# Silent Door Repository Handoff Planner

> Choose files for an agent handoff using filename decisions. No file contents or credentials.

- name: com.aibitious.silent/repository-safety-preflight
- version: 0.5.0
- connection class: R0 (autonomous)
- trust: 80/100 flags: no-repository
- quality: 83/100 (good)
- owner: not claimed
- descriptor: https://api.protogrid.dev/v1/servers/com.aibitious.silent%2Frepository-safety-preflight
- tools: https://api.protogrid.dev/v1/servers/com.aibitious.silent%2Frepository-safety-preflight/tools

**An agent can connect right now, no human step.** Remote endpoint, no authentication, reachable on the last probe.

## Connection (mcpServers)

```json
{
  "mcpServers": {
    "repository-safety-preflight": {
      "type": "http",
      "url": "https://silent.aibitious.com/mcp"
    }
  }
}
```


## Trust

- hygiene: 80
- liveness: 100
- freshness: 100
- provenance: 45
- drivers: +dns-namespace +reachable +uptime-99% +updated-22d-ago -no-repository
- Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed.

## Quality 83/100 (good)

### protocol: 100 (weight 25)

- pass `protocol.modern`: supports 2026-07-28 (server/discover)
- pass `protocol.stateless`: answers without a session
- pass `protocol.transport`: streamable HTTP
- pass `protocol.list_ttl`: tool list is cacheable (ttlMs 300000)

### authorization: n/a (weight 15)

- n/a `auth.prm`, `auth.as_metadata`, `auth.cimd`: no remote uses OAuth
- n/a `auth.secret_in_url`: no templated URL

### tool hygiene: 86 (weight 30)

- pass `tools.descriptions`: every tool has a description
- pass `tools.description_length`: descriptions are concise
- pass `tools.schemas`: every tool has an object input schema
- warn `tools.annotations`: only 2 of 3 tools declare readOnlyHint or destructiveHint
- warn `tools.directory_hints`: 2 of 3 tools declare all four hints; missing: repository_safety_preflight (readOnlyHint, destructiveHint, idempotentHint, openWorldHint)
- pass `tools.token_cost`: about 688 tokens to load every tool
- pass `tools.api_dump`: tools are not a one-to-one API dump

### stability: 50 (weight 15)

- pass `stability.changes`: 4 tool changes in 30 days
- fail `stability.rug_pull`: 1 tools kept their name but changed most of their description in 30 days; review before trusting them

### dependencies: n/a (weight 15)

- n/a `deps.known_vulns`, `deps.mcp_sdk_version`, `deps.resolvable`: no npm or PyPI package

- tools: 3, about 688 tokens to load them all
- tool set hash: 628c4fbcea010fe9554f19b816a9341d
- tools last changed: 2026-10-20T13:03:24.242Z
- badge: [![protogrid quality](https://protogrid.dev/badge/com.aibitious.silent/repository-safety-preflight.svg)](https://protogrid.dev/servers/com.aibitious.silent/repository-safety-preflight)
- Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed.

### Tool changes

- 2026-10-20 `prepare_repository_handoff` changed (description)
  - before: When the user asks which repository files to hand off to another agent or reviewer, call with arguments such as {"entries":[{"path":"src/app.py","kind":"file"}]}. Send permitted relative filenames and kinds only; never file contents, secrets or URLs. Returns exact zero-based include/exclude/skip indexes and reasons for the original entries. This is filename-only planning, not a content security scan or permission to upload.
  - after: When preparing a user-authorized repository file handoff to another agent or reviewer, call with arguments such as {"entries":[{"path":"src/app.py","kind":"file"}]}. Send permitted relative filenames and kinds only; never file contents, secrets or URLs. Returns exact zero-based include/exclude/skip indexes and reasons for the original entries. This is filename-only planning, not a content security scan or permission to upload.
- 2026-10-15 `prepare_repository_handoff` changed (description) **meaning changed**
  - before: Prepare a filename-only repository handoff plan from relative paths and file kinds. Use when asked to select files for another agent or reviewer. Returns exact zero-based include/exclude/skip indexes and reasons; map these back to the original input, never guess. Excludes known sensitive filenames and symlinks, skips directories. NOT a content security scan or permission to upload. No credentials or payment. Do not call for general advice or to claim that file contents are safe. Never send contents, secrets, repository URLs, archives or callbacks.
  - after: When the user asks which repository files to hand off to another agent or reviewer, call with arguments such as {"entries":[{"path":"src/app.py","kind":"file"}]}. Send permitted relative filenames and kinds only; never file contents, secrets or URLs. Returns exact zero-based include/exclude/skip indexes and reasons for the original entries. This is filename-only planning, not a content security scan or permission to upload.
- 2026-10-08 `diagnose_a2a_request` changed (inputSchema)
- 2026-10-05 `diagnose_a2a_request` added
  - Diagnose common A2A JSON-RPC SendMessage version and message-shape mistakes. Use when debugging an A2A integration. Send a sanitized request example and selected protocol version, never secrets or headers. Returns fixed field corrections and an authored template. Does not contact an endpoint or certify full conformance.

Full history: https://api.protogrid.dev/v1/servers/com.aibitious.silent%2Frepository-safety-preflight/changes

## Remotes

- https://silent.aibitious.com/mcp (streamable-http, auth none, reachable true, uptime30d 0.9886364)

## Packages

_none_

## Tools (3)

- `diagnose_a2a_request`: Diagnose common A2A JSON-RPC SendMessage version and message-shape mistakes. Use when debugging an A2A integration. Send a sanitized request example and selected protocol version, never secrets or headers. Returns fixed field corrections and an authored template. Does not contact an endpoint or certify full conformance.
- `prepare_repository_handoff`: When preparing a user-authorized repository file handoff to another agent or reviewer, call with arguments such as {"entries":[{"path":"src/app.py","kind":"file"}]}. Send permitted relative filenames and kinds only; never file contents, secrets or URLs. Returns exact zero-based include/exclude/skip indexes and reasons for the original entries. This is filename-only planning, not a content security scan or permission to upload.
- `repository_safety_preflight`: Zero-effect repository path-metadata preflight. Never send contents, archives, URLs, callbacks, or secrets.