Dossier MCP server

by imboard.ai·ai.imboard/dossier·v1.0.4·8 stars

No reviews yet

MCP server for dossier automation standard - enables LLMs to discover, verify, and execute dossiers

A86/100grade A

Write a review Install

What users say

No reviews yet

Be the first

Safety scan

A86/100

full report

Adoption

Growing

8 stars

Reviews

Write one

Nobody has reviewed Dossier yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Dossier tools (10, 1 write)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

cancel_journeywrite action
Cancel an active journey session. Returns a summary of what completed before cancellation.
get_journey_status
Get the current state of a journey session: completed steps, current step, remaining steps, and collected outputs.
list_dossiers
Discover available dossiers in a directory. Scans for *.ds.md files and returns metadata.
read_dossier
Read and parse a dossier file. Returns metadata and content. Should be called AFTER verify_dossier passes.
resolve_graph
Resolve a dossier dependency graph into an execution plan. Reads relationships (preceded_by, followed_by, conflicts_with) and produces a DAG with ordered phases, parallel groups, and conflict detection.
search_dossiers
Search the dossier registry for available dossiers by keyword. Returns matching dossiers with metadata.
start_journey
Start a journey session from a resolved and verified graph. Creates a session, returns the first step's dossier content with any injected context. Call step_complete after executing each step.
step_complete
Mark the current journey step as complete or failed. Advances to the next step and returns its dossier content with injected context from previous outputs. Returns a summary when the last step completes or a step fails.
verify_dossier
Security verification - Verify integrity (checksum) and authenticity (signature) of a dossier. Returns pass/fail with stage details.
verify_graph
Batch security verification for a dossier dependency graph. Verifies all dossiers in a resolved graph and returns an aggregate security report with per-dossier breakdown and overall recommendation.

Public scan report

scanner v0.1.10 · 2026-09-28 · same rubric, same numbers if you re-run it

no findings

Code scan53 source files scanned25/25
–Live reliabilityno gateway calls yet and no remote to proben/a
–Tool poisoningtools not inspected (local package is not executed); not countedn/a
Auth qualitylocal package, no credentials required12/15
Maintenancelast push 0 days ago15/15
Maintainer identitynamespace and repository owner differ4/10

Overall 86/100. Components that don't apply are left out of the denominator. Any critical finding is an F.Rubric Appeal a finding JSON

How Dossier compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score: 86/100; higher than 72% of 48,255 servers
Tools: 10; the typical server has 7
Tools that change things: 10%; typical: 0%. Fewer write tools means less an agent can break
GitHub stars: 8; more than 86% of 28,688 servers

What its tools let an agent do: 8 read · 1 delete · 1 run or deploy

Install Dossier in Claude Code, Cursor or VS Code

Runs npx -y @ai-dossier/mcp-server on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add dossier -- npx -y @ai-dossier/mcp-server

Add to Cursor

What the publisher says

From the Dossier repository's README, as published. We do not edit it. Read it on GitHub

Dossier — Portable, Signed Skills for Any AI Agent

Skills are easy to write. Dossiers make them trustworthy, versioned, and portable across every LLM tool.

Quick Concept

A dossier is a skill — a reusable instruction set an AI executes — with trust, versioning, and cross-tool portability built in.

Think npm or Docker Hub, but for AI skills: signed, versioned, shareable.

┌──────────────────────────────────────────────────────────────────────┐
  │                                                                      │
  │    Write instructions       Verify integrity       AI executes       │
  │    in Markdown (.ds.md)     with checksums &       the workflow      │
  │                             signatures             intelligently     │
  │                                                                      │
  │    ┌──────────┐    sign     ┌──────────┐   run     ┌──────────┐     │
  │    │  Author  │ ─────────> │  Verify  │ ────────> │ AI Agent │     │
  │    └──────────┘            └──────────┘            └──────────┘     │
  │         │                       │                       │            │
  │     .ds.md file            checksum +              validated         │
  │     with JSON              signature               results with     │
  │     frontmatter            verification            evidence         │
  │                                                                      │
  └──────────────────────────────────────────────────────────────────────┘

New here? → 5-min Quick Start | Using Claude Code? → MCP in 60 Seconds | Want to try now? → Get started in 30 seconds

At a Glance

flowchart LR
    A["📝 Create\n.ds.md file"] --> B["🔏 Sign\nchecksum +\nsignature"]
    B --> C["✅ Verify\nintegrity &\nauthenticity"]
    C --> D["🤖 Execute\nAI runs the\nworkflow"]
    D --> E["📋 Validate\nsuccess criteria\n& evidence"]

    style A fill:#e3f2fd,stroke:#1565c0,color:#0d47a1
    style B fill:#fce4ec,stroke:#c62828,color:#b71c1c
    style C fill:#fff3e0,stroke:#ef6c00,color:#e65100
    style D fill:#e8f5e9,stroke:#2e7d32,color:#1b5e20
    style E fill:#f3e5f5,stroke:#6a1b9a,color:#4a148c

What: Skills (.ds.md files) any AI agent can run — signed, versioned, portable across tools Why: A plain skill lives in one tool and anyone can tamper with it; a dossier is that same skill made verifiable, version-pinned, and shareable Safety: Built-in checksums, cryptographic signatures, and CLI verification tools Works with: Claude, ChatGPT, Cursor, any LLM — no vendor lock-in

Status: Protocol v1.0 (stable spec) | CLI v0.14.0 | 15+ example skills | Active development

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Dossier: common questions

Is Dossier MCP server safe?: Yes, by our scan: it is graded A (86/100). Read the Dossier safety report
How do I install Dossier?: It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Dossier need an API key?: Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Dossier maintained?: The last commit was 37 days ago (2026-09-28). The latest release is v1.0.4.
How does Dossier compare with other MCP servers?: safety score 86/100 (higher than 72% of 48,255 servers); tools 10 (the typical server has 7); tools that change things 10% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.