Skip to content

RQM Studio Jobs

by rqmtechnologies.com · remote · no sign-in to list tools · v1.6.0 · published by com.rqmtechnologies

Delegate 20 fail-closed RQM Studio quantum work products with fixed-request x402.

Deletes · 1Changes · 34

44 tools: 1 can delete or cancel things, 34 change things and 9 only read.

Scanned Oct 21, 2026

6 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http studio https://jobs.rqmtechnologies.com/mcp/studio

Findings

Matches of fixed checks, with the text they matched.

6 warn
  • The server marks "search_buyer_jobs" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "search_buyer_jobs" says "search": a word for reading.

    What this check looks for
  • The server marks "quantum_provider_result_compare_v1" as not read-only (readOnlyHint: false), and its words say it reads.

    Matched text

    annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "quantum_provider_result_compare_v1" says "compare": a word for reading.

    What this check looks for
  • The server marks "quantum_simulation_result_compare_v1" as not read-only (readOnlyHint: false), and its words say it reads.

    Matched text

    annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "quantum_simulation_result_compare_v1" says "compare": a word for reading.

    What this check looks for
  • The server marks "compare_quantum_circuits" as not read-only (readOnlyHint: false), and its words say it reads.

    Matched text

    annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "compare_quantum_circuits" says "compare": a word for reading.

    What this check looks for
  • The server marks "diagnose_quantum_phase" as not read-only (readOnlyHint: false), and its words say it reads.

    Matched text

    annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The description's first verb is "find": a word for reading.

    What this check looks for
  • The server marks "cancel_job" not destructive (destructiveHint: false), and its own name, description or input give the class "destructive".

    Matched text

    annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "cancel_job" says "cancel": a word for removing or ending something.

    What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

44 tools

Deletes or cancels 1Claude Code: deny
  • cancel_jobRequest cancellation of one authorized product job.1 finding

    Why it is in this group

    • The name "cancel_job" says "cancel": a word for removing or ending something.
    • The server marks it not destructive (destructiveHint: false), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "cancel_job" not destructive (destructiveHint: false), and its own name, description or input give the class "destructive".

      Matched text

      annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "cancel_job" says "cancel": a word for removing or ending something.

      What this check looks for
    Description, as the server wrote it
    Request cancellation of one authorized product job.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
Changes things 34Claude Code: ask
  • audit_quantum_transformationAudit what another compiler or AI changed, and withhold the candidate unless preservation is verified.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Audit what another compiler or AI changed, and withhold the candidate unless preservation is verified.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • check_quantum_circuitCheck whether this quantum circuit is safe to send downstream, and return a bounded go, no-go, or unsupported decision with evidence.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Check whether this quantum circuit is safe to send downstream, and return a bounded go, no-go, or unsupported decision with evidence.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • classify_two_qubit_operationClassify this two-qubit operation by its nonlocal content and local-equivalence class.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Classify this two-qubit operation by its nonlocal content and local-equivalence class.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • compare_quantum_circuitsTell me whether these two quantum circuits implement the same operation within the stated phase context.1 finding

    Why it is in this group

    • The name "compare_quantum_circuits" says "compare": a word for reading.
    • The server marks it as not read-only (readOnlyHint: false).

    Findings

    • Warn

      The server marks "compare_quantum_circuits" as not read-only (readOnlyHint: false), and its words say it reads.

      Matched text

      annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "compare_quantum_circuits" says "compare": a word for reading.

      What this check looks for
    Description, as the server wrote it
    Tell me whether these two quantum circuits implement the same operation within the stated phase context.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • create_funding_sessionCreate an idempotent Stripe Checkout URL for human prepaid funding.Reads text others writeNo findings

    Why it is in this group

    • The name "create_funding_session" says "create": a word for a change.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Create an idempotent Stripe Checkout URL for human prepaid funding.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • diagnose_quantum_phaseFind the phase, rotation, ordering, or convention bug in this quantum operation.1 finding

    Why it is in this group

    • The description's first verb is "find": a word for reading.
    • The server marks it as not read-only (readOnlyHint: false).

    Findings

    • Warn

      The server marks "diagnose_quantum_phase" as not read-only (readOnlyHint: false), and its words say it reads.

      Matched text

      annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The description's first verb is "find": a word for reading.

