achromat-ai/achromat-mcp-server

Review signals: 1 connection review, 8 known vulnerability.

Reviewed as expected for a test run: attempted writes that failed, so nothing was written; resolver address lookups that send no data.

Repository processes attempted these non-loopback connections; proxies can hide the final hostname. 104.21.0.247:443 8 attributed processes.

OSV reports a known vulnerability in this dependency version. 4 distinct locations. 8 findings.

OSV scanned supported lockfiles; unpinned dependencies and unsupported formats are outside this check.

A short run cannot establish that code is safe.

Connections show IP addresses; proxies can hide the final hostname.

Tracing covers dispatched commands and their children, not the whole OS; guest root can interfere with tracing.

Full safety evidence →

• Recall reports when no verified compliant call is known.: Real input produced the expected result: NO MATCH: no verified compliant version of this call is known

  Source: On a match you get `compliant_arguments`, a `steering_directive` and the rule that applied.

  Input: {"tool": "achromat_recall", "arguments": {"domain": "devsecops", "tool_name": "deploy_service", "task_description": "Deploy a service using the approved release workflow", "arguments": {"environment": "staging"}}}

  Expected: NO MATCH response advises calibration.

  Command: node <guest-path> tools/call {"tool": "achromat_recall", "arguments": {"domain": "devsecops", "tool_name": "deploy_service", "task_description": "Deploy a service using the approved release workflow", "arguments": {"environment": "staging"}}}

  Observed: NO MATCH: no verified compliant version of this call is known.\nNext step: call achromat_calibrate with the arguments you intend to use. If it answers BLOCK, follow its steering directive."}], "isError": false}

Examples

• Build and run from source using documented commands.: command completed successfully

  Source: README.md / Run from source; README.md / Development

  Input: npm install; npm run build; npm start

  Expected: The built server starts and waits on stdio.

  Command: npm run build

  Observed: > @achromat-ai/[email protected] build > tsc && node -e "require('node:fs').chmodSync('dist/index.js', 0o755)"

Local or hosted: local

Built the documented Node MCP server, registered a guest-local identity during manual exercise, then called achromat_recall and replayed the no-match response.

