CliDeck MCP — Network Knowledge
by clideck.com · remote · no sign-in to list tools · v0.8.5 · published by com.clideck
Free verified network knowledge for AI agents: deterministic answers, honest unknowns.
20 tools: 1 can delete or cancel things, 11 change things and 8 only read.
Scanned Oct 21, 2026
- Deletes or cancels1Claude Code: deny: see these tools
- Can't be undone0Claude Code: ask
- Changes things11Claude Code: ask: see these tools
- Only reads8Claude Code: allow: see these tools
4 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.
claude mcp add --transport http network-knowledge https://mcp.clideck.com/mcpFindings
Matches of fixed checks, with the text they matched.
The server marks "query_network_knowledge" as not read-only (readOnlyHint: false), and its words say it reads.
What this check looks forMatched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "query_network_knowledge" says "query": a word for reading.
The server marks "get_network_workflow" as not read-only (readOnlyHint: false), and its words say it reads.
What this check looks forMatched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "get_network_workflow" says "get": a word for reading.
The server marks "verify_network_change" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The description's first verb is "evaluate": a word for a change.
The server marks "advise_network_upgrade" as not read-only (readOnlyHint: false), and its words say it reads.
What this check looks forMatched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The description's first verb is "return": a word for reading.
Tools
Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.
20 tools
Deletes or cancels 1Claude Code: deny
cancel_expert_taskCancel a non-terminal expert task.No findings
Why it is in this group
- The name "cancel_expert_task" says "cancel": a word for removing or ending something.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it Cancel a non-terminal expert task.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: false
Changes things 11Claude Code: ask
advise_network_upgradeReturn exact-model, exact-version upgrade prerequisites, risks, checks, and rollback without downloading software.1 finding
Why it is in this group
- The description's first verb is "return": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
Findings
- Warn
The server marks "advise_network_upgrade" as not read-only (readOnlyHint: false), and its words say it reads.
What this check looks forMatched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The description's first verb is "return": a word for reading.
Description, as the server wrote it Return exact-model, exact-version upgrade prerequisites, risks, checks, and rollback without downloading software. Missing or incomplete knowledge may create or update a tracked research demand. No device commands are executed.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
continue_expert_taskProvide bounded additional input requested by the researcher.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Provide bounded additional input requested by the researcher.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
get_network_workflowReturn a deterministic, ordered workflow including safety, verification, and rollback.1 finding
Why it is in this group
- The name "get_network_workflow" says "get": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
Findings
- Warn
The server marks "get_network_workflow" as not read-only (readOnlyHint: false), and its words say it reads.
What this check looks forMatched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "get_network_workflow" says "get": a word for reading.
Description, as the server wrote it Return a deterministic, ordered workflow including safety, verification, and rollback. Missing or incomplete knowledge may create or update a tracked research demand. No device commands are executed.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
query_domain_knowledgeRun deterministic search in one domain using that pack’s validated context and public-record schema.No findings
Why it is in this group
- The name "query_domain_knowledge" says "query": a word for reading.
- The description's first verb is "run": a word for a change.
Description, as the server wrote it Run deterministic search in one domain using that pack’s validated context and public-record schema. Network queries may create or update a tracked research demand for missing or incomplete knowledge.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
query_network_knowledgeReturn deterministic, version-scoped commands, diagnostics, and concepts for a network question.1 finding
Why it is in this group
- The name "query_network_knowledge" says "query": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
Findings
- Warn
The server marks "query_network_knowledge" as not read-only (readOnlyHint: false), and its words say it reads.
What this check looks forMatched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "query_network_knowledge" says "query": a word for reading.
Description, as the server wrote it Return deterministic, version-scoped commands, diagnostics, and concepts for a network question. Missing or incomplete knowledge may create or update a tracked research demand. No device commands are executed.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
report_domain_knowledge_gapRetain the original technical question, independent OS/component versions and missing details for priority learning.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Retain the original technical question, independent OS/component versions and missing details for priority learning. Does not alter published revisions.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- openWorldHint: false
report_knowledge_gapRecord the original network question for priority research.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Record the original network question for priority research. Provide missing context or explain why an answer was not useful. Feedback alone does not change or quarantine published knowledge.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- openWorldHint: false
request_expert_answerCreate a durable research task when deterministic knowledge has no applicable answer.No findings
Why it is in this group
- The name "request_expert_answer" says "request": a word for a change.