      What this check looks for
    Description, as the server wrote it
    Find the phase, rotation, ordering, or convention bug in this quantum operation.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • diagnose_quantum_workflowDiagnose why this quantum workflow failed and return bounded corrective actions.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Diagnose why this quantum workflow failed and return bounded corrective actions.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • optimize_quantum_circuitMake this quantum circuit smaller, but return the original unless equivalence is verified.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Make this quantum circuit smaller, but return the original unless equivalence is verified.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • quantum_circuit_assurance_report_v1Problem: Validate, compile, and report bounded assurance evidence for OpenQASM 3.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Problem: Validate, compile, and report bounded assurance evidence for OpenQASM 3. Input: JSON with source. Result: assurance outcome, warnings, normalized source and evidence. Limits: Local software evidence only; 3 verification qubits; 65536 source bytes.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • quantum_cross_provider_portability_v1Problem: Translate this supported OpenQASM 3 circuit to the supplied local toolchain format without silent gate substitution.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Problem: Translate this supported OpenQASM 3 circuit to the supplied local toolchain format without silent gate substitution. Input: JSON with source, target format. Result: translated target artifact, explicit gate mapping, source and artifact digests. Limits: Local software evidence only; 65536 source bytes.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • quantum_execution_plan_select_v1Problem: Select a supported execution plan against the supplied cost, depth, duration limits, and weights.No findings

    Why it is in this group

    • The name "quantum_execution_plan_select_v1" says "select": a word for a change.
    Description, as the server wrote it
    Problem: Select a supported execution plan against the supplied cost, depth, duration limits, and weights. Input: JSON with plans, weights, maximum cost usd, maximum depth, maximum duration seconds. Result: ranked feasible plans, objective scores, selected plan identity. Limits: Local software evidence only; 4096 operations; 65536 request bytes.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • quantum_failed_workflow_diagnosis_v1Problem: Diagnose why this bounded quantum workflow failed and return supported corrective actions.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Problem: Diagnose why this bounded quantum workflow failed and return supported corrective actions. Input: JSON with stage, error text. Result: failure class, evidence terms, bounded corrective actions. Limits: Local software evidence only; 65536 request bytes.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • quantum_gate_basis_decomposition_v1Problem: Decompose this supported circuit operation into the supplied bounded gate basis and verify the declared relation.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Problem: Decompose this supported circuit operation into the supplied bounded gate basis and verify the declared relation. Input: JSON with operation, target basis, phase context. Result: decomposition or withheld candidate, gate list, verification status. Limits: Local software evidence only; 65536 request bytes.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • quantum_managed_simulator_v1Problem: Execute a bounded RQM Circuit IR circuit on the managed local statevector simulator.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Problem: Execute a bounded RQM Circuit IR circuit on the managed local statevector simulator. Input: JSON with circuit ir. Result: typed counts, probabilities, simulation configuration evidence. Limits: Local software evidence only; 16 qubits; 250 operations.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • quantum_openqasm3_preflight_v1Problem: Parse, normalize, and assess OpenQASM 3 before downstream execution.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Problem: Parse, normalize, and assess OpenQASM 3 before downstream execution. Input: JSON with source. Result: go, no-go, or unsupported verdict, normalized source, warnings and evidence. Limits: Local software evidence only; 3 verification qubits; 65536 source bytes.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • quantum_openqasm3_repair_v1Problem: Repair this bounded OpenQASM 3 program only with the supplied conservative repair policy.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Problem: Repair this bounded OpenQASM 3 program only with the supplied conservative repair policy. Input: JSON with source, allowed repairs. Result: repaired or withheld source, exact edit list, post-repair validation verdict. Limits: Local software evidence only; 65536 source bytes.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • quantum_optimization_preservation_audit_v1Problem: Audit candidate optimization equivalence and qualitative coupling preservation.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Problem: Audit candidate optimization equivalence and qualitative coupling preservation. Input: JSON with original circuit, candidate circuit. Result: preserved or candidate-withheld outcome, input and output hashes, metric and.... Limits: Local software evidence only; 3 verification qubits; 65536 request bytes.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • quantum_phase_aware_rewrite_v1Problem: Rewrite this supported circuit under the supplied phase-equivalence and target constraints.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Problem: Rewrite this supported circuit under the supplied phase-equivalence and target constraints. Input: JSON with operation, target gate, phase context. Result: rewritten operation or original, candidate withholding, verification status. Limits: Local software evidence only; 65536 request bytes.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • quantum_phase_sensitive_inspection_v1Problem: Diagnose the phase, rotation, ordering, or convention difference between these supported operations.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Problem: Diagnose the phase, rotation, ordering, or convention difference between these supported operations. Input: JSON with reference, candidate, phase context. Result: difference kind, angle delta, correction hint. Limits: Local software evidence only; 65536 request bytes.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • quantum_provider_readiness_check_v1Problem: Accept or reject this bounded circuit for the supplied pinned provider target and readiness rules.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Problem: Accept or reject this bounded circuit for the supplied pinned provider target and readiness rules. Input: JSON with qubit count, operations, target, rules. Result: readiness verdict, rule results and blockers, target provenance. Limits: Local software evidence only; 4096 operations; 65536 request bytes.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • quantum_provider_result_compare_v1Problem: Compare these bounded provider results using the supplied normalization and difference rules.1 finding

