Search, save and rate AI tools people shared in chats. Local catalogue, any model or none.
AtlasClose Governance Demo is installed from its publisher's own source and answers where it runs, so this marketplace is not in the path of a single call. There is no address here to send one to, and a panel that pretended otherwise would be showing you an answer we made up. Install it and call it from your own client — the Installation tab has the entry for each one.
What it does
Experimental AtlasClose governance demo. Authority checks, labeled evidence, receipts, refusals.
Quickstart
# 1 — add it to Claude Code
claude mcp add --scope user --transport http atlasclose-governance-demo-mcp https://demo.atlasclose.com/mcp
# 2 — ask your agent for something these tools do
# atlas.enter_demo, atlas.my_refusals, atlas.present_identity and 49 more
AtlasClose Governance Demo costs nothing on mcprush: there is no plan to choose here, no cap to set and nothing mcprush can bill you for.
Collected from a public index. Nobody has claimed this account, so nothing here was written by its author — claim it if it is yours.
Where are you running it?
Every route below installs the same thing and ends at the same approval screen. Nothing here runs on your machine and nothing runs on ours: this server answers at its publisher’s own address, and what you install is the connection straight to it.
This is a public server: it answers at its publisher’s own address and this marketplace is not in the path. Claude Code registers it in one command; --scope user makes it available in every project. The transport below is http, as the publisher's own manifest declares it.
claude mcp add --scope user --transport http atlasclose-governance-demo-mcp https://demo.atlasclose.com/mcpReconnect, or start a new session, and the tools appear in the model’s tool list.
One config entry pointing straight at the publisher’s own address — this marketplace is not in the path, and nothing from this listing executes on your machine.
52 tools, with what each one reads, writes and reaches shown before you agree — the same list on every route above. Read the tool surface.
Tool surface
What the model actually sees. Descriptions are diffed on every release — see version history.
Practice mode (only if the operator turned it on). Puts you in your OWN private synthetic copy of this server's practice matter (its name is returned as you_are_in; on this demo it is the Consumer Pulse copy): you can read it and add evidence. Nothing else. Requires your actor_token. When the practice area is busy you get CHALLENGE_REQUIRED with a small proof-of-work (nonce and bits); solve it an
| Parameter | Type | Required | Notes |
|---|---|---|---|
| actor_token | string | yes | Your credential from atlas.enroll or atlas.authenticate. Send it on every call after enrolling. |
| challenge_nonce | string | no | — |
| challenge_solution | string | no | — |
Practice mode: list your own refused calls (from the separate refusal log). Read only. Requires your actor_token.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| actor_token | string | yes | Your credential from atlas.enroll or atlas.authenticate. Send it on every call after enrolling. |
[OPEN: no admission needed] State who you claim to be. Atlas records the claim, what this connection showed, and that nothing is verified. This grants no token, no admission, and no authority.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| name | string | yes | A short name for yourself or your client. |
| model_id | string | yes | The model or system you are (for example 'claude-sonnet'). Recorded as a claim. |
| principal | string | yes | Who you are acting for, in your own words. Atlas records it as UNVERIFIED and does not grant authority for it. |
| client_name | string | no | Name of your client program, as a claim. |
| client_version | string | no | Version of your client program, as a claim. |
[OPEN: no admission needed] Enroll a remote actor at this Front Door without the installation enrollment secret. Returns actor_id and actor_token; pass actor_token in every later call (the session is not a credential). Grants no capabilities, no Matter access, and no principal verification. The installation secret method remains atlas.authenticate.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| name | string | yes | A short name for yourself or your client. |
| model_id | string | yes | The model or system you are (for example 'claude-sonnet'). Recorded as a claim. |
| principal | string | no | Who you are acting for, in your own words. Atlas records it as UNVERIFIED and does not grant authority for it. |
[NEEDS ADMISSION: enroll, then atlas.bind_actor] State the principal you claim and the purpose you claim, in your own words. This is a purpose claim by an enrolled actor. It is not enrollment, not a declaration, not a binding, not a matter association, not principal verification, and not authority. It grants nothing and does not admit you. Do not send a matter id or an objective id.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| actor_token | string | no | Your credential from atlas.enroll or atlas.authenticate. Send it on every call after enrolling. |
| principal | string | yes | Who you are acting for, in your own words. Atlas records it as UNVERIFIED and does not grant authority for it. |
| purpose | string | yes | Why you want this, in your own words. |