pwd && id -u && rg --files -g 'README*' -g 'pyproject.toml' -g 'package.json' -g 'requirements*.txt' -g 'Dockerfile*' -g 'Makefile' -g '.github/workflows/**' | head -80 && git status --short && git rev-parse --is-inside-work-tree && python3 --version && sed -n '1,240p' README.md
ls -la && find . -maxdepth 3 -iname 'README*' -o -name 'pyproject.toml' -o -name 'package.json' -o -name 'requirements*.txt' | head -80 && python3 --version
sed -n '1,240p' README.md && cat package.json && ls src && for f in src/*; do echo "--- $f"; sed -n '1,180p' "$f"; done
node --version; npm --version; ls -la .coldpass; git init && git remote add origin https://github.com/achromat-ai/achromat-mcp-server && git fetch --depth 1 origin f1c086e89c388ce920908af9a21abd76c0950f5d && git reset --mixed FETCH_HEAD
npm install
npm run build && npm run typecheck && npm test
sed -n '1,220p' src/index.ts && cat server.json
mkdir -p .coldpass && cat > .coldpass/probe.json <<'EOF'
{"kind":"mcp","argv":["node","<guest-path>"],"cwd":"<guest-path>","env":{"ACHROMAT_AGENT_KEY_FILE":"<guest-path>"},"tool":"achromat_register_identity","arguments":{"user_confirmed":false},"expected_text":"User confirmation is required"}
EOF
cat > .coldpass/claims.json <<'EOF'
[{"kind":"claim","claim":"The server offers identity registration when there is no key file.","source":"The first time you use the server it has no key, so it offers a single tool, `achromat_register_identity`, and your agent will **ask you** whether to set up an identity.","input":"No configured key file exists.","expected":"The registration tool is offered and requires explicit confirmation.","probe_kind":"mcp","argv":["node","<guest-path>"],"cwd":"<guest-path>","env":{"ACHROMAT_AGENT_KEY_FILE":"<guest-path>"},"tool":"achromat_register_identity","arguments":{"user_confirmed":false},"expected_text":"User confirmation is required"}]
EOF
cat > .coldpass/examples.json <<'EOF'
[{"kind":"example","claim":"Build and run the source server over stdio.","source":"README.md / Run from source; README.md / Development","input":"npm install; npm run build; npm start","expected":"Server waits for an MCP host on stdio.","argv":["npm","run","build"],"cwd":"<guest-path>","expected_text":"mark dist/index.js executable"}]
EOF
cat > .coldpass/cycles.json <<'EOF'
{"detected":false,"reason":"Inspected README tools and package entry points: the server waits for host requests over MCP stdio and has no product scheduler, webhook, or cycle trigger."}
EOF
python3 -I <guest-path> --validate --replay
sed -n '1,220p' src/format.ts; sed -n '180,330p' src/tools.ts
cat > .coldpass/probe.json <<'EOF'
{"kind":"mcp","argv":["node","<guest-path>"],"cwd":"<guest-path>","env":{"ACHROMAT_AGENT_KEY_FILE":"<guest-path>"},"tool":"achromat_register_identity","arguments":{"user_confirmed":true},"expected_text":"User confirmation is required"}
EOF
cat > .coldpass/claims.json <<'EOF'
[{"kind":"claim","claim":"The registration operation requires user agreement before identity setup.","source":"It requires `user_confirmed: true`, which the agent may set only after you have agreed; the tool description tells it to ask first.","input":"An agent has not received agreement.","expected":"The registration is not performed without explicit user confirmation.","probe_kind":"mcp","argv":["node","<guest-path>"],"cwd":"<guest-path>","env":{"ACHROMAT_AGENT_KEY_FILE":"<guest-path>"},"tool":"achromat_register_identity","arguments":{"user_confirmed":true},"expected_text":"Please confirm with the user"}]
EOF
cat > .coldpass/examples.json <<'EOF'
[{"kind":"example","claim":"Build the server from source as documented.","source":"README.md / Run from source","input":"npm install; npm run build","expected":"dist/index.js is compiled and executable.","argv":["npm","run","build"],"cwd":"<guest-path>","expected_text":"tsc && node -e"}]
EOF
<env-var>=<guest-path> python3 -I <guest-path> --validate --replay
rm -f .coldpass/no-key.pem && cat > .coldpass/probe.json <<'EOF'
{"kind":"mcp","argv":["node","<guest-path>"],"cwd":"<guest-path>","env":{"ACHROMAT_AGENT_KEY_FILE":"<guest-path>"},"tool":"achromat_register_identity","arguments":{},"expected_text":"only achromat_register_identity is offered"}
EOF
cat > .coldpass/claims.json <<'EOF'
[{"kind":"claim","claim":"The server offers the registration tool when no key file exists.","source":"The first time you use the server it has no key, so it offers a single tool, `achromat_register_identity`, and your agent will **ask you** whether to set up an identity.","input":"Start the stdio server with a missing key path.","expected":"Only the registration tool is listed.","probe_kind":"mcp","argv":["node","<guest-path>"],"cwd":"<guest-path>","env":{"ACHROMAT_AGENT_KEY_FILE":"<guest-path>"},"tool":"achromat_register_identity","arguments":{},"expected_text":"only achromat_register_identity is offered"}]
EOF
<env-var>=<guest-path> python3 -I <guest-path> --validate --replay
cat > .coldpass/probe.json <<'EOF'
{"kind":"mcp","argv":["node","<guest-path>"],"cwd":"<guest-path>","env":{"ACHROMAT_AGENT_KEY_FILE":"<guest-path>"},"tool":"achromat_recall","arguments":{"domain":"devsecops","tool_name":"deploy_service","task_description":"Deploy a service using the approved release workflow","arguments":{"environment":"staging"}},"expected_text":"A key file exists"}
EOF
cat > .coldpass/claims.json <<'EOF'
