Raziel
by tide.org in Security & trust
MCP server teaching AI agents to implement TideCloak: auth, E2EE, IGA, security analysis
https://mcp.tide.org/mcp- Tools
- 22
- open to any client
- Uptime
- 100%
- last 30 days
- Response time
- 1.2 s
- 1.5 s slowest 5%
- Last check
- Passed
- 8 h ago, next any minute now
Reliability
Status and outage history · Atom feed · Watch with other listings
How to connect
Add it to any MCP client that supports remote servers.
{
"mcpServers": {
"raziel": {
"type": "http",
"url": "https://mcp.tide.org/mcp"
}
}
}22 tools
- tide_list
List all available content in the Tide agent pack by category
- tide_canon
Read a canon file (invariants, anti-patterns, concepts, framework-matrix, feature-mapping, troubleshooting, tidecloak-bootstrap, etc.)
- tide_playbook
Read a step-by-step playbook for a specific Tide task
- tide_skill
Read a composable skill definition
- tide_prompt
Read a reusable starter prompt from the pack
- tide_adapter
Read an adapter instruction file (AGENTS, CLAUDE, replit)
- tide_list_scenarios
List all available scenario patterns under reference-apps/
- tide_scenario
Read a scenario summary from reference-apps/<scenario>/scenario.md
- tide_scenario_manifest
Read a scenario manifest from reference-apps/<scenario>/manifest.yaml
- tide_scenario_roles
Read a scenario role-policy matrix from reference-apps/<scenario>/role-policy-matrix.md
- tide_scenario_bootstrap
Read a scenario bootstrap sequence from reference-apps/<scenario>/bootstrap-sequence.md
- tide_choose_scenario
Match a user request to a known scenario pattern before falling back to generic playbooks
- tide_choose_playbook
Recommend the right playbook for a given situation
- tide_security_analysis
Analyze an EXISTING (possibly non-Tide) system for security gaps and map them to Tide capabilities. Returns the Security Analyst role instructions, the security gap mapping table (SG-01…SG-18), and the runtime-probe procedures. Use this when the user asks 'do a security…
- tide_blast_radius
Run a Blast Radius Assessment of an EXISTING app: an adversarial, vendor-neutral map of where authority is concentrated to a single point (whoever obtains that one thing obtains everything it governs), scored by blast radius (Total/Systemic/Contained/Limited) across three cores…
- tide_hosting
Where TideCloak runs: local Docker vs partner-hosted (Skycloak managed TideCloak-as-a-service). Returns the local-vs-hosted decision with the honest trade-offs, the trust model, the verified Skycloak API reference (correct cluster field names and the required version), and the…
- tide_dpop_asset
Returns the exact command that installs `public/tide_dpop_auth.html` — the DPoP relay page the Tide enclave loads during login — plus its sha256, the required next.config.ts rewrite/CSP wiring, and how to verify. `@tidecloak/js` ships the file from 0.14.34; older SDKs and the…
- tide_onboarding
STOP KEYCLOAK'S 'UPDATE ACCOUNT INFORMATION' PAGE and collect the details in-app instead. Tide asserts ONLY a username (the vuid) -- no email, no name -- so Keycloak blocks new users on an unstyled form showing a 64-hex username. Returns: a read-only DIAGNOSTIC that identifies…
- tide_branding
BRAND THE ENCLAVE FOR THE USER — generate a logo + background and upload them so the Tide login/approval screen is branded. Returns a single ready-to-run command that generates the assets (no image model needed), validates them, uploads both, and saves+signs the IdP settings…
- tide_scaffold
START A NEW TIDE APP FROM A WORKING TEMPLATE. Returns the exact commands to copy a complete, building app — login, the DPoP page and its wiring, server-side token AND proof verification, and the realm bootstrap script — then install, bootstrap and check it. CALL THIS when…
- tide_doctor
FIND AND FIX WHAT IS WRONG WITH A TIDE APP, IN ONE COMMAND. Returns the command that checks an app for the faults behind most broken logins and unprotected APIs. It REPAIRS the mechanical ones itself (re-copies the DPoP page byte-exact, corrects a wrong rewrite path, gitignores…
- tide_gaps
Read the gap register — what is still uncertain or unresolved in the pack
Security scan
No findings
We scan names, descriptions and tool definitions for hidden instructions and other prompt-injection patterns.
Recent checks
| When | Result | HTTP | Time |
|---|---|---|---|
| 8 h ago | Passed | 200 | 1.1 s |
| 19 h ago | Passed | 200 | 1.1 s |
| 31 h ago | Passed | 200 | 1.2 s |
| 42 h ago | Passed | 200 | 1.1 s |
| 2 days ago | Passed | 200 | 1.1 s |
Show 10 older checks
| 3 days ago | Passed | 200 | 1.2 s |
| 4 days ago | Passed | 200 | 1.2 s |
| 4 days ago | Passed | 200 | 1.3 s |
| 5 days ago | Passed | 200 | 1.4 s |
| 5 days ago | Passed | 200 | 1.2 s |
| 6 days ago | Passed | 200 | 1.5 s |
| 6 days ago | Passed | 200 | 1.0 s |
| 7 days ago | Passed | 200 | 1.1 s |
| 7 days ago | Passed | 200 | 1.2 s |
| 8 days ago | Passed | 200 | 1.1 s |