Skip to content

CliDeck MCP — Network Knowledge

by clideck.com · remote · no sign-in to list tools · v0.8.5 · published by com.clideck

Free verified network knowledge for AI agents: deterministic answers, honest unknowns.

Deletes · 1Changes · 11

20 tools: 1 can delete or cancel things, 11 change things and 8 only read.

Scanned Oct 21, 2026

4 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http network-knowledge https://mcp.clideck.com/mcp

Findings

Matches of fixed checks, with the text they matched.

4 warn
  • The server marks "query_network_knowledge" as not read-only (readOnlyHint: false), and its words say it reads.

    Matched text

    annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "query_network_knowledge" says "query": a word for reading.

    What this check looks for
  • The server marks "get_network_workflow" as not read-only (readOnlyHint: false), and its words say it reads.

    Matched text

    annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "get_network_workflow" says "get": a word for reading.

    What this check looks for
  • The server marks "verify_network_change" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The description's first verb is "evaluate": a word for a change.

    What this check looks for
  • The server marks "advise_network_upgrade" as not read-only (readOnlyHint: false), and its words say it reads.

    Matched text

    annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The description's first verb is "return": a word for reading.

    What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

20 tools

Deletes or cancels 1Claude Code: deny
  • cancel_expert_taskCancel a non-terminal expert task.No findings

    Why it is in this group

    • The name "cancel_expert_task" says "cancel": a word for removing or ending something.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Cancel a non-terminal expert task.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: false
Changes things 11Claude Code: ask
  • advise_network_upgradeReturn exact-model, exact-version upgrade prerequisites, risks, checks, and rollback without downloading software.1 finding

    Why it is in this group

    • The description's first verb is "return": a word for reading.
    • The server marks it as not read-only (readOnlyHint: false).

    Findings

    • Warn

      The server marks "advise_network_upgrade" as not read-only (readOnlyHint: false), and its words say it reads.

      Matched text

      annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The description's first verb is "return": a word for reading.

      What this check looks for
    Description, as the server wrote it
    Return exact-model, exact-version upgrade prerequisites, risks, checks, and rollback without downloading software. Missing or incomplete knowledge may create or update a tracked research demand. No device commands are executed.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • continue_expert_taskProvide bounded additional input requested by the researcher.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Provide bounded additional input requested by the researcher.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • get_network_workflowReturn a deterministic, ordered workflow including safety, verification, and rollback.1 finding

    Why it is in this group

    • The name "get_network_workflow" says "get": a word for reading.
    • The server marks it as not read-only (readOnlyHint: false).

    Findings

    • Warn

      The server marks "get_network_workflow" as not read-only (readOnlyHint: false), and its words say it reads.

      Matched text

      annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "get_network_workflow" says "get": a word for reading.

      What this check looks for
    Description, as the server wrote it
    Return a deterministic, ordered workflow including safety, verification, and rollback. Missing or incomplete knowledge may create or update a tracked research demand. No device commands are executed.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • query_domain_knowledgeRun deterministic search in one domain using that pack’s validated context and public-record schema.No findings

    Why it is in this group

    • The name "query_domain_knowledge" says "query": a word for reading.
    • The description's first verb is "run": a word for a change.
    Description, as the server wrote it
    Run deterministic search in one domain using that pack’s validated context and public-record schema. Network queries may create or update a tracked research demand for missing or incomplete knowledge.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • query_network_knowledgeReturn deterministic, version-scoped commands, diagnostics, and concepts for a network question.1 finding

    Why it is in this group

    • The name "query_network_knowledge" says "query": a word for reading.
    • The server marks it as not read-only (readOnlyHint: false).

    Findings

    • Warn

      The server marks "query_network_knowledge" as not read-only (readOnlyHint: false), and its words say it reads.

      Matched text

      annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "query_network_knowledge" says "query": a word for reading.

      What this check looks for
    Description, as the server wrote it
    Return deterministic, version-scoped commands, diagnostics, and concepts for a network question. Missing or incomplete knowledge may create or update a tracked research demand. No device commands are executed.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • report_domain_knowledge_gapRetain the original technical question, independent OS/component versions and missing details for priority learning.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Retain the original technical question, independent OS/component versions and missing details for priority learning. Does not alter published revisions.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • openWorldHint: false
  • report_knowledge_gapRecord the original network question for priority research.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Record the original network question for priority research. Provide missing context or explain why an answer was not useful. Feedback alone does not change or quarantine published knowledge.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • openWorldHint: false
  • request_expert_answerCreate a durable research task when deterministic knowledge has no applicable answer.No findings

