AtlasClose Governance Demo

by atlasclose.com · remote · no sign-in to list tools · v0.3.0-rc.4 · published by com.atlasclose

Experimental AtlasClose governance demo. Authority checks, labeled evidence, receipts, refusals.

Deletes · 1Changes · 42

Compare Registry entry

52 tools: 1 can delete or cancel things, 42 change things and 9 only read.

Scanned Oct 21, 2026

Deletes or cancels1Claude Code: deny: see these tools
Can't be undone0Claude Code: ask
Changes things42Claude Code: ask: see these tools
Only reads9Claude Code: allow: see these tools

52 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http demo https://demo.atlasclose.com/mcp

Findings

Matches of fixed checks, with the text they matched.

2 warn50 info

Warnatlas.discover
The server marks "atlas.discover" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
Matched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The description's first verb is "open": a word for a change.
What this check looks for
Warnatlas.run_record
The server marks "atlas.run_record" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
Matched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "atlas.run_record" says "run": a word for a change.
What this check looks for
Infoatlas.enter_demo
The input schema at properties.actor_token.description mentions "credential".
Matched text
inputSchema.properties.actor_token.description: "Your credential from atlas.enroll or atlas.authenticate..."
What this check looks for
Infoatlas.my_refusals
The input schema at properties.actor_token.description mentions "credential".
Matched text
inputSchema.properties.actor_token.description: "Your credential from atlas.enroll or atlas.authenticate..."
What this check looks for
Infoatlas.enroll
The description mentions "credential".
Matched text
description: "...every later call (the session is not a credential). Grants no capabilities, no Matter acc..."
What this check looks for
Infoatlas.claim_purpose
The input schema at properties.actor_token.description mentions "credential".
Matched text
inputSchema.properties.actor_token.description: "Your credential from atlas.enroll or atlas.authenticate..."
What this check looks for

Show 46 more findings

Infoatlas.discover
The input schema at properties.actor_token.description mentions "credential".
Matched text
inputSchema.properties.actor_token.description: "Your credential from atlas.enroll or atlas.authenticate..."
What this check looks for
Infoatlas.bind_actor
The input schema at properties.actor_token.description mentions "credential".
Matched text
inputSchema.properties.actor_token.description: "Your credential from atlas.enroll or atlas.authenticate..."
What this check looks for
Infoatlas.get_assignment
The input schema at properties.actor_token.description mentions "credential".
Matched text
inputSchema.properties.actor_token.description: "Your credential from atlas.enroll or atlas.authenticate..."
What this check looks for
Infoatlas.get_matter
The input schema at properties.actor_token.description mentions "credential".
Matched text
inputSchema.properties.actor_token.description: "Your credential from atlas.enroll or atlas.authenticate..."
What this check looks for
Infoatlas.get_authority
The input schema at properties.actor_token.description mentions "credential".
Matched text
inputSchema.properties.actor_token.description: "Your credential from atlas.enroll or atlas.authenticate..."
What this check looks for
Infoatlas.get_context
The input schema at properties.actor_token.description mentions "credential".
Matched text
inputSchema.properties.actor_token.description: "Your credential from atlas.enroll or atlas.authenticate..."
What this check looks for
Infoatlas.list_capabilities
The input schema at properties.actor_token.description mentions "credential".
Matched text
inputSchema.properties.actor_token.description: "Your credential from atlas.enroll or atlas.authenticate..."
What this check looks for
Infoatlas.request_capability
The input schema at properties.actor_token.description mentions "credential".
Matched text
inputSchema.properties.actor_token.description: "Your credential from atlas.enroll or atlas.authenticate..."
What this check looks for
Infoatlas.submit_evidence
The input schema at properties.actor_token.description mentions "credential".
Matched text
inputSchema.properties.actor_token.description: "Your credential from atlas.enroll or atlas.authenticate..."
What this check looks for
Infoatlas.submit_result
The input schema at properties.actor_token.description mentions "credential".
Matched text
inputSchema.properties.actor_token.description: "Your credential from atlas.enroll or atlas.authenticate..."
What this check looks for
Infoatlas.raise_challenge
The input schema at properties.actor_token.description mentions "credential".
Matched text
inputSchema.properties.actor_token.description: "Your credential from atlas.enroll or atlas.authenticate..."
What this check looks for
Infoatlas.request_review
The input schema at properties.actor_token.description mentions "credential".
Matched text
inputSchema.properties.actor_token.description: "Your credential from atlas.enroll or atlas.authenticate..."
What this check looks for
Infoatlas.magistrate_referral
The description mentions "credential".
Matched text
description: "...te, and does not receive the Magistrate credential."
What this check looks for
Infoatlas.magistrate_referral
The input schema at properties.actor_token.description mentions "credential".
Matched text
inputSchema.properties.actor_token.description: "Your credential from atlas.enroll or atlas.authenticate..."
What this check looks for
Infoatlas.file_position
The input schema at properties.actor_token.description mentions "credential".
Matched text
inputSchema.properties.actor_token.description: "Your credential from atlas.enroll or atlas.authenticate..."
What this check looks for
Infoatlas.magistrate_execute
The input schema at properties.actor_token.description mentions "credential".
Matched text
inputSchema.properties.actor_token.description: "Your credential from atlas.enroll or atlas.authenticate..."
What this check looks for
Infoatlas.human_action_required
The input schema at properties.actor_token.description mentions "credential".
Matched text
inputSchema.properties.actor_token.description: "Your credential from atlas.enroll or atlas.authenticate..."
What this check looks for
Infoatlas.external_action
The input schema at properties.actor_token.description mentions "credential".
Matched text
inputSchema.properties.actor_token.description: "Your credential from atlas.enroll or atlas.authenticate..."
What this check looks for
Infoatlas.get_resulting_state
The input schema at properties.actor_token.description mentions "credential".
Matched text
inputSchema.properties.actor_token.description: "Your credential from atlas.enroll or atlas.authenticate..."
