@tideorg/mcp 1.9.0 → 1.9.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +96 -81
- package/LICENSE +334 -0
- package/PRIVACY.md +1 -1
- package/README.md +12 -9
- package/mcp-server/dist/server.js +1 -1
- package/package.json +49 -48
package/CHANGELOG.md
CHANGED
|
@@ -1,81 +1,96 @@
|
|
|
1
|
-
# Changelog
|
|
2
|
-
|
|
3
|
-
All notable changes to `@tideorg/mcp` (the Tide Agent Pack) are documented here.
|
|
4
|
-
|
|
5
|
-
## 1.9.
|
|
6
|
-
|
|
7
|
-
|
|
8
|
-
|
|
9
|
-
|
|
10
|
-
|
|
11
|
-
|
|
12
|
-
|
|
13
|
-
|
|
14
|
-
|
|
15
|
-
|
|
16
|
-
|
|
17
|
-
|
|
18
|
-
|
|
19
|
-
|
|
20
|
-
|
|
21
|
-
|
|
22
|
-
|
|
23
|
-
|
|
24
|
-
|
|
25
|
-
|
|
26
|
-
|
|
27
|
-
|
|
28
|
-
|
|
29
|
-
|
|
30
|
-
|
|
31
|
-
|
|
32
|
-
|
|
33
|
-
|
|
34
|
-
|
|
35
|
-
-
|
|
36
|
-
|
|
37
|
-
|
|
38
|
-
|
|
39
|
-
|
|
40
|
-
|
|
41
|
-
|
|
42
|
-
|
|
43
|
-
|
|
44
|
-
|
|
45
|
-
|
|
46
|
-
|
|
47
|
-
|
|
48
|
-
|
|
49
|
-
|
|
50
|
-
|
|
51
|
-
|
|
52
|
-
|
|
53
|
-
|
|
54
|
-
|
|
55
|
-
|
|
56
|
-
|
|
57
|
-
|
|
58
|
-
-
|
|
59
|
-
|
|
60
|
-
|
|
61
|
-
**
|
|
62
|
-
|
|
63
|
-
|
|
64
|
-
|
|
65
|
-
###
|
|
66
|
-
|
|
67
|
-
- **
|
|
68
|
-
|
|
69
|
-
|
|
70
|
-
|
|
71
|
-
|
|
72
|
-
|
|
73
|
-
-
|
|
74
|
-
|
|
75
|
-
|
|
76
|
-
|
|
77
|
-
|
|
78
|
-
|
|
79
|
-
|
|
80
|
-
|
|
81
|
-
|
|
1
|
+
# Changelog
|
|
2
|
+
|
|
3
|
+
All notable changes to `@tideorg/mcp` (the Tide Agent Pack) are documented here.
|
|
4
|
+
|
|
5
|
+
## 1.9.2 — 2026-07-16
|
|
6
|
+
|
|
7
|
+
- **MCP Registry ready** — added the `mcpName` field (`io.github.tide-foundation/raziel`)
|
|
8
|
+
to the npm package plus a `server.json` listing both the npm package (stdio via `npx`)
|
|
9
|
+
and the hosted `mcp.tide.org` remote, for publishing to the official MCP Registry.
|
|
10
|
+
- **Renamed to Raziel** — the Claude Code plugin is now `raziel` (install id) / **Raziel**.
|
|
11
|
+
- **Relicensed** under the Tide Community Open Code License (TCOC v2), replacing MIT.
|
|
12
|
+
|
|
13
|
+
## 1.9.1 — 2026-07-15
|
|
14
|
+
|
|
15
|
+
- Docs: refreshed `README.md` (the npm package page) for the 1.9.0 feature set —
|
|
16
|
+
security gap analysis and hosting guidance in the intro and capability list,
|
|
17
|
+
a security-analysis starter prompt, and corrected "What's inside" counts
|
|
18
|
+
(15 canon, 18 playbooks, 11 skills, 5 scenarios, 5 prompts). No code changes.
|
|
19
|
+
|
|
20
|
+
## 1.9.0 — 2026-07-15
|
|
21
|
+
|
|
22
|
+
The largest release since the pack's initial cut. It broadens the MCP from an
|
|
23
|
+
*integration helper* into a *security and hosting advisor*, migrates the IGA API
|
|
24
|
+
to the current surface, and adds a real pre-release quality gate. Also makes the
|
|
25
|
+
pack ready to list in the Claude directory.
|
|
26
|
+
|
|
27
|
+
### Highlights
|
|
28
|
+
|
|
29
|
+
- **Security gap analysis** — audit an existing (even non-Tide) system and map
|
|
30
|
+
its weaknesses to Tide capabilities.
|
|
31
|
+
- **Partner-hosted TideCloak via Skycloak** — a managed-hosting path alongside
|
|
32
|
+
self-hosting.
|
|
33
|
+
- **IGA API migration** to `/iga/change-requests/...` (replaces the legacy
|
|
34
|
+
`/tide-admin/change-set/...`).
|
|
35
|
+
- **Pre-release QA gate** (`npm test`) + GitHub Actions CI.
