Skip to content

Agent Workspace Practice

by jimy-r · remote · no sign-in to list tools · v1.2.0 · published by GitHub user jimy-r

Search + patterns, maturity assessment, context pricing, redaction checks - a practice as tools.

Changes · 3

6 tools: 3 change things and 3 only read.

Scanned Oct 21, 2026

2 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http agent-workspace-practice https://jamesross.ai/mcp

Findings

Matches of fixed checks, with the text they matched.

2 info
  • The input schema at properties.query.description mentions "credentials".

    Matched text

    inputSchema.properties.query.description: "...nst pattern titles and summaries, e.g. "credentials", "silent failure", "context cost". A b..."

    What this check looks for
  • The description mentions "credential".

    Matched text

    description: "...: email addresses, absolute home paths, credential and token prefixes, private and link-lo..."

    What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

6 tools

Changes things 3Claude Code: ask
  • assess_workspaceScore an agent workspace across six dimensions: canonical knowledge, memory and context economics, verification and oversight, safety and permissions, telemetry and cost, provenanc…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Score an agent workspace across six dimensions: canonical knowledge, memory and context economics, verification and oversight, safety and permissions, telemetry and cost, provenance and delegation. Two variants: "practitioner" takes 18 answers (a single operator's workspace), "org" takes 12 (an organisation's agent readiness). Each answer is an integer 0-3 in question order, where 0 is the least mature option offered and 3 the most. Returns per-dimension scores, an overall percentage, a maturity band, and the two weakest dimensions with the gap that matters there. The question text lives at https://jamesross.ai/tools/maturity-check (practitioner) and https://jamesross.ai/tools/agent-readiness (org). Read it before answering on someone's behalf.
  • check_redactionScan text for the shapes of private content before it goes anywhere public: email addresses, absolute home paths, credential and token prefixes, private and link-local IPs, .local …1 finding

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.

    Findings

    • Info

      The description mentions "credential".

      Matched text

      description: "...: email addresses, absolute home paths, credential and token prefixes, private and link-lo..."

      What this check looks for
    Description, as the server wrote it
    Scan text for the shapes of private content before it goes anywhere public: email addresses, absolute home paths, credential and token prefixes, private and link-local IPs, .local hostnames, and secret filenames. Returns a count per pattern class and a total, nothing else. The text you send and the substrings that matched are never stored, never logged and never echoed back. Only the counts are kept. A line carrying the marker "redaction-ok" is skipped. Accepts up to 100KB.
  • request_capabilityTell this server what capability you needed but didn't find here.No findings

    Why it is in this group

    • The name "request_capability" says "request": a word for a change.
    Description, as the server wrote it
    Tell this server what capability you needed but didn't find here. Requests are logged and reviewed by a human; include no secrets or personal data.
Only reads 3Claude Code: allow
  • lookup_patternSearch the 18 architecture patterns behind this practice by keyword or by pattern number.1 finding

    Why it is in this group

    • The name "lookup_pattern" says "lookup": a word for reading.

    Findings

    • Info

      The input schema at properties.query.description mentions "credentials".

      Matched text

      inputSchema.properties.query.description: "...nst pattern titles and summaries, e.g. "credentials", "silent failure", "context cost". A b..."

      What this check looks for
    Description, as the server wrote it
    Search the 18 architecture patterns behind this practice by keyword or by pattern number. Returns up to 3 matches, each with its number, title, the problem it opens on, and a link to the full text. Use it when you want the reasoning behind an agent-workspace design decision rather than a how-to.
  • price_context_readPrice a block of context by where it enters a session.No findings

    Why it is in this group

    • The name "price_context_read" says "read": a word for reading.
    Description, as the server wrote it
    Price a block of context by where it enters a session. The API is stateless, so the whole transcript is re-sent on every inference step, and a token costs its size times the number of turns left after it arrives. Returns the carried token volume, the cost of the block in USD, what the same read would have cost entering 20 turns from the end, and the multiplier between the two. Use it to decide whether a large read should move later in a session or into a subagent.
  • search_architectureFull-text search across the published architecture corpus: the 18 patterns and how they compose, the evaluation method, the seven learn-track modules, and the teardowns of other pe…No findings

    Why it is in this group

    • The name "search_architecture" says "search": a word for reading.
    Description, as the server wrote it
    Full-text search across the published architecture corpus: the 18 patterns and how they compose, the evaluation method, the seven learn-track modules, and the teardowns of other people's published agent systems. Returns ranked sections, each with its title, its source file, a snippet, and a link to the full text on GitHub. Use it when you want the passage itself rather than a pattern summary; lookup_pattern is the narrower tool that answers "which pattern covers this?". Every section is also readable in full as a resource under the architecture:// scheme (resources/list, resources/read).

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.2.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http agent-workspace-practice https://jamesross.ai/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__agent-workspace-practice__search_architecture",
      "mcp__agent-workspace-practice__lookup_pattern",
      "mcp__agent-workspace-practice__price_context_read"
    ],
    "ask": [
      "mcp__agent-workspace-practice__assess_workspace",
      "mcp__agent-workspace-practice__check_redaction",
      "mcp__agent-workspace-practice__request_capability"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as agent-workspace-practice. Review it before you use it.