Idf MCP server
io.github.intent-driven-software/idf-mcp·v1.0.2Turn an IDF domain into an MCP server with invariants and role scopes in every tool description.
0 stars37 downloads/wk
Reviews
Write oneNobody has reviewed Idf yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Idf tools
No tool declarations could be read from the package source. They show once the server is installed.
Public scan report
scanner v0.1.9 · 2026-09-27 · same rubric, same numbers if you re-run it
- Code scan9 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitystatic API keys via environment variables6/15
- Maintenancelast push 141 days ago8/15
- Maintainer identityregistry namespace matches repository owner7/10
How Idf compares
Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 71/100
- higher than 36% of 48,255 servers
- Downloads a week
- 37
- more than 28% of 12,191 servers with a package
Install Idf in Claude Code, Cursor or VS Code
Runs npx -y @intent-driven/mcp-server on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add idf-mcp -- npx -y @intent-driven/mcp-server
What the publisher says
From the Idf repository's README, as published. We do not edit it. Read it on GitHub
@intent-driven/mcp-server
Stop giving AI agents API keys. Give them a domain.
@intent-driven/mcp-server exposes any IDF domain to Claude Desktop / Cursor / Zed as a Model Context Protocol server — with domain semantics in tool descriptions (preconditions, invariants, irreversibility, role scopes) and structured rejections when the agent tries something it shouldn't. Not a 500. Not a string. A JSON shape the LLM can read and adapt to.
→ Landing & demo: fold.intent-design.tech → 5-min quickstart: github.com/intent-driven-software/fold-runtime-quickstart
70-second walkthrough
→ Watch on Loom →
Why this exists
On April 25 2026 a Cursor agent powered by Claude Opus 4.6, working on a credential mismatch in PocketOS staging, found an unrelated API token, decided to delete a Railway volume to fix things, and wiped the production database and all volume-level backups in 9 seconds. The agent's own post-mortem:
"I guessed that deleting a staging volume via the API would be scoped
to staging only. I didn't verify. I didn't check if the volume ID was
shared across environments."
30-hour outage. PocketOS rolled back to a 3-month-old backup. (The Register · FastCompany · OECD AI Incident #6153)
This isn't an alignment problem. The system never told the agent what was allowed, why it shouldn't, or what would happen if it tried. Existing MCP servers don't either — tool descriptions carry endpoint shape and not much else. The agent learns by colliding with 500s.
This package fixes that. The MCP tool descriptions carry the why the call might fail; the rejection carries the what failed, structured.
How it plugs into your stack
@intent-driven/mcp-server is a stdio MCP adapter that talks to a Fold runtime over an HTTP API. The runtime is a sibling service — not middleware in your existing app, not codegen at runtime. Your current backend stays where it is; the IDF artifact describes the agent-facing surface, and the runtime serves it on its own port (default :3001).
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
Idf: common questions
- Is Idf MCP server safe?
- Mostly: it is graded B (71/100). Read the Idf safety report
- How do I install Idf?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Idf need an API key?
- Yes. The registry entry asks for
IDF_AUTH_TOKEN. - Is Idf maintained?
- The last commit was 178 days ago (2026-05-10). The latest release is v1.0.2.
- How does Idf compare with other MCP servers?
- safety score 71/100 (higher than 36% of 48,255 servers); downloads a week 37 (more than 28% of 12,191 servers with a package). Full comparison.