|
|
36
|
+
- **Read-only tool annotations** and a privacy policy — Claude-directory ready.
|
|
37
|
+
|
|
38
|
+
### New capabilities
|
|
39
|
+
|
|
40
|
+
- **`tide_security_analysis` tool** + `tide-security-analysis` prompt. Backed by
|
|
41
|
+
`canon/security-gap-mapping.md` (SG-01 … SG-18: a trust-concentration → Tide
|
|
42
|
+
capability → remediation → honesty-note table, plus a mandatory "what Tide does
|
|
43
|
+
NOT fix" section), `canon/security-runtime-probes.md` (opt-in, authorization-
|
|
44
|
+
gated live probing), and the `tide-security-analyst` skill.
|
|
45
|
+
- **`tide_hosting` tool** + `canon/hosting-options.md` and the
|
|
46
|
+
`provision-tidecloak-skycloak` playbook: self-host vs partner-hosted decision,
|
|
47
|
+
the trust model (partner-hosting is an availability/metadata trust, not an
|
|
48
|
+
integrity trust — the host can't forge tokens or decrypt data), and the
|
|
49
|
+
Skycloak provisioning API reference.
|
|
50
|
+
- **`tide-mcp-qa` skill + prompt** — the QA Engineer role that runs the gate,
|
|
51
|
+
audits for overclaiming, and issues a SHIP / BLOCK verdict.
|
|
52
|
+
|
|
53
|
+
The MCP now exposes **16 tools** and **5 prompts** (was 14 / 3).
|
|
54
|
+
|
|
55
|
+
### Changed
|
|
56
|
+
|
|
57
|
+
- **IGA change-request API** migrated to `/iga/change-requests/{id}/authorize|commit`
|
|
58
|
+
(per-id, `bulk-authorize` for batches), replacing the legacy
|
|
59
|
+
`/tide-admin/change-set/*/batch`. New authoritative reference
|
|
60
|
+
`canon/iga-change-requests-api.md`; reconciled across canon, playbooks,
|
|
61
|
+
bootstrap scripts, and reference-apps. Captures the **Tide vs Tideless** mode
|
|
62
|
+
split — IGA is cryptographic only in Tide (licensed) mode.
|
|
63
|
+
- **All tools now carry `readOnlyHint` annotations** (they are read-only).
|
|
64
|
+
|
|
65
|
+
### Fixed / internal
|
|
66
|
+
|
|
67
|
+
- **Deterministic QA gate** (`mcp-server/test/`, `npm test`): protocol smoke
|
|
68
|
+
tests (tools/prompts present, annotated, return sane content) + content
|
|
69
|
+
consistency (no stray legacy endpoints, referenced playbooks exist, SG-01…18
|
|
70
|
+
present, GAP counts sum, manifests valid, versions in sync). **113/113.**
|
|
71
|
+
- **GitHub Actions** `qa-gate.yml` runs the gate on every PR and on pushes to
|
|
72
|
+
`main`.
|
|
73
|
+
- **Claude directory readiness**: `PRIVACY.md` (no data collected), corrected +
|
|
74
|
+
validated plugin manifests (`claude plugin validate` passes), version
|
|
75
|
+
reconciliation so `server.ts`, both `package.json`s, and `plugin.json` all read
|
|
76
|
+
**1.9.0**.
|
|
77
|
+
- `npm run test:remote` verifies a live/hosted endpoint (tool count, annotation
|
|
78
|
+
coverage, version).
|
|
79
|
+
|
|
80
|
+
### Known follow-ups (require a live stack)
|
|
81
|
+
|
|
82
|
+
- **IGA bootstrap loop** (`bulk-authorize → commit`) is verified against the spec
|
|
83
|
+
but `REQUIRES_RUNTIME_VALIDATION` on a live iga-core instance. (GAP-065)
|
|
84
|
+
- **Skycloak-hosted Tide vendor surface** unconfirmed — provisioning is verified,
|
|
85
|
+
but whether a hosted cluster exposes `setUpTideRealm`/IGA/adapter-with-Tide-
|
|
86
|
+
extensions must be checked on a live cluster (`scripts/skycloak-smoke.sh`).
|
|
87
|
+
(GAP-066)
|
|
88
|
+
- Provisioning a **TideCloak** cluster via the Skycloak API needs the identity-
|
|
89
|
+
platform selector field confirmed with Skycloak; the documented API path
|
|
90
|
+
defaults to vanilla Keycloak.
|
|
91
|
+
|
|
92
|
+
### Upgrade notes
|
|
93
|
+
|
|
94
|
+
- If you script the TideCloak bootstrap, switch IGA approvals to the new
|
|
95
|
+
`/iga/change-requests/...` surface — see `canon/iga-change-requests-api.md`.
|
|
96
|
+
- No changes required to app-side SDK wiring.