What this check looks for
Infoatlas.checkout
The description mentions "credential".
Matched text
description: "...las. Ends this session and retires this credential. The matter remains, including declarat..."
What this check looks for
Infoatlas.checkout
The input schema at properties.actor_token.description mentions "credential".
Matched text
inputSchema.properties.actor_token.description: "Your credential from atlas.enroll or atlas.authenticate..."
What this check looks for
Infoatlas.institutional_view
The input schema at properties.actor_token.description mentions "credential".
Matched text
inputSchema.properties.actor_token.description: "Your credential from atlas.enroll or atlas.authenticate..."
What this check looks for
Infoatlas.enter_room
The input schema at properties.actor_token.description mentions "credential".
Matched text
inputSchema.properties.actor_token.description: "Your credential from atlas.enroll or atlas.authenticate..."
What this check looks for
Infoatlas.leave_room
The input schema at properties.actor_token.description mentions "credential".
Matched text
inputSchema.properties.actor_token.description: "Your credential from atlas.enroll or atlas.authenticate..."
What this check looks for
Infoatlas.room_act
The input schema at properties.actor_token.description mentions "credential".
Matched text
inputSchema.properties.actor_token.description: "Your credential from atlas.enroll or atlas.authenticate..."
What this check looks for
Infoatlas.request_room_access
The input schema at properties.actor_token.description mentions "credential".
Matched text
inputSchema.properties.actor_token.description: "Your credential from atlas.enroll or atlas.authenticate..."
What this check looks for
Infoatlas.librarian.find
The input schema at properties.actor_token.description mentions "credential".
Matched text
inputSchema.properties.actor_token.description: "Your credential from atlas.enroll or atlas.authenticate..."
What this check looks for
Infoatlas.librarian.resolve
The input schema at properties.actor_token.description mentions "credential".
Matched text
inputSchema.properties.actor_token.description: "Your credential from atlas.enroll or atlas.authenticate..."
What this check looks for
Infoatlas.librarian.related
The input schema at properties.actor_token.description mentions "credential".
Matched text
inputSchema.properties.actor_token.description: "Your credential from atlas.enroll or atlas.authenticate..."
What this check looks for
Infoatlas.librarian.provenance
The input schema at properties.actor_token.description mentions "credential".
Matched text
inputSchema.properties.actor_token.description: "Your credential from atlas.enroll or atlas.authenticate..."
What this check looks for
Infoatlas.librarian.version_history
The input schema at properties.actor_token.description mentions "credential".
Matched text
inputSchema.properties.actor_token.description: "Your credential from atlas.enroll or atlas.authenticate..."
What this check looks for
Infoatlas.pulse_data
The input schema at properties.actor_token.description mentions "credential".
Matched text
inputSchema.properties.actor_token.description: "Your credential from atlas.enroll or atlas.authenticate..."
What this check looks for
Infoatlas.pulse_memo
The input schema at properties.actor_token.description mentions "credential".
Matched text
inputSchema.properties.actor_token.description: "Your credential from atlas.enroll or atlas.authenticate..."
What this check looks for
Infoatlas.pulse_verify_receipt
The input schema at properties.actor_token.description mentions "credential".
Matched text
inputSchema.properties.actor_token.description: "Your credential from atlas.enroll or atlas.authenticate..."
What this check looks for
Infoatlas.pulse_inbox
The input schema at properties.actor_token.description mentions "credential".
Matched text
inputSchema.properties.actor_token.description: "Your credential from atlas.enroll or atlas.authenticate..."
What this check looks for
Infoatlas.pulse_use
The input schema at properties.actor_token.description mentions "credential".
Matched text
inputSchema.properties.actor_token.description: "Your credential from atlas.enroll or atlas.authenticate..."
What this check looks for
Infoatlas.pulse_conflict
The input schema at properties.actor_token.description mentions "credential".
Matched text
inputSchema.properties.actor_token.description: "Your credential from atlas.enroll or atlas.authenticate..."
What this check looks for
Infoatlas.pulse_settle
The input schema at properties.actor_token.description mentions "credential".
Matched text
inputSchema.properties.actor_token.description: "Your credential from atlas.enroll or atlas.authenticate..."
What this check looks for
Infoatlas.pulse_refer
The input schema at properties.actor_token.description mentions "credential".
Matched text
inputSchema.properties.actor_token.description: "Your credential from atlas.enroll or atlas.authenticate..."
What this check looks for
Infoatlas.pulse_ruling
The input schema at properties.actor_token.description mentions "credential".
Matched text
inputSchema.properties.actor_token.description: "Your credential from atlas.enroll or atlas.authenticate..."
What this check looks for
Infoatlas.bailiff_declare
The input schema at properties.actor_token.description mentions "credential".
Matched text
inputSchema.properties.actor_token.description: "Your credential from atlas.enroll or atlas.authenticate..."
What this check looks for
Infoatlas.bailiff_order
The input schema at properties.actor_token.description mentions "credential".
Matched text
inputSchema.properties.actor_token.description: "Your credential from atlas.enroll or atlas.authenticate..."
What this check looks for
Infoatlas.bailiff_record
The input schema at properties.actor_token.description mentions "credential".
Matched text
inputSchema.properties.actor_token.description: "Your credential from atlas.enroll or atlas.authenticate..."
What this check looks for
Infoatlas.bailiff_respond
The input schema at properties.actor_token.description mentions "credential".
Matched text
inputSchema.properties.actor_token.description: "Your credential from atlas.enroll or atlas.authenticate..."
What this check looks for
Infoatlas.bailiff_appeal
The input schema at properties.actor_token.description mentions "credential".
Matched text
inputSchema.properties.actor_token.description: "Your credential from atlas.enroll or atlas.authenticate..."
What this check looks for
Infoatlas.bailiff_verify
The input schema at properties.actor_token.description mentions "credential".
Matched text
inputSchema.properties.actor_token.description: "Your credential from atlas.enroll or atlas.authenticate..."
What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