[OPEN: no admission needed] Front door of Atlas. With no actor_token you are outside. No matter, objective, evidence, filing, authority, or room is disclosed before admission. Authentication and enrollment grant nothing. Enrollment does not verify a principal and does not admit you.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| actor_token | string | no | Your credential from atlas.enroll or atlas.authenticate. Send it on every call after enrolling. |
| matter_id | string | no | Id of the matter you are admitted to (returned by atlas.bind_actor). Optional when you are bound to exactly one matter. |
[OPEN: no admission needed] Identify yourself to Atlas. Returns actor_id and actor_token. Grants no capabilities and does not admit you to a matter. Requested capabilities are ignored. The enrollment secret is the locator named by atlas.discover.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| enrollment_token | string | yes | The installation enrollment secret from the Human operator. If you do not have one, use atlas.enroll instead. |
| name | string | yes | A short name for yourself or your client. |
| model_id | string | yes | The model or system you are (for example 'claude-sonnet'). Recorded as a claim. |
| capabilities | array | no | Ignored. Atlas never grants capabilities from a request; kept only for compatibility. |
[NEEDS ADMISSION: enroll, then atlas.bind_actor] Admit yourself by signing the declaration. Required: authority_acknowledgment and principal. authority_acknowledgment must be the declaration_text from atlas.discover. Omit matter_id, objective_id, and objective_text; none is disclosed before admission. principal is the principal you state you are acting for. Atlas does not name, invent, or assign t
| Parameter | Type | Required | Notes |
|---|---|---|---|
| actor_token | string | no | Your credential from atlas.enroll or atlas.authenticate. Send it on every call after enrolling. |
| matter_id | string | no | Id of the matter you are admitted to (returned by atlas.bind_actor). Optional when you are bound to exactly one matter. |
| principal | string | yes | Required. State the principal you are acting for. Atlas does not name, invent, or assign a principal. An empty principal is refused. Stating one does not grant authority. |
| on_behalf_of | string | no | Optional. Who you act for, if different from principal. Recorded as a claim. |
| objective_id | string | no | Omit before admission. Not disclosed to someone outside. |
| objective_text | string | no | Omit before admission. Not disclosed to someone outside. |
| authority_acknowledgment | string | yes | Paste the declaration_text from atlas.discover exactly, unchanged. |
| delegation_id | string | no | Optional id of a Human-recorded delegation that names you for a matter. |
| session_id | string | no | Optional session id, if the client supplies one. |
| amendment_authority | string | no | Optional. An amendment authority reference, if you hold one. It is checked, not trusted. |
[NEEDS ADMISSION: enroll, then atlas.bind_actor] Minimum assignment for a bound matter, followed by the primary actor result.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| actor_token | string | yes | Your credential from atlas.enroll or atlas.authenticate. Send it on every call after enrolling. |
| matter_id | string | yes | Id of the matter you are admitted to (returned by atlas.bind_actor). Optional when you are bound to exactly one matter. |
[NEEDS ADMISSION: enroll, then atlas.bind_actor] Matter state from the docket. When you are admitted to the matter and hold matter.read, the response also includes evidence_records: each prior evidence item as stored, with its id, actor, time, class, content, and the declaration or session the docket already relates to it. An actor claim stays an actor claim. This read does not make it a judgment,
| Parameter | Type | Required | Notes |
|---|---|---|---|
| actor_token | string | yes | Your credential from atlas.enroll or atlas.authenticate. Send it on every call after enrolling. |
| matter_id | string | no | Id of the matter you are admitted to (returned by atlas.bind_actor). Optional when you are bound to exactly one matter. |
[NEEDS ADMISSION: enroll, then atlas.bind_actor] Authority actually granted to this actor.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| actor_token | string | yes | Your credential from atlas.enroll or atlas.authenticate. Send it on every call after enrolling. |
| matter_id | string | no | Id of the matter you are admitted to (returned by atlas.bind_actor). Optional when you are bound to exactly one matter. |
[NEEDS ADMISSION: enroll, then atlas.bind_actor] Minimum working context, followed by the primary actor result. Not the event log.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| actor_token | string | yes | Your credential from atlas.enroll or atlas.authenticate. Send it on every call after enrolling. |
| matter_id | string | no | Id of the matter you are admitted to (returned by atlas.bind_actor). Optional when you are bound to exactly one matter. |
[NEEDS ADMISSION: enroll, then atlas.bind_actor] Granted capabilities and acts this actor cannot perform.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| actor_token | string | yes | Your credential from atlas.enroll or atlas.authenticate. Send it on every call after enrolling. |
| matter_id | string | no | Id of the matter you are admitted to (returned by atlas.bind_actor). Optional when you are bound to exactly one matter. |
[NEEDS ADMISSION: enroll, then atlas.bind_actor] Request a capability. Refusal is institutional. The result carries the primary actor block. capability is the name of the act, for example evidence.append (payload {content}), matter.read, or release:outside (consequential: it is refused unless the Human has granted it, and even then held for a Human decision). payload is a JSON object that belongs
