Rasczak Knowledge Commons MCP server

Rasczak agent service

Ten free, source-linked decision methods, three optional decision packs, REST, static pages, a stateless MCP endpoint, and an offline Agent Skill. Requests use reviewed fixed content and make no model calls. Payments are disabled by default; deployment owners must verify live settlement before enabling them.

Version 0.4.0 adds a decision-workflow preview, a free client skill, private version entitlement code and bounded public-source collection. The first workflow has a $5 price hypothesis but cannot be purchased. Paired model evaluation and independent trials remain pending. Hosted research is a preview, not an available service.

Version 0.4.1 fixes a collector failure reproduced inside Workers: unsupported redirect handling prevented requests. Redirects are now returned without following them and rejected explicitly. Runs persist only bounded failure codes, never error messages or response bodies. An actual Workers-runtime test covers collection and redirect refusal with external networking replaced by synthetic responses.

/workflows/ and the workflow_catalog MCP tool expose scope and evaluation status. /books/ links to two optional books with royalty disclosure. Customer decision artifacts remain with the customer. General feedback is not permission to reuse work as a published example.

KitAccess is an inactive backend component tested with ephemeral wallet signatures and local storage fixtures. A settled receipt binds buyer, SKU, version and artifact hash; fresh one-use signatures gate each download. Production private storage, actual settlement and refund reconciliation still need qualification. Environment flags cannot activate the workflow purchase or access routes. Source code and free clients are public; private workflow drafts are excluded from this repository and static assets.

The optional market collector reads at most three operator-approved GitHub issue sources and inserts at most twenty deduplicated links/titles per UTC day, with a total ceiling of 1,000 records. It makes no model calls and never executes issue text. Configure approved sources privately through D1, not public request bodies. A crashed run needs reconciliation; provider throttling stops without retry. No collector runs without its enable flag and approved sources.

Research preview and privacy

GET /api/v2/research explains the future capped-cost service. GET /api/v2/kits supports q, domain, offset and limit; GET /api/v2/kits/{id} reads metadata. GET /api/v2/changes provides version changes. POST /api/v2/research/feedback accepts general interest or skill feedback under the OpenAPI schema. It never creates an order or charge. Feedback requires RESEARCHFEEDBACKENABLED=true, a D1 binding and FEEDBACKHASHKEY set through the deployment secret store. Never put its value in source or a prompt.

Apply migrations/0002_research.sql before enabling feedback. The daily deterministic cleanup aggregates expired feedback and removes raw submissions after 30 days. Per-day limits: five submissions per pseudonym, twenty per network hash, one thousand globally. Hashes are not verified customer identities. General comments must omit private information; do not post customer scenarios or credentials. The service sends no notifications or outreach.

Research quote/order/status/result/refund endpoints return 503. A Cloudflare Workflow entrypoint is provided but is not bound and unconditionally refuses execution. Live model and refund transports are deliberately absent. Setting flags cannot bypass this release gate. Offline modules implement integer micro-USD pricing, a 30% markup, quote acceptance, atomic cost reservations, uncertain-call reconciliation, lifecycle transitions and refund intents. Only injected mock adapters may rehearse a job.

Shortened. The full README is on GitHub.