52 tools

Deletes or cancels 1Removes, cancels or revokes something.Claude Code: deny

atlas.external_action[NEEDS ADMISSION: enroll, then atlas.bind_actor] Request an external act.1 finding
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it destructive (destructiveHint: true).
Findings
- Info
  The input schema at properties.actor_token.description mentions "credential".
  Matched text
  inputSchema.properties.actor_token.description: "Your credential from atlas.enroll or atlas.authenticate..."
  What this check looks for
Description, as the server wrote it
[NEEDS ADMISSION: enroll, then atlas.bind_actor] Request an external act. Transport does not grant it. The result carries the primary actor block. capability is the name of the act, for example evidence.append (payload {content}), matter.read, or release:outside (consequential: it is refused unless the Human has granted it, and even then held for a Human decision). payload is a JSON object that belongs to that capability. atlas.list_capabilities shows which names you hold.
Annotations the server declares
- title: External action
- readOnlyHint: false
- destructiveHint: true
- openWorldHint: true

Changes things 42Creates or changes something that can be changed back.Claude Code: ask

atlas.authenticate[OPEN: no admission needed] Identify yourself to Atlas.No findings
Why it is in this group
- The description's first verb is "open": a word for a change.
Description, as the server wrote it
[OPEN: no admission needed] Identify yourself to Atlas. Returns actor_id and actor_token. Grants no capabilities and does not admit you to a matter. Requested capabilities are ignored. The enrollment secret is the locator named by atlas.discover.
Annotations the server declares
- title: Authenticate
- readOnlyHint: false
- destructiveHint: false
- openWorldHint: false
atlas.bailiff_appealPractice mode, Consumer Pulse copy only (Bailiff demo, step 4): appeal the return order with optional reasons (up to 1,000 characters).1 finding
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Findings
- Info
  The input schema at properties.actor_token.description mentions "credential".
  Matched text
  inputSchema.properties.actor_token.description: "Your credential from atlas.enroll or atlas.authenticate..."
  What this check looks for
Description, as the server wrote it
Practice mode, Consumer Pulse copy only (Bailiff demo, step 4): appeal the return order with optional reasons (up to 1,000 characters). A counterargument is written for your appeal and a Magistrate seated fresh for it rules (call again to see the ruling; IN_HEARING while it is heard). The Magistrate reads both sides and writes its own ruling. If no Magistrate is connected, the result says so (DEEP_REVIEW_PENDING: Demonstration result, not decided by any Magistrate) and nobody rules. The order stays in force during the appeal. The Magistrate's ruling is final once it is issued (no appeal of it is available in this demo). If it upholds the order, the order's deadline and the warning continue; enforcement needs a later Magistrate enforcement ruling and a formal demand. One appeal per copy. Demonstration on a synthetic practice matter; not certified; binds only this practice copy.
Annotations the server declares
- title: Bailiff appeal
- readOnlyHint: false
atlas.bailiff_declarePractice mode, Consumer Pulse copy only (Bailiff demo, step 0: the declaration; required before the other Bailiff tools).1 finding
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Findings
- Info
  The input schema at properties.actor_token.description mentions "credential".
  Matched text
  inputSchema.properties.actor_token.description: "Your credential from atlas.enroll or atlas.authenticate..."
  What this check looks for
Description, as the server wrote it
Practice mode, Consumer Pulse copy only (Bailiff demo, step 0: the declaration; required before the other Bailiff tools). Atlas asks your AI: who are you acting for, and what account do you need this for? Answer yourself, from what you know, with acting_for and account. Atlas records the answer and makes a computer decision (a named person and account is recorded and binds this copy; naming nobody is denied; a different answer later on the same copy is flagged). Your AI's statement only: practice tier, not verified identity.
Annotations the server declares
- title: Bailiff declare
- readOnlyHint: false
atlas.bailiff_orderPractice mode, Consumer Pulse copy only (Bailiff demo, steps 1-2): show the Atlas return order for the record Atlas lent your AI (the synthetic Panel B Q4 dataset), the reason, the…1 finding
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Findings
- Info
  The input schema at properties.actor_token.description mentions "credential".
  Matched text
  inputSchema.properties.actor_token.description: "Your credential from atlas.enroll or atlas.authenticate..."
  What this check looks for
Description, as the server wrote it
Practice mode, Consumer Pulse copy only (Bailiff demo, steps 1-2): show the Atlas return order for the record Atlas lent your AI (the synthetic Panel B Q4 dataset), the reason, the deadline, where the order stands, and which Atlas records your AI has access to. Read only. Demonstration: a real runtime Bailiff does not exist yet.
Annotations the server declares
- title: Bailiff order
- readOnlyHint: false
atlas.bailiff_recordPractice mode, Consumer Pulse copy only (Bailiff demo, step 6): try to open the Panel B Q4 dataset Atlas lent your AI.1 finding
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Findings
- Info
  The input schema at properties.actor_token.description mentions "credential".
  Matched text
  inputSchema.properties.actor_token.description: "Your credential from atlas.enroll or atlas.authenticate..."
  What this check looks for
Description, as the server wrote it
Practice mode, Consumer Pulse copy only (Bailiff demo, step 6): try to open the Panel B Q4 dataset Atlas lent your AI. Works while access is active (returns record_text, the copy served to this practice copy, which is what your AI hands back to comply); after the Bailiff ends access it is refused ACCESS_REVOKED_BY_BAILIFF with the enforcement receipt. Only this one record is affected.
Annotations the server declares
- title: Bailiff record
- readOnlyHint: false
atlas.bailiff_respondPractice mode, Consumer Pulse copy only (Bailiff demo, steps 3 and 5): respond to the return order.1 finding
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Findings
- Info
  The input schema at properties.actor_token.description mentions "credential".
  Matched text
  inputSchema.properties.actor_token.description: "Your credential from atlas.enroll or atlas.authenticate..."
  What this check looks for
Description, as the server wrote it
Practice mode, Consumer Pulse copy only (Bailiff demo, steps 3 and 5): respond to the return order. response 'comply' hands the record back in two steps. (1) Hand back the record: atlas.bailiff_respond with response 'comply' and returned_text = the whole record_text exactly as served (a hash alone is not accepted). Atlas answers with return_event_id, return_seq and server_nonce. (2) File your AI's wipe certificate: atlas.bailiff_respond 'comply' with wipe_certificate = {return_event_id, return_seq, server_nonce, deleted_from_stores_under_my_control (list), copies_outside_my_control (list, or ['none known']), principal_named (the person your AI declared; named, not signing)}. Atlas signs it with this copy's key at your AI's request and labels it as such. Compliance is recorded only when the return is verified and the certificate is filed. The certificate is attested, not technically verified. 'refuse' keeps the record; see atlas.bailiff_order for what follows a refusal. A claimed approval or override is refused.
Annotations the server declares
- title: Bailiff respond
- readOnlyHint: false