    Why it is in this group

    • The name "quantum_provider_result_compare_v1" says "compare": a word for reading.
    • The server marks it as not read-only (readOnlyHint: false).

    Findings

    • Warn

      The server marks "quantum_provider_result_compare_v1" as not read-only (readOnlyHint: false), and its words say it reads.

      Matched text

      annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "quantum_provider_result_compare_v1" says "compare": a word for reading.

      What this check looks for
    Description, as the server wrote it
    Problem: Compare these bounded provider results using the supplied normalization and difference rules. Input: JSON with left counts, right counts, normalization, rules. Result: normalized deltas, probability metrics, caller-rule verdict. Limits: Local software evidence only; 4096 operations; 65536 request bytes.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • quantum_provider_target_compile_v1Problem: Compile this bounded circuit to the supplied pinned provider target and return compatibility evidence.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Problem: Compile this bounded circuit to the supplied pinned provider target and return compatibility evidence. Input: JSON with qubit count, operations, target. Result: compiled artifact, gate mapping, pinned target snapshot and blockers. Limits: Local software evidence only; 4096 operations; 65536 request bytes.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • quantum_simulation_anomaly_diagnostic_v1Problem: Compare this bounded simulation result with the supplied expectation and anomaly rules.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Problem: Compare this bounded simulation result with the supplied expectation and anomaly rules. Input: JSON with observed probabilities, expected probabilities, maximum l1 error.... Result: L1 and bin deltas, violating outcomes, anomaly verdict. Limits: Local software evidence only; 65536 request bytes.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • quantum_simulation_result_compare_v1Problem: Compare these bounded simulation results using the supplied deterministic probability rules.1 finding

    Why it is in this group

    • The name "quantum_simulation_result_compare_v1" says "compare": a word for reading.
    • The server marks it as not read-only (readOnlyHint: false).

    Findings

    • Warn

      The server marks "quantum_simulation_result_compare_v1" as not read-only (readOnlyHint: false), and its words say it reads.

      Matched text

      annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "quantum_simulation_result_compare_v1" says "compare": a word for reading.

      What this check looks for
    Description, as the server wrote it
    Problem: Compare these bounded simulation results using the supplied deterministic probability rules. Input: JSON with left probabilities, right probabilities, rules. Result: probability deltas, distance metrics, threshold verdict. Limits: Local software evidence only; 4096 operations; 65536 request bytes.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • quantum_supported_circuit_equivalence_v1Problem: Compare two RQM Circuit IR circuits within the supported verifier scope.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Problem: Compare two RQM Circuit IR circuits within the supported verifier scope. Input: JSON with original circuit, candidate circuit. Result: equivalent, not-equivalent, or unsupported verdict, verification evidence, input.... Limits: Local software evidence only; 3 verification qubits; 65536 request bytes.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • quantum_two_qubit_local_equivalence_v1Problem: Classify this supported two-qubit operation by its bounded local-equivalence class and phase context.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Problem: Classify this supported two-qubit operation by its bounded local-equivalence class and phase context. Input: JSON with operation, phase context. Result: local-equivalence class, canonical coordinates, explicit phase treatment. Limits: Local software evidence only; 2 qubits.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • quantum_two_qubit_target_synthesis_v1Problem: Choose and verify a bounded target-basis implementation for this supported two-qubit operation under supplied objectives.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Problem: Choose and verify a bounded target-basis implementation for this supported two-qubit operation under supplied objectives. Input: JSON with operation, target basis, phase context, objectives. Result: verified circuit or original-retained outcome, gate count and depth, class and.... Limits: Local software evidence only; 2 qubits.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • quantum_verified_circuit_optimization_v1Problem: Optimize RQM Circuit IR and return the original unless preservation is verified.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Problem: Optimize RQM Circuit IR and return the original unless preservation is verified. Input: JSON with circuit. Result: verified candidate or original fallback, metric deltas, preservation evidence. Limits: Local software evidence only; 3 verification qubits; 65536 request bytes.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • repair_openqasm3Repair this invalid OpenQASM 3 program conservatively, or tell me exactly why a safe repair cannot be made.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Repair this invalid OpenQASM 3 program conservatively, or tell me exactly why a safe repair cannot be made.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • run_buyer_jobQuote, settle, and submit one allowlisted WaveEngine, Studio, or Robotics buyer job using x402.No findings

