Raziel
io.github.tide-foundation/razielMCP server teaching AI agents to implement TideCloak: auth, E2EE, IGA, security analysis
Tools · 20
List all available content in the Tide agent pack by category
Read a canon file (invariants, anti-patterns, concepts, framework-matrix, feature-mapping, troubleshooting, tidecloak-bootstrap, etc.)
Read a step-by-step playbook for a specific Tide task
Read a composable skill definition
Read a reusable starter prompt from the pack
Read an adapter instruction file (AGENTS, CLAUDE, replit)
List all available scenario patterns under reference-apps/
Read a scenario summary from reference-apps/<scenario>/scenario.md
Read a scenario manifest from reference-apps/<scenario>/manifest.yaml
Read a scenario role-policy matrix from reference-apps/<scenario>/role-policy-matrix.md
Read a scenario bootstrap sequence from reference-apps/<scenario>/bootstrap-sequence.md
Match a user request to a known scenario pattern before falling back to generic playbooks
Recommend the right playbook for a given situation
Analyze an EXISTING (possibly non-Tide) system for security gaps and map them to Tide capabilities. Returns the Security Analyst role instructions, the security gap mapping table (SG-01…SG-18), and th…
Run a Blast Radius Assessment of an EXISTING app: an adversarial, vendor-neutral map of where authority is concentrated to a single point (whoever obtains that one thing obtains everything it governs)…
Where TideCloak runs: local Docker vs partner-hosted (Skycloak managed TideCloak-as-a-service). Returns the local-vs-hosted decision with the honest trade-offs, the trust model, the verified Skycloak …
Returns the CONTENTS of `public/tide_dpop_auth.html` — the DPoP relay page the Tide enclave loads during login — plus its sha256, the required next.config.ts rewrite/CSP wiring, and how to verify. The…
STOP KEYCLOAK'S 'UPDATE ACCOUNT INFORMATION' PAGE and collect the details in-app instead. Tide asserts ONLY a username (the vuid) -- no email, no name -- so Keycloak blocks new users on an unstyled fo…
BRAND THE ENCLAVE FOR THE USER — generate a logo + background and upload them so the Tide login/approval screen is branded. Returns a single ready-to-run command that generates the assets (no image mo…
Read the gap register — what is still uncertain or unresolved in the pack
Prompts · 5
Start building a Tide-protected app from scratch
Add Tide to an existing app
Analyze an existing system for security gaps and map them to Tide
Start building a Tide app from a known scenario pattern
Run the pre-release QA gate on the Tide MCP pack and issue a SHIP/BLOCK verdict
Similar MCP servers embedding-nearest
How to use
Add to your Claude Desktop / Cursor / Cline MCP config:
{
"mcpServers": {
"raziel": {
"url": "https://mcp.tide.org/mcp",
"transport": "streamable-http"
}
}
}