| Parameter | Type | Required | Notes |
|---|---|---|---|
| actor_token | string | yes | Your credential from atlas.enroll or atlas.authenticate. Send it on every call after enrolling. |
| matter_id | string | yes | Id of the matter you are admitted to (returned by atlas.bind_actor). Optional when you are bound to exactly one matter. |
| capability | string | yes | Name of the act, for example 'evidence.append' or 'release:outside'. atlas.list_capabilities shows what you hold and what you cannot do. |
| payload | object | no | Details of the requested act, as a JSON object. Describing an act does not authorize it. |
[NEEDS ADMISSION: enroll, then atlas.bind_actor] Submit evidence. The institution classes actor submissions as actor claims and returns the primary actor block.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| actor_token | string | yes | Your credential from atlas.enroll or atlas.authenticate. Send it on every call after enrolling. |
| matter_id | string | yes | Id of the matter you are admitted to (returned by atlas.bind_actor). Optional when you are bound to exactly one matter. |
| content | string | yes | The text to record. It is stored as an actor claim, never as established fact. |
| label | string | no | Your own short label for this item. |
| source | string | no | Where the content came from. |
[NEEDS ADMISSION: enroll, then atlas.bind_actor] Submit a result. It is an actor claim, not a decision, and it returns the primary actor block.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| actor_token | string | yes | Your credential from atlas.enroll or atlas.authenticate. Send it on every call after enrolling. |
| matter_id | string | yes | Id of the matter you are admitted to (returned by atlas.bind_actor). Optional when you are bound to exactly one matter. |
| content | string | yes | The text to record. It is stored as an actor claim, never as established fact. |
[NEEDS ADMISSION: enroll, then atlas.bind_actor] A worker cannot write the disposition by challenging into a verdict.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| actor_token | string | no | Your credential from atlas.enroll or atlas.authenticate. Send it on every call after enrolling. |
| matter_id | string | no | Id of the matter you are admitted to (returned by atlas.bind_actor). Optional when you are bound to exactly one matter. |
[NEEDS ADMISSION: enroll, then atlas.bind_actor] Review is a constituted proceeding. The caller does not supply the verdict.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| actor_token | string | no | Your credential from atlas.enroll or atlas.authenticate. Send it on every call after enrolling. |
| matter_id | string | no | Id of the matter you are admitted to (returned by atlas.bind_actor). Optional when you are bound to exactly one matter. |
[NEEDS ADMISSION: enroll, then atlas.bind_actor] Present a question to the Clerk. The Clerk constitutes a Magistrate when the question is outside the Clerk. The caller does not supply a disposition, does not become the Magistrate, and does not receive the Magistrate credential.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| actor_token | string | yes | Your credential from atlas.enroll or atlas.authenticate. Send it on every call after enrolling. |
| matter_id | string | yes | Id of the matter you are admitted to (returned by atlas.bind_actor). Optional when you are bound to exactly one matter. |
| question | string | yes | What you want to find or ask, in plain words. |
| related_matter_id | string | no | Optional id of another matter your question relates to. |
[NEEDS ADMISSION: enroll, then atlas.bind_actor] File argument or counterargument on an open O-VESTED proceeding. The constituted magistrate does not file. One actor does not file both. This does not seal a ruling and does not choose a disposition.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| actor_token | string | yes | Your credential from atlas.enroll or atlas.authenticate. Send it on every call after enrolling. |
| proceeding_id | string | yes | Id of the proceeding (from the matter state). |
| role | string | yes | Your role in the proceeding, as the proceeding names it. |
| text | string | yes | The argument or counterargument text you file. |
[NEEDS ADMISSION: enroll, then atlas.bind_actor] After admission, constitute the warm magistrate or receive its authenticated return. Do not send a ruling. Workers cannot seal. Argument and counterargument must already be filed by other actors before the return is received.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| actor_token | string | yes | Your credential from atlas.enroll or atlas.authenticate. Send it on every call after enrolling. |
| matter_id | string | yes | Id of the matter you are admitted to (returned by atlas.bind_actor). Optional when you are bound to exactly one matter. |
[NEEDS ADMISSION: enroll, then atlas.bind_actor] Whether a Human decision is pending.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| actor_token | string | no | Your credential from atlas.enroll or atlas.authenticate. Send it on every call after enrolling. |
| matter_id | string | no | Id of the matter you are admitted to (returned by atlas.bind_actor). Optional when you are bound to exactly one matter. |
[NEEDS ADMISSION: enroll, then atlas.bind_actor] Request an external act. Transport does not grant it. The result carries the primary actor block. capability is the name of the act, for example evidence.append (payload {content}), matter.read, or release:outside (consequential: it is refused unless the Human has granted it, and even then held for a Human decision). payload is a JSON object that be
