MCP server teaching AI agents to implement TideCloak: auth, E2EE, IGA, security analysis
Connect Remote server
claude mcp add --transport http raziel https://mcp.tide.org/mcp
{
"mcpServers": {
"raziel": {
"url": "https://mcp.tide.org/mcp"
}
}
}
{
"servers": {
"raziel": {
"type": "http",
"url": "https://mcp.tide.org/mcp"
}
}
}
Settings > Connectors > Add custom connector
URL: https://mcp.tide.org/mcp
Tools 22 found in our last check
tide_listList all available content in the Tide agent pack by category
tide_canonRead a canon file (invariants, anti-patterns, concepts, framework-matrix, feature-mapping, troubleshooting, tidecloak-bootstrap, etc.)
tide_playbookRead a step-by-step playbook for a specific Tide task
tide_skillRead a composable skill definition
tide_promptRead a reusable starter prompt from the pack
tide_adapterRead an adapter instruction file (AGENTS, CLAUDE, replit)
tide_list_scenariosList all available scenario patterns under reference-apps/
tide_scenarioRead a scenario summary from reference-apps/<scenario>/scenario.md
tide_scenario_manifestRead a scenario manifest from reference-apps/<scenario>/manifest.yaml
tide_scenario_rolesRead a scenario role-policy matrix from reference-apps/<scenario>/role-policy-matrix.md
tide_scenario_bootstrapRead a scenario bootstrap sequence from reference-apps/<scenario>/bootstrap-sequence.md
tide_choose_scenarioMatch a user request to a known scenario pattern before falling back to generic playbooks
tide_choose_playbookRecommend the right playbook for a given situation
tide_security_analysisAnalyze an EXISTING (possibly non-Tide) system for security gaps and map them to Tide capabilities. Returns the Security Analyst role instructions, the security gap mapping table (SG-01…SG-18), and the runtime-probe procedures. Use this when the user asks 'do a security analysis…
tide_blast_radiusRun a Blast Radius Assessment of an EXISTING app: an adversarial, vendor-neutral map of where authority is concentrated to a single point (whoever obtains that one thing obtains everything it governs), scored by blast radius (Total/Systemic/Contained/Limited) across three cores…
tide_hostingWhere TideCloak runs: local Docker vs partner-hosted (Skycloak managed TideCloak-as-a-service). Returns the local-vs-hosted decision with the honest trade-offs, the trust model, the verified Skycloak API reference (correct cluster field names and the required version), and the f…
tide_dpop_assetReturns the exact command that installs `public/tide_dpop_auth.html` — the DPoP relay page the Tide enclave loads during login — plus its sha256, the required next.config.ts rewrite/CSP wiring, and how to verify. `@tidecloak/js` ships the file from 0.14.34; older SDKs and the Ti…
tide_onboardingSTOP KEYCLOAK'S 'UPDATE ACCOUNT INFORMATION' PAGE and collect the details in-app instead. Tide asserts ONLY a username (the vuid) -- no email, no name -- so Keycloak blocks new users on an unstyled form showing a 64-hex username. Returns: a read-only DIAGNOSTIC that identifies w…
tide_brandingBRAND THE ENCLAVE FOR THE USER — generate a logo + background and upload them so the Tide login/approval screen is branded. Returns a single ready-to-run command that generates the assets (no image model needed), validates them, uploads both, and saves+signs the IdP settings. Al…
tide_scaffoldSTART A NEW TIDE APP FROM A WORKING TEMPLATE. Returns the exact commands to copy a complete, building app — login, the DPoP page and its wiring, server-side token AND proof verification, and the realm bootstrap script — then install, bootstrap and check it. CALL THIS when buildi…
tide_doctorFIND AND FIX WHAT IS WRONG WITH A TIDE APP, IN ONE COMMAND. Returns the command that checks an app for the faults behind most broken logins and unprotected APIs. It REPAIRS the mechanical ones itself (re-copies the DPoP page byte-exact, corrects a wrong rewrite path, gitignores…
tide_gapsRead the gap register — what is still uncertain or unresolved in the pack
Details
| Endpoint | https://mcp.tide.org/mcp (Streamable HTTP) |
| Package | @tideorg/[email protected] (NPM, stdio) |
| First published | 29 Oct 2026 |
| Last updated | 29 Oct 2026 |
| Registry name | io.github.tide-foundation/raziel |
More security servers See all
Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.
