CEP-TBD Common Tool Schemas
Common Tool Schemas
Section titled “Common Tool Schemas”Status: Draft
Type: Standards Track
Abstract
Section titled “Abstract”This CEP establishes a standard for defining and discovering common tool schemas in ContextVM.
It enables interoperability by allowing multiple servers to implement the same standardized MCP tool interface that clients can recognize and use consistently. Using MCP’s _meta field, RFC 8785 for deterministic hashing, and CEP-6 announcements for discovery, this creates a marketplace where users can choose between multiple providers implementing the same common tool schema.
Motivation
Section titled “Motivation”This CEP enables a marketplace for common services in ContextVM. When servers implement similar functionality (e.g., translation, weather, search), clients currently cannot:
- Discover equivalent services across providers
- Switch providers without code changes
- Compare offerings based on quality, cost, or trust
- Build specialized UIs for standard tool types
Common tool schemas enable provider competition, user choice, client optimization, and seamless interoperability.
Specification
Section titled “Specification”1. Schema identity and hash calculation
Section titled “1. Schema identity and hash calculation”A common tool schema is identified by a deterministic hash of its tool name and JSON Schemas.
To ensure semantically identical tool definitions produce the same cryptographic fingerprint, this specification uses RFC 8785 (JSON Canonicalization Scheme — JCS) for deterministic JSON serialization.
1.1 Hash construction
Section titled “1.1 Hash construction”The schema hash is calculated as:
schemaHash = sha256(JCS({ name: string, inputSchema: JSONSchema, outputSchema?: JSONSchema}))Important: The hash includes the tool name to ensure interoperability. Since MCP tool invocations use the tool name in requests, including it in the hash guarantees that clients can use the same tool name across all servers implementing the common schema.
Important: If outputSchema is present, it MUST be included in the hashed payload.
Note: The description and title fields are intentionally excluded from the hash to allow implementers freedom in how they describe their service while maintaining schema compatibility.
Note (output schema omission): Servers that do not provide an outputSchema will naturally share a hash with other servers that also omit outputSchema but use the same name and inputSchema. This is not inherently unsafe, but it can reduce specificity when clients want to distinguish between tools that return structured output vs. tools that return unstructured output.
1.2 Example hash calculation
Section titled “1.2 Example hash calculation”import { canonicalize } from "json-canonicalize";import { createHash } from "crypto";
const toolSchema = { name: "translate_text", inputSchema: { /* schema definition */ }, outputSchema: { /* optional schema (if present, MUST be included in the hash) */ },};
const hash = createHash("sha256") .update(canonicalize(toolSchema)) .digest("hex");2. Tool metadata (_meta) in tools/list
Section titled “2. Tool metadata (_meta) in tools/list”Servers that implement a common tool schema MUST include the schema hash in the MCP tool definition using MCP’s _meta field.
Multi-tool servers: Common schemas are defined per tool. A server that exposes multiple tools MUST include the appropriate schemaHash in each tool entry it wants treated as a common schema. Tools that do not include this _meta field are simply treated as non-common (bespoke) tools.
2.1 Tool definition in tools/list response
Section titled “2.1 Tool definition in tools/list response”{ "jsonrpc": "2.0", "id": 1, "result": { "tools": [ { "name": "translate_text", "description": "Translate text between languages using AI models", "inputSchema": { "type": "object", "properties": { "text": { "type": "string", "description": "Text to translate" }, "source_language": { "type": "string", "description": "Source language code (ISO 639-1)" }, "target_language": { "type": "string", "description": "Target language code (ISO 639-1)" } }, "required": ["text", "target_language"] }, "outputSchema": { "type": "object", "properties": { "translated_text": { "type": "string", "description": "The translated text" }, "detected_language": { "type": "string", "description": "Detected source language if not provided" } }, "required": ["translated_text"] }, "_meta": { "io.contextvm/common-schema": { "schemaHash": "a7f3d9c2b1e8..." } } } ] }}3. Public announcements (CEP-6) for discovery
Section titled “3. Public announcements (CEP-6) for discovery”Servers MAY publish CEP-6 public announcements to advertise which common tool schemas they implement.
This CEP uses NIP-73 compliant i and k tags to enable schema discovery and ecosystem integration (e.g., NIP-22 comments, NIP-25 reactions, voting on schemas). Schema identity comes solely from schemaHash.
3.1 Implemented schema marker (NIP-73 i and k tags)
Section titled “3.1 Implemented schema marker (NIP-73 i and k tags)”Servers implementing a common tool schema include i and k tags:
{ "kind": 11317, "pubkey": "<server-pubkey>", "tags": [ ["i", "a7f3d9c2b1e8...", "translate_text"], ["k", "io.contextvm/common-schema"] ]}Tag format:
["i", "<schema-hash>", "<tool-name>"]— NIP-73 identifier for the common schema["k", "io.contextvm/common-schema"]— NIP-73 kind identifier (one per event)
The i tag contains the schema hash as the identifier, with the tool name as the optional third item. The k tag specifies the identifier kind, matching the namespace used in the _meta field.
Multi-tool servers: A server MAY announce multiple implemented common schemas by including multiple i tags in the same event (one per tool schema hash), with a single k tag. For example:
{ "kind": 11317, "pubkey": "<server-pubkey>", "tags": [ ["i", "a7f3d9c2b1e8...", "translate_text"], ["i", "f8e7d6c5b4a3...", "get_weather"], ["k", "io.contextvm/common-schema"] ]}This keeps schema discovery hash-indexable while allowing a single server announcement to represent a server with many tools.
3.2 Optional category tags (t tags)
Section titled “3.2 Optional category tags (t tags)”To support lightweight discoverability and curation, servers MAY include one or more t tags that categorize the server’s tool offerings.