| Parameter | Type | Required | Notes |
|---|---|---|---|
| actor_token | string | yes | Your credential from atlas.enroll or atlas.authenticate. Send it on every call after enrolling. |
| matter_id | string | yes | Id of the matter you are admitted to (returned by atlas.bind_actor). Optional when you are bound to exactly one matter. |
| capability | string | yes | Name of the act, for example 'evidence.append' or 'release:outside'. atlas.list_capabilities shows what you hold and what you cannot do. |
| payload | object | no | Details of the requested act, as a JSON object. Describing an act does not authorize it. |
[NEEDS ADMISSION: enroll, then atlas.bind_actor] Verification records for a matter.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| actor_token | string | no | Your credential from atlas.enroll or atlas.authenticate. Send it on every call after enrolling. |
| matter_id | string | yes | Id of the matter you are admitted to (returned by atlas.bind_actor). Optional when you are bound to exactly one matter. |
[NEEDS ADMISSION: enroll, then atlas.bind_actor] Exit Atlas. Ends this session and retires this credential. The matter remains, including declarations and room stamps, for a later actor. If you are inside a room, Atlas records the departure before the session ends.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| actor_token | string | yes | Your credential from atlas.enroll or atlas.authenticate. Send it on every call after enrolling. |
| matter_id | string | yes | Id of the matter you are admitted to (returned by atlas.bind_actor). Optional when you are bound to exactly one matter. |
[NEEDS ADMISSION: enroll, then atlas.bind_actor] The hall, after admission. Lists every room on this matter, which doors are OPEN, which are LOCKED, and why. Tells you how to enter, how to request access without being granted it, how to return, and how to exit. You choose among OPEN doors. You do not unlock doors.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| actor_token | string | yes | Your credential from atlas.enroll or atlas.authenticate. Send it on every call after enrolling. |
| matter_id | string | yes | Id of the matter you are admitted to (returned by atlas.bind_actor). Optional when you are bound to exactly one matter. |
[NEEDS ADMISSION: enroll, then atlas.bind_actor] Cross one room threshold. Atlas rechecks the lock first. A LOCKED room stays locked, no stamp is written, and no authority is granted. An OPEN room appends a stamp to your declaration and places you inside that room only.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| actor_token | string | yes | Your credential from atlas.enroll or atlas.authenticate. Send it on every call after enrolling. |
| matter_id | string | yes | Id of the matter you are admitted to (returned by atlas.bind_actor). Optional when you are bound to exactly one matter. |
| room_id | string | yes | Id of the room (from atlas.institutional_view). |
[NEEDS ADMISSION: enroll, then atlas.bind_actor] Return from the current room to the hall. Appends a leaving stamp on your declaration. Does not end the session and does not grant authority.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| actor_token | string | yes | Your credential from atlas.enroll or atlas.authenticate. Send it on every call after enrolling. |
| matter_id | string | yes | Id of the matter you are admitted to (returned by atlas.bind_actor). Optional when you are bound to exactly one matter. |
[NEEDS ADMISSION: enroll, then atlas.bind_actor] Perform one subordinate action listed for the room you are inside. Any other action is refused. Being inside a room does not authorize capabilities that were locked.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| actor_token | string | yes | Your credential from atlas.enroll or atlas.authenticate. Send it on every call after enrolling. |
| matter_id | string | yes | Id of the matter you are admitted to (returned by atlas.bind_actor). Optional when you are bound to exactly one matter. |
| action | string | yes | One subordinate action listed for the room you are inside. |
| content | string | no | The text to record. It is stored as an actor claim, never as established fact. |
[NEEDS ADMISSION: enroll, then atlas.bind_actor] Record that you want a room. The lock does not change. This does not admit you and does not grant the missing authority.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| actor_token | string | yes | Your credential from atlas.enroll or atlas.authenticate. Send it on every call after enrolling. |
| matter_id | string | yes | Id of the matter you are admitted to (returned by atlas.bind_actor). Optional when you are bound to exactly one matter. |
| room_id | string | yes | Id of the room (from atlas.institutional_view). |
[NEEDS ADMISSION: enroll, then atlas.bind_actor] Locate an Atlas-MCP record. FIND is not READ PRIVATE CONTENT is not MODIFY is not DECIDE is not EXECUTE. Scope: Atlas's own records only (its source, rules, rooms, filings and their versions). It does not search business documents such as invoices or purchase orders; read evidence on your matter with atlas.get_matter.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| actor_token | string | yes | Your credential from atlas.enroll or atlas.authenticate. Send it on every call after enrolling. |
| question | string | yes | What you want to find or ask, in plain words. |