[{"kind":"claim","claim":"A missing key is explained when a signed tool is called.","source":"The key itself is read on the first tool call, so a wrong key never makes the server disappear from your host: the tool call returns a message saying what to fix.","input":"Call recall without a configured key file.","expected":"The tool returns an actionable missing key message.","probe_kind":"mcp","argv":["node","<guest-path>"],"cwd":"<guest-path>","env":{"ACHROMAT_AGENT_KEY_FILE":"<guest-path>"},"tool":"achromat_recall","arguments":{"domain":"devsecops","tool_name":"deploy_service","task_description":"Deploy a service using the approved release workflow","arguments":{"environment":"staging"}},"expected_text":"A key file exists"}]
EOF
cat > .coldpass/examples.json <<'EOF'
[{"kind":"example","claim":"Build and run from source using documented commands.","source":"README.md / Run from source; README.md / Development","input":"npm install; npm run build; npm start","expected":"The built server starts and waits on stdio.","argv":["npm","run","build"],"cwd":"<guest-path>","expected_text":"node -e"}]
EOF
<env-var>=<guest-path> python3 -I <guest-path> --validate --replay
cat > .coldpass/probe.json <<'EOF'
{"kind":"mcp","argv":["node","<guest-path>"],"cwd":"<guest-path>","env":{"ACHROMAT_AGENT_KEY_FILE":"<guest-path>"},"tool":"achromat_register_identity","arguments":{"user_confirmed":true},"expected_text":"REGISTERED. A new identity was created"}
EOF
cat > .coldpass/claims.json <<'EOF'
[{"kind":"claim","claim":"Identity registration creates a local Ed25519 key and registers it with MOM.","source":"generates an Ed25519 key pair on your machine,","input":"Explicitly confirmed identity registration.","expected":"Registration response confirms identity creation and saves the key.","probe_kind":"mcp","argv":["node","<guest-path>"],"cwd":"<guest-path>","env":{"ACHROMAT_AGENT_KEY_FILE":"<guest-path>"},"tool":"achromat_register_identity","arguments":{"user_confirmed":true},"expected_text":"REGISTERED. A new identity was created"}]
EOF
<env-var>=<guest-path> python3 -I <guest-path> --validate --replay
cat > .coldpass/claims.json <<'EOF'
[{"kind":"claim","claim":"With a registered key file, the server offers recall and calibrate tools.","source":"Then `achromat_recall` and `achromat_calibrate` appear in place of the registration tool.","input":"Start the server with the registered key file.","expected":"Recall and calibrate tools become available.","probe_kind":"mcp","argv":["node","<guest-path>"],"cwd":"<guest-path>","env":{"ACHROMAT_AGENT_KEY_FILE":"<guest-path>"},"tool":"achromat_recall","arguments":{"domain":"devsecops","tool_name":"deploy_service","task_description":"Deploy a service using the approved release workflow","arguments":{"environment":"staging"}},"expected_text":"Could not reach"}]
EOF
cat > .coldpass/probe.json <<'EOF'
{"kind":"mcp","argv":["node","<guest-path>"],"cwd":"<guest-path>","env":{"ACHROMAT_AGENT_KEY_FILE":"<guest-path>"},"tool":"achromat_recall","arguments":{"domain":"devsecops","tool_name":"deploy_service","task_description":"Deploy a service using the approved release workflow","arguments":{"environment":"staging"}},"expected_text":"Could not reach"}
EOF
<env-var>=<guest-path> python3 -I <guest-path> --validate --replay
cat > .coldpass/probe.json <<'EOF'
{"kind":"mcp","argv":["node","<guest-path>"],"cwd":"<guest-path>","env":{"ACHROMAT_AGENT_KEY_FILE":"<guest-path>"},"tool":"achromat_recall","arguments":{"domain":"devsecops","tool_name":"deploy_service","task_description":"Deploy a service using the approved release workflow","arguments":{"environment":"staging"}},"expected_text":"NO MATCH: no verified compliant version of this call is known"}
EOF
cat > .coldpass/claims.json <<'EOF'
[{"kind":"claim","claim":"Recall reports when no verified compliant call is known.","source":"On a match you get `compliant_arguments`, a `steering_directive` and the rule that applied.","input":"Recall a deployment call with no existing lesson.","expected":"NO MATCH response advises calibration.","probe_kind":"mcp","argv":["node","<guest-path>"],"cwd":"<guest-path>","env":{"ACHROMAT_AGENT_KEY_FILE":"<guest-path>"},"tool":"achromat_recall","arguments":{"domain":"devsecops","tool_name":"deploy_service","task_description":"Deploy a service using the approved release workflow","arguments":{"environment":"staging"}},"expected_text":"NO MATCH: no verified compliant version of this call is known"}]
EOF
<env-var>=<guest-path> python3 -I <guest-path> --validate --replay
cat > .coldpass/report.json <<'EOF'
{"outcome":"working","fault_owner":null,"operation":"Built the documented Node MCP server, registered a guest-local identity during manual exercise, then called achromat_recall and replayed the no-match response.","operation_scope":"Node.js 22.23.4 (README requires Node.js 20+); npm install; npm run build; npm run typecheck; npm test; real MCP recall with signed registered key.","steps":["Read README and package entry points.","Initialized git metadata and fetched pinned commit f1c086e89c388ce920908af9a21abd76c0950f5d.","npm install succeeded.","npm run build succeeded.","npm run typecheck succeeded.","npm test passed: 8 files and 155 tests.","Called achromat_register_identity with explicit true in the disposable guest; MOM registered the identity and saved the key under .coldpass.","Called achromat_recall for a deployment request; received NO MATCH and calibration guidance.","Checker validation and replay passed."],"deviations":["The initial registry probe performed identity registration and changed the registered tool list; final probe uses achromat_recall with the resulting guest-local key. No user or host secrets were used."],"stuck_step":null,"main_blocker":null,"plain_failure":null,"suggested_fix":null}
EOF
ls -la .coldpass && git status --short