Spec Driven Development
MCP Server that facilitates spec-driven development workflows, not just Vibe Coding.
Description from the maker (original English)
MCP server teaching AI agents to implement TideCloak: auth, E2EE, IGA, security analysis
These three are never merged into one score: opinions, measurements and popularity are different things.
We have not written a plain-language summary for this one yet. Below are the facts we read from the registry.
Pick the AI app you use, then copy the settings.
You need
Which app do you use?
Pick your app above. We remember it, so next time the button says “Install in …”.
Works in Claude on the web, desktop and mobile:
https://mcp.tide.org/mcpOpen Claude Desktop → Settings → Developer → Edit Config, and paste this into claude_desktop_config.json
{
"mcpServers": {
"raziel": {
"command": "npx",
"args": [
"-y",
"@tideorg/mcp"
]
}
}
}Run this in your terminal
claude mcp add --transport http raziel https://mcp.tide.org/mcpclaude mcp add raziel -- npx -y @tideorg/mcpPaste into .cursor/mcp.json in your project, or ~/.cursor/mcp.json
{
"mcpServers": {
"raziel": {
"url": "https://mcp.tide.org/mcp"
}
}
}Paste into .cursor/mcp.json in your project, or ~/.cursor/mcp.json
{
"mcpServers": {
"raziel": {
"command": "npx",
"args": [
"-y",
"@tideorg/mcp"
]
}
}
}Your browser asks to open the app, then the app shows the settings and asks you to confirm. Key values are left empty for you to fill in.
Paste into .vscode/mcp.json in your project
{
"servers": {
"raziel": {
"type": "http",
"url": "https://mcp.tide.org/mcp"
}
}
}Paste into .vscode/mcp.json in your project
{
"servers": {
"raziel": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@tideorg/mcp"
]
}
}
}Your browser asks to open the app, then the app shows the settings and asks you to confirm. Key values are left empty for you to fill in.
ChatGPT connects only to servers on the internet:
https://mcp.tide.org/mcpMenu names can differ slightly by plan and over time.
Your choice stays on this device in a cookie; no account needed.
These settings are generated from the maker’s registry entry. If the README says otherwise, follow the README.
Tool names and descriptions exactly as the server reported them on Nov 7, 2026. The maker wrote them, not us; we show them as plain text.
tide_listList all available content in the Tide agent pack by category
tide_canonRead a canon file (invariants, anti-patterns, concepts, framework-matrix, feature-mapping, troubleshooting, tidecloak-bootstrap, etc.)
tide_playbookRead a step-by-step playbook for a specific Tide task
tide_skillRead a composable skill definition
tide_promptRead a reusable starter prompt from the pack
tide_adapterRead an adapter instruction file (AGENTS, CLAUDE, replit)
tide_list_scenariosList all available scenario patterns under reference-apps/
tide_scenarioRead a scenario summary from reference-apps/ /scenario.md
tide_scenario_manifestRead a scenario manifest from reference-apps/ /manifest.yaml
tide_scenario_rolesRead a scenario role-policy matrix from reference-apps/ /role-policy-matrix.md
tide_scenario_bootstrapRead a scenario bootstrap sequence from reference-apps/ /bootstrap-sequence.md
tide_choose_scenarioMatch a user request to a known scenario pattern before falling back to generic playbooks
tide_choose_playbookRecommend the right playbook for a given situation
tide_security_analysisAnalyze an EXISTING (possibly non-Tide) system for security gaps and map them to Tide capabilities. Returns the Security Analyst role instructions, the security gap mapping table (SG-01…SG-18), and the runtime-probe procedures. Use this when the user asks 'do a security analysis'
tide_blast_radiusRun a Blast Radius Assessment of an EXISTING app: an adversarial, vendor-neutral map of where authority is concentrated to a single point (whoever obtains that one thing obtains everything it governs), scored by blast radius (Total/Systemic/Contained/Limited) across three cores —
