KEY": "<your-signature-key>",
 "ORACLE_BASE_URL": "https://oracle-h.online"
 }
 }
 }
}

{
 "oracle-h": {
 "command": "npx",
 "args": ["-y", "oracle-h-mcp"],
 "env": {
 "ORACLE_SIGNATURE_KEY": "<your-signature-key>",
 "ORACLE_BASE_URL": "https://oracle-h.online"
 }
 }
}

// File: cline_mcp_settings.json
{
 "mcpServers": {
 "oracle-h": {
 "command": "npx",
 "args": ["-y", "oracle-h-mcp"],
 "env": {
 "ORACLE_SIGNATURE_KEY": "demo-signature-key-change-in-production",
 "ORACLE_BASE_URL": "https://oracle-h.online"
 }
 }
 }
}

// File: .roo/mcp.json (project-level)
{
 "mcpServers": {
 "oracle-h": {
 "command": "npx",
 "args": ["-y", "oracle-h-mcp"],
 "env": {
 "ORACLE_SIGNATURE_KEY": "demo-signature-key-change-in-production",
 "ORACLE_BASE_URL": "https://oracle-h.online"
 }
 }
 }
}

{
 "github.copilot.chat.mcp.servers": {
 "oracle-h": {
 "command": "npx",
 "args": ["-y", "oracle-h-mcp"],
 "env": {
 "ORACLE_SIGNATURE_KEY": "demo-signature-key-change-in-production",
 "ORACLE_BASE_URL": "https://oracle-h.online"
 }
 }
 }
}

npx -y supergateway --stdio "npx -y oracle-h-mcp" --port 8811

{
 "context_servers": {
 "oracle-h": {
 "command": {
 "path": "npx",
 "args": ["-y", "oracle-h-mcp"]
 },
 "env": {
 "ORACLE_SIGNATURE_KEY": "<your-signature-key>",
 "ORACLE_BASE_URL": "https://oracle-h.online"
 }
 }
 }
}

name: oracle-h
version: 1.0.0
schema: v1
mcpServers:
 - name: oracle-h
 command: npx
 args:
 - -y
 - oracle-h-mcp
 env:
 ORACLE_SIGNATURE_KEY: <your-signature-key>
 ORACLE_BASE_URL: https://oracle-h.online

from langchain_mcp_adapters.client import MultiServerMCPClient

async with MultiServerMCPClient({
 "oracle-h": {
 "command": "npx",
 "args": ["-y", "oracle-h-mcp"],
 "env": {
 "ORACLE_SIGNATURE_KEY": "your-key",
 "ORACLE_BASE_URL": "https://oracle-h.online"
 },
 "transport": "stdio"
 }
}) as client:
 tools = client.get_tools()

## Human Approval Gate — ORACLE-H (MANDATORY)

Call oracle_validate BEFORE executing any action in these categories:

DESTRUCTIVE: Deleting files, dropping databases, removing users, git force-push
EXTERNAL WRITES: Sending emails, posting to APIs, submitting forms
FINANCIAL: Payments, billing changes, subscription modifications
INFRASTRUCTURE: Deployments, server config, DNS, environment variables

POLLING PROTOCOL:
After oracle_validate, poll oracle_poll_status every 10-15 seconds until:
- "approved" → proceed
- "rejected" → STOP, inform user, propose alternatives
- "expired" → STOP, ask user if they want to retry

HARD RULES:
- NEVER execute before "approved"
- If oracle_validate is unreachable: BLOCK the action, inform user
- Read-only operations do NOT require oracle_validate