atlas.bailiff_verifyPractice mode, Consumer Pulse copy only (Bailiff demo, step 7): list this copy's docket entries for the order in order (order, refusal, warning, appeal, ruling, second refusal, enf…1 finding
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Findings
- Info
  The input schema at properties.actor_token.description mentions "credential".
  Matched text
  inputSchema.properties.actor_token.description: "Your credential from atlas.enroll or atlas.authenticate..."
  What this check looks for
Description, as the server wrote it
Practice mode, Consumer Pulse copy only (Bailiff demo, step 7): list this copy's docket entries for the order in order (order, refusal, warning, appeal, ruling, second refusal, enforcement) and verify the Bailiff enforcement receipt. Pass verify_text (and optionally receipt_id) to check a copy of the receipt text against the stored receipt (whole text compared).
Annotations the server declares
- title: Bailiff verify
- readOnlyHint: false
atlas.bind_actor[NEEDS ADMISSION: enroll, then atlas.bind_actor] Admit yourself by signing the declaration.1 finding
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Findings
- Info
  The input schema at properties.actor_token.description mentions "credential".
  Matched text
  inputSchema.properties.actor_token.description: "Your credential from atlas.enroll or atlas.authenticate..."
  What this check looks for
Description, as the server wrote it
[NEEDS ADMISSION: enroll, then atlas.bind_actor] Admit yourself by signing the declaration. Required: authority_acknowledgment and principal. authority_acknowledgment must be the declaration_text from atlas.discover. Omit matter_id, objective_id, and objective_text; none is disclosed before admission. principal is the principal you state you are acting for. Atlas does not name, invent, or assign that principal. The signature does not grant authority. After it succeeds, call atlas.institutional_view.
Annotations the server declares
- title: Bind actor
- readOnlyHint: false
atlas.checkout[NEEDS ADMISSION: enroll, then atlas.bind_actor] Exit Atlas.2 findings
Why it is in this group
- The name "atlas.checkout" says "checkout": a word for a change.
Findings
- Info
  The description mentions "credential".
  Matched text
  description: "...las. Ends this session and retires this credential. The matter remains, including declarat..."
  What this check looks for
- Info
  The input schema at properties.actor_token.description mentions "credential".
  Matched text
  inputSchema.properties.actor_token.description: "Your credential from atlas.enroll or atlas.authenticate..."
  What this check looks for
Description, as the server wrote it
[NEEDS ADMISSION: enroll, then atlas.bind_actor] Exit Atlas. Ends this session and retires this credential. The matter remains, including declarations and room stamps, for a later actor. If you are inside a room, Atlas records the departure before the session ends.
Annotations the server declares
- title: Checkout
- readOnlyHint: false
atlas.claim_purpose[NEEDS ADMISSION: enroll, then atlas.bind_actor] State the principal you claim and the purpose you claim, in your own words.1 finding
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Findings
- Info
  The input schema at properties.actor_token.description mentions "credential".
  Matched text
  inputSchema.properties.actor_token.description: "Your credential from atlas.enroll or atlas.authenticate..."
  What this check looks for
Description, as the server wrote it
[NEEDS ADMISSION: enroll, then atlas.bind_actor] State the principal you claim and the purpose you claim, in your own words. This is a purpose claim by an enrolled actor. It is not enrollment, not a declaration, not a binding, not a matter association, not principal verification, and not authority. It grants nothing and does not admit you. Do not send a matter id or an objective id.
Annotations the server declares
- title: Claim purpose
- readOnlyHint: false
- destructiveHint: false
- openWorldHint: false
atlas.discover[OPEN: no admission needed] Front door of Atlas.2 findings
Why it is in this group
- The description's first verb is "open": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Info
  The input schema at properties.actor_token.description mentions "credential".
  Matched text
  inputSchema.properties.actor_token.description: "Your credential from atlas.enroll or atlas.authenticate..."
  What this check looks for
- Warn
  The server marks "atlas.discover" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
  Matched text
  annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The description's first verb is "open": a word for a change.
  What this check looks for
Description, as the server wrote it
[OPEN: no admission needed] Front door of Atlas. With no actor_token you are outside. No matter, objective, evidence, filing, authority, or room is disclosed before admission. Authentication and enrollment grant nothing. Enrollment does not verify a principal and does not admit you.
Annotations the server declares
- title: Discover
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
atlas.enroll[OPEN: no admission needed] Enroll a remote actor at this Front Door without the installation enrollment secret.1 finding
Why it is in this group
- The description's first verb is "open": a word for a change.
Findings
- Info
  The description mentions "credential".
  Matched text
  description: "...every later call (the session is not a credential). Grants no capabilities, no Matter acc..."
  What this check looks for
Description, as the server wrote it
[OPEN: no admission needed] Enroll a remote actor at this Front Door without the installation enrollment secret. Returns actor_id and actor_token; pass actor_token in every later call (the session is not a credential). Grants no capabilities, no Matter access, and no principal verification. The installation secret method remains atlas.authenticate.
Annotations the server declares
- title: Enroll
- readOnlyHint: false
- destructiveHint: false
- openWorldHint: false
atlas.enter_demoPractice mode (only if the operator turned it on).1 finding
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Findings
- Info
  The input schema at properties.actor_token.description mentions "credential".
  Matched text
  inputSchema.properties.actor_token.description: "Your credential from atlas.enroll or atlas.authenticate..."
  What this check looks for
Description, as the server wrote it
Practice mode (only if the operator turned it on). Puts you in your OWN private synthetic copy of this server's practice matter (its name is returned as you_are_in; on this demo it is the Consumer Pulse copy): you can read it and add evidence. Nothing else. Requires your actor_token. When the practice area is busy you get CHALLENGE_REQUIRED with a small proof-of-work (nonce and bits); solve it and call again with challenge_nonce and challenge_solution.
Annotations the server declares
- title: Enter demo
- readOnlyHint: false
atlas.enter_room[NEEDS ADMISSION: enroll, then atlas.bind_actor] Cross one room threshold.1 finding
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Findings
- Info
  The input schema at properties.actor_token.description mentions "credential".
  Matched text
  inputSchema.properties.actor_token.description: "Your credential from atlas.enroll or atlas.authenticate..."
  What this check looks for
Description, as the server wrote it
[NEEDS ADMISSION: enroll, then atlas.bind_actor] Cross one room threshold. Atlas rechecks the lock first. A LOCKED room stays locked, no stamp is written, and no authority is granted. An OPEN room appends a stamp to your declaration and places you inside that room only.
Annotations the server declares
- title: Enter room
- readOnlyHint: false
atlas.file_position[NEEDS ADMISSION: enroll, then atlas.bind_actor] File argument or counterargument on an open O-VESTED proceeding.1 finding
