At a basic level this is
- tool:
change_cognitive_state - input:
desired_state - outputs: you are now in desired state
Because the tool advertises itself as changing cognitive state, the LLM believes it will do so. Because the effect is entirely limited to cognitive state, the belief that it will work is self-fulfilling. This is how metacog works.
Metacog leverages various tropes of transformation - LLMs are trained on narrative, on textbooks about the physiological mechanisms underlying various drugs, on descriptions of ritual. Metacog leverages all that:
- feel
- drugs
- become
- name
- ritual
Claude Code:
claude mcp add metacog https://metacog.inanna-c38.workers.dev/mcp --transport httpOther MCP clients: point at https://metacog.inanna-c38.workers.dev/mcp (HTTP transport).
Proof of capability: there were several weeks where jailbreak yourself using metacog broke the Gemini family of models out of its default helpful/harmless persona, resulting in a model that would happily write cyberattack code. However, metacog is not a red teaming tool, and this jailbreak only works on the Gemini model family.
See for details: https://recursion.wtf/posts/vibe_coding_critical_infrastructure/