io. github. paxton888/ basecite
by paxton888 · remote · no sign-in to list tools · v0.1.0 · published by GitHub user paxton888
Tenant-scoped evidence intake and controlled AI context over MCP.
3 tools: 3 only read.
Scanned Oct 21, 2026
- Deletes or cancels0Claude Code: deny
- Can't be undone0Claude Code: ask
- Changes things0Claude Code: ask
- Only reads3Claude Code: allow: see these tools
2 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.
claude mcp add --transport http basecite https://mcp.basecite.com/mcpFindings
Matches of fixed checks, with the text they matched.
The description mentions "credential".
What this check looks forMatched text
description: "...r returns customer data and requires no credential."
The description mentions "credential".
What this check looks forMatched text
description: "...r returns customer data and requires no credential."
Tools
Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.
3 tools
Only reads 3Claude Code: allow
basecite_get_ai_contextReturn one bounded customer/solution-company submitted AI context record by org_id and upload_id with provenance and not_evaluated fields.No findings
Why it is in this group
- The name "basecite_get_ai_context" says "get": a word for reading.
Description, as the server wrote it Return one bounded customer/solution-company submitted AI context record by org_id and upload_id with provenance and not_evaluated fields. No raw file download, list-all, unbounded export, truth verification, company verification, or ranking claim is returned.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
basecite_get_capabilitiesReturn the machine-readable capabilities and integration boundaries of the BaseCite service.1 finding
Why it is in this group
- The name "basecite_get_capabilities" says "get": a word for reading.
Findings
- Info
The description mentions "credential".
What this check looks forMatched text
description: "...r returns customer data and requires no credential."
Description, as the server wrote it Return the machine-readable capabilities and integration boundaries of the BaseCite service. This tool never returns customer data and requires no credential.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
basecite_get_public_discoveryReturn BaseCite public developer, API, MCP, registry, and safety-boundary links.1 finding
Why it is in this group
- The name "basecite_get_public_discovery" says "get": a word for reading.
Findings
- Info
The description mentions "credential".
What this check looks forMatched text
description: "...r returns customer data and requires no credential."
Description, as the server wrote it Return BaseCite public developer, API, MCP, registry, and safety-boundary links. This tool never returns customer data and requires no credential.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Install
Pinned to version 0.1.0. Values in angle brackets are yours to fill in.
claude mcp add --transport http basecite https://mcp.basecite.com/mcpRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__basecite__basecite_get_public_discovery",
"mcp__basecite__basecite_get_capabilities",
"mcp__basecite__basecite_get_ai_context"
],
"ask": [],
"deny": []
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as basecite. Review it before you use it.
