Raziel MCP Server

by tide-foundation Your server? Claim it

answering

Raziel is answering right now. Last checked 11 min ago. 121 installs a week from npm. It exposes 20 tools. Last commit 20 Aug 2026.

MCP server teaching AI agents to implement TideCloak: auth, E2EE, IGA, security analysis

Installs per day peak 320 · avg 45 · +15% w/w

a month agotoday

Uptime history 47 days of history

47 days agonow

100.0%

Uptime 24h

91 of 91 checks

Tools

read from the server

1142 ms

Response time

average over 24h

121

Installs / week

npm and PyPI

What changed 23

Every tool that appeared, vanished or quietly changed what it asks for. Recorded since 10 August 2026. No other catalogue keeps this.

21 Aug a tool changed the parameters it asks for tide_skill

21 Aug a tool appeared tide_onboarding

21 Aug a tool changed version

19 Aug a tool changed version2 times that day

18 Aug a tool changed version

18 Aug a tool appeared tide_dpop_asset

17 Aug 2 tools changed the parameters they ask for tide_branding, tide_canon

17 Aug a tool description was rewritten tide_branding

17 Aug a tool changed version

13 Aug a tool changed version2 times that day

and 12 more, back to 10 August 2026

What the code does

We read the source, 18 h ago · tools taken from the live server · rules 3dff92dd89df

Capabilities

What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.

Builds a database query by concatenation templates/shared/bootstrap-tidecloak.sh:364

     - you supply artwork                 (drop logo.png + background.jpg in ./branding/)

Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.

This code can reach further than it looks

We found places where it runs commands, builds paths or queries from values it is given. None of that is a flaw by itself — it becomes one when the code changes, and code changes quietly between releases. We re-read it on every one.

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 11 min ago.

Claude Code Claude Desktop Codex Cursor VS Code

run in your terminal

claude mcp add raziel --transport http https://mcp.tide.org/mcp

~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "raziel": {
      "url": "https://mcp.tide.org/mcp"
    }
  }
}

~/.codex/config.toml

[mcp_servers.raziel]
url = "https://mcp.tide.org/mcp"

.cursor/mcp.json

{
  "mcpServers": {
    "raziel": {
      "url": "https://mcp.tide.org/mcp"
    }
  }
}

.vscode/mcp.json

{
  "mcpServers": {
    "raziel": {
      "url": "https://mcp.tide.org/mcp"
    }
  }
}

Available tools 20

Read directly from the server with tools/list, grouped by what they act on. If a tool disappears, we record the date.

tide

tide_adapter

Read an adapter instruction file (AGENTS, CLAUDE, replit)

tide_blast_radius

Run a Blast Radius Assessment of an EXISTING app: an adversarial, vendor-neutral map of where authority is concentrated to a single point (whoever obtains that one thing obtains everything it governs), scored by blast radius (Total/Systemic/Contained/Limited) across three cores — Identity, Governance, Access — and delivered as a director-facing PDF. Phase 1 names no vendor; an opt-in Phase 2 companion explains how TideCloak shrinks each blast radius. Use this when the user wants to 'assess', 'red team', 'threat model', 'find the security gaps in', or make a before/after security case for an existing application.

tide_branding

BRAND THE ENCLAVE FOR THE USER — generate a logo + background and upload them so the Tide login/approval screen is branded. Returns a single ready-to-run command that generates the assets (no image model needed), validates them, uploads both, and saves+signs the IdP settings. Also returns the VERIFIED upload contract (multipart parts, the png/jpg/jpeg/gif/webp allowlist with SVG REJECTED, the 5 MB cap, set-branding = save AND re-sign, IGA-exempt) plus image-model prompts for agents that can generate images. Pass realm/accent/appName to get the command pre-filled. CALL THIS whenever branding, a logo, a background, theming or 'skinning' the enclave or login screen comes up — then RUN the command; do not just describe it.

tide_canon

Read a canon file (invariants, anti-patterns, concepts, framework-matrix, feature-mapping, troubleshooting, tidecloak-bootstrap, etc.)

tide_choose_playbook

Recommend the right playbook for a given situation

tide_choose_scenario

Match a user request to a known scenario pattern before falling back to generic playbooks

tide_dpop_asset

Returns the CONTENTS of `public/tide_dpop_auth.html` — the DPoP relay page the Tide enclave loads during login — plus its sha256, the required next.config.ts rewrite/CSP wiring, and how to verify. The file is NOT shipped in the @tidecloak/* npm packages and is NOT in the TideCloak container, so there is nowhere else to get it: without this tool people search GitHub and find a STALE copy that posts to window.parent, which breaks the popup fallback and fails login with TIDE-SWE-UNHANDLED. CALL THIS whenever DPoP is enabled (it is on by default), whenever a login fails with TIDE-SWE-UNHANDLED or 'Popup DPoP verification failed to load', and before copying this file from anywhere else.

