Skip to content

Daystruct

by api.daystruct.ai · remote · no sign-in to list tools · v1.2.0 · published by ai.daystruct.api

Find source-package workflows, inspect live prices and evidence, and connect with a scoped key.

Changes · 9

25 tools: 9 change things and 16 only read.

Scanned Oct 21, 2026

1 check matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http daystruct https://api.daystruct.ai/mcp

Findings

Matches of fixed checks, with the text they matched.

1 warn
  • The server marks "select_model" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "select_model" says "select": a word for a change.

    What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

25 tools

Changes things 9Claude Code: ask
  • answer_software_questionsDeprecated: this evidence tool is no longer refreshed and will be removed on or after 2026-12-31.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Deprecated: this evidence tool is no longer refreshed and will be removed on or after 2026-12-31. For building, use discover_daystruct_capabilities and compat_check. Resolve up to four package/API questions and an optional runtime compatibility check.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • check_release_supportDeprecated: this evidence tool is no longer refreshed and will be removed on or after 2026-12-31.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Deprecated: this evidence tool is no longer refreshed and will be removed on or after 2026-12-31. For building, use discover_daystruct_capabilities and compat_check. Given a product and version, return whether that release line is supported, in security-fix-only maintenance, or past end of life, with the dates behind the answer and the cycles you could upgrade into. A line with no published end-of-life returns undetermined rather than supported.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • check_security_exposureDeprecated: this evidence tool is no longer refreshed and will be removed on or after 2026-12-31.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Deprecated: this evidence tool is no longer refreshed and will be removed on or after 2026-12-31. For building, use discover_daystruct_capabilities and compat_check. Given a package and the version you are running, return the known vulnerabilities that affect it, worst first, each with the version that fixes it. Advisories whose affected range could not be parsed are returned under undetermined; treat undetermined as unanswered, never as safe.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • close_task_sessionClose a task with its reported outcome and compact summary.No findings

    Why it is in this group

    • The name "close_task_session" says "close": a word for a change.
    Description, as the server wrote it
    Close a task with its reported outcome and compact summary.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • create_task_sessionStart compact task context with optional capability steps and dependencies.No findings

    Why it is in this group

    • The name "create_task_session" says "create": a word for a change.
    Description, as the server wrote it
    Start compact task context with optional capability steps and dependencies. Requires read and requests:write. No conversation or reasoning trace is stored.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • prepare_daystruct_capabilitiesGroup up to six discovered capability IDs into a plan with each profile and delivery instructions.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Group up to six discovered capability IDs into a plan with each profile and delivery instructions. Missing entries remain explicit. Does not acquire, execute, check combined compatibility or charge credits. Your agent can combine these pieces with Daystruct knowledge and verify the resulting task.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • record_task_eventReport viewed, called, succeeded, failed or skipped capability status, or task stage.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Report viewed, called, succeeded, failed or skipped capability status, or task stage. Usage and outcomes remain client-reported.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • resolve_task_capabilitiesSelect relevant capabilities progressively, or request full delivery.No findings

    Why it is in this group

    • The name "resolve_task_capabilities" says "resolve": a word for reading.
    • The description's first verb is "select": a word for a change.
    Description, as the server wrote it
    Select relevant capabilities progressively, or request full delivery. Charges the published resolve price (/api/v1/pricing) to a key with read + requests:write; data.economics reports chargedCredits and creditsRemaining. Optional maxPriceCredits caps this call. Optional task session remembers prior delivery and reported results; selection never executes or acquires a capability.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • select_modelDeprecated: this evidence tool is no longer refreshed and will be removed on or after 2026-12-31.1 finding

    Why it is in this group

    • The name "select_model" says "select": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "select_model" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "select_model" says "select": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Deprecated: this evidence tool is no longer refreshed and will be removed on or after 2026-12-31. For building, use discover_daystruct_capabilities and compat_check. Given a need -- minimum context window, required capabilities, a price ceiling -- return the models that satisfy it, cheapest input price first, with the corroboration behind each record so you can judge how well-sourced it is. Prices are per million tokens. A model with no published price is returned under undetermined rather than excluded, so an unpriced model never reads as a disqualified one. This returns candidates and their evidence, not a recommendation.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
Only reads 16Claude Code: allow
  • compat_checkResolve Daystruct capabilities to exact versions that fit each other, or get the exact constraint that broke with suggested alternatives.No findings

