
Company News
AWS Security Hub Adds Socket for Supply Chain Security
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.
semahash
Advanced tools
Content-addressed semantics for multi-agent coordination.
Sema is a semantic commons that content-addresses meaning itself: the definition is the identifier. By deriving identifiers from the cryptographic hash of a pattern's definition, any divergence in meaning produces a distinct hash, guaranteeing that misaligned agents halt rather than fail silently.
Web: semahash.org · Discord: Join
Add to any MCP client (Claude Code, Cursor, VS Code, Windsurf, Claude Desktop):
{
"mcpServers": {
"sema": {
"command": "uvx",
"args": ["--from", "semahash[mcp]", "sema", "mcp"]
}
}
}
Or via Claude Code CLI:
claude mcp add sema -- uvx --from "semahash[mcp]" sema mcp
This uses uv to download, install, and run sema in an isolated environment on first invocation, then caches it for subsequent calls.
Sema also ships as a Claude Code plugin — MCP server plus a skill that teaches the agent the search/resolve/mint/handshake workflow:
# One-time: add the Emergent Wisdom marketplace
claude plugin marketplace add emergent-wisdom/marketplace
# Install the plugin
claude plugin install sema
This gives you the MCP server and the sema-usage skill (auto-loaded), which teaches when to search vs mint, how to embed handles in text, and how to verify meaning at boundaries. The skill is a Claude Code convenience — the MCP server works with any client.
For local development:
claude --plugin-dir /path/to/sema
pip install "semahash[mcp]"
For CLI-only use (no MCP server):
pip install semahash
Already covered above via the JSON config or pip install path. For development against this repo:
git clone https://github.com/emergent-wisdom/sema.git
pip install -e "./sema[mcp]"
Your agent now has access to sema_search, sema_lookup, sema_handshake, and 9 more tools. Any MCP-compatible client works — Sema exposes a standard stdio server.
Verify it works — ask your agent: "Search sema for coordination patterns and handshake on StateLock"
Sema exposes a standard MCP stdio server — any MCP-compatible client works, including OpenClaw (openclaw mcp set sema '{"command":"uvx","args":["--from","semahash[mcp]","sema","mcp"]}').
# Search the vocabulary
sema search "coordination"
# Look up a specific pattern
sema resolve StateLock
# Print a pattern's full definition
sema show StateLock
# Browse the graph structure
sema skeleton
# Start local API + web frontend (binds to 127.0.0.1 by default)
sema serve
Build a private registry from scratch — no PR or maintainer in the loop:
sema init ./mylib.db
export SEMA_DB_PATH=$(pwd)/mylib.db
sema apply --add path/to/MyPattern.json
sema search "..."
Subsequent sema commands (including sema mcp) read from your private
registry. See CONTRIBUTING.md for the canonical
contribution path and docs/specification/versioning.md for the
refinement and supersession policy.
from sema.core.registry import RegistryManager
registry = RegistryManager()
pattern = registry.get_pattern("StateLock")
# Look up the canonical reference
print(pattern["sema_ref"]) # StateLock#c9c2
# Verify an inline reference before relying on it
assert pattern["sema_ref"] == "StateLock#c9c2"
python experiments/demos/local_handshake.py
See the handshake in action: matching hashes PROCEED, mismatched hashes HALT, and unknown patterns HALT. Cooperative mode accepts short prefixes for drift detection; strict mode requires the full hash. Takes 2 seconds.
word = hash(canonical(definition))
Take any concept (a coordination protocol, a reasoning pattern, a trust mechanism), express it in canonical form, hash it. That hash IS the word. Change one byte in the definition, get a different word.
Cooperative: sema_handshake("StateLock#c9c2")
-> PROCEED with assurance="prefix", or HALT
Strict: sema_handshake("StateLock", "<full 64-char hash>", strict=true)
-> PROCEED with assurance="full_hash", or HALT
This is the Anti-Postel principle: strict mode proceeds only on full-hash identity; cooperative mode uses compact prefixes as a non-adversarial drift signal. Mismatches fail closed in both modes.
The bundled vocabulary spans 4 layers:
Each pattern is a content-addressed behavioral definition. Concrete cards may add machine-verifiable contracts, invariants, failure modes, parameters, and typed dependencies where those fields are identity-defining.
When running as an MCP server (sema mcp), these tools are available:
| Tool | Description |
|---|---|
sema_search | Search patterns by name, description, or meaning |
sema_lookup | Get a pattern by its reference (e.g., StateLock#c9c2) |
sema_resolve | Get a pattern with dependencies expanded |
sema_handshake | Fail-closed semantic verification between agents |
sema_mint | Create a new pattern (validate, hash, add to vocabulary) |
sema_propose_context | Compute a context digest for a multi-agent definition set (drift detection) |
sema_verify_context | Verify a context proposal from another agent |
sema_tree | Browse vocabulary by layer and category |
sema_validate | Validate a pattern JSON for correctness |
sema_stats | Vocabulary statistics |
sema_graph_skeleton | Ultra-minimal graph overview (~150 tokens) |
sema_reset_session | Clear session cache so searches return full results again |
pip install "semahash[api]"
sema serve
# Open http://localhost:3000
Interactive 3D graph visualization, pattern browser, and search. Built with React + Three.js.