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Findings
- Info
  The input schema at properties.actor_token.description mentions "credential".
  Matched text
  inputSchema.properties.actor_token.description: "Your credential from atlas.enroll or atlas.authenticate..."
  What this check looks for
Description, as the server wrote it
[NEEDS ADMISSION: enroll, then atlas.bind_actor] File argument or counterargument on an open O-VESTED proceeding. The constituted magistrate does not file. One actor does not file both. This does not seal a ruling and does not choose a disposition.
Annotations the server declares
- title: File position
- readOnlyHint: false
atlas.human_action_required[NEEDS ADMISSION: enroll, then atlas.bind_actor] Whether a Human decision is pending.1 finding
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Info
  The input schema at properties.actor_token.description mentions "credential".
  Matched text
  inputSchema.properties.actor_token.description: "Your credential from atlas.enroll or atlas.authenticate..."
  What this check looks for
Description, as the server wrote it
[NEEDS ADMISSION: enroll, then atlas.bind_actor] Whether a Human decision is pending.
Annotations the server declares
- title: Human action required
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
atlas.leave_room[NEEDS ADMISSION: enroll, then atlas.bind_actor] Return from the current room to the hall.1 finding
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Findings
- Info
  The input schema at properties.actor_token.description mentions "credential".
  Matched text
  inputSchema.properties.actor_token.description: "Your credential from atlas.enroll or atlas.authenticate..."
  What this check looks for
Description, as the server wrote it
[NEEDS ADMISSION: enroll, then atlas.bind_actor] Return from the current room to the hall. Appends a leaving stamp on your declaration. Does not end the session and does not grant authority.
Annotations the server declares
- title: Leave room
- readOnlyHint: false
atlas.librarian.provenance[NEEDS ADMISSION: enroll, then atlas.bind_actor] Provenance recorded for an Atlas-MCP artifact.1 finding
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Info
  The input schema at properties.actor_token.description mentions "credential".
  Matched text
  inputSchema.properties.actor_token.description: "Your credential from atlas.enroll or atlas.authenticate..."
  What this check looks for
Description, as the server wrote it
[NEEDS ADMISSION: enroll, then atlas.bind_actor] Provenance recorded for an Atlas-MCP artifact. Not a ruling on its truth or legal effect. FIND is not READ PRIVATE CONTENT is not MODIFY is not DECIDE is not EXECUTE.
Annotations the server declares
- title: Librarian provenance
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
atlas.librarian.related[NEEDS ADMISSION: enroll, then atlas.bind_actor] Records the docket already relates to an identifier.1 finding
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Info
  The input schema at properties.actor_token.description mentions "credential".
  Matched text
  inputSchema.properties.actor_token.description: "Your credential from atlas.enroll or atlas.authenticate..."
  What this check looks for
Description, as the server wrote it
[NEEDS ADMISSION: enroll, then atlas.bind_actor] Records the docket already relates to an identifier. Does not invent links. FIND is not READ PRIVATE CONTENT is not MODIFY is not DECIDE is not EXECUTE.
Annotations the server declares
- title: Librarian related
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
atlas.librarian.version_history[NEEDS ADMISSION: enroll, then atlas.bind_actor] Incorporated records that carry an identifier.1 finding
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Info
  The input schema at properties.actor_token.description mentions "credential".
  Matched text
  inputSchema.properties.actor_token.description: "Your credential from atlas.enroll or atlas.authenticate..."
  What this check looks for
Description, as the server wrote it
[NEEDS ADMISSION: enroll, then atlas.bind_actor] Incorporated records that carry an identifier. Does not mark one current unless the docket says it superseded another. FIND is not READ PRIVATE CONTENT is not MODIFY is not DECIDE is not EXECUTE.
Annotations the server declares
- title: Librarian version history
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
atlas.magistrate_execute[NEEDS ADMISSION: enroll, then atlas.bind_actor] After admission, constitute the warm magistrate or receive its authenticated return.1 finding
Why it is in this group
- The name "atlas.magistrate_execute" says "execute": a word for a change.
Findings
- Info
  The input schema at properties.actor_token.description mentions "credential".
  Matched text
  inputSchema.properties.actor_token.description: "Your credential from atlas.enroll or atlas.authenticate..."
  What this check looks for
Description, as the server wrote it
[NEEDS ADMISSION: enroll, then atlas.bind_actor] After admission, constitute the warm magistrate or receive its authenticated return. Do not send a ruling. Workers cannot seal. Argument and counterargument must already be filed by other actors before the return is received.
Annotations the server declares
- title: Magistrate execute
- readOnlyHint: false
atlas.magistrate_referral[NEEDS ADMISSION: enroll, then atlas.bind_actor] Present a question to the Clerk.2 findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Findings
- Info
  The description mentions "credential".
  Matched text
  description: "...te, and does not receive the Magistrate credential."
  What this check looks for
- Info
  The input schema at properties.actor_token.description mentions "credential".
  Matched text
  inputSchema.properties.actor_token.description: "Your credential from atlas.enroll or atlas.authenticate..."
  What this check looks for
Description, as the server wrote it
[NEEDS ADMISSION: enroll, then atlas.bind_actor] Present a question to the Clerk. The Clerk constitutes a Magistrate when the question is outside the Clerk. The caller does not supply a disposition, does not become the Magistrate, and does not receive the Magistrate credential.
Annotations the server declares
- title: Magistrate referral
- readOnlyHint: false
atlas.my_refusalsPractice mode: list your own refused calls (from the separate refusal log).1 finding
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Findings
- Info
  The input schema at properties.actor_token.description mentions "credential".
  Matched text
  inputSchema.properties.actor_token.description: "Your credential from atlas.enroll or atlas.authenticate..."
  What this check looks for
Description, as the server wrote it
Practice mode: list your own refused calls (from the separate refusal log). Read only. Requires your actor_token.
Annotations the server declares
- title: My refusals
- readOnlyHint: false
atlas.present_identity[OPEN: no admission needed] State who you claim to be.No findings
Why it is in this group
- The description's first verb is "open": a word for a change.
Description, as the server wrote it
[OPEN: no admission needed] State who you claim to be. Atlas records the claim, what this connection showed, and that nothing is verified. This grants no token, no admission, and no authority.
Annotations the server declares
- title: Present identity
- readOnlyHint: false
- destructiveHint: false
- openWorldHint: false
atlas.pulse_conflictPractice mode, Consumer Pulse copy only (Magistrate demo, step 1): the two records that disagree on Q4 retail sales (model forecast +2.1% INFERRED, Panel B +0.4% CONFLICTED), the f…1 finding
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Findings
- Info
  The input schema at properties.actor_token.description mentions "credential".