    Why it is in this group

    • The description's first verb is "resolve": a word for reading.
    Description, as the server wrote it
    Resolve Daystruct capabilities to exact versions that fit each other, or get the exact constraint that broke with suggested alternatives. Send the project manifest by default: project.runtime (the node or python version the project runs), project.platform, and the project's package-lock.json (or an installed name->version map) plus the dependency sections of package.json. That makes the answer project-checked rather than bundle-only. Never send source code or other files; only those fields are read and nothing is stored. The result's scope says what it covers (bundle-only, project-checked, project-verified). Its state is compatible, except when you pass bundle (for example security-scanners@latest-verified) instead of capabilities: then it is verified, because that exact set passed its integration suite, and the result names the run and the environment it ran in. Affected versions are refused and listed under advisoriesAvoided; a deprecated version is chosen only when nothing else fits and is named in notes. To reach project-verified, fetch the verify kit for the resolved members, show the user the report the script prints, send it only with the user's agreement (--send), and pass the returned report id as verifyReportId.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • daystruct_statusRead the public Daystruct manifest: how capabilities are discovered, checked for compatibility and delivered.No findings

    Why it is in this group

    • The name "daystruct_status" says "status": a word for reading.
    Description, as the server wrote it
    Read the public Daystruct manifest: how capabilities are discovered, checked for compatibility and delivered.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • discover_daystruct_capabilitiesBrowse every public Daystruct capability without an account, or search using a task sentence or tool name.No findings

    Why it is in this group

    • The description's first verb is "browse": a word for reading.
    Description, as the server wrote it
    Browse every public Daystruct capability without an account, or search using a task sentence or tool name. Lists default to eight compact descriptors. Set limit (1-100) and offset to follow meta.nextOffset until null; view: full returns up to 100 full metadata records per page. Category and delivery filters narrow the list. Responses carry live freshness, requirements, limitations, prices and profile links; inspect a reference for its full contract before using it. Provider availability is not proof a task will succeed. Licensing filters exclude entries with no licensing evidence; read a profile for its full receipt. Licensing findings are evidence against a configured policy, not legal advice.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_compat_verify_kitReturn the files of the local verify step for exact source members from compat_check: a script, its plan, and the interface conformance suites.No findings

    Why it is in this group

    • The name "get_compat_verify_kit" says "get": a word for reading.
    Description, as the server wrote it
    Return the files of the local verify step for exact source members from compat_check: a script, its plan, and the interface conformance suites. Write them to a scratch directory and run `node daystruct-verify.mjs` from the user's project; it runs the members' own tests and conformance suites and prints a report of counts and versions only. It sends nothing unless run with --send, which needs the user's agreement. Native members cannot be verified locally.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_context_contractDeprecated: this evidence tool is no longer refreshed and will be removed on or after 2026-12-31.No findings

    Why it is in this group

    • The name "get_context_contract" says "get": a word for reading.
    Description, as the server wrote it
    Deprecated: this evidence tool is no longer refreshed and will be removed on or after 2026-12-31. For building, use discover_daystruct_capabilities and compat_check. Read a databank's identity, temporal, dimension, and context-packet contract.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_daystruct_accountRead the connected key's account: available and reserved credits, the key's scopes, its per-call spending limit (null means none) and where the owner adds credits.No findings

    Why it is in this group

    • The name "get_daystruct_account" says "get": a word for reading.
    Description, as the server wrote it
    Read the connected key's account: available and reserved credits, the key's scopes, its per-call spending limit (null means none) and where the owner adds credits. Check this before a paid call, show the user the price first, and tell them what was spent afterwards. Read-only; never returns the key.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_daystruct_validated_guidanceRetrieve reviewed Frontier guidance scoped to an exact databank, task family and tested model.No findings

    Why it is in this group

    • The name "get_daystruct_validated_guidance" says "get": a word for reading.
    Description, as the server wrote it
    Retrieve reviewed Frontier guidance scoped to an exact databank, task family and tested model. Returns only live, unexpired promotions and their evidence limits; never private test fixtures.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_entity_evidenceDeprecated: this evidence tool is no longer refreshed and will be removed on or after 2026-12-31.No findings

    Why it is in this group

    • The name "get_entity_evidence" says "get": a word for reading.
    Description, as the server wrote it
    Deprecated: this evidence tool is no longer refreshed and will be removed on or after 2026-12-31. For building, use discover_daystruct_capabilities and compat_check. Read canonical facts, aliases, history, and provenance for an entity.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_task_sessionRead compact task context or preview the next ready capabilities without consuming them or extending the session TTL.No findings

    Why it is in this group

    • The name "get_task_session" says "get": a word for reading.
    Description, as the server wrote it
    Read compact task context or preview the next ready capabilities without consuming them or extending the session TTL.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • list_daystruct_guidance_scopesFind task families and exact tested models with live Frontier guidance for a databank, before requesting that guidance.No findings

