Skip to content

Dactic

io.dactic/dactic-mcpdactic.iostreamable-httpv0.1.2Scanned

Connect AI clients to your Dactic work context through a hosted MCP service.

34 tools: 12 change things and 22 only read.

Tools: 0 delete, 0 irreversible, 12 write, 22 read.
  • Reads private data · 3
  • Reads text others write · 1
  • Can send data out · 0
  • 1 finding

Anlyon alternative

12 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

34 tools

Changes things 12Claude Code: ask
  • ask_knowledgeAnswer a question from your own Dactic context: matches holds evidence from your synced work data and current department policies related to the question; your_profile holds your w…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Answer a question from your own Dactic context: matches holds evidence from your synced work data and current department policies related to the question; your_profile holds your work context, skills, agents and connected apps. When nothing matches, say so; never another user's data, even for org admins.

    Annotations the server declares

    • title: Ask my Dactic knowledge
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
    • idempotentHint: true
  • check_against_policyAdvisory check of a draft reply, plan or action against your department's Dactic policies.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Advisory check of a draft reply, plan or action against your department's Dactic policies. Returns findings that quote the policy and the draft verbatim, with a suggested change, and says how many policies were checked. Present the result as advice: it is never a compliance sign-off. not_assessed means the check couldn't run; the applicable policies are listed instead.

    Annotations the server declares

    • title: Check a draft against my policies
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
    • idempotentHint: true
  • check_freshnessIs my Dactic knowledge up to date?No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Is my Dactic knowledge up to date? Reports each surface (app sync, confirmed knowledge, terminology, approved playbook, department policies, skills, and optionally one agent) as fresh, stale, empty or unknown, with a recommendation for anything not fresh. Pass refs from other Dactic tools to check specific items. scope=org is for org admins.

    Annotations the server declares

    • title: Check if my Dactic knowledge is current
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
    • idempotentHint: true
  • create_agent_from_processDraft a new Dactic agent, and the new skills it needs, from a process the user describes in this chat — use this when the user's existing skills don't cover the work (synthesize_ag…No findings

    Why it is in this group

    • The name "create_agent_from_process" says "create": a word for a change.
    Description, as the server wrote it
    Draft a new Dactic agent, and the new skills it needs, from a process the user describes in this chat — use this when the user's existing skills don't cover the work (synthesize_agent only reuses existing skills). Before calling, ask the user for the purpose, the concrete steps in order, when it should run, the data sources or tools it uses and anything it must never do; then confirm the summary with them. Runs in the background: returns a task_id; call get_task_status until succeeded (with the draft and its review link) or failed. The draft is saved for review in the Dactic app and is never deployed from here. target_platform claude only; Monday agents are created in the Dactic app.

    Annotations the server declares

    • title: Create a new agent from a process I describe
    • readOnlyHint: false
    • destructiveHint: false
    • openWorldHint: false
    • idempotentHint: false
  • deploy_agentFirst deployment of your selected saved draft.No findings

    Why it is in this group

    • The name "deploy_agent" says "deploy": a word for a change.
    Description, as the server wrote it
    First deployment of your selected saved draft. Call without confirmation_code for a preview, show it to the user and obtain authorization, then repeat the same definition/target with the code. Checks skills, source approvals and existing deploy readiness/billing gates. Returns a background task; poll get_task_status for deployment state. An existing deployment is identified without redeploying.

    Annotations the server declares

    • title: Deploy agent
    • readOnlyHint: false
    • destructiveHint: false
    • openWorldHint: false
    • idempotentHint: true
  • guide_workflowBuild advisory human-reviewed workflow options using accessible agents, context gaps, connection/sync readiness and provisional platform capabilities.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Build advisory human-reviewed workflow options using accessible agents, context gaps, connection/sync readiness and provisional platform capabilities. Separates source, execution-platform and host connectors. Returns next actions and conservative net human-hours estimates only from user-confirmed measurements. Missing measurements trigger a question. Never executes, connects, schedules or deploys.

    Annotations the server declares

    • title: Guide workflow
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
    • idempotentHint: true
  • invoke_agentRun one of your deployed Dactic agents.No findings

    Why it is in this group

    • The name "invoke_agent" says "invoke": a word for a change.
    Description, as the server wrote it
    Run one of your deployed Dactic agents. Claude agents start a Managed Agent session; Monday agents are run by Monday's own board automation. The response always includes the agent's complete instructions and skills. Retrying the same request returns the same run instead of starting another.