tide_hostingWhere TideCloak runs: local Docker vs partner-hosted (Skycloak managed TideCloak-as-a-service). Returns the local-vs-hosted decision with the honest trade-offs, the trust model, the verified Skycloak API reference (correct cluster field names and the required version), and the fu
tide_dpop_assetReturns the exact command that installs `public/tide_dpop_auth.html` — the DPoP relay page the Tide enclave loads during login — plus its sha256, the required next.config.ts rewrite/CSP wiring, and how to verify. `@tidecloak/js` ships the file from 0.14.34; older SDKs and the Tid
tide_onboardingSTOP KEYCLOAK'S 'UPDATE ACCOUNT INFORMATION' PAGE and collect the details in-app instead. Tide asserts ONLY a username (the vuid) -- no email, no name -- so Keycloak blocks new users on an unstyled form showing a 64-hex username. Returns: a read-only DIAGNOSTIC that identifies wh
tide_brandingBRAND THE ENCLAVE FOR THE USER — generate a logo + background and upload them so the Tide login/approval screen is branded. Returns a single ready-to-run command that generates the assets (no image model needed), validates them, uploads both, and saves+signs the IdP settings. Als
tide_scaffoldSTART A NEW TIDE APP FROM A WORKING TEMPLATE. Returns the exact commands to copy a complete, building app — login, the DPoP page and its wiring, server-side token AND proof verification, and the realm bootstrap script — then install, bootstrap and check it. CALL THIS when buildin
tide_doctor Looks like an instruction to the AIFIND AND FIX WHAT IS WRONG WITH A TIDE APP, IN ONE COMMAND. Returns the command that checks an app for the faults behind most broken logins and unprotected APIs. It REPAIRS the mechanical ones itself (re-copies the DPoP page byte-exact, corrects a wrong rewrite path, gitignores .
tide_gapsRead the gap register — what is still uncertain or unresolved in the pack
We check information anyone can see; we have not read the code. Checks that do not apply are left out of the count. · Checked Nov 7, 2026
The registry name was verified with the GitHub account tide-foundation, which owns the repo
We have not read this repo from GitHub yet
We have not read this repo from GitHub yet
Responded in 320 ms (HTTP 200)
No sign-in needed
1 tool descriptions contain text that looks like instructions to the AI. Read them below before installing
Compared with every active server in this category in the registry. Stars count only when the publisher owns the repo.
It passed 2 of 3 applicable basic checks. We have not read the code. Before adding a key or token, see what access the server asks for and use a key with only the permissions you need.
The registry does not list a required key, though some servers ask you to sign in on first use.
Either way works: install it on your computer or connect to the cloud version.
The GitHub repo last changed –, and the latest version (1.9.34) reached the registry 9 days ago.
Apps that support MCP, such as Claude Desktop, Claude Code, Cursor and VS Code. It connects by URL, so apps that accept remote MCP servers work too, such as ChatGPT in developer mode.
In the same category: Spec Driven Development, Remote Desktop Commander, Starreel
Servers in the same category from other makers, sorted by stars.
Reading a card:★ GitHub starsiThree pillars: reviews · checks · usageiUpdated = latest version published to the registryi
MCP Server that facilitates spec-driven development workflows, not just Vibe Coding.
Remote Desktop Commander: use files, terminal and processes on your own computers from any AI app.
Turn a script into a finished, downloadable short-drama episode — via MCP or REST.
Copied from the maker’s repo as written. PopNx MCP has not reviewed or endorsed it. HTML, images and scripts are removed. Links lead off this site.
Raziel is the Tide MCP — it gives AI coding agents the knowledge to implement TideCloak correctly.
This MCP server gives your AI assistant deep knowledge of Tide authentication, threshold cryptography, end-to-end encryption, IGA governance, and Forseti smart contracts — plus a security gap analysis of your existing system and self-host vs managed-hosting guidance. Instead of guessing, your AI follows verified playbooks.