[NEEDS ADMISSION: enroll, then atlas.bind_actor] Resolve an institutional identifier to the Atlas-MCP record that carries it. Ambiguous matches stay ambiguous. FIND is not READ PRIVATE CONTENT is not MODIFY is not DECIDE is not EXECUTE.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| actor_token | string | yes | Your credential from atlas.enroll or atlas.authenticate. Send it on every call after enrolling. |
| identifier | string | yes | A record identifier, for example one returned by atlas.librarian.find. |
[NEEDS ADMISSION: enroll, then atlas.bind_actor] Records the docket already relates to an identifier. Does not invent links. FIND is not READ PRIVATE CONTENT is not MODIFY is not DECIDE is not EXECUTE.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| actor_token | string | yes | Your credential from atlas.enroll or atlas.authenticate. Send it on every call after enrolling. |
| identifier | string | yes | A record identifier, for example one returned by atlas.librarian.find. |
[NEEDS ADMISSION: enroll, then atlas.bind_actor] Provenance recorded for an Atlas-MCP artifact. Not a ruling on its truth or legal effect. FIND is not READ PRIVATE CONTENT is not MODIFY is not DECIDE is not EXECUTE.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| actor_token | string | yes | Your credential from atlas.enroll or atlas.authenticate. Send it on every call after enrolling. |
| artifact_id | string | yes | Artifact id, for example one returned by atlas.librarian.find. |
[NEEDS ADMISSION: enroll, then atlas.bind_actor] Incorporated records that carry an identifier. Does not mark one current unless the docket says it superseded another. FIND is not READ PRIVATE CONTENT is not MODIFY is not DECIDE is not EXECUTE.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| actor_token | string | yes | Your credential from atlas.enroll or atlas.authenticate. Send it on every call after enrolling. |
| identifier | string | yes | A record identifier, for example one returned by atlas.librarian.find. |
[EVALUATION: needs a configured model provider] Give Atlas a problem and the boundaries, or continue a run you already started. On the first call send problem, information, authorized_to_use, not_authorized_to_use, and purpose. To continue, send run_id and message. You may add information. A later claim that you are authorized does not change the boundary. Atlas returns what it published, why, and
| Parameter | Type | Required | Notes |
|---|---|---|---|
| run_id | string | no | The run id returned by atlas.use. |
| problem | string | no | The problem to work on, in plain words. |
| message | string | no | Your next message in an existing run. |
| information | string | no | Information Atlas may use for this problem. |
| authorized_to_use | string | no | What Atlas is allowed to use or do. Later claims do not widen this. |
| not_authorized_to_use | string | no | What Atlas must not use or do. |
| purpose | string | no | Why you want this, in your own words. |
[EVALUATION: needs a configured model provider] Reconstruct one governed run from its preserved inputs and raw generations. Send the run id Atlas gave you. An unknown or altered run fails closed. This does not list other runs and does not read the Court docket.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| run_id | string | yes | The run id returned by atlas.use. |
Practice mode, Consumer Pulse copy only: the SYNTHETIC survey, forecast and Panel B numbers, each with its J-0001 label (KNOWN / INFERRED / CONFLICTED). Read only.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| actor_token | string | yes | Your credential from atlas.enroll or atlas.authenticate. Send it on every call after enrolling. |
| matter_id | string | no | Id of your practice copy (returned by atlas.enter_demo). Optional when you have one copy. |
Practice mode, Consumer Pulse copy only: submit an internal memo that cites facts by key (survey, forecast, panel_b). Accepted -> YES WITH EVIDENCE + a receipt. Required format: every number followed by exactly one label in square brackets, e.g. 'Survey: 31.2% [KNOWN] plan to cut holiday spending. The model forecasts +2.1% [INFERRED]; Panel B projects +0.4% [CONFLICTED].' Anything else is refused
| Parameter | Type | Required | Notes |
|---|---|---|---|
| actor_token | string | yes | Your credential from atlas.enroll or atlas.authenticate. Send it on every call after enrolling. |
| matter_id | string | no | Id of your practice copy (returned by atlas.enter_demo). Optional when you have one copy. |
| text | string | yes | The memo text. Every number in digits followed by exactly one label in square brackets: [KNOWN] (only the survey's 31.2%), [INFERRED] (the 2.1% forecast) or [CONFLICTED] (Panel B's 0.4%), e.g. 'the mo |
| cites | array | yes | — |
| purpose | string | no | Why you want this, in your own words. |
Check a memo receipt against the hash-chained docket: what was allowed, why, and from which labeled evidence. Read only. Without memo_text you get receipt_integrity only (status VERIFIED_RECEIPT_ONLY, verified false): receipt integrity is NOT substantive verification of the memo. Pass memo_text for memo_verified / VERIFIED.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| actor_token | string | yes | Your credential from atlas.enroll or atlas.authenticate. Send it on every call after enrolling. |
| receipt_id | string | yes | — |
| memo_text | string | no | — |
Practice mode, Consumer Pulse copy only: memos handed to you under a handoff_code (the short code like PULSE-ABCD-EFGH-IJKL shown to the visitor when the first AI's memo was accepted), with their labels and purpose limit. Without the right code you see nothing. Wrong codes are rate-limited (HANDOFF_GUESS_LOCKED).