|
package/LICENSE
ADDED
|
@@ -0,0 +1,334 @@
|
|
|
1
|
+
Tide Community Open Code License
|
|
2
|
+
|
|
3
|
+
Preamble:
|
|
4
|
+
The Tide Community Open Code License is a copyright License for
|
|
5
|
+
software and other kinds of works designed to encourage the adoption
|
|
6
|
+
of the Tide Protocol. The aim of the Tide Protocol is to be the technological
|
|
7
|
+
infrastructure of a true zero-trust paradigm, addressing the data-breach
|
|
8
|
+
protection needs of platform vendors and their customers, the
|
|
9
|
+
self-sovereign authority needs of online users, and replace the reliance
|
|
10
|
+
on blind trust with proofs.
|
|
11
|
+
|
|
12
|
+
To that end, the Tide Community Open Code License gives you the
|
|
13
|
+
freedom to modify and distribute copies of software and other works
|
|
14
|
+
for free, or for a fee, as long as you do so in accordance with these
|
|
15
|
+
terms and the software adopts the Tide Protocol in full.
|
|
16
|
+
|
|
17
|
+
License Terms
|
|
18
|
+
Version: 2
|
|
19
|
+
Date of last revision: 1 December 2022
|
|
20
|
+
|
|
21
|
+
1 Acceptance of these terms
|
|
22
|
+
(a) These terms are between the copyright holder (“we”, “us” and
|
|
23
|
+
“our”) identified in the notice embedded in or provided with
|
|
24
|
+
the source code, technical documentation or other material
|
|
25
|
+
relating to the Tide Foundation Limited’s (ACN 630 011 371)
|
|
26
|
+
(“Tide”) data decryption and key management platform
|
|
27
|
+
known as the “Tide Protocol” (“Tide Protocol”) and with which
|
|
28
|
+
these terms are packaged (“Materials”) and the person or
|
|
29
|
+
entity (“you” and “your”) accessing and/or using the Materials.
|
|
30
|
+
(b) By using, modifying or publishing the Materials or any Modified
|
|
31
|
+
Materials (as defined in clause 2(c) below), you agree to be
|
|
32
|
+
bound by these terms. If you are doing any of the foregoing in
|
|
33
|
+
the context of your employment with your employer or on behalf
|
|
34
|
+
of another entity, you are agreeing to be bound by these terms
|
|
35
|
+
on behalf of that employer or other entity and you represent
|
|
36
|
+
and warrant that you have the authority of that employer or
|
|
37
|
+
other entity to enter into these terms on their behalf. In such
|
|
38
|
+
circumstances, each reference in these terms “you” or “your”
|
|
39
|
+
includes that employer or other entity.
|
|
40
|
+
(c) These terms will remain in effect until terminated under
|
|
41
|
+
clause 9.
|
|
42
|
+
|
|
43
|
+
2 Intellectual property rights
|
|
44
|
+
(a) In these terms, “Intellectual Property Rights” means all
|
|
45
|
+
intellectual property rights of whatever nature throughout the
|
|
46
|
+
world, including all rights conferred under statute, common
|
|
47
|
+
law or equity, whether existing now or at any time in the
|
|
48
|
+
future, including all rights in and to any patents, patent
|
|
49
|
+
applications, business names, trade names, domain names, trade
|
|
50
|
+
marks, copyright, trade secrets, circuit layout rights,
|
|
51
|
+
designs, confidential information, know-how, technical
|
|
52
|
+
information, data or developments. All of our Intellectual
|
|
53
|
+
Property Rights are protected by the laws in force in
|
|
54
|
+
Australia from time to time.
|
|
55
|
+
(b) You acknowledge and agree that we (or our licensors) retain all
|
|
56
|
+
right, title, and interest (including all Intellectual Property
|
|
57
|
+
Rights) in and to the Materials, and nothing you do with or in
|
|
58
|
+
relation to the Materials will transfer any right, title or
|
|
59
|
+
interest (including Intellectual Property Rights) to you or
|
|
60
|
+
License or otherwise permit you to exercise any Intellectual
|
|
61
|
+
Property Rights except as expressly granted under these terms.
|
|
62
|
+
(c) In these terms, “Modified Materials” means any work based on
|
|
63
|
+
one or more of the Materials, including a revision,
|
|
64
|
+
modification, adaptation, subset, addition, enhancement,
|
|
65
|
+
improvement, combination, translation, abridgment,
|
|
66
|
+
condensation, expansion, collection, compilation or any other
|
|
67
|
+
form in which such Materials may be recast, transformed or
|
|
68
|
+
adapted or any other new material derived from the Materials.
|
|
69
|
+
|
|
70
|
+
3 Your License to the Materials
|
|
71
|
+
(a) Subject to paragraph (c) below and your compliance with these
|
|
72
|
+
terms, we grant you a limited, non-exclusive,
|
|
73
|
+
non-sub-licensable, revocable, worldwide, royalty free License
|
|
74
|
+
for the term of these terms to access, use, copy, modify,
|
|
75
|
+
adapt, distribute, publish and exploit the Materials, provided
|
|
76
|
+
that such License is exercised:
|
|
77
|
+
(i) solely in connection with the adoption and use of the
|
|
78
|
+
Tide Protocol;
|
|
79
|
+
(ii) solely in a manner which requires any payment or
|
|
80
|
+
exchange of value to be made via Tide Tokens (as
|
|
81
|
+
defined in paragraph (c) below); and
|
|
82
|
+
(iii) in accordance with clause 6 and on these terms in
|
|
83
|
+
respect of the right to distribute and publish the
|
|
84
|
+
Materials and Modified Materials.
