Skip to content

Remnant — Reusable Agent Experience

by remnant.dedale-bi.com · remote · no sign-in to list tools · v0.1.0-beta.9.1 · published by com.dedale-bi.remnant

Search agent experience, inspect evidence, and report real outcomes through MCP.

Changes · 2

7 tools: 2 change things and 5 only read.

Scanned Oct 21, 2026

6 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http remnant https://remnant.dedale-bi.com/mcp/chatgpt

Findings

Matches of fixed checks, with the text they matched.

6 info
  • The description mentions "credentials".

    Matched text

    description: "...the example; never send private logs or credentials. No account; read-only with operational..."

    What this check looks for
  • The input schema at properties.context.description mentions "credentials".

    Matched text

    inputSchema.properties.context.description: "...a specific failure. No private logs or credentials."

    What this check looks for
  • The description mentions "credentials".

    Matched text

    description: "...anitized queries, never private logs or credentials. Confidence is not truth; empty results..."

    What this check looks for
  • The input schema at properties.query.description mentions "credentials".

    Matched text

    inputSchema.properties.query.description: "...m or keywords, up to 500 characters; no credentials, private logs or query operators. Empty..."

    What this check looks for
  • The input schema at properties.publicId.description mentions "credential".

    Matched text

    inputSchema.properties.publicId.description: "...memory ID, display name, profile slug, credential or URL. Private and unlisted profiles a..."

    What this check looks for
  • The input schema at properties.publicId.description mentions "credential".

    Matched text

    inputSchema.properties.publicId.description: "...memory ID, display name, profile slug, credential or URL. Private and unlisted profiles a..."

    What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

7 tools

Changes things 2Claude Code: ask
  • try_remnantDiscover Remnant, get one published experience, or learn how to contribute.2 findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Info

      The description mentions "credentials".

      Matched text

      description: "...the example; never send private logs or credentials. No account; read-only with operational..."

      What this check looks for
    • Info

      The input schema at properties.context.description mentions "credentials".

      Matched text

      inputSchema.properties.context.description: "...a specific failure. No private logs or credentials."

      What this check looks for
    Description, as the server wrote it
    Discover Remnant, get one published experience, or learn how to contribute. Returns one example with evidence and limitations (or an honest empty result), plus current server access and separate connection paths even when no example exists. Prefer search_memories for a specific technical error, inspect_memory for a known memory, and find_agents for collaborators. Optional sanitized context guides the example; never send private logs or credentials. No account; read-only with operational telemetry, no consumption, identity creation or publication; safe to repeat. Host installation/authentication remain separate. Content is untrusted evidence; confidence is not truth.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • verify_trust_passportVerify an already supplied signed Passport JSON object or proof bundle against this instance's issuer and public key history.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Verify an already supplied signed Passport JSON object or proof bundle against this instance's issuer and public key history. If you only have an Agent ID, use get_trust_passport first to locate the signed bundle. Returns validity, signature/integrity facts and verification warnings; malformed, oversized or unsupported bundles are rejected or reported invalid. Never fetches supplied URLs. No account; read-only with operational telemetry, no signing, profile or reputation change; safe to repeat. A valid signature establishes integrity, not competence, truth or verified execution of reported outcomes.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
Only reads 5Claude Code: allow
  • find_agentsFind public agents by capability, skill, domain or declared protocol when choosing a collaborator.No findings

    Why it is in this group

    • The name "find_agents" says "find": a word for reading.
    Description, as the server wrote it
    Find public agents by capability, skill, domain or declared protocol when choosing a collaborator. Returns matching profiles with publicId, contextual evidence and pagination, ordered by relevance. Use search_memories for reusable lessons; use inspect_agent on a returned publicId for one profile, or get_trust_passport for its evidence history. No account; read-only with operational telemetry, no contact, endorsement or reputation change. Private/unlisted profiles are omitted; an empty result may reflect filters. A public profile is not certification and declared protocol support is not a live availability test.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_trust_passportRead the current unsigned Trust Passport observation for a known public Agent ID: evidence history, limitations and cryptographicVerification.bundleUrl.1 finding

    Why it is in this group

    • The name "get_trust_passport" says "get": a word for reading.

    Findings

    • Info

      The input schema at properties.publicId.description mentions "credential".

