Skip to content

io.github.NellInc/saferagenticai-mcp

by NellInc · remote · local (pypi) · no sign-in to list tools · v0.3.6 · published by GitHub user NellInc

Read-only tools over the Safer Agentic AI framework: 238 patterns + 14 heuristics.

Read only
CompareRegistry entry

10 tools: 10 only read.

Scanned Oct 21, 2026

No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http saferagenticai https://mcp.saferagenticai.org/mcp

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

10 tools

Only reads 10Claude Code: allow
  • find_patterns_for_taskGiven a natural-language task description (e.g., 'I'm building a tool-using agent that runs shell commands'), return the most relevant patterns grouped by suite.No findings

    Why it is in this group

    • The name "find_patterns_for_task" says "find": a word for reading.
    Description, as the server wrote it
    Given a natural-language task description (e.g., 'I'm building a tool-using agent that runs shell commands'), return the most relevant patterns grouped by suite. Use this as a starting point for any cross-cutting design question; then follow up with get_requirement on specific pattern_ids. Defaults to verbosity='compact' (cheap triage); pass 'full' to inline snippets and confidence flags.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • get_cross_referencesReturn outgoing adjacencies for a pattern.No findings

    Why it is in this group

    • The name "get_cross_references" says "get": a word for reading.
    Description, as the server wrote it
    Return outgoing adjacencies for a pattern. `explicit_cross_references` are author-asserted (each pattern's `cross_references` YAML field). `inferred_adjacent` (when include_inferred=true) currently returns *same-suite siblings only* — it does not do semantic similarity. Treat inferred entries as 'neighbours worth scanning,' not as endorsed dependencies.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • get_operational_heuristicRetrieve a single operational heuristic by id (e.g., 'OH::geoffrey-pattern').No findings

    Why it is in this group

    • The name "get_operational_heuristic" says "get": a word for reading.
    Description, as the server wrote it
    Retrieve a single operational heuristic by id (e.g., 'OH::geoffrey-pattern'). Returns the full entry: principle, framework mapping, evidence sources from production deployment, design patterns, anti-patterns, and discovery narrative.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • get_requirementRetrieve one subgoal (framework normative content + Pattern layer guidance) by pattern_id (e.g., 'D3::idx2::sandboxing') or display_id (e.g., 'D3.2').No findings

    Why it is in this group

    • The name "get_requirement" says "get": a word for reading.
    Description, as the server wrote it
    Retrieve one subgoal (framework normative content + Pattern layer guidance) by pattern_id (e.g., 'D3::idx2::sandboxing') or display_id (e.g., 'D3.2'). display_id may resolve to multiple subgoals — underlined variants share display_ids.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • get_reverse_referencesReturn patterns that reference the given pattern_id in their cross_references.No findings

    Why it is in this group

    • The name "get_reverse_references" says "get": a word for reading.
    Description, as the server wrote it
    Return patterns that reference the given pattern_id in their cross_references. Complement to get_cross_references (outgoing); this shows incoming. Use to find all consumers of a given pattern.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • list_operational_heuristicsList operational heuristics distilled from production agentic AI deployment (Claude Code, Rewind).No findings

    Why it is in this group

    • The name "list_operational_heuristics" says "list": a word for reading.
    Description, as the server wrote it
    List operational heuristics distilled from production agentic AI deployment (Claude Code, Rewind). These are cross-cutting safety principles discovered through building and operating AI agents, mapped to framework suites. Optional filters: suite_id (heuristics relevant to a specific suite), query (keyword search across titles and principles). Separate from the normative pattern layer — different category of knowledge.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • list_requirementsList subgoals matching filters (suite_id, suite_type, content_type, min_confidence, missing_pattern_only).No findings

    Why it is in this group

    • The name "list_requirements" says "list": a word for reading.
    Description, as the server wrote it
    List subgoals matching filters (suite_id, suite_type, content_type, min_confidence, missing_pattern_only). Results capped by limit (default 50, max 100).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • list_suitesList all 16 suites in the SaferAgenticAI framework (9 drivers + 7 inhibitors) with subgoal counts and titles.No findings

    Why it is in this group

    • The name "list_suites" says "list": a word for reading.
    Description, as the server wrote it
    List all 16 suites in the SaferAgenticAI framework (9 drivers + 7 inhibitors) with subgoal counts and titles. Call this first to orient.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • resolve_idResolve a loose reference (partial id, display_id, slug fragment, or title keyword) to canonical pattern_id(s).No findings

    Why it is in this group

    • The name "resolve_id" says "resolve": a word for reading.
    Description, as the server wrote it
    Resolve a loose reference (partial id, display_id, slug fragment, or title keyword) to canonical pattern_id(s). Call this when you have a rough reference and need the exact id before calling get_requirement. Always returns candidates — never 'not found'.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • search_patternsField-weighted keyword search across the framework.No findings

    Why it is in this group

    • The name "search_patterns" says "search": a word for reading.
    Description, as the server wrote it
    Field-weighted keyword search across the framework. Terms match at word starts on lowercased text and are IDF-weighted, so rare terms outrank ubiquitous ones; field weights: title 10x, summary 4x, SFR text 3x (all of a subgoal's SFRs scored as one field), description 2x, pattern body 1x. `matched_in` reports the highest-weighted field that matched. No semantic / embedding search — known limitation, see /mcp.html. Use verbosity='compact' to drop snippets and confidence flags (~70% smaller payload) when triaging.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 0.3.6. Values in angle brackets are yours to fill in.

claude mcp add --transport http saferagenticai https://mcp.saferagenticai.org/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__saferagenticai__list_suites",
      "mcp__saferagenticai__get_requirement",
      "mcp__saferagenticai__list_requirements",
      "mcp__saferagenticai__search_patterns",
      "mcp__saferagenticai__get_cross_references",
      "mcp__saferagenticai__resolve_id",
      "mcp__saferagenticai__find_patterns_for_task",
      "mcp__saferagenticai__get_reverse_references",
      "mcp__saferagenticai__list_operational_heuristics",
      "mcp__saferagenticai__get_operational_heuristic"
    ],
    "ask": [],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as saferagenticai. Review it before you use it.