Skip to content

TuringCorp

by mcp.turingcorp.net · remote · no sign-in to list tools · v1.0.3 · published by net.turingcorp.mcp

A decision model for the calls that don't have a right answer. The better option, with a reason.

Final · 1

2 tools: 1 do something that can't be undone and 1 only read.

Scanned Oct 21, 2026

5 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http decider https://mcp.turingcorp.net/mcp --header 'Authorization: <your-authorization>'

Findings

Matches of fixed checks, with the text they matched.

1 warn4 info
  • Warndecide

    The server marks "decide" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

    Matched text

    annotations: {"readOnlyHint":true,"idempotentHint":false,"openWorldHint":false}; The description says "irreversible".

    What this check looks for
  • Infodecide

    The description mentions "credential".

    Matched text

    description: "...(same job_id): read-only, free, and no credential of your own needed; with no job_id it l..."

    What this check looks for
  • Infodecide

    The description is 2,400 characters long, over the 2,000 this check looks for.

    Matched text

    description ends: "...ge}, where http_status is the upstream status (the tool call itself is HTTP 200)."

    What this check looks for
  • The description mentions "credential".

    Matched text

    description: "...thout job_id: the ids available to your credential (7 days). If a call was cut off, retrie..."

    What this check looks for
  • The input schema at properties.job_id.description mentions "credential".

    Matched text

    inputSchema.properties.job_id.description: "...it it to list the ids available to your credential."

    What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

2 tools

Can't be undone 1Claude Code: ask
  • decideUse this when you must choose between two concrete options and both are defensible - two plans, two drafts, two diagnoses, two vendors - and you have no objective way to pick.3 findings

    Why it is in this group

    • The description says "irreversible".
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Info

      The description mentions "credential".

      Matched text

      description: "...(same job_id): read-only, free, and no credential of your own needed; with no job_id it l..."

      What this check looks for
    • Info

      The description is 2,400 characters long, over the 2,000 this check looks for.

      Matched text

      description ends: "...ge}, where http_status is the upstream status (the tool call itself is HTTP 200)."

      What this check looks for
    • Warn

      The server marks "decide" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

      Matched text

      annotations: {"readOnlyHint":true,"idempotentHint":false,"openWorldHint":false}; The description says "irreversible".

      What this check looks for
    Description, as the server wrote it
    Use this when you must choose between two concrete options and both are defensible - two plans, two drafts, two diagnoses, two vendors - and you have no objective way to pick. Not for: more than two options; anything an objective rule settles (a spec, a test, a price, a document); factual lookup; paths that must answer in seconds; high-stakes irreversible calls without review. Fill it in: state task neutrally, without leaning toward either side; give one concrete plan per option - never bundle alternatives into a single one ("go indoors or postpone"); keep the two sides comparable in length. Returns the decision inline: betterOption ("option_A" or "option_B"), confidence (e.g. "76.7%"), reason and job_id, all in the same tool result. There is nothing to poll and nothing to fetch afterwards. Reserve 180-300 seconds: this is a long call, and the timeout is a client/host setting, not a parameter you pass. If the call is cut off, do NOT call again - a retry is a new paid call. Retrieve it instead with the get_result tool (same job_id): read-only, free, and no credential of your own needed; with no job_id it lists the ids for your credential. A host that declares the io.modelcontextprotocol/tasks extension can use tasks/get instead. The confidence is the point: it is calibrated, not decorative. On both published benchmarks accuracy rises with it - JudgeBench 99.6% in the 90%+ band down to 67.7% below 70%; the harder ContextualJudgeBench 83.3% down to 55.4% - so route on it: act on a high value, review or escalate a low one, instead of trusting a bare pick. Tables, sample sizes and method: https://api.turingcorp.net Judged by an independent panel, not by a model grading its own output. Read it as a reference, not an instruction, a result, or a prediction; set your own threshold, and apply your own review policy for high-stakes or irreversible decisions. Auth: Agent Pass as `Authorization: Bearer <pass>` (issued at https://agent-pass.turingcorp.net, valid 7 days; each decision is a paid call). On invalid_credential, sign in there and re-roll. Errors: a credential problem is rejected before the call - HTTP 401 with WWW-Authenticate; a business failure (e.g. insufficient balance) comes back as a tool result with isError true plus a second JSON block {error, http_status, action_url, message}, where http_status is the upstream status (the tool call itself is HTTP 200).

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
    • idempotentHint: false
Only reads 1Claude Code: allow
  • get_resultUse this to retrieve the result of an earlier TuringCorp tool call by its job_id - for example a call that was cut off by a client timeout, or one whose id you were given.2 findings

    Why it is in this group

    • The name "get_result" says "get": a word for reading.

    Findings

    • Info

      The description mentions "credential".

      Matched text

      description: "...thout job_id: the ids available to your credential (7 days). If a call was cut off, retrie..."

      What this check looks for
    • Info

      The input schema at properties.job_id.description mentions "credential".

      Matched text

      inputSchema.properties.job_id.description: "...it it to list the ids available to your credential."

      What this check looks for
    Description, as the server wrote it
    Use this to retrieve the result of an earlier TuringCorp tool call by its job_id - for example a call that was cut off by a client timeout, or one whose id you were given. Retrieval is read-only and free: it starts no new work and costs nothing, so it is always safe to retry. With job_id: that call's status, and once it has finished the same payload the call would have returned inline. Without job_id: the ids available to your credential (7 days). If a call was cut off, retrieve it here instead of calling again - a retry is a new paid call. A job that is not yours and a job that does not exist are answered identically, on purpose. If your client declares the io.modelcontextprotocol/tasks extension, tasks/get reaches the same job.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
    • idempotentHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.0.3. Values in angle brackets are yours to fill in.

claude mcp add --transport http decider https://mcp.turingcorp.net/mcp --header 'Authorization: <your-authorization>'

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__decider__get_result"
    ],
    "ask": [
      "mcp__decider__decide"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as decider. Review it before you use it.