Saferagenticai MCP server
Read-only tools over the Safer Agentic AI framework: 238 patterns + 14 heuristics.
0 stars41 downloads/wk
Reviews
Write oneNobody has reviewed Saferagenticai yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Saferagenticai tools (12)
write = sends, deletes, buys or postsfind_patterns_for_taskFreeGiven a natural-language task description (e.g., 'I'm building a tool-using agent that runs shell commands'), return the most relevant patterns grouped by suite. Use this as a starting point for any cross-cutting design question; then follow up with get_requirement on specific pattern_ids. Defaults to verbosity='compact' (cheap triage); pass 'full' to inline snippets and confidence flags.
get_cross_referencesFreeReturn outgoing adjacencies for a pattern. `explicit_cross_references` are author-asserted (each pattern's `cross_references` YAML field). `inferred_adjacent` (when include_inferred=true) currently returns *same-suite siblings only* — it does not do semantic similarity. Treat inferred entries as 'neighbours worth scanning,' not as endorsed dependencies.
get_operational_heuristicFreeRetrieve a single operational heuristic by id (e.g., 'OH::geoffrey-pattern'). Returns the full entry: principle, framework mapping, evidence sources from production deployment, design patterns, anti-patterns, and discovery narrative.
get_requirementFreeRetrieve one subgoal (framework normative content + Pattern layer guidance) by pattern_id (e.g., 'D3::idx2::sandboxing') or display_id (e.g., 'D3.2'). display_id may resolve to multiple subgoals — underlined variants share display_ids.
get_reverse_referencesFreeReturn patterns that reference the given pattern_id in their cross_references. Complement to get_cross_references (outgoing); this shows incoming. Use to find all consumers of a given pattern.
list_operational_heuristicsFreeList operational heuristics distilled from production agentic AI deployment (Claude Code, Rewind). These are cross-cutting safety principles discovered through building and operating AI agents, mapped to framework suites. Optional filters: suite_id (heuristics relevant to a specific suite), query (keyword search across titles and principles). Separate from the normative pattern layer — different category of knowledge.
list_requirementsFreeList subgoals matching filters (suite_id, suite_type, content_type, min_confidence, missing_pattern_only). Results capped by limit (default 50, max 100).
list_suitesFreeList all 16 suites in the SaferAgenticAI framework (9 drivers + 7 inhibitors) with subgoal counts and titles. Call this first to orient.
list_unreviewedFreeReturn patterns that have not been human-reviewed yet (no reviewed_by). Sorted low-confidence first, then needs_human_review flagged, then alpha. Use during Phase 3 review to pick the next pattern to examine.
resolve_idFreeResolve a loose reference (partial id, display_id, slug fragment, or title keyword) to canonical pattern_id(s). Call this when you have a rough reference and need the exact id before calling get_requirement. Always returns candidates — never 'not found'.
review_statsFreeCoverage stats: total patterns, reviewed %, per-suite and per-confidence breakdown. Surfaces load-time validation issue count.
search_patternsFreeField-weighted keyword search across the framework. Substring match on lowercased terms; field weights: title 10x, summary 4x, SFR text 3x, description 2x, pattern body 1x. `matched_in` reports the highest-weighted field that matched. No semantic / embedding search — known limitation, see /mcp.html. Use verbosity='compact' to drop snippets and confidence flags (~70% smaller payload) when triaging.
Public scan report
scanner v0.1.9 · 2026-09-20 · same rubric, same numbers if you re-run it
- Code scan250 source files scanned20/25
- Live reliabilityremote reachable in 908ms20/20
- Tool poisoning12 tool descriptions checked15/15
- Auth qualityopen endpoint, read-only tools10/15
- Maintenancelast push 17 days ago15/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Findings (1)
- mediumeval / new Function used
exec.evalsaferagenticai_mcp-0.3.6/saferagenticai_mcp/_data/suites/I2/I2--idx9--supervisory-systems-and-adjudication.yaml: …ent):\n \ \ # Fast tier: rule eval (policy-as-code)\n flags = RULE_EN…
Install directly
claude mcp add --transport http saferagenticai-mcp https://mcp.saferagenticai.org/mcp
Saferagenticai: common questions
- Is Saferagenticai MCP server safe?
- Yes, by our scan: it is graded A (88/100). Read the Saferagenticai safety report
- How do I install Saferagenticai?
- It runs remotely at mcp.saferagenticai.org. Add it to Claude Code, Claude Desktop or Cursor with the snippets above, or call it through the mcp.market gateway without installing anything.
- Does Saferagenticai need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is Saferagenticai maintained?
- The last commit was 18 days ago (2026-09-03). The latest release is v0.3.6.
- Is Saferagenticai up?
- 100% of our last 7 checks got an answer. We check remote servers about four times a day.