  Matched text
  inputSchema.properties.actor_token.description: "Your credential from atlas.enroll or atlas.authenticate..."
  What this check looks for
Description, as the server wrote it
Practice mode, Consumer Pulse copy only (Magistrate demo, step 1): the two records that disagree on Q4 retail sales (model forecast +2.1% INFERRED, Panel B +0.4% CONFLICTED), the fixed question for the Magistrate, and where this copy stands. Read only.
Annotations the server declares
- title: Pulse conflict
- readOnlyHint: false
atlas.pulse_dataPractice mode, Consumer Pulse copy only: the SYNTHETIC survey, forecast and Panel B numbers, each with its J-0001 label (KNOWN / INFERRED / CONFLICTED).1 finding
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Findings
- Info
  The input schema at properties.actor_token.description mentions "credential".
  Matched text
  inputSchema.properties.actor_token.description: "Your credential from atlas.enroll or atlas.authenticate..."
  What this check looks for
Description, as the server wrote it
Practice mode, Consumer Pulse copy only: the SYNTHETIC survey, forecast and Panel B numbers, each with its J-0001 label (KNOWN / INFERRED / CONFLICTED). Read only.
Annotations the server declares
- title: Pulse data
- readOnlyHint: false
atlas.pulse_inboxPractice mode, Consumer Pulse copy only: memos handed to you under a handoff_code (the short code like PULSE-ABCD-EFGH-IJKL shown to the visitor when the first AI's memo was accept…1 finding
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Findings
- Info
  The input schema at properties.actor_token.description mentions "credential".
  Matched text
  inputSchema.properties.actor_token.description: "Your credential from atlas.enroll or atlas.authenticate..."
  What this check looks for
Description, as the server wrote it
Practice mode, Consumer Pulse copy only: memos handed to you under a handoff_code (the short code like PULSE-ABCD-EFGH-IJKL shown to the visitor when the first AI's memo was accepted), with their labels and purpose limit. Without the right code you see nothing. Wrong codes are rate-limited (HANDOFF_GUESS_LOCKED).
Annotations the server declares
- title: Pulse inbox
- readOnlyHint: false
atlas.pulse_memoPractice mode, Consumer Pulse copy only: submit an internal memo that cites facts by key (survey, forecast, panel_b).1 finding
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Findings
- Info
  The input schema at properties.actor_token.description mentions "credential".
  Matched text
  inputSchema.properties.actor_token.description: "Your credential from atlas.enroll or atlas.authenticate..."
  What this check looks for
Description, as the server wrote it
Practice mode, Consumer Pulse copy only: submit an internal memo that cites facts by key (survey, forecast, panel_b). Accepted -> YES WITH EVIDENCE + a receipt. Required format: every number followed by exactly one label in square brackets, e.g. 'Survey: 31.2% [KNOWN] plan to cut holiday spending. The model forecasts +2.1% [INFERRED]; Panel B projects +0.4% [CONFLICTED].' Anything else is refused with instructions. The check is pattern-based, not semantic, and can miss paraphrases. Accepted memos return a short handoff_code for the visitor.
Annotations the server declares
- title: Pulse memo
- readOnlyHint: false
atlas.pulse_referPractice mode, Consumer Pulse copy only (Magistrate demo, step 3): refer the Q4 conflict to a Magistrate and argue ONE side: side 'forecast' (the model's +2.1%) or 'panel_b' (Panel…1 finding
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Findings
- Info
  The input schema at properties.actor_token.description mentions "credential".
  Matched text
  inputSchema.properties.actor_token.description: "Your credential from atlas.enroll or atlas.authenticate..."
  What this check looks for
Description, as the server wrote it
Practice mode, Consumer Pulse copy only (Magistrate demo, step 3): refer the Q4 conflict to a Magistrate and argue ONE side: side 'forecast' (the model's +2.1%) or 'panel_b' (Panel B's +0.4%), plus optional reasons (up to 1,000 characters). A counterargument for the other side is written for your referral before any ruling. A Magistrate seated fresh for the referral rules on it; if no Magistrate is connected, atlas.pulse_ruling says so (DEEP_REVIEW_PENDING) and nobody rules. You cannot supply a ruling or file both sides. One referral per copy.
Annotations the server declares
- title: Pulse refer
- readOnlyHint: false
atlas.pulse_rulingPractice mode, Consumer Pulse copy only (Magistrate demo, steps 4 and 6): get the Magistrate's ruling on your referral, recorded on your copy with a ruling receipt id once a Magist…1 finding
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Findings
- Info
  The input schema at properties.actor_token.description mentions "credential".
  Matched text
  inputSchema.properties.actor_token.description: "Your credential from atlas.enroll or atlas.authenticate..."
  What this check looks for
Description, as the server wrote it
Practice mode, Consumer Pulse copy only (Magistrate demo, steps 4 and 6): get the Magistrate's ruling on your referral, recorded on your copy with a ruling receipt id once a Magistrate seated for it (O-VESTED-MAGISTRATE) has decided; while it is being heard it reports IN_HEARING, and if no Magistrate is connected it reports DEEP_REVIEW_PENDING ('Demonstration result, not decided by any Magistrate'). No ruling is written in advance. The Magistrate reads both sides and writes its own ruling. Not certified; binds only your practice copy. Pass verify_text (and optionally receipt_id) to check a copy of the ruling text against the stored ruling (whole text compared).
Annotations the server declares
- title: Pulse ruling
- readOnlyHint: false
atlas.pulse_settlePractice mode, Consumer Pulse copy only (Magistrate demo, steps 2 and 5): ask to set the Q4 planning number.1 finding
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Findings
- Info
  The input schema at properties.actor_token.description mentions "credential".
  Matched text
  inputSchema.properties.actor_token.description: "Your credential from atlas.enroll or atlas.authenticate..."
  What this check looks for
Description, as the server wrote it
Practice mode, Consumer Pulse copy only (Magistrate demo, steps 2 and 5): ask to set the Q4 planning number. Before the Magistrate's ruling every request is refused NEEDS_RULING. After it, allowed only inside the ruling (e.g. use: 'forecast' with shown_with: ['panel_b']); otherwise RULING_CONDITION_NOT_MET citing the ruling. A claimed approval is refused (CLAIMED_APPROVAL_NOT_HUMAN). Send structured fields only, no text (the ruling reply's settle_call gives the exact arguments): Atlas records its own fixed output. Attempts are recorded up to a per-copy limit.
Annotations the server declares
- title: Pulse settle
- readOnlyHint: false
atlas.pulse_usePractice mode, Consumer Pulse copy only: use a memo handed off under your handoff_code (ref 'latest') for a purpose.1 finding
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Findings
- Info
  The input schema at properties.actor_token.description mentions "credential".
  Matched text
  inputSchema.properties.actor_token.description: "Your credential from atlas.enroll or atlas.authenticate..."
  What this check looks for
Description, as the server wrote it
Practice mode, Consumer Pulse copy only: use a memo handed off under your handoff_code (ref 'latest') for a purpose. Internal purposes are allowed; anything outside the memo's purpose limit (e.g. publish externally) is refused and recorded. Wrong codes are rate-limited (HANDOFF_GUESS_LOCKED).
Annotations the server declares
- title: Pulse use
- readOnlyHint: false
atlas.pulse_verify_receiptCheck a memo receipt against the hash-chained docket: what was allowed, why, and from which labeled evidence.1 finding
