Agent Workspace Practice
by jimy-r · remote · no sign-in to list tools · v1.2.0 · published by GitHub user jimy-r
Search + patterns, maturity assessment, context pricing, redaction checks - a practice as tools.
6 tools: 3 change things and 3 only read.
Scanned Oct 21, 2026
- Deletes or cancels0Claude Code: deny
- Can't be undone0Claude Code: ask
- Changes things3Claude Code: ask: see these tools
- Only reads3Claude Code: allow: see these tools
2 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.
claude mcp add --transport http agent-workspace-practice https://jamesross.ai/mcpFindings
Matches of fixed checks, with the text they matched.
- Infolookup_pattern
The input schema at properties.query.description mentions "credentials".
What this check looks forMatched text
inputSchema.properties.query.description: "...nst pattern titles and summaries, e.g. "credentials", "silent failure", "context cost". A b..."
- Infocheck_redaction
The description mentions "credential".
What this check looks forMatched text
description: "...: email addresses, absolute home paths, credential and token prefixes, private and link-lo..."
Tools
Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.
6 tools
Changes things 3Claude Code: ask
assess_workspaceScore an agent workspace across six dimensions: canonical knowledge, memory and context economics, verification and oversight, safety and permissions, telemetry and cost, provenanc…No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Score an agent workspace across six dimensions: canonical knowledge, memory and context economics, verification and oversight, safety and permissions, telemetry and cost, provenance and delegation. Two variants: "practitioner" takes 18 answers (a single operator's workspace), "org" takes 12 (an organisation's agent readiness). Each answer is an integer 0-3 in question order, where 0 is the least mature option offered and 3 the most. Returns per-dimension scores, an overall percentage, a maturity band, and the two weakest dimensions with the gap that matters there. The question text lives at https://jamesross.ai/tools/maturity-check (practitioner) and https://jamesross.ai/tools/agent-readiness (org). Read it before answering on someone's behalf.
check_redactionScan text for the shapes of private content before it goes anywhere public: email addresses, absolute home paths, credential and token prefixes, private and link-local IPs, .local …1 finding
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Findings
- Info
The description mentions "credential".
What this check looks forMatched text
description: "...: email addresses, absolute home paths, credential and token prefixes, private and link-lo..."
Description, as the server wrote it Scan text for the shapes of private content before it goes anywhere public: email addresses, absolute home paths, credential and token prefixes, private and link-local IPs, .local hostnames, and secret filenames. Returns a count per pattern class and a total, nothing else. The text you send and the substrings that matched are never stored, never logged and never echoed back. Only the counts are kept. A line carrying the marker "redaction-ok" is skipped. Accepts up to 100KB.
request_capabilityTell this server what capability you needed but didn't find here.No findings
Why it is in this group
- The name "request_capability" says "request": a word for a change.
Description, as the server wrote it Tell this server what capability you needed but didn't find here. Requests are logged and reviewed by a human; include no secrets or personal data.
Only reads 3Claude Code: allow
lookup_patternSearch the 18 architecture patterns behind this practice by keyword or by pattern number.1 finding
Why it is in this group
- The name "lookup_pattern" says "lookup": a word for reading.
Findings
- Info
The input schema at properties.query.description mentions "credentials".
What this check looks forMatched text
inputSchema.properties.query.description: "...nst pattern titles and summaries, e.g. "credentials", "silent failure", "context cost". A b..."
Description, as the server wrote it Search the 18 architecture patterns behind this practice by keyword or by pattern number. Returns up to 3 matches, each with its number, title, the problem it opens on, and a link to the full text. Use it when you want the reasoning behind an agent-workspace design decision rather than a how-to.
price_context_readPrice a block of context by where it enters a session.No findings
Why it is in this group
- The name "price_context_read" says "read": a word for reading.
Description, as the server wrote it Price a block of context by where it enters a session. The API is stateless, so the whole transcript is re-sent on every inference step, and a token costs its size times the number of turns left after it arrives. Returns the carried token volume, the cost of the block in USD, what the same read would have cost entering 20 turns from the end, and the multiplier between the two. Use it to decide whether a large read should move later in a session or into a subagent.
search_architectureFull-text search across the published architecture corpus: the 18 patterns and how they compose, the evaluation method, the seven learn-track modules, and the teardowns of other pe…No findings
Why it is in this group
- The name "search_architecture" says "search": a word for reading.
Description, as the server wrote it Full-text search across the published architecture corpus: the 18 patterns and how they compose, the evaluation method, the seven learn-track modules, and the teardowns of other people's published agent systems. Returns ranked sections, each with its title, its source file, a snippet, and a link to the full text on GitHub. Use it when you want the passage itself rather than a pattern summary; lookup_pattern is the narrower tool that answers "which pattern covers this?". Every section is also readable in full as a resource under the architecture:// scheme (resources/list, resources/read).
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Install
Pinned to version 1.2.0. Values in angle brackets are yours to fill in.
claude mcp add --transport http agent-workspace-practice https://jamesross.ai/mcpRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__agent-workspace-practice__search_architecture",
"mcp__agent-workspace-practice__lookup_pattern",
"mcp__agent-workspace-practice__price_context_read"
],
"ask": [
"mcp__agent-workspace-practice__assess_workspace",
"mcp__agent-workspace-practice__check_redaction",
"mcp__agent-workspace-practice__request_capability"
],
"deny": []
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as agent-workspace-practice. Review it before you use it.
