Raziel is an MCP server with 20 tools an agent can call, among them tide_adapter, tide_blast_radius, tide_branding. It answers at https://mcp.tide.org/mcp over streamable HTTP, and it listed its tools to an anonymous client, so no sign-in was needed for that. Our probes reached it 6 of 6 times since 11 September 2026; the last check, on 24 October 2026, succeeded.
MCP server teaching AI agents to implement TideCloak: auth, E2EE, IGA, security analysis
Description as the publisher wrote it.
| Tool | What it does |
|---|---|
tide_adapter | Read an adapter instruction file (AGENTS, CLAUDE, replit) Inputs: name |
tide_blast_radius | Run a Blast Radius Assessment of an EXISTING app: an adversarial, vendor-neutral map of where authority is concentrated to a single point (whoever obtains that one thing obtains everything it governs), scored by blast radius (Total/Systemic |
tide_branding | BRAND THE ENCLAVE FOR THE USER — generate a logo + background and upload them so the Tide login/approval screen is branded. Returns a single ready-to-run command that generates the assets (no image model needed), validates them, uploads bot Inputs: realm, accent, appName, tidecloakUrl |
tide_canon | Read a canon file (invariants, anti-patterns, concepts, framework-matrix, feature-mapping, troubleshooting, tidecloak-bootstrap, etc.) Inputs: name |
tide_choose_playbook | Recommend the right playbook for a given situation Inputs: situation |
tide_choose_scenario | Match a user request to a known scenario pattern before falling back to generic playbooks Inputs: situation |
tide_dpop_asset | Returns the CONTENTS of `public/tide_dpop_auth.html` — the DPoP relay page the Tide enclave loads during login — plus its sha256, the required next.config.ts rewrite/CSP wiring, and how to verify. The file is NOT shipped in the @tidecloak/* |
tide_gaps | Read the gap register — what is still uncertain or unresolved in the pack |
tide_hosting | Where TideCloak runs: local Docker vs partner-hosted (Skycloak managed TideCloak-as-a-service). Returns the local-vs-hosted decision with the honest trade-offs, the trust model, the verified Skycloak API reference (correct cluster field nam |
tide_list | List all available content in the Tide agent pack by category Inputs: category |
tide_list_scenarios | List all available scenario patterns under reference-apps/ |
tide_onboarding | STOP KEYCLOAK'S 'UPDATE ACCOUNT INFORMATION' PAGE and collect the details in-app instead. Tide asserts ONLY a username (the vuid) -- no email, no name -- so Keycloak blocks new users on an unstyled form showing a 64-hex username. Returns: a Inputs: realm, tidecloakUrl, appName, fields, componentPath, framework |
tide_playbook | Read a step-by-step playbook for a specific Tide task Inputs: name |
tide_prompt | Read a reusable starter prompt from the pack Inputs: name |
tide_scenario | Read a scenario summary from reference-apps/<scenario>/scenario.md Inputs: name |
tide_scenario_bootstrap | Read a scenario bootstrap sequence from reference-apps/<scenario>/bootstrap-sequence.md Inputs: name |
tide_scenario_manifest | Read a scenario manifest from reference-apps/<scenario>/manifest.yaml Inputs: name |
tide_scenario_roles | Read a scenario role-policy matrix from reference-apps/<scenario>/role-policy-matrix.md Inputs: name |
tide_security_analysis | Analyze an EXISTING (possibly non-Tide) system for security gaps and map them to Tide capabilities. Returns the Security Analyst role instructions, the security gap mapping table (SG-01…SG-18), and the runtime-probe procedures. Use this whe Inputs: include_runtime_probes |
tide_skill | Read a composable skill definition Inputs: name |
Every block below points at https://mcp.tide.org/mcp. Pick your client and copy.
claude mcp add --transport http raziel https://mcp.tide.org/mcp
{
"mcpServers": {
"raziel": {
"command": "npx",
"args": ["-y", "mcp-remote", "https://mcp.tide.org/mcp"]
}
}
}{
"mcpServers": {
"raziel": {
"url": "https://mcp.tide.org/mcp"
}
}
}{
"servers": {
"raziel": {
"type": "http",
"url": "https://mcp.tide.org/mcp"
}
}
}{
"context_servers": {
"raziel": {
"url": "https://mcp.tide.org/mcp"
}
}
}{
"mcpServers": {
"raziel": {
"serverUrl": "https://mcp.tide.org/mcp"
}
}
}{
"mcpServers": {
"raziel": {
"url": "https://mcp.tide.org/mcp"
}
}
}name: Raziel
version: 0.0.1
schema: v1
mcpServers:
- name: Raziel
type: streamable-http
url: https://mcp.tide.org/mcp{
"mcpServers": {
"raziel": {
"httpUrl": "https://mcp.tide.org/mcp"
}
}
}{
"mcpServers": {
"raziel": {
"type": "http",
"url": "https://mcp.tide.org/mcp"
}
}
}{
"mcpServers": {
"raziel": {
"url": "https://mcp.tide.org/mcp"
}
}
}goose://extension?url=https%3A%2F%2Fmcp.tide.org%2Fmcp&type=streamable_http&id=raziel&name=Raziel
It answered our last check on 24 October 2026 in 1143 ms. Over 6 checks since 11 September 2026 it answered 6. Status here comes from Neuronto's own probes, not from the publisher.
20, as returned by the server's own tools/list on 22 September 2026: tide_adapter, tide_blast_radius, tide_branding, tide_canon, tide_choose_playbook, tide_choose_scenario, tide_dpop_asset, tide_gaps, and 12 more.
It answered our last check on 24 October 2026 in 1143 ms. Over 6 checks since 11 September 2026 it answered 6.
Put the server under mcpServers in ~/.cursor/mcp.json with the URL https://mcp.tide.org/mcp. The exact JSON is above, with the same setup for Claude Code, Claude Desktop, VS Code, Windsurf, Zed, Gemini CLI and the rest.
It listed its tools to an anonymous client, so reading the tool list needs no key. Individual tools can still ask for credentials in their own inputs.
Publisher: io.github.tide-foundation. Endpoint host: mcp.tide.org. ARD identifier: urn:air:io.github.tide-foundation:mcp:raziel.
First indexed 10 September 2026. The tools are exactly what the server returned; nothing on this page
is inferred from its name. Ranking in Neuronto search is never for sale.