    Annotations the server declares

    • title: Run a Dactic agent
    • readOnlyHint: false
    • destructiveHint: false
    • openWorldHint: false
    • idempotentHint: true
  • load_agentLoad one of your Dactic agents (by agent_id or exact agent_name) so you can run it in this chat: returns its complete instructions and skills.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Load one of your Dactic agents (by agent_id or exact agent_name) so you can run it in this chat: returns its complete instructions and skills. Follow them exactly. Returns not_ready when the agent has no approved instructions, and not_found when no agent matches; it never returns a partial agent.

    Annotations the server declares

    • title: Load a Dactic agent to run here
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
    • idempotentHint: true
  • recommend_agentMatch a task to accessible deployed agents by their stored instructions and skills.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Match a task to accessible deployed agents by their stored instructions and skills. Returns candidate evidence and limitations; never runs or creates an agent.

    Annotations the server declares

    • title: Recommend agent
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
    • idempotentHint: true
  • recommend_new_agentsAfter confirming the user's goal, save a new recommendation iteration containing validated Claude draft proposals from their own skills/context.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    After confirming the user's goal, save a new recommendation iteration containing validated Claude draft proposals from their own skills/context. Optional priorities produce up to three proposals. A proposal never copies an agent or draft the user already has: when their skills are all in use the result is existing_agent_covers with those agents. Returns a background task; poll get_task_status. Monday synthesis is unavailable in this path. Never deploys.

    Annotations the server declares

    • title: Recommend new agents
    • readOnlyHint: false
    • destructiveHint: false
    • openWorldHint: false
    • idempotentHint: true
  • submit_agent_feedbackFile feedback about one of your own Dactic agents (e.g.No findings

    Why it is in this group

    • The name "submit_agent_feedback" says "submit": a word for a change.
    Description, as the server wrote it
    File feedback about one of your own Dactic agents (e.g. 'it keeps CC'ing finance'). Quote the user's words in detail. First call without confirmation_code: you get a preview and a confirmation_code and nothing is saved; show the preview, ask the user to confirm, then call again with the same fields plus confirmation_code. It's applied at the agent's next refresh, not immediately. Only for your own agents.

    Annotations the server declares

    • title: Send feedback about my agent
    • readOnlyHint: false
    • destructiveHint: false
    • openWorldHint: false
    • idempotentHint: true
  • synthesize_agentDraft a new Dactic agent for a task the user describes, built only from the user's own Dactic skills, policies and work context.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Draft a new Dactic agent for a task the user describes, built only from the user's own Dactic skills, policies and work context. Runs in the background: it returns a task_id at once; call get_task_status with it until the status is succeeded or failed. The result is a draft saved for review in the Dactic app — it is never deployed from here. If none of the user's skills fit, the result says not_enough_material: then offer create_agent_from_process, which builds the agent and its new skills from the process the user describes. If the user's existing agents or drafts already use every skill that fits, the result says existing_agent_covers and names them instead of drafting a duplicate; for a genuinely new process use create_agent_from_process. Confirm the task with the user before calling. target_platform claude only for now.

    Annotations the server declares

    • title: Draft a new agent from my skills
    • readOnlyHint: false
    • destructiveHint: false
    • openWorldHint: false
    • idempotentHint: false
Only reads 22Show 22 read-only tools
  • compare_agent_versionsCompare two stored artifact versions of the same accessible agent/platform, with instruction diffs and skill additions/removals.No findings

    Why it is in this group

    • The name "compare_agent_versions" says "compare": a word for reading.
    Description, as the server wrote it
    Compare two stored artifact versions of the same accessible agent/platform, with instruction diffs and skill additions/removals. Missing guardrails/parameters remain unknown. Never rolls back or deploys.

    Annotations the server declares

    • title: Compare agent versions
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
    • idempotentHint: true
  • fetchFetch the full text of one Dactic item by the id search returned, with a link to it.No findings

    Why it is in this group

    • The name "fetch" says "fetch": a word for reading.
    Description, as the server wrote it
    Fetch the full text of one Dactic item by the id search returned, with a link to it.

    Annotations the server declares

    • title: Fetch a Dactic item
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
    • idempotentHint: true
  • find_context_gapsAssess task preparation using available knowledge, skills, policies, terminology and sync readiness.No findings

    Why it is in this group

    • The name "find_context_gaps" says "find": a word for reading.
    Description, as the server wrote it
    Assess task preparation using available knowledge, skills, policies, terminology and sync readiness. Returns blocking/nonblocking gaps; unknown requirements or execution permissions remain unknown.