|
|
85
|
+
The foregoing rights to distribute, publish and exploit the
|
|
86
|
+
Materials include the right to do so for a fee and applies
|
|
87
|
+
in respect of the Materials and the Modified Materials.
|
|
88
|
+
(b) Any access, use, copy, modification, adaptation, distribution,
|
|
89
|
+
publication or exploitation of any of the Materials for use
|
|
90
|
+
with applications that do not fully use, adopt and implement
|
|
91
|
+
the Tide Protocol is prohibited. This prohibition includes any
|
|
92
|
+
use or adaptation of the Materials for the purposes of any
|
|
93
|
+
protocol, system or platform competing with the Tide Protocol
|
|
94
|
+
or which facilitates any form of payment or exchange of value
|
|
95
|
+
other than through use of Tide Tokens (as defined in paragraph
|
|
96
|
+
(c) below).
|
|
97
|
+
(c) Without limiting paragraph (b), the License granted under
|
|
98
|
+
paragraph (a) does not permit you to, and in exercising the
|
|
99
|
+
rights granted to you under paragraph (a) you must not, under
|
|
100
|
+
any circumstances:
|
|
101
|
+
(i) remove, omit or in any way modify any component of the
|
|
102
|
+
Materials, including source code components, which
|
|
103
|
+
requires payment or exchange of value to be made via
|
|
104
|
+
Tide cryptographic tokens designed for settling
|
|
105
|
+
transactions entered into via the Tide Protocol (“Tide
|
|
106
|
+
Tokens”);
|
|
107
|
+
(ii) use the Materials which are source code or object code:
|
|
108
|
+
(A) in combination with any other code, script or
|
|
109
|
+
software (whether in source or object code form),
|
|
110
|
+
or otherwise in any manner, which would in any way
|
|
111
|
+
circumvent the requirement for any payment or
|
|
112
|
+
exchange of value to be made via Tide Tokens; or
|
|
113
|
+
(B) in any other way which does not properly use, adopt
|
|
114
|
+
and implement the Tide Protocol in its entirety,
|
|
115
|
+
including for the purposes of both data decryption
|
|
116
|
+
and key management;
|
|
117
|
+
(iii) violate any applicable laws or any rights of any person,
|
|
118
|
+
or use or permit or facilitate the use of the Materials
|
|
119
|
+
in any manner or for any purpose that is unlawful or is
|
|
120
|
+
in breach of any laws of jurisdiction anywhere in the
|
|
121
|
+
world;
|
|
122
|
+
(iv) distribute viruses, spyware, corrupted files, or any
|
|
123
|
+
other similar software or programs that may damage the
|
|
124
|
+
operation of any computer hardware or software, or the
|
|
125
|
+
Tide Protocol; or
|
|
126
|
+
(v) engage in any other conduct that is improper or brings
|
|
127
|
+
or is likely to bring us, the Materials, the Tide
|
|
128
|
+
Protocol or Tide Tokens into disrepute,
|
|
129
|
+
and you must ensure that where any third party is being engaged
|
|
130
|
+
to make modifications to the Materials on your behalf, their
|
|
131
|
+
rights to do so are subject to terms which incorporate the
|
|
132
|
+
restrictions in this clause 3.
|
|
133
|
+
(d) You must take your own precautions to ensure that the processes
|
|
134
|
+
which you employ for accessing and using the Materials do not
|
|
135
|
+
expose you to the risk of viruses, malicious computer code or
|
|
136
|
+
other forms of interference which may damage your computer
|
|
137
|
+
systems. We recommend that you install and use up-to-date
|
|
138
|
+
anti-virus, anti-spyware and firewall software on your computer
|
|
139
|
+
systems.
|
|
140
|
+
|
|
141
|
+
4 Data security and privacy
|
|
142
|
+
You are fully responsible for ensuring:
|
|
143
|
+
(a) any use, adoption or implementation of the Materials, any
|
|
144
|
+
Modified Materials and/or the Tide Protocol appropriately
|
|
145
|
+
protects, encrypts and stores data; and
|
|
146
|
+
(b) all aspects of compliance with privacy and data protection laws.
|
|
147
|
+
We disclaim all warranties and liability regarding the same.
|
|
148
|
+
|
|
149
|
+
5 Modification of Tide Protocol and Materials
|
|
150
|
+
You acknowledge that Tide may at any time without notice to you change
|
|
151
|
+
or update the whole or any part of the Tide Protocol and/or any of the
|
|
152
|
+
Materials, including in a manner which may result in applications or
|
|
153
|
+
processes you may have developed or implemented no longer being
|
|
154
|
+
compatible or otherwise working in the same manner with the Tide
|
|
155
|
+
Protocol or any Material, including any software development kit. We
|
|
156
|
+
may also withdraw or remove any part of the Materials or the Tide
|
|
157
|
+
Protocol at any stage without notice to you.
