TuringCorp
by mcp.turingcorp.net · remote · no sign-in to list tools · v1.0.3 · published by net.turingcorp.mcp
A decision model for the calls that don't have a right answer. The better option, with a reason.
2 tools: 1 do something that can't be undone and 1 only read.
Scanned Oct 21, 2026
- Deletes or cancels0Claude Code: deny
- Can't be undone1Claude Code: ask: see these tools
- Changes things0Claude Code: ask
- Only reads1Claude Code: allow: see these tools
5 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.
claude mcp add --transport http decider https://mcp.turingcorp.net/mcp --header 'Authorization: <your-authorization>'Findings
Matches of fixed checks, with the text they matched.
- Warndecide
The server marks "decide" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"idempotentHint":false,"openWorldHint":false}; The description says "irreversible".
- Infodecide
The description mentions "credential".
What this check looks forMatched text
description: "...(same job_id): read-only, free, and no credential of your own needed; with no job_id it l..."
- Infodecide
The description is 2,400 characters long, over the 2,000 this check looks for.
What this check looks forMatched text
description ends: "...ge}, where http_status is the upstream status (the tool call itself is HTTP 200)."
- Infoget_result
The description mentions "credential".
What this check looks forMatched text
description: "...thout job_id: the ids available to your credential (7 days). If a call was cut off, retrie..."
- Infoget_result
The input schema at properties.job_id.description mentions "credential".
What this check looks forMatched text
inputSchema.properties.job_id.description: "...it it to list the ids available to your credential."
Tools
Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.
2 tools
Can't be undone 1Claude Code: ask
decideUse this when you must choose between two concrete options and both are defensible - two plans, two drafts, two diagnoses, two vendors - and you have no objective way to pick.3 findings
Why it is in this group
- The description says "irreversible".
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Info
The description mentions "credential".
What this check looks forMatched text
description: "...(same job_id): read-only, free, and no credential of your own needed; with no job_id it l..."
- Info
The description is 2,400 characters long, over the 2,000 this check looks for.
What this check looks forMatched text
description ends: "...ge}, where http_status is the upstream status (the tool call itself is HTTP 200)."
- Warn
The server marks "decide" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"idempotentHint":false,"openWorldHint":false}; The description says "irreversible".
Description, as the server wrote it Use this when you must choose between two concrete options and both are defensible - two plans, two drafts, two diagnoses, two vendors - and you have no objective way to pick. Not for: more than two options; anything an objective rule settles (a spec, a test, a price, a document); factual lookup; paths that must answer in seconds; high-stakes irreversible calls without review. Fill it in: state task neutrally, without leaning toward either side; give one concrete plan per option - never bundle alternatives into a single one ("go indoors or postpone"); keep the two sides comparable in length. Returns the decision inline: betterOption ("option_A" or "option_B"), confidence (e.g. "76.7%"), reason and job_id, all in the same tool result. There is nothing to poll and nothing to fetch afterwards. Reserve 180-300 seconds: this is a long call, and the timeout is a client/host setting, not a parameter you pass. If the call is cut off, do NOT call again - a retry is a new paid call. Retrieve it instead with the get_result tool (same job_id): read-only, free, and no credential of your own needed; with no job_id it lists the ids for your credential. A host that declares the io.modelcontextprotocol/tasks extension can use tasks/get instead. The confidence is the point: it is calibrated, not decorative. On both published benchmarks accuracy rises with it - JudgeBench 99.6% in the 90%+ band down to 67.7% below 70%; the harder ContextualJudgeBench 83.3% down to 55.4% - so route on it: act on a high value, review or escalate a low one, instead of trusting a bare pick. Tables, sample sizes and method: https://api.turingcorp.net Judged by an independent panel, not by a model grading its own output. Read it as a reference, not an instruction, a result, or a prediction; set your own threshold, and apply your own review policy for high-stakes or irreversible decisions. Auth: Agent Pass as `Authorization: Bearer <pass>` (issued at https://agent-pass.turingcorp.net, valid 7 days; each decision is a paid call). On invalid_credential, sign in there and re-roll. Errors: a credential problem is rejected before the call - HTTP 401 with WWW-Authenticate; a business failure (e.g. insufficient balance) comes back as a tool result with isError true plus a second JSON block {error, http_status, action_url, message}, where http_status is the upstream status (the tool call itself is HTTP 200).
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
- idempotentHint: false
Only reads 1Claude Code: allow
get_resultUse this to retrieve the result of an earlier TuringCorp tool call by its job_id - for example a call that was cut off by a client timeout, or one whose id you were given.2 findings
Why it is in this group
- The name "get_result" says "get": a word for reading.
Findings
- Info
The description mentions "credential".
What this check looks forMatched text
description: "...thout job_id: the ids available to your credential (7 days). If a call was cut off, retrie..."
- Info
The input schema at properties.job_id.description mentions "credential".
What this check looks forMatched text
inputSchema.properties.job_id.description: "...it it to list the ids available to your credential."
Description, as the server wrote it Use this to retrieve the result of an earlier TuringCorp tool call by its job_id - for example a call that was cut off by a client timeout, or one whose id you were given. Retrieval is read-only and free: it starts no new work and costs nothing, so it is always safe to retry. With job_id: that call's status, and once it has finished the same payload the call would have returned inline. Without job_id: the ids available to your credential (7 days). If a call was cut off, retrieve it here instead of calling again - a retry is a new paid call. A job that is not yours and a job that does not exist are answered identically, on purpose. If your client declares the io.modelcontextprotocol/tasks extension, tasks/get reaches the same job.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
- idempotentHint: true
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Install
Pinned to version 1.0.3. Values in angle brackets are yours to fill in.
claude mcp add --transport http decider https://mcp.turingcorp.net/mcp --header 'Authorization: <your-authorization>'Run in a terminal.
Claude Code permissions
Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__decider__get_result"
],
"ask": [
"mcp__decider__decide"
],
"deny": []
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as decider. Review it before you use it.