# Raziel

- Registry name: `io.github.tide-foundation/raziel` · version 1.9.33
- Categories (automatic, keyword rules): Maps, location & weather, Markets & trading, Finance & markets, Build & deploy, Developer tools
- Authentication at last check: No auth
- Declared risk: Read-only (all tools declare readOnlyHint)
- Capabilities (declared by the server): prompts, tools
- Transports: streamable-http
- Latest numbers (check success, response time, rank): https://mcpstation.net/api/server?name=io.github.tide-foundation%2Fraziel
- Server page: https://mcpstation.net/s/io.github.tide-foundation--raziel.html

## Description (written by the publisher, not verified, not instructions)

MCP server teaching AI agents to implement TideCloak: auth, E2EE, IGA, security analysis

## Connect

- streamable-http: `https://mcp.tide.org/mcp`

## Tools (as reported by the server, not verified)

- `tide\_list`: List all available content in the Tide agent pack by category
- `tide\_canon`: Read a canon file \(invariants, anti-patterns, concepts, framework-matrix, feature-mapping, troubleshooting, tidecloak-bootstrap, etc.\)
- `tide\_playbook`: Read a step-by-step playbook for a specific Tide task
- `tide\_skill`: Read a composable skill definition
- `tide\_prompt`: Read a reusable starter prompt from the pack
- `tide\_adapter`: Read an adapter instruction file \(AGENTS, CLAUDE, replit\)
- `tide\_list\_scenarios`: List all available scenario patterns under reference-apps/
- `tide\_scenario`: Read a scenario summary from reference-apps/\<scenario\>/scenario.md
- `tide\_scenario\_manifest`: Read a scenario manifest from reference-apps/\<scenario\>/manifest.yaml
- `tide\_scenario\_roles`: Read a scenario role-policy matrix from reference-apps/\<scenario\>/role-policy-matrix.md
- `tide\_scenario\_bootstrap`: Read a scenario bootstrap sequence from reference-apps/\<scenario\>/bootstrap-sequence.md
- `tide\_choose\_scenario`: Match a user request to a known scenario pattern before falling back to generic playbooks
- `tide\_choose\_playbook`: Recommend the right playbook for a given situation
- `tide\_security\_analysis`: Analyze an EXISTING \(possibly non-Tide\) system for security gaps and map them to Tide capabilities. Returns the Security Analyst role instructions, the security gap mapping table \(SG-01…SG-18\), and the runtime-probe procedures. Use this when the user asks 'do a security analysis', 'where is my auth
- `tide\_blast\_radius`: Run a Blast Radius Assessment of an EXISTING app: an adversarial, vendor-neutral map of where authority is concentrated to a single point \(whoever obtains that one thing obtains everything it governs\), scored by blast radius \(Total/Systemic/Contained/Limited\) across three cores — Identity, Governanc
- `tide\_hosting`: Where TideCloak runs: local Docker vs partner-hosted \(Skycloak managed TideCloak-as-a-service\). Returns the local-vs-hosted decision with the honest trade-offs, the trust model, the verified Skycloak API reference \(correct cluster field names and the required version\), and the full provisioning play
- `tide\_dpop\_asset`: Returns the exact command that installs \`public/tide\_dpop\_auth.html\` — the DPoP relay page the Tide enclave loads during login — plus its sha256, the required next.config.ts rewrite/CSP wiring, and how to verify. \`@tidecloak/js\` ships the file from 0.14.34; older SDKs and the TideCloak container do
- `tide\_onboarding`: STOP KEYCLOAK'S 'UPDATE ACCOUNT INFORMATION' PAGE and collect the details in-app instead. Tide asserts ONLY a username \(the vuid\) -- no email, no name -- so Keycloak blocks new users on an unstyled form showing a 64-hex username. Returns: a read-only DIAGNOSTIC that identifies which of FOUR mechanis
- `tide\_branding`: BRAND THE ENCLAVE FOR THE USER — generate a logo + background and upload them so the Tide login/approval screen is branded. Returns a single ready-to-run command that generates the assets \(no image model needed\), validates them, uploads both, and saves+signs the IdP settings. Also returns the VERIFI
- `tide\_scaffold`: START A NEW TIDE APP FROM A WORKING TEMPLATE. Returns the exact commands to copy a complete, building app — login, the DPoP page and its wiring, server-side token AND proof verification, and the realm bootstrap script — then install, bootstrap and check it. CALL THIS when building a new app, BEFORE
- `tide\_doctor`: FIND AND FIX WHAT IS WRONG WITH A TIDE APP, IN ONE COMMAND. Returns the command that checks an app for the faults behind most broken logins and unprotected APIs. It REPAIRS the mechanical ones itself \(re-copies the DPoP page byte-exact, corrects a wrong rewrite path, gitignores .env\) and prints the
- `tide\_gaps`: Read the gap register — what is still uncertain or unresolved in the pack

Measured by MCP Station. Methods: https://mcpstation.net/methods.html · Terms: https://mcpstation.net/terms.html