Run this one command:
claude mcp add tide-pack -- npx -y @tideorg/mcp
Done. Start a conversation and ask your agent to add Tide auth to your app.
Add a .mcp.json file to your project root:
{
"mcpServers": { "tide-pack": { "command": "npx", "args": ["-y", "@tideorg/mcp"] } } }
Works with: Claude Code, Cursor, Windsurf, Cline, and any MCP-compatible tool.
Edit ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows):
{
"mcpServers": { "tide-pack": { "command": "npx", "args": ["-y", "@tideorg/mcp"] } } }
Open Settings > MCP Servers > Add Server:
tide-packnpx-y @tideorg/mcpOr add to .cursor/mcp.json in your project root.
Add to ~/.codeium/windsurf/mcp_config.json:
{
"mcpServers": { "tide": { "url": "https://mcp.tide.org/mcp" } } }
Or for local: "command": "npx", "args": ["-y", "@tideorg/mcp"]
Add to your Zed settings (~/.config/zed/settings.json):
{
"context_servers": { "tide": { "command": { "path": "npx", "args": ["-y", "@tideorg/mcp"] } } } }
Note: Zed uses context_servers (not mcpServers) and doesn't yet support remote URL-based MCP servers — use the npx command.
Add to ~/.codex/config.json:
{
"mcpServers": { "tide": { "command": "npx", "args": ["-y", "@tideorg/mcp"] } } }
Note: Codex CLI currently supports stdio-based MCP servers only — use the npx command.
Lovable's build agent can use Raziel through a Custom MCP connector (available on all plans). In your Lovable project, open Connectors → Custom MCP (the card at the bottom) and add:
Razielhttps://mcp.tide.org/mcpNo authenticationThen tell the agent to use it — e.g. *"Use the Raziel connector to pull the TideCloak playbook before writing any auth code."*
Two things that trip people up:
Once connected, your AI assistant can:
After setup, try these prompts in your AI coding tool:
Do a security analysis of my app and show what Tide would change
Add Tide authentication to my Next.js app
I have an existing app with auth — help me migrate to Tide
Set up encrypted data sharing between users with Tide
Help me create a Forseti contract for multi-admin approval
| Category | Count | Examples |
|---|---|---|
| Canon doctrine | 15 files | Security invariants, anti-patterns, security gap mapping, IGA change-request API, hosting options, framework matrix, troubleshooting |
| Playbooks | 18 step-by-step guides | Add auth, protect APIs, verify JWTs, deploy TideCloak, set up E2EE, provision hosted TideCloak |
| Skills | 11 composable roles | Setup, integration, security analysis, route/API protection, review, QA gate |
| Scenarios | 5 reference architectures | Password manager, signing service, encrypted chat, governance panel |
| Prompts | 5 starter prompts | Security gap analysis, secure existing app, migrate auth, admin approval, customer portal |
We host the MCP server so you don't have to install anything. Just add the URL:
{
"mcpServers": { "tide": { "url": "https://mcp.tide.org/mcp" } } }
No Node.js required. No npx. Works with any MCP client that supports remote servers.
Want to run your own instance? Pull from Docker Hub:
docker run -p 3000:3000 tideorg/mcp
Or build from source:
docker build -t tideorg/mcp .
docker run -p 3000:3000 tideorg/mcp
Then point your MCP client at http://localhost:3000/mcp.
Optional: set API_TOKEN environment variable to require Bearer token auth:
docker run -p 3000:3000 -e API_TOKEN=your-secret tideorg/mcp
No TideCloak instance needed to start — the agent will guide you through setup.
The MCP server is read-only. Run locally (npx), it collects nothing — no accounts, no telemetry, no storage. The hosted mcp.tide.org endpoint records aggregate usage geography (approximate location only, never request content or tool arguments) to see where it's used. Full details in PRIVACY.md.
@tideorg/mcp