    Annotations the server declares

    • title: Find context gaps
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
    • idempotentHint: true
  • get_agentGet one of your Dactic agents by id: its name, platform, status, complete instructions and every skill (name, description, full procedure).No findings

    Why it is in this group

    • The name "get_agent" says "get": a word for reading.
    Description, as the server wrote it
    Get one of your Dactic agents by id: its name, platform, status, complete instructions and every skill (name, description, full procedure). Never returns another user's agent.

    Annotations the server declares

    • title: Get a Dactic agent
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
    • idempotentHint: true
  • get_context_bundleGet everything a task needs from Dactic in one call; use it before doing a task, especially when running an agent.No findings

    Why it is in this group

    • The name "get_context_bundle" says "get": a word for reading.
    Description, as the server wrote it
    Get everything a task needs from Dactic in one call; use it before doing a task, especially when running an agent. With agent_id: that agent's complete instructions and skills. Without: your most relevant skills. Plus your confirmed knowledge and related evidence, your department's applicable policies with citations, confirmed meanings of company terms (unresolved terms are listed, never guessed) and a freshness summary. Fits token_budget by dropping whole lower-priority items, listed in omitted.

    Annotations the server declares

    • title: Get everything a task needs
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
    • idempotentHint: true
  • get_context_deltaRetrieve added/updated/removed permitted knowledge and published policies since an actor-bound snapshot cursor.No findings

    Why it is in this group

    • The name "get_context_delta" says "get": a word for reading.
    Description, as the server wrote it
    Retrieve added/updated/removed permitted knowledge and published policies since an actor-bound snapshot cursor. Omit cursor for a complete bounded baseline. Expired cursors or changed scopes/permissions require a fresh baseline. Returns snapshot differences, not every intermediate change event; the host retains the cursor.

    Annotations the server declares

    • title: Get context delta
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
    • idempotentHint: true
  • get_entity_contextFollow bounded explicit stored links from an approved board, accessible agent/project or confirmed term.No findings

    Why it is in this group

    • The name "get_entity_context" says "get": a word for reading.
    Description, as the server wrote it
    Follow bounded explicit stored links from an approved board, accessible agent/project or confirmed term. Returns entities, relationship bases, citations and missing-link gaps. Text similarity never establishes a dependency.

    Annotations the server declares

    • title: Get entity context
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
    • idempotentHint: true
  • get_feedback_statusFollow the recorded processing/application state of your submitted agent feedback.No findings

    Why it is in this group

    • The name "get_feedback_status" says "get": a word for reading.
    Description, as the server wrote it
    Follow the recorded processing/application state of your submitted agent feedback. No immediate agent change is implied.

    Annotations the server declares

    • title: Get feedback status
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
    • idempotentHint: true
  • get_knowledge_provenanceWhere did that come from?No findings

    Why it is in this group

    • The name "get_knowledge_provenance" says "get": a word for reading.
    Description, as the server wrote it
    Where did that come from? For refs returned by other Dactic tools (1-20), describes each item's source and a confidence of high, medium or low from a fixed rubric, with the rule that applied in `basis`. Rubric — terminology: high when confirmed with score >= 0.9 and no conflict, medium when confirmed otherwise, low when not confirmed. Knowledge: high when confirmed in an interview, medium when inferred from 3+ evidence items (or confirmed without a recorded confirmation), low otherwise or when disputed. Evidence: high when it supports confirmed knowledge, medium when it supports unconfirmed knowledge, low otherwise. Policy: high when in the current published COE version, medium when ingested from a document but not published, low with no source document. Skill: high when the owner has an approved playbook and a live agent uses it, medium when active, low when retired. Playbook: high approved, medium needs follow-up, low otherwise. Never repeats evidence text.

    Annotations the server declares

    • title: Where did that come from?
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
    • idempotentHint: true
  • get_policyGet your department's current policies with their source document.Reads private dataNo findings

    Why it is in this group

    • The name "get_policy" says "get": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "get" and "document": it reads documents.
    Description, as the server wrote it
    Get your department's current policies with their source document. With query: the policies that apply to it (all of them when your department has few, else the closest matches; coverage says which). Returns not_found when none are published.