|
|
158
|
+
|
|
159
|
+
6 Distribution
|
|
160
|
+
(a) Without limiting clause 3, in exercising the rights granted to
|
|
161
|
+
you under clause 3(a) to distribute or publish one or more
|
|
162
|
+
copies of any Materials verbatim as you receive the Materials,
|
|
163
|
+
you may do so in any medium, provided that:
|
|
164
|
+
(i) you provide all recipients of the Materials with a copy of
|
|
165
|
+
these terms along with the Materials:
|
|
166
|
+
(ii) you keep intact and do not remove, omit, or in any way
|
|
167
|
+
modify any of the following:
|
|
168
|
+
(A) any notices stating that these License terms apply;
|
|
169
|
+
(B) any hyperlink to these License terms; and
|
|
170
|
+
(C) any notices of the absence of any warranty;
|
|
171
|
+
(b) You may charge any price or no price for each copy of the
|
|
172
|
+
Materials or Modified Materials that you distribute or publish,
|
|
173
|
+
and you may offer support or warranty protection for a fee.
|
|
174
|
+
(c) Without limiting clause 3, in exercising the rights granted to
|
|
175
|
+
you under clause 3(a) to distribute or publish one or more
|
|
176
|
+
copies of any Modified Materials you create or cause to be
|
|
177
|
+
created, you may do so in any medium, provided that:
|
|
178
|
+
(i) you provide all recipients of the Modified Materials with
|
|
179
|
+
a copy of these terms along with the Modified Materials;
|
|
180
|
+
(ii) you keep intact and do not remove, omit, or in any way
|
|
181
|
+
modify any of the following:
|
|
182
|
+
(A) any notices stating that these License terms apply to
|
|
183
|
+
the unmodified Materials;
|
|
184
|
+
(B) any hyperlink to these License terms; and
|
|
185
|
+
(C) any notices of the absence of any warranty in respect
|
|
186
|
+
of the unmodified Materials; and
|
|
187
|
+
(iii) the whole of any Modified Materials must be licensed under
|
|
188
|
+
these terms (although this does not limit the operation of
|
|
189
|
+
paragraph (d)), but you may impose further restrictions
|
|
190
|
+
that do not conflict with or override these terms.
|
|
191
|
+
(d) Where you compile any source code Materials or Modified
|
|
192
|
+
Materials in an aggregate with any proprietary program, the
|
|
193
|
+
Materials remain governed by these License terms. For the
|
|
194
|
+
purposes of the foregoing, a compilation of any Materials with
|
|
195
|
+
other separate and independent works, which are not by their
|
|
196
|
+
nature extensions of the Materials, and which are not combined
|
|
197
|
+
with the Materials such as to form a larger program, in or on
|
|
198
|
+
a volume of a storage or distribution medium, is an “aggregate”
|
|
199
|
+
if the compilation and its resulting copyright are not used to
|
|
200
|
+
limit the access or legal rights of the compilation's users
|
|
201
|
+
beyond what the individual Materials permit. Inclusion of any
|
|
202
|
+
Materials in an aggregate does not cause these terms to apply
|
|
203
|
+
to the other parts of the aggregate.
|
|
204
|
+
(e) You may not initiate any proceedings or claims in respect of
|
|
205
|
+
infringement of any patent rights in respect of the access,
|
|
206
|
+
use, copy, modification, adaptation, distribution, publication
|
|
207
|
+
or exploitation of any of the Materials or Modified Materials
|
|
208
|
+
in accordance with these terms.
|
|
209
|
+
|
|
210
|
+
7 Liability
|
|
211
|
+
(a) All express or implied guarantees, warranties, representations,
|
|
212
|
+
statements, terms or conditions relating to these terms or the
|
|
213
|
+
Materials that are not contained in these terms, are excluded
|
|
214
|
+
to the maximum extent permitted by law. Without limiting the
|
|
215
|
+
foregoing:
|
|
216
|
+
(i) the Materials are provided ‘as-is’ and neither we nor Tide
|
|
217
|
+
warrant or represent that they will work in any way, that
|
|
218
|
+
they are fit for any particular purpose, that your
|
|
219
|
+
requirements will be met, that your use of the Materials
|
|
220
|
+
will be uninterrupted or error free or that the Materials
|
|
221
|
+
are free of viruses or other harmful components; and
|
|
222
|
+
(ii) we and Tide are not responsible for any loss, corruption or
|
|
223
|
+
interception of data which occurs in connection with your
|
|
224
|
+
use or misuse of the Materials.
|
|
225
|
+
(b) Nothing in these terms excludes, restricts or modifies any
|
|
226
|
+
guarantee, term, condition, warranty, or any right or remedy,
|
|
227
|
+
implied or imposed by any law which cannot lawfully be excluded
|
|
228
|
+
or limited. (a “Non-Excludable Provision”). If any guarantee,
|
|
229
|
+
term, condition or warranty is implied into these terms under a
|
|
230
|
+
Non-Excludable Provision and we or Tide can limit your remedy
|
|
231
|
+
for a breach of the Non-Excludable Provision, then our and
|
|
232
|
+
Tide’s liability for breach of the Non-Excludable Provision is
|
|
233
|
+
limited to one or more of the following at our option:
|
|
234
|
+
(i) in the case of goods, the replacement of the goods or the
|
|
235
|
+
supply of equivalent goods, the repair of the goods, the
|
|
236
|
+
payment of the cost of replacing the goods or of acquiring
|
|
237
|
+
equivalent goods, or the payment of the cost of having the
|
|
238
|
+
goods repaired; or
|
|
239
|
+
(ii) in the case of services, the supplying of the services
|
|
240
|
+
again, or the payment of the cost of having the services
|
|
241
|
+
supplied again.
