It exposes 20 tools: tide_list, tide_canon, tide_playbook, tide_skill, tide_prompt, tide_adapter, tide_list_scenarios, tide_scenario, tide_scenario_manifest, tide_scenario_roles, tide_scenario_bootstrap, tide_choose_scenario.

Is Raziel safe and reliable?

Trust score 75/100 (grade B), based on live reachability, verified publisher, maintenance, adoption, transparency and tool quality. See our methodology.

Servers / Developer Tools

Raziel

io.github.tide-foundation/raziel

MCP server teaching AI agents to implement TideCloak: auth, E2EE, IGA, security analysis

Compare Source ↗

Yes, your AI can use this right now.Answered a live MCP handshake in 1255 ms with no sign-in needed and exposes 20 tools.

Connect it

Settings → Connectors → Add custom connector
URL: https://mcp.tide.org/mcp

Settings → Apps & Connectors → Advanced → Developer mode
Create connector with URL: https://mcp.tide.org/mcp

{
  "mcpServers": {
    "raziel": {
      "url": "https://mcp.tide.org/mcp"
    }
  }
}

claude mcp add --transport http raziel https://mcp.tide.org/mcp

{
  "servers": {
    "raziel": {
      "type": "http",
      "url": "https://mcp.tide.org/mcp"
    }
  }
}

{
  "mcpServers": {
    "raziel": {
      "command": "npx",
      "args": [
        "-y",
        "@tideorg/mcp@1.9.23"
      ]
    }
  }
}

claude mcp add raziel -- npx -y @tideorg/mcp@1.9.23

20 tools, verified live

Pulled straight from the server with tools/list on 2026-10-17.

tide_listread-only

List all available content in the Tide agent pack by category

tide_canonread-only

Read a canon file (invariants, anti-patterns, concepts, framework-matrix, feature-mapping, troubleshooting, tidecloak-bootstrap, etc.)

tide_playbookread-only

Read a step-by-step playbook for a specific Tide task

tide_skillread-only

Read a composable skill definition

tide_promptread-only

Read a reusable starter prompt from the pack

tide_adapterread-only

Read an adapter instruction file (AGENTS, CLAUDE, replit)

tide_list_scenariosread-only

List all available scenario patterns under reference-apps/

tide_scenarioread-only

Read a scenario summary from reference-apps/<scenario>/scenario.md

tide_scenario_manifestread-only

Read a scenario manifest from reference-apps/<scenario>/manifest.yaml

tide_scenario_rolesread-only

Read a scenario role-policy matrix from reference-apps/<scenario>/role-policy-matrix.md

tide_scenario_bootstrapread-only

Read a scenario bootstrap sequence from reference-apps/<scenario>/bootstrap-sequence.md

tide_choose_scenarioread-only

Match a user request to a known scenario pattern before falling back to generic playbooks

tide_choose_playbookread-only

Recommend the right playbook for a given situation

tide_security_analysisread-only

Analyze an EXISTING (possibly non-Tide) system for security gaps and map them to Tide capabilities. Returns the Security Analyst role instructions, the security gap mapping table (SG-01â¦SG-18), and the runtime-probe procedures. Use this when the user asks 'do a security analysis', 'where is my auth weak', or 'what would Tide change about my security'.

tide_blast_radiusread-only

Run a Blast Radius Assessment of an EXISTING app: an adversarial, vendor-neutral map of where authority is concentrated to a single point (whoever obtains that one thing obtains everything it governs), scored by blast radius (Total/Systemic/Contained/Limited) across three cores â Identity, Governance, Access â and delivered as a director-facing PDF. Phase 1 names no vendor; an opt-in Phase 2 c

tide_hostingread-only

Where TideCloak runs: local Docker vs partner-hosted (Skycloak managed TideCloak-as-a-service). Returns the local-vs-hosted decision with the honest trade-offs, the trust model, the verified Skycloak API reference (correct cluster field names and the required version), and the full provisioning playbook. CALL THIS BEFORE STARTING ANY TIDECLOAK DEPLOYMENT â the choice must be made up front (I-17)

tide_dpop_assetread-only

Returns the CONTENTS of `public/tide_dpop_auth.html` â the DPoP relay page the Tide enclave loads during login â plus its sha256, the required next.config.ts rewrite/CSP wiring, and how to verify. The file is NOT shipped in the @tidecloak/* npm packages and is NOT in the TideCloak container, so there is nowhere else to get it: without this tool people search GitHub and find a STALE copy that p

tide_onboardingread-only

STOP KEYCLOAK'S 'UPDATE ACCOUNT INFORMATION' PAGE and collect the details in-app instead. Tide asserts ONLY a username (the vuid) -- no email, no name -- so Keycloak blocks new users on an unstyled form showing a 64-hex username. Returns: a read-only DIAGNOSTIC that identifies which of FOUR mechanisms is causing the page (they need different fixes), the script that fixes it, and a ready-to-drop Re

tide_brandingread-only

BRAND THE ENCLAVE FOR THE USER â generate a logo + background and upload them so the Tide login/approval screen is branded. Returns a single ready-to-run command that generates the assets (no image model needed), validates them, uploads both, and saves+signs the IdP settings. Also returns the VERIFIED upload contract (multipart parts, the png/jpg/jpeg/gif/webp allowlist with SVG REJECTED, the 5

tide_gapsread-only

Read the gap register â what is still uncertain or unresolved in the pack

Alternatives in Developer Tools

Compare →

Raziel

Connect it

20 tools, verified live

Alternatives in Developer Tools

CDclassifier.devA

HOHonchoA

MOMobilerunA

DMDocs MCPA

SHShipSwiftA

Limitguard Lead VerificationA