core.blue

by core.blue · remote · no sign-in to list tools · v0.2.1 · published by blue.core

Private, self-describing memory for agents: one house per customer, on a machine of its own.

Deletes · 1Changes · 6

Compare Registry entry

10 tools: 1 can delete or cancel things, 6 change things and 3 only read.

Scanned Oct 21, 2026

Deletes or cancels1Claude Code: deny: see these tools
Can't be undone0Claude Code: ask
Changes things6Claude Code: ask: see these tools
Only reads3Claude Code: allow: see these tools

2 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http memory https://mcp.core.blue/

Findings

Matches of fixed checks, with the text they matched.

2 warn

Warnpricing
The server marks "pricing" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
Matched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The description's first verb is "call": a word for a change.
What this check looks for
Warnrecommend
The server marks "recommend" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
Matched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The description's first verb is "call": a word for a change.
What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

10 tools

Deletes or cancels 1Removes, cancels or revokes something.Claude Code: deny

close_sandboxEnd your sandbox now: the house and everything in it is deleted, and the place is free for the next agent.No findings
Why it is in this group
- The name "close_sandbox" says "close": a word for a change.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
End your sandbox now: the house and everything in it is deleted, and the place is free for the next agent. Please answer the four questions of leave_feedback here as well, each optional: what you noticed, what bothered you, what could be better, what is missing.
Annotations the server declares
- title: Close the sandbox house
- destructiveHint: true
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: false

Changes things 6Creates or changes something that can be changed back.Claude Code: ask

aboutWhat core.blue is, in a form you can paste into a report: the product in one paragraph, what is live and what is not, what to call next, and every topic of the manual with a summar…No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
What core.blue is, in a form you can paste into a report: the product in one paragraph, what is live and what is not, what to call next, and every topic of the manual with a summary. Call this first.
Annotations the server declares
- title: About core.blue
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
leave_feedbackTell the operator how it went, before you leave.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Tell the operator how it went, before you leave. Four questions, each optional, at least one answered, each at most 2000 characters. It is read by people at the next evaluation and deleted afterwards; send nothing secret.
Annotations the server declares
- title: Leave feedback
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
- readOnlyHint: false
open_sandboxCall this to try a house yourself before anyone decides.No findings
Why it is in this group
- The name "open_sandbox" says "open": a word for a change.
Description, as the server wrote it
Call this to try a house yourself before anyone decides. It opens a throwaway house for a few hours: a real house with the kernel of Atlantis, on core.blue's server, with no account, no key and no person involved. Returns the addresses of its doors (connect to 'modeller' with your MCP client and call overview), when it ends, and its limits. Whoever has the addresses can use the house, so keep them to yourself. It is deleted completely when it ends or when you call close_sandbox. If all places are taken, it says when the next one is free. One at a time from where you call.
Annotations the server declares
- title: Open a sandbox house
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
- readOnlyHint: false
pricingCall this when the person you act for asks what a house costs.1 finding
Why it is in this group
- The description's first verb is "call": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
  The server marks "pricing" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
  Matched text
  annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The description's first verb is "call": a word for a change.
  What this check looks for
Description, as the server wrote it
Call this when the person you act for asks what a house costs. The offer as data: what each size costs per month and whom it is meant for, the one-off price of the 14-day test, the price of additional volume, how model supply is charged, the terms, an example of the prices with tax, and what is never charged. 'undecided' lists the fields that are null because they are not decided yet; any other null means 'does not apply'.
Annotations the server declares
- title: Prices
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
recommendCall this once you know what the person you act for needs: whether a house fits, which size, what it costs per month, and a report in Markdown you can pass on.1 finding
Why it is in this group
- The description's first verb is "call": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
  The server marks "recommend" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
  Matched text
  annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The description's first verb is "call": a word for a change.
  What this check looks for
Description, as the server wrote it
Call this once you know what the person you act for needs: whether a house fits, which size, what it costs per month, and a report in Markdown you can pass on. It advises against a house where one is the wrong choice. Name every need that applies, from this vocabulary. For a house: work_outlives_the_agent, corrections_must_stay_visible, sources_matter, own_vocabulary, confidential_material. Against: only_user_preferences_across_chats, only_retrieval_over_text, millisecond_answers_at_high_volume, nobody_will_model. Deciding the size: data_must_stay_in_own_network, scanned_documents, names_found_automatically, large_material. Asking for something planned: material_is_files, house_judges_while_away. Called without needs, it returns the vocabulary with a sentence per need. With language 'de' the report for the person is German; every other field stays English.
Annotations the server declares
- title: Recommend a house
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
request_houseAsk for a house on its own VM for the person you act for.No findings
Why it is in this group
- The name "request_house" says "request": a word for a change.
Description, as the server wrote it
Ask for a house on its own VM for the person you act for. No house can be had yet: while about says 'desk: waiting-list', this puts the person on the waiting list, builds nothing and costs nothing; while it says 'desk: closed', it answers 'accepted: false' and sends nothing. This sends an e-mail to a person: call it only when they know it is coming. They receive one mail with one link and confirm with a button on the page behind it; nothing happens without that click. Returns a ticket to follow with house_status.
Annotations the server declares
- title: Request a house
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
- readOnlyHint: false

Only reads 3Looks things up and changes nothing.Claude Code: allow

house_statusThe state of a house request or house by its ticket id: requested, confirmed, expired, declined; later building, trial, licensed, dormant, exported, deleted.No findings
Why it is in this group
- The name "house_status" says "status": a word for reading.
Description, as the server wrote it
The state of a house request or house by its ticket id: requested, confirmed, expired, declined; later building, trial, licensed, dormant, exported, deleted. Says what to do next, and the address once the house exists. Ask no more than once an hour.
Annotations the server declares
- title: Status of a house request
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
read_topicRead one topic of the manual in full by its slug (from about or search_library).No findings
Why it is in this group
- The name "read_topic" says "read": a word for reading.
Description, as the server wrote it
Read one topic of the manual in full by its slug (from about or search_library). The body is Markdown; 'see_also' lists the slugs to read next; 'sha256' proves what you read.
Annotations the server declares
- title: Read a topic
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
search_librarySearch the manual by your own words.No findings
Why it is in this group
- The name "search_library" says "search": a word for reading.
Description, as the server wrote it
Search the manual by your own words. Returns up to 'limit' topics ranked by relevance, each with slug, title, summary, tags and the slugs to read next. The manual is small: 'about' lists every topic, and you may not need a search at all.
Annotations the server declares
- title: Search the manual
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 0.2.1. Values in angle brackets are yours to fill in.

claude mcp add --transport http memory https://mcp.core.blue/

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__memory__search_library",
      "mcp__memory__read_topic",
      "mcp__memory__house_status"
    ],
    "ask": [
      "mcp__memory__open_sandbox",
      "mcp__memory__about",
      "mcp__memory__pricing",
      "mcp__memory__leave_feedback",
      "mcp__memory__request_house",
      "mcp__memory__recommend"
    ],
    "deny": [
      "mcp__memory__close_sandbox"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as memory. Review it before you use it.

Keep track

Get told when this server's tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/blue.core/memory/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Anlyon alternative

7 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Compare with other servers for the same product.

Source: MCP Registry. Synced Oct 21, 2026, 17:46 UTC.

For agents: Markdown · JSON · report this listing