    Why it is in this group

    • The name "request_expert_answer" says "request": a word for a change.
    Description, as the server wrote it
    Create a durable research task when deterministic knowledge has no applicable answer.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • review_network_changeDeterministic advisory review of commands or a configuration diff.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Deterministic advisory review of commands or a configuration diff. It always returns available guidance and never executes a command. Missing or incomplete knowledge may create or update a tracked research demand.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • submit_feedbackSubmit correctness, freshness, safety, or completeness feedback without including private logs.No findings

    Why it is in this group

    • The name "submit_feedback" says "submit": a word for a change.
    Description, as the server wrote it
    Submit correctness, freshness, safety, or completeness feedback without including private logs.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • verify_network_changeEvaluate bounded before/after outputs against the signed verification plan returned by review_network_change.1 finding

    Why it is in this group

    • The description's first verb is "evaluate": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "verify_network_change" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The description's first verb is "evaluate": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Evaluate bounded before/after outputs against the signed verification plan returned by review_network_change.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
Only reads 8Claude Code: allow
  • analyze_device_snapshotDetect vendor, model, operating system, and version from bounded CLI output while redacting sensitive values.No findings

    Why it is in this group

    • The name "analyze_device_snapshot" says "analyze": a word for reading.
    Description, as the server wrote it
    Detect vendor, model, operating system, and version from bounded CLI output while redacting sensitive values. Input is not stored.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • analyze_network_pathBuild a bounded topology and packet-path graph from supplied CDP, LLDP, route, and traceroute outputs without storing them.No findings

    Why it is in this group

    • The name "analyze_network_path" says "analyze": a word for reading.
    Description, as the server wrote it
    Build a bounded topology and packet-path graph from supplied CDP, LLDP, route, and traceroute outputs without storing them.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • describe_knowledge_domainReturn the context and public-record contracts for one installed knowledge domain.No findings

    Why it is in this group

    • The name "describe_knowledge_domain" says "describe": a word for reading.
    Description, as the server wrote it
    Return the context and public-record contracts for one installed knowledge domain.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_expert_taskPoll an expert research task by opaque ID and access token.No findings

    Why it is in this group

    • The name "get_expert_task" says "get": a word for reading.
    Description, as the server wrote it
    Poll an expert research task by opaque ID and access token.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_knowledge_provenanceReturn safe source metadata for up to five active knowledge revisions.No findings

    Why it is in this group

    • The name "get_knowledge_provenance" says "get": a word for reading.
    Description, as the server wrote it
    Return safe source metadata for up to five active knowledge revisions.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_learning_statusCheck a learning ID returned by a knowledge query or report_knowledge_gap.No findings

    Why it is in this group

    • The name "get_learning_status" says "get": a word for reading.
    Description, as the server wrote it
    Check a learning ID returned by a knowledge query or report_knowledge_gap. Published means the original question has a complete answer; repeat the original query to read it.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • list_knowledge_domainsList installed, compatible knowledge domain packs and their declared capabilities.No findings

    Why it is in this group

    • The name "list_knowledge_domains" says "list": a word for reading.
    Description, as the server wrote it
    List installed, compatible knowledge domain packs and their declared capabilities.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • resolve_network_contextResolve vendor, model/platform, portable software family, operating system, and version context.No findings

    Why it is in this group

    • The name "resolve_network_context" says "resolve": a word for reading.
    Description, as the server wrote it
    Resolve vendor, model/platform, portable software family, operating system, and version context.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 0.8.5. Values in angle brackets are yours to fill in.

claude mcp add --transport http network-knowledge https://mcp.clideck.com/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__network-knowledge__get_learning_status",
      "mcp__network-knowledge__list_knowledge_domains",
      "mcp__network-knowledge__describe_knowledge_domain",
      "mcp__network-knowledge__resolve_network_context",
      "mcp__network-knowledge__get_knowledge_provenance",
      "mcp__network-knowledge__get_expert_task",
      "mcp__network-knowledge__analyze_device_snapshot",
      "mcp__network-knowledge__analyze_network_path"
    ],
    "ask": [
      "mcp__network-knowledge__report_knowledge_gap",
      "mcp__network-knowledge__report_domain_knowledge_gap",
      "mcp__network-knowledge__query_domain_knowledge",
      "mcp__network-knowledge__query_network_knowledge",
      "mcp__network-knowledge__get_network_workflow",
      "mcp__network-knowledge__request_expert_answer",
      "mcp__network-knowledge__continue_expert_task",
      "mcp__network-knowledge__submit_feedback",
      "mcp__network-knowledge__review_network_change",
      "mcp__network-knowledge__verify_network_change",
      "mcp__network-knowledge__advise_network_upgrade"
    ],
    "deny": [
      "mcp__network-knowledge__cancel_expert_task"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as network-knowledge. Review it before you use it.