tide_gaps

Read the gap register — what is still uncertain or unresolved in the pack

tide_hosting

Where TideCloak runs: local Docker vs partner-hosted (Skycloak managed TideCloak-as-a-service). Returns the local-vs-hosted decision with the honest trade-offs, the trust model, the verified Skycloak API reference (correct cluster field names and the required version), and the full provisioning playbook. CALL THIS BEFORE STARTING ANY TIDECLOAK DEPLOYMENT — the choice must be made up front (I-17) because a realm cannot be moved between local and hosted afterwards. Triggers: 'deploy to production', 'deploy TideCloak', 'go live', 'host this somewhere', 'managed option', 'stable URL', 'can someone host TideCloak for us', or any request to stand up an instance where local-vs-hosted has not been settled.

tide_list

List all available content in the Tide agent pack by category

tide_list_scenarios

List all available scenario patterns under reference-apps/

tide_onboarding

STOP KEYCLOAK'S 'UPDATE ACCOUNT INFORMATION' PAGE and collect the details in-app instead. Tide asserts ONLY a username (the vuid) -- no email, no name -- so Keycloak blocks new users on an unstyled form showing a 64-hex username. Returns: a read-only DIAGNOSTIC that identifies which of FOUR mechanisms is causing the page (they need different fixes), the script that fixes it, and a ready-to-drop React modal that collects the details AFTER login via the Account API. CALL THIS whenever signup, onboarding, 'Update Account Information', a profile/details form, or 'what users see after they create an account' comes up -- and ALSO proactively once a realm is bootstrapped, because the default is that every new user hits that page.

tide_playbook

Read a step-by-step playbook for a specific Tide task

tide_prompt

Read a reusable starter prompt from the pack

tide_scenario

Read a scenario summary from reference-apps/<scenario>/scenario.md

tide_scenario_bootstrap

Read a scenario bootstrap sequence from reference-apps/<scenario>/bootstrap-sequence.md

tide_scenario_manifest

Read a scenario manifest from reference-apps/<scenario>/manifest.yaml

tide_scenario_roles

Read a scenario role-policy matrix from reference-apps/<scenario>/role-policy-matrix.md

tide_security_analysis

Analyze an EXISTING (possibly non-Tide) system for security gaps and map them to Tide capabilities. Returns the Security Analyst role instructions, the security gap mapping table (SG-01…SG-18), and the runtime-probe procedures. Use this when the user asks 'do a security analysis', 'where is my auth weak', or 'what would Tide change about my security'.

tide_skill

Read a composable skill definition

Endpoints

URL	Transport	State	Latency	Checked
https://mcp.tide.org/mcp	streamable-http	answering	1344 ms	11 min ago

Alternatives to Raziel

same job, measured the same way

Vaultguard MCP

by kota1026

VaultGuard MCP Server - Yearn V3 / DeFi vault security and analysis tools for AI coding agents....

25 installs/wk local only

CrowdStrike Falcon MCP Server

by crowdstrike

Connects AI agents with CrowdStrike Falcon for security analysis and automation.

10 994 installs/wk local only

npm MCP

by alisaitteke

MCP server for npm package management, security analysis, and compatibility checking

32 installs/wk local only

DNS MCP Server

by mclose

Real-time DNS security analysis — DNSSEC, email auth, and RDAP. Built for SOC investigations.

local only

SymbioticSec

by symbioticsec

Symbiotic CLI MCP Server for security scanning and analysis

50 installs/wk local only

Guardrails

by expertvagabond

AI Agent Guardrails MCP server - security layer

43 installs/wk local only

npm Registry MCP Server

by yawlabs

npm registry MCP server — package intelligence, security audits, dependency analysis

1 290 installs/wk local only

Bridgeguard MCP

by kota1026

BridgeGuard MCP Server - Cross-chain bridge security audit tools for AI coding agents. Scan bri...

54 installs/wk local only

Raziel — questions

Answers built from our own checks of this server.

What can Raziel do?

It exposes 20 tools, read directly from the server on our last check. Among them: tide_adapter, tide_blast_radius, tide_branding, tide_canon, tide_choose_playbook, tide_choose_scenario and 14 more. The full list with descriptions is on this page — we take it from the server itself via tools/list, not from a README. How MCP servers expose tools in the first place →

Is Raziel working right now?

We send a real MCP handshake every 15 minutes. Over the last 24 hours 91 of 91 checks got a reply (100.0%), average response time 1142 ms. The bar chart above shows every period we have measured.

How do I connect Raziel?

Copy the ready config from this page — we generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each with the file path that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address.

Does Raziel need an API key?

No. Raziel completed a full MCP handshake with us as an anonymous client and listed its tools without asking for anything. All 20 of them are readable on this page. This is what we observed, not what the docs claim.

How fast is Raziel?

It answers our handshake in 1142 ms on average, which is faster than 6% of all working MCP servers we measure. That is on the slow side — worth knowing if the tool sits inside an interactive loop. The comparison comes from our own checks across the whole registry, every 15 minutes.

How many people use Raziel?

The npm package @tideorg/mcp was installed 121 times in the last week. Week over week that is +15%. We show installs rather than GitHub stars on purpose: a star is a bookmark, an install is someone actually running it.

Is Raziel open source?

We cannot say either way: written in Shell and 0 stars on GitHub, but we could not determine the licence, and without one the code is not open source by default.