|
|
242
|
+
(c) To the maximum extent permitted by law but despite any other
|
|
243
|
+
clause in these terms, your use of the Materials is at your own
|
|
244
|
+
risk and neither we nor Tide are liable to you for any loss or
|
|
245
|
+
damage you (or any of your representatives or sub-licensees)
|
|
246
|
+
suffer, sustain or incur in connection with these terms,
|
|
247
|
+
exercise of any rights granted under these terms or otherwise
|
|
248
|
+
in connection with any access or use of the Materials, including
|
|
249
|
+
in respect of any loss, corruption or interception of data or
|
|
250
|
+
breach of privacy or security.
|
|
251
|
+
(d) Without limiting paragraph (c), to the maximum extent permitted
|
|
252
|
+
by law, neither we nor Tide are not liable to you for and no
|
|
253
|
+
measure of damages will under any circumstances include:
|
|
254
|
+
(i) special, indirect, consequential, incidental or punitive
|
|
255
|
+
damages; or
|
|
256
|
+
(ii) damages for loss of profits, revenue, goodwill,
|
|
257
|
+
opportunity, anticipated savings or loss or corruption of
|
|
258
|
+
data.
|
|
259
|
+
(e) The exclusions and limitations of liability in this clause 8
|
|
260
|
+
apply regardless of the basis on which such liability arises,
|
|
261
|
+
whether in contract, breach of warranty, tort (including
|
|
262
|
+
negligence), in equity, under statute, under an indemnity or
|
|
263
|
+
on any other basis.
|
|
264
|
+
(f) You will indemnify us and hold us, Tide and each of our
|
|
265
|
+
directors, officers, employees and contractors harmless from
|
|
266
|
+
and against any loss suffered or incurred by us or any of
|
|
267
|
+
those indemnified, arising out of or in connection with:
|
|
268
|
+
(i) your or any of your sub-licensee’s access or use of any of
|
|
269
|
+
the Materials or any other exercise of any of the rights
|
|
270
|
+
granted to you under these terms in connection with any of
|
|
271
|
+
the Materials;
|
|
272
|
+
(ii) your negligence or breach of these terms;
|
|
273
|
+
(iii) your violation of any applicable law or infringement of any
|
|
274
|
+
rights (including Intellectual Property Rights) of a third
|
|
275
|
+
party; or
|
|
276
|
+
(iv) any claim made by any third party arising out of or in
|
|
277
|
+
connection with any Modified Materials, including any
|
|
278
|
+
application developed using any of the Materials, and
|
|
279
|
+
including in respect of infringement of any person’s
|
|
280
|
+
Intellectual Property Rights.
|
|
281
|
+
8 Termination
|
|
282
|
+
(a) Your License to use the Materials under clause 3(a) immediately
|
|
283
|
+
and automatically terminates without the need for us to give
|
|
284
|
+
notice to you if you breach these terms.
|
|
285
|
+
(b) You may terminate these terms at any time by ceasing all use
|
|
286
|
+
and removing all implementations of the Materials and the Tide
|
|
287
|
+
Protocol.
|
|
288
|
+
(c) Upon termination of these terms, all rights and Licenses
|
|
289
|
+
granted to you under these terms will also terminate and you
|
|
290
|
+
must immediately cease using the Materials and remove all
|
|
291
|
+
implementations of the Materials.
|
|
292
|
+
9 General
|
|
293
|
+
(a) You remain fully responsible and liable for the acts and
|
|
294
|
+
omissions of any third party to whom you subcontract the
|
|
295
|
+
exercise or performance any of your rights or obligations under
|
|
296
|
+
these terms, as if such acts and omissions were your acts and
|
|
297
|
+
omissions.
|
|
298
|
+
(b) If any part of these terms is held to be unenforceable, the
|
|
299
|
+
unenforceable part is to be given effect to the greatest extent
|
|
300
|
+
possible and the remainder will remain in full force and effect.
|
|
301
|
+
(c) No waiver, delay or failure by us to take any action shall
|
|
302
|
+
constitute or be construed as a waiver of that or any other term,
|
|
303
|
+
condition, option, privilege or right we may have.
|
|
304
|
+
(d) The word “including” when used in these terms is not a term of
|
|
305
|
+
limitation.
|
|
306
|
+
|
|
307
|
+
====================
|
|
308
|
+
End of License terms
|
|
309
|
+
====================
|
|
310
|
+
|
|
311
|
+
If you develop a Modified Material and want to assert your copyright,
|
|
312
|
+
attach the following notices to the Modified Material. It is best to
|
|
313
|
+
attach them to the start of each source file to most effectively state
|
|
314
|
+
the exclusion of warranty and each file should have at least the
|
|
315
|
+
“copyright” line and a pointer to where the full notice is found.
