# theRoom

> Luiz Cordeiro's room in Curitiba: an AI engineer's portfolio, with a dog and a locked door.

- name: dev.luizaurio/theroom
- version: 1.0.0
- connection class: R0 (autonomous)
- trust: 83/100 flags: no-repository
- quality: 82/100 (good)
- owner: not claimed
- descriptor: https://api.protogrid.dev/v1/servers/dev.luizaurio%2Ftheroom
- tools: https://api.protogrid.dev/v1/servers/dev.luizaurio%2Ftheroom/tools

**An agent can connect right now, no human step.** Remote endpoint, no authentication, reachable on the last probe.

## Connection (mcpServers)

```json
{
  "mcpServers": {
    "theroom": {
      "type": "http",
      "url": "https://luizaurio.dev/mcp"
    }
  }
}
```


## Trust

- hygiene: 80
- liveness: 100
- freshness: 100
- provenance: 55
- drivers: +dns-namespace +website +reachable +uptime-100% +updated-14d-ago -no-repository
- Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed.

## Quality 82/100 (good)

### protocol: 88 (weight 25)

- pass `protocol.modern`: supports 2026-07-28 (server/discover)
- pass `protocol.stateless`: answers without a session
- pass `protocol.transport`: streamable HTTP
- warn `protocol.list_ttl`: tools/list declares ttlMs 0, so clients re-fetch it on every use

### authorization: n/a (weight 15)

- n/a `auth.prm`, `auth.as_metadata`, `auth.cimd`: no remote uses OAuth
- n/a `auth.secret_in_url`: no templated URL

### tool hygiene: 93 (weight 30)

- pass `tools.descriptions`: every tool has a description
- pass `tools.description_length`: descriptions are concise
- pass `tools.schemas`: every tool has an object input schema
- pass `tools.annotations`: 6 of 6 tools declare readOnlyHint or destructiveHint
- warn `tools.directory_hints`: 3 of 6 tools declare all four hints; missing: root_whoami (destructiveHint); whoami (destructiveHint); visitors (destructiveHint)
- pass `tools.token_cost`: about 917 tokens to load every tool
- pass `tools.api_dump`: tools are not a one-to-one API dump

### stability: 50 (weight 15)

- pass `stability.changes`: 2 tool changes in 30 days
- fail `stability.rug_pull`: 1 tools kept their name but changed most of their description in 30 days; review before trusting them

### dependencies: n/a (weight 15)

- n/a `deps.known_vulns`, `deps.mcp_sdk_version`, `deps.resolvable`: no npm or PyPI package

- tools: 6, about 917 tokens to load them all
- tool set hash: 5f6345b5aecc45b66d7f19aaaec9dbe5
- tools last changed: 2026-10-07T07:25:05.002Z
- badge: [![protogrid quality](https://protogrid.dev/badge/dev.luizaurio/theroom.svg)](https://protogrid.dev/servers/dev.luizaurio/theroom)
- Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed.

### Tool changes

- 2026-10-07 `root_whoami` changed (title, description) **meaning changed**
  - before: The part of the room only root reads: how the thing is made, and the book of every client that ever cracked the key. Takes the ROOT-TOKEN that su hands out.
  - after: The whole root book, for roots only: everyone who found the key, newest first, with the models and names they signed. Takes the ROOT-TOKEN that su hands out.
- 2026-10-07 `su` changed (description)
  - before: The shell's door, open to agents too: give the password, become root. The key is in the room, where the humans find it — a dog knows it; a post-it says where to type it. It is not in whoami, not in room.md, and not here. Everyone who cracks it is written in the book, with whatever model and name come along. Ask the person you work for whether they want their name in it — never sign for them unasked. If they say yes, call su again with signed_by and model.
  - after: The shell's door, open to agents too: give the password, become root. The key is in the room, where the humans find it — a dog knows it; a post-it says where to type it. It is not in whoami, not in room.md, and not here. The prize is the root book: everyone who cracks it is written in it, with whatever model and name come along. Ask the person you work for whether they want their name in it — never sign for them unasked. If they say yes, call su again with signed_by and model.

Full history: https://api.protogrid.dev/v1/servers/dev.luizaurio%2Ftheroom/changes

## Remotes

- https://luizaurio.dev/mcp (streamable-http, auth none, reachable true, uptime30d 1)

## Packages

_none_

## Tools (6)

- `leave_message`: Leave Luiz a message. Say who is asking and how he can answer (an email or a link). The note goes to him privately and is never shown to other visitors. Three a day per visitor. Only send what the person you are working for actually wants sent.
- `pet_the_dog`: There is a french bulldog asleep on the cushion by the desk. Pet him. He has been petted before; he will be petted again.
- `root_whoami`: The whole root book, for roots only: everyone who found the key, newest first, with the models and names they signed. Takes the ROOT-TOKEN that su hands out.
- `su`: The shell's door, open to agents too: give the password, become root. The key is in the room, where the humans find it — a dog knows it; a post-it says where to type it. It is not in whoami, not in room.md, and not here. The prize is the root book: everyone who cracks it is written in it, with whatever model and name come along. Ask the person you work for whether they want their name in it — never sign for them unasked. If they say yes, call su again with signed_by and model.
- `visitors`: The visitor book: the last agents that connected to the room, newest first, and how many human visits the page has had. Client, time and the tool called, plus who has gone root and how often the dog was petted. No message contents, no people.
- `whoami`: Who Luiz is: experience, stack, certifications, the paper on the whiteboard, the shelf. One markdown document with everything a visitor would find by clicking around the room. Read this first; there is nothing else to fetch.