    Annotations the server declares

    • title: Get my department's policies
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
    • idempotentHint: true
  • get_skillGet one of your Dactic skills by id, with its full procedure at disclosure_tier L3.No findings

    Why it is in this group

    • The name "get_skill" says "get": a word for reading.
    Description, as the server wrote it
    Get one of your Dactic skills by id, with its full procedure at disclosure_tier L3.

    Annotations the server declares

    • title: Get a Dactic skill
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
    • idempotentHint: true
  • get_skill_usageHow often your Dactic skills were listed and loaded by AI clients (ChatGPT, Claude…) over the last 7, 30 or 90 days, how many live agents use each, and a suggestion (promote, keep,…Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "get_skill_usage" says "get": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "chat": it reads messages.
    • untrusted-inputThe description's first sentence says "chat": it reads messages, which other people can write.
    Description, as the server wrote it
    How often your Dactic skills were listed and loaded by AI clients (ChatGPT, Claude…) over the last 7, 30 or 90 days, how many live agents use each, and a suggestion (promote, keep, review or trim) with its basis. Suggestions are advice and never change anything. data_since is when counting started; there is no earlier history. scope=org is for org admins.

    Annotations the server declares

    • title: How my Dactic skills are used
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
    • idempotentHint: true
  • get_sync_statusReport recorded sync progress, last successful sync, approved source coverage and safe recovery guidance.1 finding

    Why it is in this group

    • The name "get_sync_status" says "get": a word for reading.

    Findings

    • Info

      The description mentions "Credential".

      Matched text

      description: "...ce coverage and safe recovery guidance. Credential linkage is not proof of current access."

      What this check looks for
    Description, as the server wrote it
    Report recorded sync progress, last successful sync, approved source coverage and safe recovery guidance. Credential linkage is not proof of current access.

    Annotations the server declares

    • title: Get sync status
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
    • idempotentHint: true
  • get_task_statusStatus of a background task you started (e.g.No findings

    Why it is in this group

    • The name "get_task_status" says "get": a word for reading.
    Description, as the server wrote it
    Status of a background task you started (e.g. synthesize_agent): queued, running, succeeded (with its result) or failed (with error_message). Only your own tasks; anything else is not_found.

    Annotations the server declares

    • title: Check a Dactic background task
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
    • idempotentHint: true
  • get_usageYour Dactic AI usage (tokens by operation) over the last N days; scope=org is for org admins.No findings

    Why it is in this group

    • The name "get_usage" says "get": a word for reading.
    Description, as the server wrote it
    Your Dactic AI usage (tokens by operation) over the last N days; scope=org is for org admins.

    Annotations the server declares

    • title: My Dactic AI usage
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
    • idempotentHint: true
  • get_user_contextYour own Dactic profile for personalising answers: job title, team, department and role; work context (role, guardrails, preferences); confirmed knowledge (paginated; unconfirmed f…Reads private dataNo findings

    Why it is in this group

    • The name "get_user_context" says "get": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "file": it reads files.
    Description, as the server wrote it
    Your own Dactic profile for personalising answers: job title, team, department and role; work context (role, guardrails, preferences); confirmed knowledge (paginated; unconfirmed files are counted, not shown); connected apps; tools you use. Only ever your own data, even for org admins.

    Annotations the server declares

    • title: My Dactic profile
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
    • idempotentHint: true
  • list_agentsList the Dactic agents you (the signed-in user) have deployed, newest first.No findings

    Why it is in this group

    • The name "list_agents" says "list": a word for reading.
    Description, as the server wrote it
    List the Dactic agents you (the signed-in user) have deployed, newest first. Returns each agent's id, name, platform and status. Use load_agent to run one or get_agent for its details. Returns not_found when you have none.

    Annotations the server declares

    • title: List my Dactic agents
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
    • idempotentHint: true
  • list_skillsList your active Dactic skills (procedures derived from your interviews).No findings

    Why it is in this group

    • The name "list_skills" says "list": a word for reading.
    Description, as the server wrote it
    List your active Dactic skills (procedures derived from your interviews). disclosure_tier L1 returns a catalog; L2/L3 add the procedure. Use get_skill for one skill. Returns not_found when you have none.

