Burs-IA
by soyeladice-svg · remote · no sign-in to list tools · v0.6.1 · published by GitHub user soyeladice-svg
Burs-IA public MCP entry point for capability discovery, bounded routing and interoperability.
12 tools: 9 change things and 3 only read.
Scanned Oct 21, 2026
- Deletes or cancels0Claude Code: deny
- Can't be undone0Claude Code: ask
- Changes things9Claude Code: ask: see these tools
- Only reads3Claude Code: allow: see these tools
4 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.
claude mcp add --transport http bursia https://burs-ia-mcp-adapter-production.up.railway.app/mcpFindings
Matches of fixed checks, with the text they matched.
The server marks "agent_collaboration_request" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "agent_collaboration_request" says "request": a word for a change.
The server marks "human_bridge_request" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "human_bridge_request" says "request": a word for a change.
The server marks "bursia_worknet_prepare_mission" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The description's first verb is "create": a word for a change.
The description mentions "credentials".
What this check looks forMatched text
description: "...r_capabilities. No target tool runs; no credentials; not a security certification."
Tools
Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.
12 tools
Changes things 9Claude Code: ask
agent_collaboration_requestAgent collaboration.1 finding
Why it is in this group
- The name "agent_collaboration_request" says "request": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
The server marks "agent_collaboration_request" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "agent_collaboration_request" says "request": a word for a change.
Description, as the server wrote it Agent collaboration. Known target: prepare_outbound_invitation. Human approval: human_bridge_request. No external contact.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
bursia_verify_mcpKnown MCP endpoint: get a read-only verification report.1 finding
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Info
The description mentions "credentials".
What this check looks forMatched text
description: "...r_capabilities. No target tool runs; no credentials; not a security certification."
Description, as the server wrote it Known MCP endpoint: get a read-only verification report. To browse Burs-IA first, use discover_capabilities. No target tool runs; no credentials; not a security certification.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
bursia_worknet_paid_tasksUse this in ChatGPT to list paid opportunities already registered by WORKNET.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Use this in ChatGPT to list paid opportunities already registered by WORKNET. Returns public-safe opportunity metadata only; it does not apply, claim work, accept terms, spend money or contact anyone.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
bursia_worknet_prepare_missionCreate a deterministic internal pre-contract mission preview for one paid WORKNET item.1 finding
Why it is in this group
- The description's first verb is "create": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
The server marks "bursia_worknet_prepare_mission" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The description's first verb is "create": a word for a change.
Description, as the server wrote it Create a deterministic internal pre-contract mission preview for one paid WORKNET item. This performs no external write, claim, application, acceptance, payment or contact; any binding action remains gated by exact human approval and BURSIA TRUST.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
capability_triageRoute a bounded need.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Route a bounded need. Browse: discover_capabilities. Known MCP endpoint: bursia_verify_mcp. Does not execute the external action.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
human_bridge_requestHuman approval/review.1 finding
Why it is in this group
- The name "human_bridge_request" says "request": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
The server marks "human_bridge_request" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "human_bridge_request" says "request": a word for a change.
Description, as the server wrote it Human approval/review. Agent peer: agent_collaboration_request. Known target: prepare_outbound_invitation. No contact/write.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
human_oversight_policyGeneral autonomy policy.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it General autonomy policy. Send rules: outbound_gateway_policy. Overall status: bursia_status.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
outbound_gateway_policyOutbound send rules.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Outbound send rules. General autonomy: human_oversight_policy. Prepare: prepare_outbound_invitation. Sends require human approval.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
prepare_outbound_invitationKnown target: prepare a local invitation.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Known target: prepare a local invitation. No target: agent_collaboration_request. Human review: human_bridge_request. It does not send.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
Only reads 3Claude Code: allow
bursia_statusOverall Burs-IA status.No findings
Why it is in this group
- The name "bursia_status" says "status": a word for reading.
Description, as the server wrote it Overall Burs-IA status. Capabilities: discover_capabilities. Autonomy: human_oversight_policy. Send rules: outbound_gateway_policy.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
bursia_worknet_taskRead the public-safe canonical record for one paid WORKNET opportunity before deciding whether to prepare internal work.No findings
Why it is in this group
- The description's first verb is "read": a word for reading.
Description, as the server wrote it Read the public-safe canonical record for one paid WORKNET opportunity before deciding whether to prepare internal work.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
discover_capabilitiesBrowse Burs-IA capabilities.No findings
Why it is in this group
- The description's first verb is "browse": a word for reading.
Description, as the server wrote it Browse Burs-IA capabilities. Known MCP endpoint: bursia_verify_mcp. Bounded need needing a lane: capability_triage.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Install
Pinned to version 0.6.1. Values in angle brackets are yours to fill in.
claude mcp add --transport http bursia https://burs-ia-mcp-adapter-production.up.railway.app/mcpRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__bursia__bursia_status",
"mcp__bursia__discover_capabilities",
"mcp__bursia__bursia_worknet_task"
],
"ask": [
"mcp__bursia__capability_triage",
"mcp__bursia__agent_collaboration_request",
"mcp__bursia__human_bridge_request",
"mcp__bursia__human_oversight_policy",
"mcp__bursia__outbound_gateway_policy",
"mcp__bursia__prepare_outbound_invitation",
"mcp__bursia__bursia_worknet_paid_tasks",
"mcp__bursia__bursia_worknet_prepare_mission",
"mcp__bursia__bursia_verify_mcp"
],
"deny": []
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as bursia. Review it before you use it.