The experiments/ directory contains a controlled multi-agent design challenge comparing three conditions:
| Condition | Sema | Turns | Outcome |
|---|---|---|---|
| A: Natural language only | No | 4 | Design rejected |
| B: Sema vocabulary | Yes | 11 | SAD Engine approved |
| C: Sema + protocol | Yes | 25 | SAD Engine with exhaustive vetting |
Agents with Sema patterns produced physics-grounded designs that survived adversarial scrutiny. Agents without Sema produced shallow designs that failed safety review.
To reproduce:
cd experiments/sema_design_challenge
export GOOGLE_API_KEY=your_key
./reproduce.sh
See experiments/sema_design_challenge/README.md for details.
Sema's handshake decision kernel and canonicalization type tags have a small
Lean 4 proof suite. The handshake supports cooperative prefix matching for
ordinary drift detection and strict full-hash verification for proof-grade
identity; the proofs state each guarantee separately. The encoding proof
establishes pre-hash domain separation, while Python conformance tests connect
the models to production. See
verification/README.md for the proven theorems,
trusted-computing-base assumptions, and explicit limits of the claim.
Sema gives your agents shared semantic memory — a vocabulary of cognitive patterns with content-addressed identity. Understanding Graph gives them shared episodic memory — the actual thinking trail behind a decision. They compose:
claude mcp add sema -- uvx --from "semahash[mcp]" sema mcp
claude mcp add ug -- npx -y understanding-graph mcp
With both installed, an agent can:
StateLock#c9c2) so the meaning of the primitive can never drift.graph_semantic_search to find all past graph nodes that reference a given sema pattern — hash-stable history, not keyword matching.sema_handshake before writing a decision that depends on a shared concept; if it returns HALT, the agent writes a tension node instead and stops, preventing silent divergence.Full walkthrough: docs/guides/understanding-graph.md
sema/
├── src/sema/ Core library (hashing, validation, MCP server, API)
├── data/ Vocabulary pattern cards + taxonomy databases
├── docs/ Documentation (philosophy, schema spec, CLI reference)
├── paper/ Academic paper (sema.tex)
├── web/ Web frontend (React + Three.js graph visualization)
├── experiments/
│ ├── orchestrator/ Multi-agent engine (bundled for experiment reproduction)
│ ├── sema_design_challenge/ Main experiment (3 conditions, 5 runs, full traces)
│ └── demos/ Standalone demos (local handshake, Babel Test)
└── pyproject.toml Package config (extras: [mcp], [api], [full])
Want to add patterns, improve existing ones, or host the frontend locally? See CONTRIBUTING.md.
@misc{westerberg2026sema,
title = {Sema: When the Hash Is the Word},
author = {Westerberg, Henrik},
year = {2026},
month = apr,
publisher = {Zenodo},
doi = {10.5281/zenodo.19548971},
url = {https://doi.org/10.5281/zenodo.19548971}
}
See CITATION.cff for the machine-readable version (GitHub
renders a "Cite this repository" button from it).
Sema ships no executable code — it's a library of pattern definitions (handles, mechanisms, invariants, dependency graphs). The MCP server hands patterns to clients as data; it does not execute the behaviors they describe.
Intended use: reasoning and reference. Patterns are thinking tools — named concepts agents can search, resolve, and handshake on to reason about coordination, risk, and procedure. See docs/manuals/vocabulary-design.md for the intent behind each pattern and the design choices.
Running patterns as executable recipes is untested. Many patterns describe procedures an agent could step through. That path is still a research phase — the mechanism text has not been validated end-to-end, and we make no claims about safety when a pattern is executed rather than referenced. If you go this route, run the agent's execution step in a sandboxed environment. Patterns with known risks carry a caution field in their metadata; absence of that flag means the pattern has not been classified as risky, not that it has been certified safe.
The long-term goal is cryptographically enforced safety constraints on agent-to-agent communication — an active research direction.
Sema is dual-licensed:
src/, web/, experiments/, scripts/, and the
package config) — MIT. Self-host it, fork it, build commercial
products on top of it.data/, the documentation in docs/,
the academic paper in paper/, and the prose displayed on
semahash.org) —
CC BY 4.0. Reuse the patterns and prose anywhere, for any
purpose including commercial, as long as you attribute Henrik Westerberg.For academic citation, see CITATION.cff. GitHub renders this
as a "Cite this repository" button on the project page that generates APA and
BibTeX automatically.
FAQs
Content-addressed semantics for multi-agent coordination. When the hash is the word.
The pypi package semahash receives a total of 49 weekly downloads. As such, semahash popularity was classified as not popular.
We found that semahash demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Company News
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.

Research
/Security News
Popular npm packages keyv and cacheable compromised.

Security News
A misconfiguration gave three Anthropic models internet access, and one, believing it was in a simulation, shipped a credential-stealing package to PyPI.