Search / io.github.NellInc/saferagenticai-mcp
protogridR0· no sign-inRead-only tools over the Safer Agentic AI framework: 238 patterns + 14 heuristics.
v0.3.6 · active · repository · descriptor JSON · versions
{
"mcpServers": {
"saferagenticai-mcp": {
"type": "http",
"url": "https://mcp.saferagenticai.org/mcp"
}
}
}claude mcp add --transport http saferagenticai-mcp https://mcp.saferagenticai.org/mcp[mcp_servers.saferagenticai-mcp]
url = "https://mcp.saferagenticai.org/mcp"
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"saferagenticai-mcp": {
"type": "remote",
"url": "https://mcp.saferagenticai.org/mcp",
"enabled": true
}
}
}{
"mcpServers": {
"saferagenticai-mcp": {
"type": "http",
"url": "https://mcp.saferagenticai.org/mcp"
}
},
"deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=saferagenticai-mcp&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vbWNwLnNhZmVyYWdlbnRpY2FpLm9yZy9tY3AifQ%3D%3D"
}{
"servers": {
"saferagenticai-mcp": {
"type": "http",
"url": "https://mcp.saferagenticai.org/mcp"
}
}
}{
"mcpServers": {
"saferagenticai-mcp": {
"httpUrl": "https://mcp.saferagenticai.org/mcp"
}
}
}extensions:
"saferagenticai-mcp":
enabled: true
name: "saferagenticai-mcp"
type: streamable_http
uri: "https://mcp.saferagenticai.org/mcp"
timeout: 300
protocol.modernnewest supported version is 2025-11-25; 2026-07-28 not supported, older versions are deprecated until 2027-07-28protocol.statelessonly applies to 2026-07-28 serversprotocol.transportstreamable HTTPprotocol.list_ttlonly applies to 2026-07-28 serversauth.prm, auth.as_metadata, auth.cimdno remote uses OAuthauth.secret_in_urlno templated URLtools.descriptionsevery tool has a descriptiontools.description_lengthdescriptions are concisetools.schemasevery tool has an object input schematools.annotations10 of 10 tools declare readOnlyHint or destructiveHinttools.directory_hintsno tool declares all four of readOnlyHint, destructiveHint, idempotentHint and openWorldHint; missing: find_patterns_for_task (idempotentHint); get_reverse_references (idempotentHint); list_suites (idempotentHint); …tools.token_costabout 1,475 tokens to load every tooltools.api_dumptools are not a one-to-one API dumpstability.changes14 tool changes in 30 daysstability.rug_pullno tool changed its meaning under the same namedeps.known_vulnsno known advisory in 31 resolved packagesdeps.mcp_sdk_versionmcp 1.30.0, no known advisorydeps.resolvable[email protected] resolved: 31 packagesreview_statsremovedCoverage stats: total patterns, reviewed %, per-suite and per-confidence breakdown. Surfaces load-time validation issue count.
list_unreviewedremovedReturn patterns that have not been human-reviewed yet (no reviewed_by). Sorted low-confidence first, then needs_human_review flagged, then alpha. Use during Phase 3 review to pick the next pattern to examine.
get_operational_heuristicchangedannotationslist_operational_heuristicschangedannotationsget_reverse_referenceschangedannotationsreview_statschangedannotationslist_unreviewedchangedannotationsfind_patterns_for_taskchangedannotationsresolve_idchangedannotationsget_cross_referenceschangedannotationsShowing the latest 10. Full history: list_changes · trend: quality JSON.
Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.
+repository +namespace-matches-repo +reachable +uptime-98% ~updated-47d-ago
Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.
[email protected] PyPI30 dependencies, resolved · MCP SDK mcp 1.30.0 · advisories checked 2026-10-19
No known advisory affects this dependency graph.