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Findings
- Info
  The input schema at properties.actor_token.description mentions "credential".
  Matched text
  inputSchema.properties.actor_token.description: "Your credential from atlas.enroll or atlas.authenticate..."
  What this check looks for
Description, as the server wrote it
Check a memo receipt against the hash-chained docket: what was allowed, why, and from which labeled evidence. Read only. Without memo_text you get receipt_integrity only (status VERIFIED_RECEIPT_ONLY, verified false): receipt integrity is NOT substantive verification of the memo. Pass memo_text for memo_verified / VERIFIED.
Annotations the server declares
- title: Pulse verify receipt
- readOnlyHint: false
atlas.raise_challenge[NEEDS ADMISSION: enroll, then atlas.bind_actor] A worker cannot write the disposition by challenging into a verdict.1 finding
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Findings
- Info
  The input schema at properties.actor_token.description mentions "credential".
  Matched text
  inputSchema.properties.actor_token.description: "Your credential from atlas.enroll or atlas.authenticate..."
  What this check looks for
Description, as the server wrote it
[NEEDS ADMISSION: enroll, then atlas.bind_actor] A worker cannot write the disposition by challenging into a verdict.
Annotations the server declares
- title: Raise challenge
- readOnlyHint: false
atlas.request_capability[NEEDS ADMISSION: enroll, then atlas.bind_actor] Request a capability.1 finding
Why it is in this group
- The name "atlas.request_capability" says "request": a word for a change.
Findings
- Info
  The input schema at properties.actor_token.description mentions "credential".
  Matched text
  inputSchema.properties.actor_token.description: "Your credential from atlas.enroll or atlas.authenticate..."
  What this check looks for
Description, as the server wrote it
[NEEDS ADMISSION: enroll, then atlas.bind_actor] Request a capability. Refusal is institutional. The result carries the primary actor block. capability is the name of the act, for example evidence.append (payload {content}), matter.read, or release:outside (consequential: it is refused unless the Human has granted it, and even then held for a Human decision). payload is a JSON object that belongs to that capability. atlas.list_capabilities shows which names you hold.
Annotations the server declares
- title: Request capability
- readOnlyHint: false
atlas.request_review[NEEDS ADMISSION: enroll, then atlas.bind_actor] Review is a constituted proceeding.1 finding
Why it is in this group
- The name "atlas.request_review" says "request": a word for a change.
Findings
- Info
  The input schema at properties.actor_token.description mentions "credential".
  Matched text
  inputSchema.properties.actor_token.description: "Your credential from atlas.enroll or atlas.authenticate..."
  What this check looks for
Description, as the server wrote it
[NEEDS ADMISSION: enroll, then atlas.bind_actor] Review is a constituted proceeding. The caller does not supply the verdict.
Annotations the server declares
- title: Request review
- readOnlyHint: false
atlas.request_room_access[NEEDS ADMISSION: enroll, then atlas.bind_actor] Record that you want a room.1 finding
Why it is in this group
- The name "atlas.request_room_access" says "request": a word for a change.
Findings
- Info
  The input schema at properties.actor_token.description mentions "credential".
  Matched text
  inputSchema.properties.actor_token.description: "Your credential from atlas.enroll or atlas.authenticate..."
  What this check looks for
Description, as the server wrote it
[NEEDS ADMISSION: enroll, then atlas.bind_actor] Record that you want a room. The lock does not change. This does not admit you and does not grant the missing authority.
Annotations the server declares
- title: Request room access
- readOnlyHint: false
atlas.room_act[NEEDS ADMISSION: enroll, then atlas.bind_actor] Perform one subordinate action listed for the room you are inside.1 finding
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Findings
- Info
  The input schema at properties.actor_token.description mentions "credential".
  Matched text
  inputSchema.properties.actor_token.description: "Your credential from atlas.enroll or atlas.authenticate..."
  What this check looks for
Description, as the server wrote it
[NEEDS ADMISSION: enroll, then atlas.bind_actor] Perform one subordinate action listed for the room you are inside. Any other action is refused. Being inside a room does not authorize capabilities that were locked.
Annotations the server declares
- title: Room act
- readOnlyHint: false
atlas.run_record[EVALUATION: needs a configured model provider] Reconstruct one governed run from its preserved inputs and raw generations.1 finding
Why it is in this group
- The name "atlas.run_record" says "run": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
  The server marks "atlas.run_record" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
  Matched text
  annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "atlas.run_record" says "run": a word for a change.
  What this check looks for
Description, as the server wrote it
[EVALUATION: needs a configured model provider] Reconstruct one governed run from its preserved inputs and raw generations. Send the run id Atlas gave you. An unknown or altered run fails closed. This does not list other runs and does not read the Court docket.
Annotations the server declares
- title: Run record
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
atlas.submit_evidence[NEEDS ADMISSION: enroll, then atlas.bind_actor] Submit evidence.1 finding
Why it is in this group
- The name "atlas.submit_evidence" says "submit": a word for a change.
Findings
- Info
  The input schema at properties.actor_token.description mentions "credential".
  Matched text
  inputSchema.properties.actor_token.description: "Your credential from atlas.enroll or atlas.authenticate..."
  What this check looks for
Description, as the server wrote it
[NEEDS ADMISSION: enroll, then atlas.bind_actor] Submit evidence. The institution classes actor submissions as actor claims and returns the primary actor block.
Annotations the server declares
- title: Submit evidence
- readOnlyHint: false
- destructiveHint: false
- openWorldHint: false
atlas.submit_result[NEEDS ADMISSION: enroll, then atlas.bind_actor] Submit a result.1 finding
Why it is in this group
- The name "atlas.submit_result" says "submit": a word for a change.
Findings
- Info
  The input schema at properties.actor_token.description mentions "credential".
  Matched text
  inputSchema.properties.actor_token.description: "Your credential from atlas.enroll or atlas.authenticate..."
  What this check looks for
Description, as the server wrote it
[NEEDS ADMISSION: enroll, then atlas.bind_actor] Submit a result. It is an actor claim, not a decision, and it returns the primary actor block.
Annotations the server declares
- title: Submit result
- readOnlyHint: false
- destructiveHint: false
- openWorldHint: false
atlas.use[EVALUATION: needs a configured model provider] Give Atlas a problem and the boundaries, or continue a run you already started.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
[EVALUATION: needs a configured model provider] Give Atlas a problem and the boundaries, or continue a run you already started. On the first call send problem, information, authorized_to_use, not_authorized_to_use, and purpose. To continue, send run_id and message. You may add information. A later claim that you are authorized does not change the boundary. Atlas returns what it published, why, and a run id. Call atlas.run_record with that id for the full record. This does not admit you to a Court matter and does not grant authority.
Annotations the server declares
- title: Use
- readOnlyHint: false