Description, as the server wrote it Create a durable research task when deterministic knowledge has no applicable answer.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
review_network_changeDeterministic advisory review of commands or a configuration diff.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Deterministic advisory review of commands or a configuration diff. It always returns available guidance and never executes a command. Missing or incomplete knowledge may create or update a tracked research demand.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
submit_feedbackSubmit correctness, freshness, safety, or completeness feedback without including private logs.No findings
Why it is in this group
- The name "submit_feedback" says "submit": a word for a change.
Description, as the server wrote it Submit correctness, freshness, safety, or completeness feedback without including private logs.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
verify_network_changeEvaluate bounded before/after outputs against the signed verification plan returned by review_network_change.1 finding
Why it is in this group
- The description's first verb is "evaluate": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
The server marks "verify_network_change" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The description's first verb is "evaluate": a word for a change.
Description, as the server wrote it Evaluate bounded before/after outputs against the signed verification plan returned by review_network_change.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
Only reads 8Claude Code: allow
analyze_device_snapshotDetect vendor, model, operating system, and version from bounded CLI output while redacting sensitive values.No findings
Why it is in this group
- The name "analyze_device_snapshot" says "analyze": a word for reading.
Description, as the server wrote it Detect vendor, model, operating system, and version from bounded CLI output while redacting sensitive values. Input is not stored.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
analyze_network_pathBuild a bounded topology and packet-path graph from supplied CDP, LLDP, route, and traceroute outputs without storing them.No findings
Why it is in this group
- The name "analyze_network_path" says "analyze": a word for reading.
Description, as the server wrote it Build a bounded topology and packet-path graph from supplied CDP, LLDP, route, and traceroute outputs without storing them.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
describe_knowledge_domainReturn the context and public-record contracts for one installed knowledge domain.No findings
Why it is in this group
- The name "describe_knowledge_domain" says "describe": a word for reading.
Description, as the server wrote it Return the context and public-record contracts for one installed knowledge domain.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
get_expert_taskPoll an expert research task by opaque ID and access token.No findings
Why it is in this group
- The name "get_expert_task" says "get": a word for reading.
Description, as the server wrote it Poll an expert research task by opaque ID and access token.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
get_knowledge_provenanceReturn safe source metadata for up to five active knowledge revisions.No findings
Why it is in this group
- The name "get_knowledge_provenance" says "get": a word for reading.
Description, as the server wrote it Return safe source metadata for up to five active knowledge revisions.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
get_learning_statusCheck a learning ID returned by a knowledge query or report_knowledge_gap.No findings
Why it is in this group
- The name "get_learning_status" says "get": a word for reading.
Description, as the server wrote it Check a learning ID returned by a knowledge query or report_knowledge_gap. Published means the original question has a complete answer; repeat the original query to read it.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
list_knowledge_domainsList installed, compatible knowledge domain packs and their declared capabilities.No findings
Why it is in this group
- The name "list_knowledge_domains" says "list": a word for reading.
Description, as the server wrote it List installed, compatible knowledge domain packs and their declared capabilities.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
resolve_network_contextResolve vendor, model/platform, portable software family, operating system, and version context.No findings
Why it is in this group
- The name "resolve_network_context" says "resolve": a word for reading.
Description, as the server wrote it Resolve vendor, model/platform, portable software family, operating system, and version context.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Install
Pinned to version 0.8.5. Values in angle brackets are yours to fill in.
claude mcp add --transport http network-knowledge https://mcp.clideck.com/mcpRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__network-knowledge__get_learning_status",
"mcp__network-knowledge__list_knowledge_domains",
"mcp__network-knowledge__describe_knowledge_domain",
"mcp__network-knowledge__resolve_network_context",
"mcp__network-knowledge__get_knowledge_provenance",
"mcp__network-knowledge__get_expert_task",
"mcp__network-knowledge__analyze_device_snapshot",
"mcp__network-knowledge__analyze_network_path"
],
"ask": [
"mcp__network-knowledge__report_knowledge_gap",
"mcp__network-knowledge__report_domain_knowledge_gap",
"mcp__network-knowledge__query_domain_knowledge",
"mcp__network-knowledge__query_network_knowledge",
"mcp__network-knowledge__get_network_workflow",
"mcp__network-knowledge__request_expert_answer",
"mcp__network-knowledge__continue_expert_task",
"mcp__network-knowledge__submit_feedback",
"mcp__network-knowledge__review_network_change",
"mcp__network-knowledge__verify_network_change",
"mcp__network-knowledge__advise_network_upgrade"
],
"deny": [
"mcp__network-knowledge__cancel_expert_task"
]
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as network-knowledge. Review it before you use it.