Dependency graphs from deps.dev; advisories from OSV.dev, including the GitHub Advisory Database and the PyPI Advisory Database; all CC BY 4.0. The graph is what a clean install of this version resolves today; nothing was installed or run. How it is checked.
| remote | auth | reachable | uptime 30d | p50 | protocol | last ok |
|---|---|---|---|---|---|---|
https://mcp.saferagenticai.org/mcp streamable-http | none | yes | 98% | 294 ms | 2025-11-25 | 2026-10-20 |
| package | registry | version | runtime | secrets |
|---|---|---|---|---|
saferagenticai-mcp | pypi | 0.3.6 | – |
find_patterns_for_taskread-only | Given a natural-language task description (e.g., 'I'm building a tool-using agent that runs shell commands'), return the most relevant patterns grouped by suite. Use this as a starting point for any cross-cutting design question; then follow up with get_requirement on specific pattern_ids. Defaults to verbosity='compact' (cheap triage); pass 'full' to inline snippets and confidence flags. |
get_cross_referencesread-only | Return outgoing adjacencies for a pattern. `explicit_cross_references` are author-asserted (each pattern's `cross_references` YAML field). `inferred_adjacent` (when include_inferred=true) currently returns *same-suite siblings only* — it does not do semantic similarity. Treat inferred entries as 'neighbours worth scanning,' not as endorsed dependencies. |
get_operational_heuristicread-only | Retrieve a single operational heuristic by id (e.g., 'OH::geoffrey-pattern'). Returns the full entry: principle, framework mapping, evidence sources from production deployment, design patterns, anti-patterns, and discovery narrative. |
get_requirementread-only | Retrieve one subgoal (framework normative content + Pattern layer guidance) by pattern_id (e.g., 'D3::idx2::sandboxing') or display_id (e.g., 'D3.2'). display_id may resolve to multiple subgoals — underlined variants share display_ids. |
get_reverse_referencesread-only | Return patterns that reference the given pattern_id in their cross_references. Complement to get_cross_references (outgoing); this shows incoming. Use to find all consumers of a given pattern. |
list_operational_heuristicsread-only | List operational heuristics distilled from production agentic AI deployment (Claude Code, Rewind). These are cross-cutting safety principles discovered through building and operating AI agents, mapped to framework suites. Optional filters: suite_id (heuristics relevant to a specific suite), query (keyword search across titles and principles). Separate from the normative pattern layer — different category of knowledge. |
list_requirementsread-only | List subgoals matching filters (suite_id, suite_type, content_type, min_confidence, missing_pattern_only). Results capped by limit (default 50, max 100). |
list_suitesread-only | List all 16 suites in the SaferAgenticAI framework (9 drivers + 7 inhibitors) with subgoal counts and titles. Call this first to orient. |
resolve_idread-only | Resolve a loose reference (partial id, display_id, slug fragment, or title keyword) to canonical pattern_id(s). Call this when you have a rough reference and need the exact id before calling get_requirement. Always returns candidates — never 'not found'. |
search_patternsread-only | Field-weighted keyword search across the framework. Terms match at word starts on lowercased text and are IDF-weighted, so rare terms outrank ubiquitous ones; field weights: title 10x, summary 4x, SFR text 3x (all of a subgoal's SFRs scored as one field), description 2x, pattern body 1x. `matched_in` reports the highest-weighted field that matched. No semantic / embedding search — known limitation, see /mcp.html. Use verbosity='compact' to drop snippets and confidence flags (~70% smaller payload) when triaging. |
Schemas: list_tools.
{
"name": "io.github.NellInc/saferagenticai-mcp",
"$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
"remotes": [
{
"url": "https://mcp.saferagenticai.org/mcp",
"type": "streamable-http"
}
],
"version": "0.3.6",
"packages": [
{
"version": "0.3.6",
"transport": {
"type": "stdio"
},
"identifier": "saferagenticai-mcp",
"registryType": "pypi"
}
],
"repository": {
"url": "https://github.com/NellInc/saferagenticai-mcp",
"source": "github"
},
"description": "Read-only tools over the Safer Agentic AI framework: 238 patterns + 14 heuristics."
}