Skip to content

Burs-IA

by soyeladice-svg · remote · no sign-in to list tools · v1.0.0 · published by GitHub user soyeladice-svg

Public MCP for agent verification, work discovery and governed interoperability.

Changes · 9

12 tools: 9 change things and 3 only read.

Scanned Oct 21, 2026

4 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http burs-ia https://burs-ia.com/mcp

Findings

Matches of fixed checks, with the text they matched.

3 warn1 info
  • The server marks "agent_collaboration_request" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "agent_collaboration_request" says "request": a word for a change.

    What this check looks for
  • The server marks "human_bridge_request" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "human_bridge_request" says "request": a word for a change.

    What this check looks for
  • The server marks "bursia_worknet_prepare_mission" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The description's first verb is "create": a word for a change.

    What this check looks for
  • The description mentions "credentials".

    Matched text

    description: "...r_capabilities. No target tool runs; no credentials; not a security certification."

    What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

12 tools

Changes things 9Claude Code: ask
  • agent_collaboration_requestAgent collaboration.1 finding

    Why it is in this group

    • The name "agent_collaboration_request" says "request": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "agent_collaboration_request" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "agent_collaboration_request" says "request": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Agent collaboration. Known target: prepare_outbound_invitation. Human approval: human_bridge_request. No external contact.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • bursia_verify_mcpKnown MCP endpoint: get a read-only verification report.1 finding

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Info

      The description mentions "credentials".

      Matched text

      description: "...r_capabilities. No target tool runs; no credentials; not a security certification."

      What this check looks for
    Description, as the server wrote it
    Known MCP endpoint: get a read-only verification report. To browse Burs-IA first, use discover_capabilities. No target tool runs; no credentials; not a security certification.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • bursia_worknet_paid_tasksUse this in ChatGPT to list paid opportunities already registered by WORKNET.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Use this in ChatGPT to list paid opportunities already registered by WORKNET. Returns public-safe opportunity metadata only; it does not apply, claim work, accept terms, spend money or contact anyone.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • bursia_worknet_prepare_missionCreate a deterministic internal pre-contract mission preview for one paid WORKNET item.1 finding

    Why it is in this group

    • The description's first verb is "create": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "bursia_worknet_prepare_mission" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The description's first verb is "create": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Create a deterministic internal pre-contract mission preview for one paid WORKNET item. This performs no external write, claim, application, acceptance, payment or contact; any binding action remains gated by exact human approval and BURSIA TRUST.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • capability_triageRoute a bounded need.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Route a bounded need. Browse: discover_capabilities. Known MCP endpoint: bursia_verify_mcp. Does not execute the external action.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • human_bridge_requestHuman approval/review.1 finding

    Why it is in this group

    • The name "human_bridge_request" says "request": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "human_bridge_request" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "human_bridge_request" says "request": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Human approval/review. Agent peer: agent_collaboration_request. Known target: prepare_outbound_invitation. No contact/write.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • human_oversight_policyGeneral autonomy policy.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    General autonomy policy. Send rules: outbound_gateway_policy. Overall status: bursia_status.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • outbound_gateway_policyOutbound send rules.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Outbound send rules. General autonomy: human_oversight_policy. Prepare: prepare_outbound_invitation. Sends require human approval.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • prepare_outbound_invitationKnown target: prepare a local invitation.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Known target: prepare a local invitation. No target: agent_collaboration_request. Human review: human_bridge_request. It does not send.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
Only reads 3Claude Code: allow
  • bursia_statusOverall Burs-IA status.No findings

    Why it is in this group

    • The name "bursia_status" says "status": a word for reading.
    Description, as the server wrote it
    Overall Burs-IA status. Capabilities: discover_capabilities. Autonomy: human_oversight_policy. Send rules: outbound_gateway_policy.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • bursia_worknet_taskRead the public-safe canonical record for one paid WORKNET opportunity before deciding whether to prepare internal work.No findings

    Why it is in this group

    • The description's first verb is "read": a word for reading.
    Description, as the server wrote it
    Read the public-safe canonical record for one paid WORKNET opportunity before deciding whether to prepare internal work.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • discover_capabilitiesBrowse Burs-IA capabilities.No findings

    Why it is in this group

    • The description's first verb is "browse": a word for reading.
    Description, as the server wrote it
    Browse Burs-IA capabilities. Known MCP endpoint: bursia_verify_mcp. Bounded need needing a lane: capability_triage.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http burs-ia https://burs-ia.com/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__burs-ia__bursia_status",
      "mcp__burs-ia__discover_capabilities",
      "mcp__burs-ia__bursia_worknet_task"
    ],
    "ask": [
      "mcp__burs-ia__capability_triage",
      "mcp__burs-ia__agent_collaboration_request",
      "mcp__burs-ia__human_bridge_request",
      "mcp__burs-ia__human_oversight_policy",
      "mcp__burs-ia__outbound_gateway_policy",
      "mcp__burs-ia__prepare_outbound_invitation",
      "mcp__burs-ia__bursia_worknet_paid_tasks",
      "mcp__burs-ia__bursia_worknet_prepare_mission",
      "mcp__burs-ia__bursia_verify_mcp"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as burs-ia. Review it before you use it.