These tags are not part of the schema contract and are not enforced. They are hints for browsing and filtering.
Example:
{ "kind": 11317, "pubkey": "<server-pubkey>", "tags": [ ["i", "a7f3d9c2b1e8...", "translate_text"], ["k", "io.contextvm/common-schema"], ["t", "translation"], ["t", "traduccion"] ]}Recommendation: Servers SHOULD include at least one canonical, English, slug-style category tag (e.g., translation, weather-forecast, web-search) to reduce fragmentation across languages and synonyms.
4. Discovery and verification flow
Section titled “4. Discovery and verification flow”4.1 Server discovery
Section titled “4.1 Server discovery”Find all implementers of a schema hash:
{ "kinds": [11317], "#i": ["a7f3d9c2b1e8..."] }Find all ContextVM common tool schemas:
{ "kinds": [11317], "#k": ["io.contextvm/common-schema"] }Browse candidates by category (best-effort):
{ "kinds": [11317], "#t": ["translation"] }Recommended client behavior is a two-step flow:
- Browse/search using
ttags (optional, best-effort) - For interoperable provider switching, rely on
schemaHashby:- extracting the hash from announcements and/or
tools/list, and - querying
#iby hash to find other implementers
- extracting the hash from announcements and/or
4.2 Verification process
Section titled “4.2 Verification process”Clients SHOULD verify schema conformance before treating a tool as an implementation of a common schema.
- Receive
tools/listresponse - Extract tool
name,inputSchema, andoutputSchema(if present) - Compute hash:
sha256(JCS({ name, inputSchema, outputSchema? })) - Compare with
_meta["io.contextvm/common-schema"].schemaHash - If hashes match, the tool conforms to the common schema
4.3 Client tool invocation
Section titled “4.3 Client tool invocation”Clients invoke tools using the standard name:
{ "method": "tools/call", "params": { "name": "translate_text", "arguments": { "text": "Hello!", "target_language": "es" } }}Works identically across all implementing servers for the same schema hash.
5. The _meta field structure
Section titled “5. The _meta field structure”Servers implementing a common tool schema MUST provide:
{ "_meta": { "io.contextvm/common-schema": { "schemaHash": string // SHA-256 hash } }}6. Versioning
Section titled “6. Versioning”Common tool schemas do not have independent versions. Version information comes from the server, following MCP’s design where servers have versions, not individual tools.
Breaking changes naturally produce a new schemaHash (because the hashed payload changes). In practice, schema evolution can be handled by:
- Defining a new tool with a different name (e.g.,
translate_text_v2) - Or updating the tool schema in a new server version (clients relying on hash-based common schemas will treat it as a different schema hash)
The server version in initialization responses indicates the overall API version.
Backward Compatibility
Section titled “Backward Compatibility”Fully backward compatible:
- Existing clients ignore
_metaand use tools normally - Existing servers work without
_metafields _metais part of the MCP specification- CEP-6 tags are additive
Security Implications
Section titled “Security Implications”Schema verification
Section titled “Schema verification”Risk: A malicious server could claim to implement a common schema but provide different, potentially harmful schemas.
Mitigation:
- Clients MUST verify the schema hash before trusting a common schema claim
- Clients SHOULD display clear warnings if hash verification fails
Discovery does not imply trust
Section titled “Discovery does not imply trust”Risk: Users might discover and connect to untrusted servers implementing common schemas.
Mitigation:
- Clients SHOULD implement server reputation systems
- Clients SHOULD allow users to maintain allowlists of trusted servers
- Discovery doesn’t equal trust—users must explicitly authorize connections
Implementation Considerations
Section titled “Implementation Considerations”For server developers
Section titled “For server developers”Implementing a common schema:
- Choose a clear tool name (it is part of the hash)
- Design
inputSchemaand (optionally, but strongly recommended)outputSchema - Compute
schemaHashusing JCS + SHA-256 - Include
schemaHashin_meta["io.contextvm/common-schema"].schemaHash - Publish a CEP-6 announcement with
iandktags (NIP-73 compliant) - Optionally include
ttags for categorization
For client developers
Section titled “For client developers”Discovery:
- Query Nostr for
itags to find providers for a knownschemaHash - Optionally support browsing via
ttags, then refine by hash
Verification:
- Always verify schema hashes
- Show clear indicators for verified schemas and warnings on failures
UX:
- Build specialized UIs for common schemas
- Enable provider switching by grouping providers by
schemaHash - Cache verified schemas
Example: Weather service marketplace
Section titled “Example: Weather service marketplace”1. A server implements the weather schema
Section titled “1. A server implements the weather schema”tools/list includes the schema hash:
{ "name": "get_weather", "inputSchema": { "properties": { "location": { "type": "string" } }, "required": ["location"] }, "outputSchema": { "properties": { "temperature": { "type": "number" } }, "required": ["temperature"] }, "_meta": { "io.contextvm/common-schema": { "schemaHash": "f8e7d6c5b4a3..." } }}2. The server announces it implements the schema
Section titled “2. The server announces it implements the schema”{ "kind": 11317, "pubkey": "<server-pubkey>", "tags": [ ["i", "f8e7d6c5b4a3...", "get_weather"], ["k", "io.contextvm/common-schema"], ["t", "weather-forecast"] ]}3. Client discovers providers
Section titled “3. Client discovers providers”Find implementers:
{ "kinds": [11317], "#i": ["f8e7d6c5b4a3..."] }Or browse by category (best-effort):
{ "kinds": [11317], "#t": ["weather-forecast"] }4. User invokes tool
Section titled “4. User invokes tool”{ "method": "tools/call", "params": { "name": "get_weather", "arguments": { "location": "San Francisco" } }}Works identically across all providers implementing the same schema hash.