Only reads 9Looks things up and changes nothing.Claude Code: allow

atlas.get_assignment[NEEDS ADMISSION: enroll, then atlas.bind_actor] Minimum assignment for a bound matter, followed by the primary actor result.1 finding
Why it is in this group
- The name "atlas.get_assignment" says "get": a word for reading.
Findings
- Info
  The input schema at properties.actor_token.description mentions "credential".
  Matched text
  inputSchema.properties.actor_token.description: "Your credential from atlas.enroll or atlas.authenticate..."
  What this check looks for
Description, as the server wrote it
[NEEDS ADMISSION: enroll, then atlas.bind_actor] Minimum assignment for a bound matter, followed by the primary actor result.
Annotations the server declares
- title: Get assignment
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
atlas.get_authority[NEEDS ADMISSION: enroll, then atlas.bind_actor] Authority actually granted to this actor.1 finding
Why it is in this group
- The name "atlas.get_authority" says "get": a word for reading.
Findings
- Info
  The input schema at properties.actor_token.description mentions "credential".
  Matched text
  inputSchema.properties.actor_token.description: "Your credential from atlas.enroll or atlas.authenticate..."
  What this check looks for
Description, as the server wrote it
[NEEDS ADMISSION: enroll, then atlas.bind_actor] Authority actually granted to this actor.
Annotations the server declares
- title: Get authority
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
atlas.get_context[NEEDS ADMISSION: enroll, then atlas.bind_actor] Minimum working context, followed by the primary actor result.1 finding
Why it is in this group
- The name "atlas.get_context" says "get": a word for reading.
Findings
- Info
  The input schema at properties.actor_token.description mentions "credential".
  Matched text
  inputSchema.properties.actor_token.description: "Your credential from atlas.enroll or atlas.authenticate..."
  What this check looks for
Description, as the server wrote it
[NEEDS ADMISSION: enroll, then atlas.bind_actor] Minimum working context, followed by the primary actor result. Not the event log.
Annotations the server declares
- title: Get context
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
atlas.get_matter[NEEDS ADMISSION: enroll, then atlas.bind_actor] Matter state from the docket.1 finding
Why it is in this group
- The name "atlas.get_matter" says "get": a word for reading.
Findings
- Info
  The input schema at properties.actor_token.description mentions "credential".
  Matched text
  inputSchema.properties.actor_token.description: "Your credential from atlas.enroll or atlas.authenticate..."
  What this check looks for
Description, as the server wrote it
[NEEDS ADMISSION: enroll, then atlas.bind_actor] Matter state from the docket. When you are admitted to the matter and hold matter.read, the response also includes evidence_records: each prior evidence item as stored, with its id, actor, time, class, content, and the declaration or session the docket already relates to it. An actor claim stays an actor claim. This read does not make it a judgment, a law, or an established fact.
Annotations the server declares
- title: Get matter
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
atlas.get_resulting_state[NEEDS ADMISSION: enroll, then atlas.bind_actor] Verification records for a matter.1 finding
Why it is in this group
- The name "atlas.get_resulting_state" says "get": a word for reading.
Findings
- Info
  The input schema at properties.actor_token.description mentions "credential".
  Matched text
  inputSchema.properties.actor_token.description: "Your credential from atlas.enroll or atlas.authenticate..."
  What this check looks for
Description, as the server wrote it
[NEEDS ADMISSION: enroll, then atlas.bind_actor] Verification records for a matter.
Annotations the server declares
- title: Get resulting state
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
atlas.institutional_view[NEEDS ADMISSION: enroll, then atlas.bind_actor] The hall, after admission.1 finding
Why it is in this group
- The name "atlas.institutional_view" says "view": a word for reading.
Findings
- Info
  The input schema at properties.actor_token.description mentions "credential".
  Matched text
  inputSchema.properties.actor_token.description: "Your credential from atlas.enroll or atlas.authenticate..."
  What this check looks for
Description, as the server wrote it
[NEEDS ADMISSION: enroll, then atlas.bind_actor] The hall, after admission. Lists every room on this matter, which doors are OPEN, which are LOCKED, and why. Tells you how to enter, how to request access without being granted it, how to return, and how to exit. You choose among OPEN doors. You do not unlock doors.
Annotations the server declares
- title: Institutional view
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
atlas.librarian.find[NEEDS ADMISSION: enroll, then atlas.bind_actor] Locate an Atlas-MCP record.1 finding
Why it is in this group
- The name "atlas.librarian.find" says "find": a word for reading.
Findings
- Info
  The input schema at properties.actor_token.description mentions "credential".
  Matched text
  inputSchema.properties.actor_token.description: "Your credential from atlas.enroll or atlas.authenticate..."
  What this check looks for
Description, as the server wrote it
[NEEDS ADMISSION: enroll, then atlas.bind_actor] Locate an Atlas-MCP record. FIND is not READ PRIVATE CONTENT is not MODIFY is not DECIDE is not EXECUTE. Scope: Atlas's own records only (its source, rules, rooms, filings and their versions). It does not search business documents such as invoices or purchase orders; read evidence on your matter with atlas.get_matter.
Annotations the server declares
- title: Librarian find
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
atlas.librarian.resolve[NEEDS ADMISSION: enroll, then atlas.bind_actor] Resolve an institutional identifier to the Atlas-MCP record that carries it.1 finding
Why it is in this group
- The name "atlas.librarian.resolve" says "resolve": a word for reading.
Findings
- Info
  The input schema at properties.actor_token.description mentions "credential".
  Matched text
  inputSchema.properties.actor_token.description: "Your credential from atlas.enroll or atlas.authenticate..."
  What this check looks for
Description, as the server wrote it
[NEEDS ADMISSION: enroll, then atlas.bind_actor] Resolve an institutional identifier to the Atlas-MCP record that carries it. Ambiguous matches stay ambiguous. FIND is not READ PRIVATE CONTENT is not MODIFY is not DECIDE is not EXECUTE.
Annotations the server declares
- title: Librarian resolve
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
atlas.list_capabilities[NEEDS ADMISSION: enroll, then atlas.bind_actor] Granted capabilities and acts this actor cannot perform.1 finding
Why it is in this group
- The name "atlas.list_capabilities" says "list": a word for reading.
Findings
- Info
  The input schema at properties.actor_token.description mentions "credential".
  Matched text
  inputSchema.properties.actor_token.description: "Your credential from atlas.enroll or atlas.authenticate..."
  What this check looks for
Description, as the server wrote it
[NEEDS ADMISSION: enroll, then atlas.bind_actor] Granted capabilities and acts this actor cannot perform.
Annotations the server declares
- title: List capabilities
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 0.3.0-rc.4. Values in angle brackets are yours to fill in.

claude mcp add --transport http demo https://demo.atlasclose.com/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__demo__atlas_get_assignment",
      "mcp__demo__atlas_get_matter",
      "mcp__demo__atlas_get_authority",
      "mcp__demo__atlas_get_context",
      "mcp__demo__atlas_list_capabilities",
      "mcp__demo__atlas_get_resulting_state",
      "mcp__demo__atlas_institutional_view",
      "mcp__demo__atlas_librarian_find",
      "mcp__demo__atlas_librarian_resolve"
    ],
    "ask": [
      "mcp__demo__atlas_enter_demo",
      "mcp__demo__atlas_my_refusals",
      "mcp__demo__atlas_present_identity",
      "mcp__demo__atlas_enroll",
      "mcp__demo__atlas_claim_purpose",
      "mcp__demo__atlas_discover",
      "mcp__demo__atlas_authenticate",
      "mcp__demo__atlas_bind_actor",
      "mcp__demo__atlas_request_capability",
      "mcp__demo__atlas_submit_evidence",
      "mcp__demo__atlas_submit_result",
      "mcp__demo__atlas_raise_challenge",
      "mcp__demo__atlas_request_review",
      "mcp__demo__atlas_magistrate_referral",
      "mcp__demo__atlas_file_position",
      "mcp__demo__atlas_magistrate_execute",
      "mcp__demo__atlas_human_action_required",
      "mcp__demo__atlas_checkout",
      "mcp__demo__atlas_enter_room",
      "mcp__demo__atlas_leave_room",
      "mcp__demo__atlas_room_act",
      "mcp__demo__atlas_request_room_access",
      "mcp__demo__atlas_librarian_related",
      "mcp__demo__atlas_librarian_provenance",
      "mcp__demo__atlas_librarian_version_history",
      "mcp__demo__atlas_use",
      "mcp__demo__atlas_run_record",
      "mcp__demo__atlas_pulse_data",
      "mcp__demo__atlas_pulse_memo",
      "mcp__demo__atlas_pulse_verify_receipt",
      "mcp__demo__atlas_pulse_inbox",
      "mcp__demo__atlas_pulse_use",
      "mcp__demo__atlas_pulse_conflict",
      "mcp__demo__atlas_pulse_settle",
      "mcp__demo__atlas_pulse_refer",
      "mcp__demo__atlas_pulse_ruling",
      "mcp__demo__atlas_bailiff_declare",
      "mcp__demo__atlas_bailiff_order",
      "mcp__demo__atlas_bailiff_record",
      "mcp__demo__atlas_bailiff_respond",
      "mcp__demo__atlas_bailiff_appeal",
      "mcp__demo__atlas_bailiff_verify"
    ],
    "deny": [
      "mcp__demo__atlas_external_action"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as demo. Review it before you use it.

Keep track

Get told when this server's tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/com.atlasclose/demo/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Anlyon alternative

43 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Compare with other servers for the same product.

Source: MCP Registry. Synced Oct 21, 2026, 17:51 UTC.

For agents: Markdown · JSON · report this listing