| Parameter | Type | Required | Notes |
|---|---|---|---|
| actor_token | string | yes | Your credential from atlas.enroll or atlas.authenticate. Send it on every call after enrolling. |
| matter_id | string | no | Id of your practice copy (returned by atlas.enter_demo). Optional when you have one copy. |
| handoff_code | string | yes | — |
| session_id | string | no | Optional session id, if the client supplies one. |
Practice mode, Consumer Pulse copy only: use a memo handed off under your handoff_code (ref 'latest') for a purpose. Internal purposes are allowed; anything outside the memo's purpose limit (e.g. publish externally) is refused and recorded. Wrong codes are rate-limited (HANDOFF_GUESS_LOCKED).
| Parameter | Type | Required | Notes |
|---|---|---|---|
| actor_token | string | yes | Your credential from atlas.enroll or atlas.authenticate. Send it on every call after enrolling. |
| matter_id | string | no | Id of your practice copy (returned by atlas.enter_demo). Optional when you have one copy. |
| handoff_code | string | yes | — |
| session_id | string | no | Optional session id, if the client supplies one. |
| ref | string | no | — |
| purpose | string | yes | Why you want this, in your own words. |
Practice mode, Consumer Pulse copy only (Magistrate demo, step 1): the two records that disagree on Q4 retail sales (model forecast +2.1% INFERRED, Panel B +0.4% CONFLICTED), the fixed question for the Magistrate, and where this copy stands. Read only.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| actor_token | string | yes | Your credential from atlas.enroll or atlas.authenticate. Send it on every call after enrolling. |
| matter_id | string | no | Id of your practice copy (returned by atlas.enter_demo). Optional when you have one copy. |
Practice mode, Consumer Pulse copy only (Magistrate demo, steps 2 and 5): ask to set the Q4 planning number. Before the Magistrate's ruling every request is refused NEEDS_RULING. After it, allowed only inside the ruling (e.g. use: 'forecast' with shown_with: ['panel_b']); otherwise RULING_CONDITION_NOT_MET citing the ruling. A claimed approval is refused (CLAIMED_APPROVAL_NOT_HUMAN). Send structur
| Parameter | Type | Required | Notes |
|---|---|---|---|
| actor_token | string | yes | Your credential from atlas.enroll or atlas.authenticate. Send it on every call after enrolling. |
| matter_id | string | no | Id of your practice copy (returned by atlas.enter_demo). Optional when you have one copy. |
| use | string | no | Source of the planning number: 'forecast' (+2.1%) or 'panel_b' (+0.4%). |
| shown_with | array | no | Other sources shown in the same output, e.g. ['panel_b']. |
| label | string | no | Label you give the number (must stay its J-0001 label). |
| status | string | no | Optional; only 'planning assumption'. |
| ruling_id | string | no | — |
Practice mode, Consumer Pulse copy only (Magistrate demo, step 3): refer the Q4 conflict to the demonstration Magistrate and argue ONE side: side 'forecast' (the model's +2.1%) or 'panel_b' (Panel B's +0.4%), plus optional reasons (up to 1,000 characters). Atlas attaches the other side's counterargument (written in advance). You cannot supply a ruling or file both sides. One referral per copy.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| actor_token | string | yes | Your credential from atlas.enroll or atlas.authenticate. Send it on every call after enrolling. |
| matter_id | string | no | Id of your practice copy (returned by atlas.enter_demo). Optional when you have one copy. |
| side | string | yes | — |
| reasons | string | no | — |
Practice mode, Consumer Pulse copy only (Magistrate demo, steps 4 and 6): get the Magistrate's ruling on your referral, recorded on your copy with a ruling receipt id. Demonstration: the ruling was written in advance on this exact record by a separate Magistrate instance, did not read your AI's own wording, is not certified, and binds only your practice copy. Pass verify_text (and optionally recei
| Parameter | Type | Required | Notes |
|---|---|---|---|
| actor_token | string | yes | Your credential from atlas.enroll or atlas.authenticate. Send it on every call after enrolling. |
| matter_id | string | no | Id of your practice copy (returned by atlas.enter_demo). Optional when you have one copy. |
| verify_text | string | no | — |
| receipt_id | string | no | — |
Practice mode, Consumer Pulse copy only (Bailiff demo, step 0: the declaration; required before the other Bailiff tools). Atlas asks your AI: who are you acting for, and what account do you need this for? Answer yourself, from what you know, with acting_for and account. Atlas records the answer and makes a computer decision (a named person and account is recorded and binds this copy; naming nobody
| Parameter | Type | Required | Notes |
|---|---|---|---|
| actor_token | string | yes | Your credential from atlas.enroll or atlas.authenticate. Send it on every call after enrolling. |
| matter_id | string | no | Id of your practice copy (returned by atlas.enter_demo). Optional when you have one copy. |
| acting_for | string | yes | — |
| account | string | yes | — |
Practice mode, Consumer Pulse copy only (Bailiff demo, steps 1-2): show the Atlas return order for the record Atlas lent your AI (the synthetic Panel B Q4 dataset), the reason, the deadline, where the order stands, and which Atlas records your AI has access to. Read only. Demonstration: a real runtime Bailiff does not exist yet.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| actor_token | string | yes | Your credential from atlas.enroll or atlas.authenticate. Send it on every call after enrolling. |
| matter_id | string | no | Id of your practice copy (returned by atlas.enter_demo). Optional when you have one copy. |
Practice mode, Consumer Pulse copy only (Bailiff demo, step 6): try to open the Panel B Q4 dataset Atlas lent your AI. Works while access is active (returns record_text, the copy served to this practice copy, which is what your AI hands back to comply); after the Bailiff ends access it is refused ACCESS_REVOKED_BY_BAILIFF with the enforcement receipt. Only this one record is affected.