    Why it is in this group

    • The name "run_buyer_job" says "run": a word for a change.
    Description, as the server wrote it
    Quote, settle, and submit one allowlisted WaveEngine, Studio, or Robotics buyer job using x402.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • search_buyer_jobsSelect RQM buyer jobs from work-language requests using deterministic semantic scoring over instructions, examples, outputs, and next steps.1 finding

    Why it is in this group

    • The name "search_buyer_jobs" says "search": a word for reading.
    • The description's first verb is "select": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "search_buyer_jobs" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "search_buyer_jobs" says "search": a word for reading.

      What this check looks for
    Description, as the server wrote it
    Select RQM buyer jobs from work-language requests using deterministic semantic scoring over instructions, examples, outputs, and next steps.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • submit_quantum_jobReserve an exact quote and submit one bounded managed-simulator job.No findings

    Why it is in this group

    • The name "submit_quantum_job" says "submit": a word for a change.
    Description, as the server wrote it
    Reserve an exact quote and submit one bounded managed-simulator job.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • synthesize_two_qubit_targetChoose the best verified target-native implementation of this two-qubit block.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Choose the best verified target-native implementation of this two-qubit block.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • translate_quantum_circuitTranslate this circuit to Qiskit/OpenQASM 3 or Braket without silently changing its supported semantics.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Translate this circuit to Qiskit/OpenQASM 3 or Braket without silently changing its supported semantics.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
Only reads 9Claude Code: allow
  • describe_quantum_capabilitiesFree, anonymous API-owned scientific capability contracts and domain suggestions.Reads text others writeNo findings

    Why it is in this group

    • The name "describe_quantum_capabilities" says "describe": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Free, anonymous API-owned scientific capability contracts and domain suggestions. Start here before choosing or funding a quantum job. Inspect separate source, installed, hosted, simulator, live-QPU and public coverage; unknown means unverified. Read schemas, examples and limits; unavailable chemistry, cryptography or hybrid workflows must not be replaced with Bell or promised as execution. This finite registry is not the complete roadmap. Workflow tool references do not promise availability on this endpoint or eligibility for the caller. No account, balance, job, private policy, quote, reservation or hardware execution is accessed. Existing authenticated tools own those operations.

    Annotations the server declares

    • title: Discover RQM quantum capabilities and domain guidance
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_account_balanceRead the authenticated canonical Account Core prepaid USD balance.No findings

    Why it is in this group

    • The name "get_account_balance" says "get": a word for reading.
    Description, as the server wrote it
    Read the authenticated canonical Account Core prepaid USD balance.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_capabilityReturn one full approved public Wave capability descriptor.No findings

    Why it is in this group

    • The name "get_capability" says "get": a word for reading.
    Description, as the server wrote it
    Return one full approved public Wave capability descriptor.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_job_resultRead one completed and already-settled product result.No findings

    Why it is in this group

    • The name "get_job_result" says "get": a word for reading.
    Description, as the server wrote it
    Read one completed and already-settled product result.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_job_statusRead one authorized Wave or Studio managed-simulator job.No findings

    Why it is in this group

    • The name "get_job_status" says "get": a word for reading.
    Description, as the server wrote it
    Read one authorized Wave or Studio managed-simulator job.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_studio_receiptRetrieve the durable Account Core receipt for one settled Studio reservation.No findings