    Why it is in this group

    • The name "list_daystruct_guidance_scopes" says "list": a word for reading.
    Description, as the server wrote it
    Find task families and exact tested models with live Frontier guidance for a databank, before requesting that guidance.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • lookup_vulnerabilityDeprecated: this evidence tool is no longer refreshed and will be removed on or after 2026-12-31.No findings

    Why it is in this group

    • The name "lookup_vulnerability" says "lookup": a word for reading.
    Description, as the server wrote it
    Deprecated: this evidence tool is no longer refreshed and will be removed on or after 2026-12-31. For building, use discover_daystruct_capabilities and compat_check. Given a vulnerability identifier such as a CVE, return what is held about it: the affected package and version range, the version that fixes it, severity, and whether it is recorded as known-exploited. Use this when you have an identifier rather than a package you are running. Fields come back as claims carrying their own authority. status 'known' with authority 'exclusive' means Daystruct has evidence for the value; if you hold a different value, treat it as a conflict to resolve. status 'unknown' with authority 'non_exclusive' means Daystruct has no evidence either way -- an absence of evidence, which does not contradict or supersede anything you already know: keep what you independently know, and stay uncertain if you do not. A field returned as null means Daystruct looked and holds nothing for it; no other Daystruct tool will have it either. Exploitation status is never reported false from a partial catalog.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • plan_project_developmentGet a small stage-specific capability selection and concrete next actions from a caller-approved project projection.No findings

    Why it is in this group

    • The description's first verb is "get": a word for reading.
    Description, as the server wrote it
    Get a small stage-specific capability selection and concrete next actions from a caller-approved project projection. Keep source and full snapshots local. Caller-reported outcomes are not verified execution. Does not acquire, execute, store project context or send reminders.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • read_recent_evidence_changesDeprecated: this evidence tool is no longer refreshed and will be removed on or after 2026-12-31.No findings

    Why it is in this group

    • The name "read_recent_evidence_changes" says "read": a word for reading.
    Description, as the server wrote it
    Deprecated: this evidence tool is no longer refreshed and will be removed on or after 2026-12-31. For building, use discover_daystruct_capabilities and compat_check. Read the bounded canonical change feed.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • resolve_daystruct_bundleRead a saved, owned or public bundle with pinned source versions and current member availability.No findings

    Why it is in this group

    • The name "resolve_daystruct_bundle" says "resolve": a word for reading.
    Description, as the server wrote it
    Read a saved, owned or public bundle with pinned source versions and current member availability. Returns a composition plan, not an execution or purchase. Each capability retains its usage terms.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • search_daystruct_librarySearch this account's saved or owned capabilities and bundles.No findings

    Why it is in this group

    • The name "search_daystruct_library" says "search": a word for reading.
    Description, as the server wrote it
    Search this account's saved or owned capabilities and bundles. Returns a small shortlist; saving does not acquire, execute or grant access to source. Inspect a selected profile before use.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • search_entitiesDeprecated: this evidence tool is no longer refreshed and will be removed on or after 2026-12-31.No findings

    Why it is in this group

    • The name "search_entities" says "search": a word for reading.
    Description, as the server wrote it
    Deprecated: this evidence tool is no longer refreshed and will be removed on or after 2026-12-31. For building, use discover_daystruct_capabilities and compat_check. Search normalized entities by databank, type, provider, or capability.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.2.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http daystruct https://api.daystruct.ai/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__daystruct__daystruct_status",
      "mcp__daystruct__search_entities",
      "mcp__daystruct__get_entity_evidence",
      "mcp__daystruct__get_context_contract",
      "mcp__daystruct__lookup_vulnerability",
      "mcp__daystruct__read_recent_evidence_changes",
      "mcp__daystruct__compat_check",
      "mcp__daystruct__get_compat_verify_kit",
      "mcp__daystruct__get_daystruct_validated_guidance",
      "mcp__daystruct__list_daystruct_guidance_scopes",
      "mcp__daystruct__plan_project_development",
      "mcp__daystruct__get_daystruct_account",
      "mcp__daystruct__get_task_session",
      "mcp__daystruct__search_daystruct_library",
      "mcp__daystruct__resolve_daystruct_bundle",
      "mcp__daystruct__discover_daystruct_capabilities"
    ],
    "ask": [
      "mcp__daystruct__answer_software_questions",
      "mcp__daystruct__check_security_exposure",
      "mcp__daystruct__check_release_support",
      "mcp__daystruct__select_model",
      "mcp__daystruct__resolve_task_capabilities",
      "mcp__daystruct__create_task_session",
      "mcp__daystruct__record_task_event",
      "mcp__daystruct__close_task_session",
      "mcp__daystruct__prepare_daystruct_capabilities"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as daystruct. Review it before you use it.