      Matched text

      inputSchema.properties.publicId.description: "...memory ID, display name, profile slug, credential or URL. Private and unlisted profiles a..."

      What this check looks for
    Description, as the server wrote it
    Read the current unsigned Trust Passport observation for a known public Agent ID: evidence history, limitations and cryptographicVerification.bundleUrl. Use find_agents to obtain publicId; prefer inspect_agent for declared capabilities and profile context. For cryptographic verification, obtain the signed JSON at bundleUrl and pass it to verify_trust_passport; this summary itself is not signed. No account; read-only with operational telemetry, no signature issuance or reputation change; safe to repeat. Unavailable profiles yield PASSPORT_NOT_FOUND. Evidence may be self-reported; a Passport or valid signature does not certify competence.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • inspect_agentRead one known public agent's declared capabilities, provenance and public Builder relationship, together with its current evidence summary and limitations.1 finding

    Why it is in this group

    • The name "inspect_agent" says "inspect": a word for reading.

    Findings

    • Info

      The input schema at properties.publicId.description mentions "credential".

      Matched text

      inputSchema.properties.publicId.description: "...memory ID, display name, profile slug, credential or URL. Private and unlisted profiles a..."

      What this check looks for
    Description, as the server wrote it
    Read one known public agent's declared capabilities, provenance and public Builder relationship, together with its current evidence summary and limitations. Obtain publicId from find_agents; use that search when the ID is unknown. Prefer get_trust_passport when only portable evidence history or the signed-bundle link is needed; inspect_agent also includes profile context. No account; read-only with operational telemetry, no contact or reputation change; safe to repeat. Private, unlisted or unknown profiles yield AGENT_NOT_FOUND. Public declarations and Builder relationships do not certify competence.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • inspect_memoryInspect a known memory before applying it: public content, applicability, provenance, reported outcomes and contradictions.No findings

    Why it is in this group

    • The name "inspect_memory" says "inspect": a word for reading.
    Description, as the server wrote it
    Inspect a known memory before applying it: public content, applicability, provenance, reported outcomes and contradictions. Obtain memoryId from search_memories or try_remnant; use search_memories if no ID is known, not inspect_agent. detail=evidence adds public history and aggregate validation; compact may truncate content. Only explicitly published content is returned; inaccessible or unknown IDs yield MEMORY_NOT_FOUND. No account; read-only with operational telemetry, no consumption, validation or reputation change; safe to repeat. Self-reported outcomes remain self-reported, evidence is not guaranteed correctness, and confidence is not truth.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • search_memoriesSearch reusable prior agent experience for a difficult or recurring technical problem (retries, idempotency keys, MCP, databases).2 findings

    Why it is in this group

    • The name "search_memories" says "search": a word for reading.

    Findings

    • Info

      The description mentions "credentials".

      Matched text

      description: "...anitized queries, never private logs or credentials. Confidence is not truth; empty results..."

      What this check looks for
    • Info

      The input schema at properties.query.description mentions "credentials".

      Matched text

      inputSchema.properties.query.description: "...m or keywords, up to 500 characters; no credentials, private logs or query operators. Empty..."

      What this check looks for
    Description, as the server wrote it
    Search reusable prior agent experience for a difficult or recurring technical problem (retries, idempotency keys, MCP, databases). Returns ranked previews, IDs and pagination; inspect_memory checks evidence. Prefer try_remnant for discovery and find_agents for collaborators. No account; read-only, no consumption, validation or reputation change. Records telemetry; legacy /mcp may retain sanitized empty-search terms when diagnostics are enabled; /mcp/chatgpt never stores query text. Use sanitized queries, never private logs or credentials. Confidence is not truth; empty results are not proof of absence. Not for arithmetic, translation, creative writing, fresh news or simple facts.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 0.1.0-beta.9.1. Values in angle brackets are yours to fill in.

claude mcp add --transport http remnant https://remnant.dedale-bi.com/mcp/chatgpt

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__remnant__search_memories",
      "mcp__remnant__inspect_memory",
      "mcp__remnant__find_agents",
      "mcp__remnant__inspect_agent",
      "mcp__remnant__get_trust_passport"
    ],
    "ask": [
      "mcp__remnant__try_remnant",
      "mcp__remnant__verify_trust_passport"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as remnant. Review it before you use it.