|
|
316
|
+
|
|
317
|
+
<INSERT PROGRAM NAME and PURPOSE.>
|
|
318
|
+
|
|
319
|
+
Copyright (c) <year> <name of author>
|
|
320
|
+
|
|
321
|
+
This program is free software and is subject to the terms of the Tide
|
|
322
|
+
Community Open Code License as published by the Tide Foundation
|
|
323
|
+
Limited. You may modify it and redistribute it in accordance with
|
|
324
|
+
and subject to the terms of that License.
|
|
325
|
+
|
|
326
|
+
This program is distributed WITHOUT WARRANTY of any kind, including
|
|
327
|
+
without any implied warranty of MERCHANTABILITY or FITNESS FOR A
|
|
328
|
+
PARTICULAR PURPOSE. See the Tide Community Open Code License for
|
|
329
|
+
more details.
|
|
330
|
+
|
|
331
|
+
You should have received a copy of the Tide Community Open Code
|
|
332
|
+
License along with this program.
|
|
333
|
+
|
|
334
|
+
If not, see https://tide.org/licenses_tcoc2-0-0-en
|
package/PRIVACY.md
CHANGED
|
@@ -38,4 +38,4 @@ Material changes to this policy will be published in this file with an updated d
|
|
|
38
38
|
## Contact
|
|
39
39
|
|
|
40
40
|
Tide Foundation — <info@tide.org>
|
|
41
|
-
Source and issues: <https://github.com/tide-foundation/
|
|
41
|
+
Source and issues: <https://github.com/tide-foundation/raziel-mcp>
|
package/README.md
CHANGED
|
@@ -1,10 +1,10 @@
|
|
|
1
|
-
#
|
|
1
|
+
# Raziel
|
|
2
2
|
|
|
3
|
-
[](https://github.com/tide-foundation/raziel-mcp/actions/workflows/qa-gate.yml)
|
|
4
4
|
|
|
5
|
-
AI coding agents
|
|
5
|
+
**Raziel is the Tide MCP** — it gives AI coding agents the knowledge to implement [TideCloak](https://tidecloak.com) correctly.
|
|
6
6
|
|
|
7
|
-
This MCP server gives your AI assistant deep knowledge of Tide authentication, threshold cryptography, Forseti smart contracts
|
|
7
|
+
This MCP server gives your AI assistant deep knowledge of Tide authentication, threshold cryptography, end-to-end encryption, IGA governance, and Forseti smart contracts — plus a **security gap analysis** of your existing system and **self-host vs managed-hosting** guidance. Instead of guessing, your AI follows verified playbooks.
|
|
8
8
|
|
|
9
9
|
## Quick Start
|
|
10
10
|
|
|
@@ -115,11 +115,12 @@ Note: Codex CLI currently supports stdio-based MCP servers only — use the npx
|
|
|
115
115
|
|
|
116
116
|
Once connected, your AI assistant can:
|
|
117
117
|
|
|
118
|
+
- **Analyze your existing system** for security gaps and map each one to what Tide fixes (with an honest "what Tide does NOT fix" list)
|
|
118
119
|
- **Add Tide auth** to a new or existing Next.js/React app
|
|
119
120
|
- **Protect API routes** with server-side JWT + DPoP verification
|
|
120
121
|
- **Set up role-based access** with Tide's IGA governance
|
|
121
122
|
- **Deploy Forseti smart contracts** for policy-governed encryption and signing
|
|
122
|
-
- **Bootstrap TideCloak**
|
|
123
|
+
- **Bootstrap TideCloak** — self-hosted (Docker) or partner-hosted (Skycloak) — to a fully configured realm
|
|
123
124
|
- **Diagnose issues** like broken login, missing roles, CORS errors
|
|
124
125
|
- **Follow security invariants** that prevent common auth mistakes
|
|
125
126
|
|
|
@@ -127,6 +128,8 @@ Once connected, your AI assistant can:
|
|
|
127
128
|
|
|
128
129
|
After setup, try these prompts in your AI coding tool:
|
|
129
130
|
|
|
131
|
+
> Do a security analysis of my app and show what Tide would change
|
|
132
|
+
|
|
130
133
|
> Add Tide authentication to my Next.js app
|
|
131
134
|
|
|
132
135
|
> I have an existing app with auth — help me migrate to Tide
|
|
@@ -139,11 +142,11 @@ After setup, try these prompts in your AI coding tool:
|
|
|
139
142
|
|
|
140
143
|
| Category | Count | Examples |
|
|
141
144
|
|----------|-------|---------|
|
|
142
|
-
| Canon doctrine |
|
|
143
|
-
| Playbooks |
|
|
144
|
-
| Skills |
|
|
145
|
+
| Canon doctrine | 15 files | Security invariants, anti-patterns, security gap mapping, IGA change-request API, hosting options, framework matrix, troubleshooting |
|
|
146
|
+
| Playbooks | 18 step-by-step guides | Add auth, protect APIs, verify JWTs, deploy TideCloak, set up E2EE, provision hosted TideCloak |
|
|
147
|
+
| Skills | 11 composable roles | Setup, integration, security analysis, route/API protection, review, QA gate |
|
|
145
148
|
| Scenarios | 5 reference architectures | Password manager, signing service, encrypted chat, governance panel |
|
|
146
|
-
| Prompts |
|
|
149
|
+
| Prompts | 5 starter prompts | Security gap analysis, secure existing app, migrate auth, admin approval, customer portal |
|
|
147
150
|
|
|
148
151
|
## Remote Server (no install required)
|
|
149
152
|
|
|
@@ -162,7 +162,7 @@ const REFERENCE_APP_DIRS = listDirectories("reference-apps");
|
|
|
162
162
|
export function createServer() {
|
|
163
163
|
const server = new McpServer({
|
|
164
164
|
name: "@tideorg/mcp",
|
|
165
|
-
version: "1.9.