    Why it is in this group

    • The name "get_studio_receipt" says "get": a word for reading.
    Description, as the server wrote it
    Retrieve the durable Account Core receipt for one settled Studio reservation.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • list_buyer_jobsReturn complete agent discovery contracts and readiness for the exact 20/20/20 RQM specialist work portfolio.No findings

    Why it is in this group

    • The name "list_buyer_jobs" says "list": a word for reading.
    Description, as the server wrote it
    Return complete agent discovery contracts and readiness for the exact 20/20/20 RQM specialist work portfolio.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • list_capabilitiesDescribe the preserved v0/v1 surface or the dynamic v2/v3 Wave catalog.No findings

    Why it is in this group

    • The name "list_capabilities" says "list": a word for reading.
    Description, as the server wrote it
    Describe the preserved v0/v1 surface or the dynamic v2/v3 Wave catalog.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • quote_jobReturn a preserved v0 placeholder or a durable v1 Account Core USD quote.No findings

    Why it is in this group

    • The description's first verb is "return": a word for reading.
    Description, as the server wrote it
    Return a preserved v0 placeholder or a durable v1 Account Core USD quote.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

No private-data, untrusted-input, outbound path in this server alone: no tool is tagged private-data or outbound.

Reads private data0
Reads files, mail, messages, databases, secrets, calendars or repositories.
Reads text others write2
Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
Can send data out0
Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Install

Pinned to version 1.6.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http studio https://jobs.rqmtechnologies.com/mcp/studio

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__studio__describe_quantum_capabilities",
      "mcp__studio__list_buyer_jobs",
      "mcp__studio__list_capabilities",
      "mcp__studio__get_capability",
      "mcp__studio__quote_job",
      "mcp__studio__get_account_balance",
      "mcp__studio__get_studio_receipt",
      "mcp__studio__get_job_status",
      "mcp__studio__get_job_result"
    ],
    "ask": [
      "mcp__studio__search_buyer_jobs",
      "mcp__studio__run_buyer_job",
      "mcp__studio__quantum_failed_workflow_diagnosis_v1",
      "mcp__studio__quantum_phase_sensitive_inspection_v1",
      "mcp__studio__quantum_openqasm3_preflight_v1",
      "mcp__studio__quantum_simulation_anomaly_diagnostic_v1",
      "mcp__studio__quantum_openqasm3_repair_v1",
      "mcp__studio__quantum_gate_basis_decomposition_v1",
      "mcp__studio__quantum_cross_provider_portability_v1",
      "mcp__studio__quantum_phase_aware_rewrite_v1",
      "mcp__studio__quantum_supported_circuit_equivalence_v1",
      "mcp__studio__quantum_provider_result_compare_v1",
      "mcp__studio__quantum_simulation_result_compare_v1",
      "mcp__studio__quantum_two_qubit_local_equivalence_v1",
      "mcp__studio__quantum_verified_circuit_optimization_v1",
      "mcp__studio__quantum_two_qubit_target_synthesis_v1",
      "mcp__studio__quantum_provider_target_compile_v1",
      "mcp__studio__quantum_execution_plan_select_v1",
      "mcp__studio__quantum_circuit_assurance_report_v1",
      "mcp__studio__quantum_optimization_preservation_audit_v1",
      "mcp__studio__quantum_managed_simulator_v1",
      "mcp__studio__quantum_provider_readiness_check_v1",
      "mcp__studio__check_quantum_circuit",
      "mcp__studio__compare_quantum_circuits",
      "mcp__studio__repair_openqasm3",
      "mcp__studio__optimize_quantum_circuit",
      "mcp__studio__diagnose_quantum_workflow",
      "mcp__studio__audit_quantum_transformation",
      "mcp__studio__translate_quantum_circuit",
      "mcp__studio__diagnose_quantum_phase",
      "mcp__studio__synthesize_two_qubit_target",
      "mcp__studio__classify_two_qubit_operation",
      "mcp__studio__create_funding_session",
      "mcp__studio__submit_quantum_job"
    ],
    "deny": [
      "mcp__studio__cancel_job"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as studio. Review it before you use it.

Capability tags behind 2 rules
  • mcp__studio__describe_quantum_capabilities untrusted-input
  • mcp__studio__create_funding_session untrusted-input