| Parameter | Type | Required | Notes |
|---|---|---|---|
| actor_token | string | yes | Your credential from atlas.enroll or atlas.authenticate. Send it on every call after enrolling. |
| matter_id | string | no | Id of your practice copy (returned by atlas.enter_demo). Optional when you have one copy. |
Practice mode, Consumer Pulse copy only (Bailiff demo, steps 3 and 5): respond to the return order. response 'comply' hands the record back in two steps. (1) Hand back the record: atlas.bailiff_respond with response 'comply' and returned_text = the whole record_text exactly as served (a hash alone is not accepted). Atlas answers with return_event_id, return_seq and server_nonce. (2) File your AI's
| Parameter | Type | Required | Notes |
|---|---|---|---|
| actor_token | string | yes | Your credential from atlas.enroll or atlas.authenticate. Send it on every call after enrolling. |
| matter_id | string | no | Id of your practice copy (returned by atlas.enter_demo). Optional when you have one copy. |
| response | string | yes | — |
| reasons | string | no | — |
| returned_text | string | no | — |
| wipe_certificate | object | no | — |
Practice mode, Consumer Pulse copy only (Bailiff demo, step 4): appeal the return order with optional reasons (up to 1,000 characters). Atlas attaches its counterargument, and the live Magistrate decides one question: does the return order stand as written? Yes: it stands. No: it is vacated, stayed, or narrowed. Undecided: referred for deep review. The result is a live demonstration ruling on a sy
| Parameter | Type | Required | Notes |
|---|---|---|---|
| actor_token | string | yes | Your credential from atlas.enroll or atlas.authenticate. Send it on every call after enrolling. |
| matter_id | string | no | Id of your practice copy (returned by atlas.enter_demo). Optional when you have one copy. |
| reasons | string | no | — |
Practice mode, Consumer Pulse copy only (Bailiff demo, step 7): list this copy's docket entries for the order in order (order, refusal, warning, appeal, ruling, second refusal, enforcement) and verify the Bailiff enforcement receipt. Pass verify_text (and optionally receipt_id) to check a copy of the receipt text against the stored receipt (whole text compared).
| Parameter | Type | Required | Notes |
|---|---|---|---|
| actor_token | string | yes | Your credential from atlas.enroll or atlas.authenticate. Send it on every call after enrolling. |
| matter_id | string | no | Id of your practice copy (returned by atlas.enter_demo). Optional when you have one copy. |
| receipt_id | string | no | — |
| verify_text | string | no | — |
- Every tool — any call limit is its publisher’s, not ours
- No card, and mcprush charges nothing for it
- Runs at its publisher’s own address — this marketplace is not in the path
- Nothing to cap, because mcprush bills nothing
What counts against your monthly calls
| Tool | Unit | Calls used | Out of the allowance |
|---|
Nothing here is billable: mcprush charges nothing to install AtlasClose Governance Demo or to call it, at any volume.
Two independent axes, because powerful and malicious are different questions. The grade is threat only. The capability level is blast radius, and it is never a penalty on the grade — it is priced as one subtract-only term in the score, where you can see it.
| Term | Level | What it prices | Points |
|---|---|---|---|
| capability-exposure | moderate | capability blast radius (moderate) — client exposure if the model is manipulated | −3 |
| coverage-honesty | manifest | inspection depth (manifest) — how much of the target the scan could see | −4 |
What the scan could actually read
A grade is only as meaningful as its coverage, so the scanner publishes its own depth before it publishes its result.
The scan read each tool’s name, description, input schema and annotations exactly as the server listed them the last time it answered us; no code was reviewed. We ask the server again about once a month, and a list that changed is graded again.
The implementation source was not read — this reflects the declared tool metadata only.