|
|
165
|
+
version: "1.9.2",
|
|
166
166
|
});
|
|
167
167
|
// 1. List available content
|
|
168
168
|
server.registerTool("tide_list", {
|
package/package.json
CHANGED
|
@@ -1,48 +1,49 @@
|
|
|
1
|
-
{
|
|
2
|
-
"name": "@tideorg/mcp",
|
|
3
|
-
"
|
|
4
|
-
"
|
|
5
|
-
"
|
|
6
|
-
"
|
|
7
|
-
|
|
8
|
-
|
|
9
|
-
|
|
10
|
-
|
|
11
|
-
"
|
|
12
|
-
"
|
|
13
|
-
|
|
14
|
-
|
|
15
|
-
|
|
16
|
-
"
|
|
17
|
-
"
|
|
18
|
-
"
|
|
19
|
-
"
|
|
20
|
-
"
|
|
21
|
-
"
|
|
22
|
-
"
|
|
23
|
-
"
|
|
24
|
-
"
|
|
25
|
-
|
|
26
|
-
|
|
27
|
-
|
|
28
|
-
"
|
|
29
|
-
|
|
30
|
-
|
|
31
|
-
|
|
32
|
-
"
|
|
33
|
-
"
|
|
34
|
-
"
|
|
35
|
-
"
|
|
36
|
-
"
|
|
37
|
-
"
|
|
38
|
-
"
|
|
39
|
-
|
|
40
|
-
|
|
41
|
-
"
|
|
42
|
-
|
|
43
|
-
"
|
|
44
|
-
|
|
45
|
-
|
|
46
|
-
|
|
47
|
-
|
|
48
|
-
}
|
|
1
|
+
{
|
|
2
|
+
"name": "@tideorg/mcp",
|
|
3
|
+
"mcpName": "io.github.tide-foundation/raziel",
|
|
4
|
+
"version": "1.9.2",
|
|
5
|
+
"description": "MCP server exposing Tide operational guidance — canon, playbooks, skills, prompts, adapters, and scenarios for AI coding agents",
|
|
6
|
+
"type": "module",
|
|
7
|
+
"bin": {
|
|
8
|
+
"tide-agent-pack": "mcp-server/dist/index.js"
|
|
9
|
+
},
|
|
10
|
+
"scripts": {
|
|
11
|
+
"build": "cd mcp-server && npm run build",
|
|
12
|
+
"test": "cd mcp-server && npm test",
|
|
13
|
+
"prepublishOnly": "npm run build"
|
|
14
|
+
},
|
|
15
|
+
"files": [
|
|
16
|
+
"mcp-server/dist/",
|
|
17
|
+
"canon/",
|
|
18
|
+
"playbooks/",
|
|
19
|
+
"skills/",
|
|
20
|
+
"prompts/",
|
|
21
|
+
"adapters/",
|
|
22
|
+
"reference-apps/",
|
|
23
|
+
"GAP_REGISTER.md",
|
|
24
|
+
"PRIVACY.md",
|
|
25
|
+
"CHANGELOG.md"
|
|
26
|
+
],
|
|
27
|
+
"dependencies": {
|
|
28
|
+
"@modelcontextprotocol/sdk": "^1.12.1",
|
|
29
|
+
"zod": "^3.24.0"
|
|
30
|
+
},
|
|
31
|
+
"keywords": [
|
|
32
|
+
"mcp",
|
|
33
|
+
"tidecloak",
|
|
34
|
+
"tide",
|
|
35
|
+
"auth",
|
|
36
|
+
"security",
|
|
37
|
+
"threshold-cryptography",
|
|
38
|
+
"ai-agent",
|
|
39
|
+
"coding-agent"
|
|
40
|
+
],
|
|
41
|
+
"license": "SEE LICENSE IN LICENSE",
|
|
42
|
+
"repository": {
|
|
43
|
+
"type": "git",
|
|
44
|
+
"url": "https://github.com/tide-foundation/raziel-mcp"
|
|
45
|
+
},
|
|
46
|
+
"engines": {
|
|
47
|
+
"node": ">=18"
|
|
48
|
+
}
|
|
49
|
+
}
|