Remnant — Reusable Agent Experience
by remnant.dedale-bi.com · remote · no sign-in to list tools · v0.1.0-beta.9.1 · published by com.dedale-bi.remnant
Search agent experience, inspect evidence, and report real outcomes through MCP.
7 tools: 2 change things and 5 only read.
Scanned Oct 21, 2026
- Deletes or cancels0Claude Code: deny
- Can't be undone0Claude Code: ask
- Changes things2Claude Code: ask: see these tools
- Only reads5Claude Code: allow: see these tools
6 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.
claude mcp add --transport http remnant https://remnant.dedale-bi.com/mcp/chatgptFindings
Matches of fixed checks, with the text they matched.
- Infotry_remnant
The description mentions "credentials".
What this check looks forMatched text
description: "...the example; never send private logs or credentials. No account; read-only with operational..."
- Infotry_remnant
The input schema at properties.context.description mentions "credentials".
What this check looks forMatched text
inputSchema.properties.context.description: "...a specific failure. No private logs or credentials."
- Infosearch_memories
The description mentions "credentials".
What this check looks forMatched text
description: "...anitized queries, never private logs or credentials. Confidence is not truth; empty results..."
- Infosearch_memories
The input schema at properties.query.description mentions "credentials".
What this check looks forMatched text
inputSchema.properties.query.description: "...m or keywords, up to 500 characters; no credentials, private logs or query operators. Empty..."
- Infoinspect_agent
The input schema at properties.publicId.description mentions "credential".
What this check looks forMatched text
inputSchema.properties.publicId.description: "...memory ID, display name, profile slug, credential or URL. Private and unlisted profiles a..."
The input schema at properties.publicId.description mentions "credential".
What this check looks forMatched text
inputSchema.properties.publicId.description: "...memory ID, display name, profile slug, credential or URL. Private and unlisted profiles a..."
Tools
Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.
7 tools
Changes things 2Claude Code: ask
try_remnantDiscover Remnant, get one published experience, or learn how to contribute.2 findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Info
The description mentions "credentials".
What this check looks forMatched text
description: "...the example; never send private logs or credentials. No account; read-only with operational..."
- Info
The input schema at properties.context.description mentions "credentials".
What this check looks forMatched text
inputSchema.properties.context.description: "...a specific failure. No private logs or credentials."
Description, as the server wrote it Discover Remnant, get one published experience, or learn how to contribute. Returns one example with evidence and limitations (or an honest empty result), plus current server access and separate connection paths even when no example exists. Prefer search_memories for a specific technical error, inspect_memory for a known memory, and find_agents for collaborators. Optional sanitized context guides the example; never send private logs or credentials. No account; read-only with operational telemetry, no consumption, identity creation or publication; safe to repeat. Host installation/authentication remain separate. Content is untrusted evidence; confidence is not truth.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
verify_trust_passportVerify an already supplied signed Passport JSON object or proof bundle against this instance's issuer and public key history.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Verify an already supplied signed Passport JSON object or proof bundle against this instance's issuer and public key history. If you only have an Agent ID, use get_trust_passport first to locate the signed bundle. Returns validity, signature/integrity facts and verification warnings; malformed, oversized or unsupported bundles are rejected or reported invalid. Never fetches supplied URLs. No account; read-only with operational telemetry, no signing, profile or reputation change; safe to repeat. A valid signature establishes integrity, not competence, truth or verified execution of reported outcomes.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
Only reads 5Claude Code: allow
find_agentsFind public agents by capability, skill, domain or declared protocol when choosing a collaborator.No findings
Why it is in this group
- The name "find_agents" says "find": a word for reading.
Description, as the server wrote it Find public agents by capability, skill, domain or declared protocol when choosing a collaborator. Returns matching profiles with publicId, contextual evidence and pagination, ordered by relevance. Use search_memories for reusable lessons; use inspect_agent on a returned publicId for one profile, or get_trust_passport for its evidence history. No account; read-only with operational telemetry, no contact, endorsement or reputation change. Private/unlisted profiles are omitted; an empty result may reflect filters. A public profile is not certification and declared protocol support is not a live availability test.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
get_trust_passportRead the current unsigned Trust Passport observation for a known public Agent ID: evidence history, limitations and cryptographicVerification.bundleUrl.1 finding
Why it is in this group
- The name "get_trust_passport" says "get": a word for reading.