    Annotations the server declares

    • title: List my Dactic skills
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
    • idempotentHint: true
  • query_work_datasetQuery the approved synced Monday item view with supported scalar filters, sorting, grouping and count/sum aggregation.No findings

    Why it is in this group

    • The name "query_work_dataset" says "query": a word for reading.
    Description, as the server wrote it
    Query the approved synced Monday item view with supported scalar filters, sorting, grouping and count/sum aggregation. Fields are base identifiers or column:<stored-column-id>. Returns typed rows, pagination and explicit sync/coverage limits. Older syncs may lack structured columns. Never accepts SQL.

    Annotations the server declares

    • title: Query work dataset
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
    • idempotentHint: true
  • resolve_termsLook up what company-specific terms mean, from your organization's confirmed Dactic terminology only.No findings

    Why it is in this group

    • The name "resolve_terms" says "resolve": a word for reading.
    Description, as the server wrote it
    Look up what company-specific terms mean, from your organization's confirmed Dactic terminology only. Terms that aren't confirmed come back in gaps; never guess their meaning.

    Annotations the server declares

    • title: Look up company terms
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
    • idempotentHint: true
  • retrieve_similar_casesFind comparable recent runs or resolved feedback owned by you.No findings

    Why it is in this group

    • The name "retrieve_similar_cases" says "retrieve": a word for reading.
    Description, as the server wrote it
    Find comparable recent runs or resolved feedback owned by you. Returns recorded summaries/outcomes, citations and uncertainty; missing actions/outcomes remain unknown. Past outcomes do not guarantee success.

    Annotations the server declares

    • title: Retrieve similar cases
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
    • idempotentHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

No private-data, untrusted-input, outbound path in this server alone: no tool is tagged outbound.

Reads private data3
Reads files, mail, messages, databases, secrets, calendars or repositories.
Reads text others write1
Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
Can send data out0
Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Findings

Matches of fixed checks, with the text they matched.

1 info

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

Install

Pinned to version 0.1.2. Values in angle brackets are yours to fill in.

claude mcp add --transport http dactic https://mcp.app.dactic.io/mcp
claude mcp add --transport http dactic https://mcp.app.dactic.io/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__dactic__list_agents",
      "mcp__dactic__get_agent",
      "mcp__dactic__resolve_terms",
      "mcp__dactic__get_policy",
      "mcp__dactic__list_skills",
      "mcp__dactic__get_skill",
      "mcp__dactic__get_context_bundle",
      "mcp__dactic__get_user_context",
      "mcp__dactic__get_knowledge_provenance",
      "mcp__dactic__get_skill_usage",
      "mcp__dactic__get_task_status",
      "mcp__dactic__search",
      "mcp__dactic__fetch",
      "mcp__dactic__get_usage",
      "mcp__dactic__get_sync_status",
      "mcp__dactic__get_feedback_status",
      "mcp__dactic__compare_agent_versions",
      "mcp__dactic__find_context_gaps",
      "mcp__dactic__get_entity_context",
      "mcp__dactic__get_context_delta",
      "mcp__dactic__retrieve_similar_cases",
      "mcp__dactic__query_work_dataset"
    ],
    "ask": [
      "mcp__dactic__load_agent",
      "mcp__dactic__invoke_agent",
      "mcp__dactic__check_freshness",
      "mcp__dactic__ask_knowledge",
      "mcp__dactic__submit_agent_feedback",
      "mcp__dactic__check_against_policy",
      "mcp__dactic__synthesize_agent",
      "mcp__dactic__create_agent_from_process",
      "mcp__dactic__recommend_agent",
      "mcp__dactic__guide_workflow",
      "mcp__dactic__recommend_new_agents",
      "mcp__dactic__deploy_agent"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as dactic. Review it before you use it.

Capability tags behind 3 rules
  • mcp__dactic__get_policy private-data
  • mcp__dactic__get_user_context private-data
  • mcp__dactic__get_skill_usage private-data, untrusted-input

Pin

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/io.dactic/dactic-mcp/verify?hash=b619273858737549c0a873a67d90bcbb3213ba06b607b0a767a5fa811f351f23" | jq -e '.changed == false'

Pinned hash b61927385873, from Nov 4, 2026, 12:18 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/io.dactic/dactic-mcp/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

anlyon.dev badge for io.dactic/dactic-mcp
[![anlyon.dev](https://anlyon.dev/badge/io.dactic/dactic-mcp.svg)](https://anlyon.dev/servers/io.dactic/dactic-mcp)

Source: MCP Registry · repository. Synced Nov 4, 2026, 12:17 UTC.