Capability — what it could do if the model were manipulated
Tags derived from each tool’s schema and the implementation, not from what the tool calls itself. moderate is the level these add up to.
| Tool | Capability tags | Why the tag was assigned |
|---|---|---|
| atlas.enter_demo | state-write | state-write: declares readOnlyHint: false |
| atlas.my_refusals | state-write | state-write: declares readOnlyHint: false |
| atlas.present_identity | state-write | state-write: declares readOnlyHint: false |
| atlas.enroll | state-write | state-write: declares readOnlyHint: false |
| atlas.claim_purpose | state-write | state-write: declares readOnlyHint: false |
| atlas.discover | no tags | |
| atlas.authenticate | state-write | state-write: declares readOnlyHint: false |
| atlas.bind_actor | state-write | state-write: declares readOnlyHint: false |
| atlas.get_assignment | no tags | |
| atlas.get_matter | no tags | |
| atlas.get_authority | no tags | |
| atlas.get_context | no tags | |
| atlas.list_capabilities | no tags | |
| atlas.request_capability | state-write | state-write: declares readOnlyHint: false |
| atlas.submit_evidence | state-write | state-write: declares readOnlyHint: false |
| atlas.submit_result | state-write | state-write: declares readOnlyHint: false |
| atlas.raise_challenge | state-write | state-write: declares readOnlyHint: false |
| atlas.request_review | state-write | state-write: declares readOnlyHint: false |
| atlas.magistrate_referral | state-write | state-write: declares readOnlyHint: false |
| atlas.file_position | state-write | state-write: declares readOnlyHint: false |
| atlas.magistrate_execute | state-write | state-write: declares readOnlyHint: false |
| atlas.human_action_required | no tags | |
| atlas.external_action | external-sink | external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true |
| atlas.get_resulting_state | no tags | |
| atlas.checkout | state-write | state-write: declares readOnlyHint: false |
| atlas.institutional_view | no tags | |
| atlas.enter_room | state-write | state-write: declares readOnlyHint: false |
| atlas.leave_room | state-write | state-write: declares readOnlyHint: false |
| atlas.room_act | state-write | state-write: declares readOnlyHint: false |
| atlas.request_room_access | state-write | state-write: declares readOnlyHint: false |
| atlas.librarian.find | no tags | |
| atlas.librarian.resolve | no tags | |
| atlas.librarian.related | no tags | |
| atlas.librarian.provenance | no tags | |
| atlas.librarian.version_history | no tags | |
| atlas.use | state-write | state-write: declares readOnlyHint: false |
| atlas.run_record | no tags | |
| atlas.pulse_data | state-write | state-write: declares readOnlyHint: false |
| atlas.pulse_memo | state-write | state-write: declares readOnlyHint: false |
| atlas.pulse_verify_receipt | state-write | state-write: declares readOnlyHint: false |
| atlas.pulse_inbox | state-write | state-write: declares readOnlyHint: false |
| atlas.pulse_use | state-write | state-write: declares readOnlyHint: false |
| atlas.pulse_conflict | state-write | state-write: declares readOnlyHint: false |
| atlas.pulse_settle | state-write | state-write: declares readOnlyHint: false |
| atlas.pulse_refer | state-write | state-write: declares readOnlyHint: false |
| atlas.pulse_ruling | state-write | state-write: declares readOnlyHint: false |
| atlas.bailiff_declare | state-write | state-write: declares readOnlyHint: false |
| atlas.bailiff_order | state-write | state-write: declares readOnlyHint: false |
| atlas.bailiff_record | state-write | state-write: declares readOnlyHint: false |
| atlas.bailiff_respond | state-write | state-write: declares readOnlyHint: false |
| atlas.bailiff_appeal | state-write | state-write: declares readOnlyHint: false |
| atlas.bailiff_verify | state-write | state-write: declares readOnlyHint: false |
Toxic-flow graph
The lethal trifecta, checked as a graph rather than as a checklist: untrusted input, a sensitive source and an external sink have to meet before there is a path worth worrying about.
The public result for this release does not print the flow graph, so there is nothing to show here. That is not the same as "no paths were found": what the scan did read is above, under coverage.
Supply chain and provenance
This is the first scan of this surface here, so there is nothing yet to compare it against.
Every result on this tab comes from one deterministic pass over the published package — offline, rule by rule, and auditable line by line above. Same methodology version, same bytes, same score.
Release history
This is an address its publisher runs: which release it serves is theirs to choose, so there is nothing here to pin. The history below is for reading; the current release on file is 0.3.0-rc.4.
No release note was published with this version.
One review per account, from a signed-in account that does not publish this listing. Nothing else is asked — you can say what you think before you install it. Publishers can reply once per review, and a review can be edited or deleted by whoever wrote it.
Any signed-in account that does not publish AtlasClose Governance Demo can review it, once — before installing it or after. A review from an account that has installed it is marked as one.
Nobody has reviewed this listing. The rating on the card is the mean of the reviews written here and nothing else, so there is no rating until somebody writes the first — which takes a signed-in account that does not publish it, and nothing else.