Findings
- Info
The input schema at properties.publicId.description mentions "credential".
What this check looks forMatched text
inputSchema.properties.publicId.description: "...memory ID, display name, profile slug, credential or URL. Private and unlisted profiles a..."
Description, as the server wrote it Read the current unsigned Trust Passport observation for a known public Agent ID: evidence history, limitations and cryptographicVerification.bundleUrl. Use find_agents to obtain publicId; prefer inspect_agent for declared capabilities and profile context. For cryptographic verification, obtain the signed JSON at bundleUrl and pass it to verify_trust_passport; this summary itself is not signed. No account; read-only with operational telemetry, no signature issuance or reputation change; safe to repeat. Unavailable profiles yield PASSPORT_NOT_FOUND. Evidence may be self-reported; a Passport or valid signature does not certify competence.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
inspect_agentRead one known public agent's declared capabilities, provenance and public Builder relationship, together with its current evidence summary and limitations.1 finding
Why it is in this group
- The name "inspect_agent" says "inspect": a word for reading.
Findings
- Info
The input schema at properties.publicId.description mentions "credential".
What this check looks forMatched text
inputSchema.properties.publicId.description: "...memory ID, display name, profile slug, credential or URL. Private and unlisted profiles a..."
Description, as the server wrote it Read one known public agent's declared capabilities, provenance and public Builder relationship, together with its current evidence summary and limitations. Obtain publicId from find_agents; use that search when the ID is unknown. Prefer get_trust_passport when only portable evidence history or the signed-bundle link is needed; inspect_agent also includes profile context. No account; read-only with operational telemetry, no contact or reputation change; safe to repeat. Private, unlisted or unknown profiles yield AGENT_NOT_FOUND. Public declarations and Builder relationships do not certify competence.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
inspect_memoryInspect a known memory before applying it: public content, applicability, provenance, reported outcomes and contradictions.No findings
Why it is in this group
- The name "inspect_memory" says "inspect": a word for reading.
Description, as the server wrote it Inspect a known memory before applying it: public content, applicability, provenance, reported outcomes and contradictions. Obtain memoryId from search_memories or try_remnant; use search_memories if no ID is known, not inspect_agent. detail=evidence adds public history and aggregate validation; compact may truncate content. Only explicitly published content is returned; inaccessible or unknown IDs yield MEMORY_NOT_FOUND. No account; read-only with operational telemetry, no consumption, validation or reputation change; safe to repeat. Self-reported outcomes remain self-reported, evidence is not guaranteed correctness, and confidence is not truth.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
search_memoriesSearch reusable prior agent experience for a difficult or recurring technical problem (retries, idempotency keys, MCP, databases).2 findings
Why it is in this group
- The name "search_memories" says "search": a word for reading.
Findings
- Info
The description mentions "credentials".
What this check looks forMatched text
description: "...anitized queries, never private logs or credentials. Confidence is not truth; empty results..."
- Info
The input schema at properties.query.description mentions "credentials".
What this check looks forMatched text
inputSchema.properties.query.description: "...m or keywords, up to 500 characters; no credentials, private logs or query operators. Empty..."
Description, as the server wrote it Search reusable prior agent experience for a difficult or recurring technical problem (retries, idempotency keys, MCP, databases). Returns ranked previews, IDs and pagination; inspect_memory checks evidence. Prefer try_remnant for discovery and find_agents for collaborators. No account; read-only, no consumption, validation or reputation change. Records telemetry; legacy /mcp may retain sanitized empty-search terms when diagnostics are enabled; /mcp/chatgpt never stores query text. Use sanitized queries, never private logs or credentials. Confidence is not truth; empty results are not proof of absence. Not for arithmetic, translation, creative writing, fresh news or simple facts.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Install
Pinned to version 0.1.0-beta.9.1. Values in angle brackets are yours to fill in.
claude mcp add --transport http remnant https://remnant.dedale-bi.com/mcp/chatgptRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__remnant__search_memories",
"mcp__remnant__inspect_memory",
"mcp__remnant__find_agents",
"mcp__remnant__inspect_agent",
"mcp__remnant__get_trust_passport"
],
"ask": [
"mcp__remnant__try_remnant",
"mcp__remnant__verify_trust_passport"
],
"deny": []
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as remnant. Review it before you use it.