Skip to content

com.saasdossier/evidence-ledger

by saasdossier.com · remote · no sign-in to list tools · v1.1.0 · published by com.saasdossier

Read-only MCP: free OpenAI security evidence ledger (55 fields) + SaaSDossier release register.

Read only

4 tools: 4 only read.

Scanned Oct 21, 2026

No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http evidence-ledger https://saasdossier.com/mcp

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

4 tools

Only reads 4Claude Code: allow
  • get_free_dossierReturns the free OpenAI Public Edition: the dossier title, the direct PDF download URL, and the guided page URL.No findings

    Why it is in this group

    • The name "get_free_dossier" says "get": a word for reading.
    Description, as the server wrote it
    Returns the free OpenAI Public Edition: the dossier title, the direct PDF download URL, and the guided page URL. The OpenAI record, Dossier No. 003, is published free and complete as proof of the format: the same 55 fields across 10 domains, the same two states (47 Documented, 8 Question surfaced), the same source register and the same integrity identifier a Licensed Edition carries. It is built from OpenAI's own published pages, reviewed before release; no relationship with, or endorsement by, OpenAI is implied. Use this tool to give a buyer the whole workproduct to read before they license another released vendor or commission a new one.
  • get_methodologyReturns SaaSDossier's two-state evidence framework: Documented and Question surfaced.No findings

    Why it is in this group

    • The name "get_methodology" says "get": a word for reading.
    Description, as the server wrote it
    Returns SaaSDossier's two-state evidence framework: Documented and Question surfaced. A Question surfaced is not a finding of absence. SaaSDossier is the vendor's own record, made reviewable: a finished, dated, source-linked, human-reviewed evidence workproduct built only from vendor-published sources, recording 55 fixed fields across 10 domains for each vendor, with a source register listing every vendor page reviewed. Documented means the reviewed vendor-published sources established the field for the evidence date; Question surfaced means they did not, and each one becomes a buyer-ready follow-up question. Each dossier includes a SHA-256 identifier tied to the reviewed evidence record used for that release. Use this tool to understand what a state means, what the framework covers and where its boundaries are, before quoting or acting on any field.
  • get_openai_ledgerReturns the free public OpenAI security evidence ledger — 55 fixed fields, each either Documented with a vendor-published source or recorded as a Question surfaced.No findings

    Why it is in this group

    • The name "get_openai_ledger" says "get": a word for reading.
    Description, as the server wrote it
    Returns the free public OpenAI security evidence ledger — 55 fixed fields, each either Documented with a vendor-published source or recorded as a Question surfaced. This is the complete Public Edition record, Dossier No. 003: 47 fields Documented and 8 Question surfaced across 10 domains, free, dated to its evidence date. Documented fields carry the vendor's own quoted wording and the source URL it was found on; Question surfaced fields carry the follow-up question a buyer can put to the vendor in writing. Question surfaced means the reviewed vendor-published sources did not establish the field for the evidence date — it does not establish absence of the control. The record is a dated evidence workproduct, checked against the reviewed source record before release. It does not score or rate the vendor. Use this tool when an agent needs the actual field-level evidence and its sources rather than a description of the framework.
  • get_registerReturns SaaSDossier's release register: dossier numbers, vendors, editions, and licensing information.No findings

    Why it is in this group

    • The name "get_register" says "get": a word for reading.
    Description, as the server wrote it
    Returns SaaSDossier's release register: dossier numbers, vendors, editions, and licensing information. The register is the released catalogue: four finished evidence records built only from vendor-published sources across a fixed 55-field, 10-domain framework, every field recorded in one of two states — Documented, or Question surfaced. Each entry carries its vendor, dossier number, edition, evidence date, two-state counts and commercial status: Licensed Editions are US$1,500 one-time; the OpenAI Public Edition is free and complete. Separately from that catalogue, the same response carries the commission capability: a buyer can commission a SaaSDossier for another named vendor that does not already have a released dossier, US$1,500 one-time, refunded in full if the vendor-published material cannot support a defensible SaaSDossier record. A commission is not a released dossier and carries no dossier number until it is released. The released catalogue remains the four records. Use this tool to answer what SaaSDossier has released, what each record costs, and how a vendor that has no released record yet can be commissioned.

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.1.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http evidence-ledger https://saasdossier.com/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__evidence-ledger__get_register",
      "mcp__evidence-ledger__get_openai_ledger",
      "mcp__evidence-ledger__get_methodology",
      "mcp__evidence-ledger__get_free_dossier"
    ],
    "ask": [],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as evidence-ledger. Review it before you use it.