NestDaddy

Raziel

io.github.tide-foundation/raziel · v1.9.34

MCP server teaching AI agents to implement TideCloak: auth, E2EE, IGA, security analysis

Connect Remote server

Terminal
claude mcp add --transport http raziel https://mcp.tide.org/mcp
~/.cursor/mcp.json
{
  "mcpServers": {
    "raziel": {
      "url": "https://mcp.tide.org/mcp"
    }
  }
}
.vscode/mcp.json
{
  "servers": {
    "raziel": {
      "type": "http",
      "url": "https://mcp.tide.org/mcp"
    }
  }
}
Claude Desktop
Settings > Connectors > Add custom connector
URL: https://mcp.tide.org/mcp

Tools 22 found in our last check

  • tide_list

    List all available content in the Tide agent pack by category

  • tide_canon

    Read a canon file (invariants, anti-patterns, concepts, framework-matrix, feature-mapping, troubleshooting, tidecloak-bootstrap, etc.)

  • tide_playbook

    Read a step-by-step playbook for a specific Tide task

  • tide_skill

    Read a composable skill definition

  • tide_prompt

    Read a reusable starter prompt from the pack

  • tide_adapter

    Read an adapter instruction file (AGENTS, CLAUDE, replit)

  • tide_list_scenarios

    List all available scenario patterns under reference-apps/

  • tide_scenario

    Read a scenario summary from reference-apps/<scenario>/scenario.md

  • tide_scenario_manifest

    Read a scenario manifest from reference-apps/<scenario>/manifest.yaml

  • tide_scenario_roles

    Read a scenario role-policy matrix from reference-apps/<scenario>/role-policy-matrix.md

  • tide_scenario_bootstrap

    Read a scenario bootstrap sequence from reference-apps/<scenario>/bootstrap-sequence.md

  • tide_choose_scenario

    Match a user request to a known scenario pattern before falling back to generic playbooks

  • tide_choose_playbook

    Recommend the right playbook for a given situation

  • tide_security_analysis

    Analyze an EXISTING (possibly non-Tide) system for security gaps and map them to Tide capabilities. Returns the Security Analyst role instructions, the security gap mapping table (SG-01…SG-18), and the runtime-probe procedures. Use this when the user asks 'do a security analysis…

  • tide_blast_radius

    Run a Blast Radius Assessment of an EXISTING app: an adversarial, vendor-neutral map of where authority is concentrated to a single point (whoever obtains that one thing obtains everything it governs), scored by blast radius (Total/Systemic/Contained/Limited) across three cores…

  • tide_hosting

    Where TideCloak runs: local Docker vs partner-hosted (Skycloak managed TideCloak-as-a-service). Returns the local-vs-hosted decision with the honest trade-offs, the trust model, the verified Skycloak API reference (correct cluster field names and the required version), and the f…

  • tide_dpop_asset

    Returns the exact command that installs `public/tide_dpop_auth.html` — the DPoP relay page the Tide enclave loads during login — plus its sha256, the required next.config.ts rewrite/CSP wiring, and how to verify. `@tidecloak/js` ships the file from 0.14.34; older SDKs and the Ti…

  • tide_onboarding

    STOP KEYCLOAK'S 'UPDATE ACCOUNT INFORMATION' PAGE and collect the details in-app instead. Tide asserts ONLY a username (the vuid) -- no email, no name -- so Keycloak blocks new users on an unstyled form showing a 64-hex username. Returns: a read-only DIAGNOSTIC that identifies w…

  • tide_branding

    BRAND THE ENCLAVE FOR THE USER — generate a logo + background and upload them so the Tide login/approval screen is branded. Returns a single ready-to-run command that generates the assets (no image model needed), validates them, uploads both, and saves+signs the IdP settings. Al…

  • tide_scaffold

    START A NEW TIDE APP FROM A WORKING TEMPLATE. Returns the exact commands to copy a complete, building app — login, the DPoP page and its wiring, server-side token AND proof verification, and the realm bootstrap script — then install, bootstrap and check it. CALL THIS when buildi…

  • tide_doctor

    FIND AND FIX WHAT IS WRONG WITH A TIDE APP, IN ONE COMMAND. Returns the command that checks an app for the faults behind most broken logins and unprotected APIs. It REPAIRS the mechanical ones itself (re-copies the DPoP page byte-exact, corrects a wrong rewrite path, gitignores…

  • tide_gaps

    Read the gap register — what is still uncertain or unresolved in the pack

Details

Endpointhttps://mcp.tide.org/mcp (Streamable HTTP)
Package@tideorg/[email protected] (NPM, stdio)
First published29 Oct 2026
Last updated29 Oct 2026
Registry nameio.github.tide-foundation/raziel

More security servers See all

Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.