ZeroWidth Compass
REMOTE · API.ZEROWIDTH.AI
Read and update your Compass map: pages, changes, opportunities and interviews.
Available components
Last scanned (1 hour ago)
Scores higher than 64% of remote servers
Reachable. Last reached 24 Oct 2026.
Category Productivity and Notes
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security57
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- Authorisation check failed: no authorisation is required to call this server, and it exposes a tool marked destructive (compass_pages_update). See how to fix → View diagnostics → Fail
- HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
- HSTS check failed: the Strict-Transport-Security header is absent. See how to fix → View diagnostics → Fail
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability86
- 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
- AI-judged instruction clarity (excellent).Pass
- Tool/resource definitions use about 17388 tokens (~88/item across 196 items; 62 tools + 134 resources), lean.Pass
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management53
- Stability observed for 16 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage97
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 90% of tool parameters carry a description.Partial
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- All 4 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation.Pass
- An AI judge read all 63 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 23 Oct 26 0
- Tool “compass_gaps_resolve” rewrote its description, which is the text the model reads security
- Tool “compass_interviews_create” rewrote its description, which is the text the model reads security
- Tool “compass_map_view” rewrote its description, which is the text the model reads security
- Tool “compass_step_claims_propose” rewrote its description, which is the text the model reads security
- Tool “search_docs” rewrote its description, which is the text the model reads security
- New tool “compass_role_story” functional
- New tool “compass_roles_overview” functional
- “compass_opportunities_mark_implemented” added an optional parameter “applyToMap” cosmetic
- 22 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 43 to 47. That category is still filling its 30-day observation window: 13 days of observed history at the previous scan, 14 at this one. The score rises as the window fills, whether or not the server changes.
- 20 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 37 to 40. That category is still filling its 30-day observation window: 11 days of observed history at the previous scan, 12 at this one. The score rises as the window fills, whether or not the server changes.
- 18 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 30 to 33. That category is still filling its 30-day observation window: 9 days of observed history at the previous scan, 10 at this one. The score rises as the window fills, whether or not the server changes.
- 17 Oct 26 0
- Tool “compass_step_claims_propose” rewrote its description, which is the text the model reads security
- Tool “search_workspace” rewrote its description, which is the text the model reads security
- “search_workspace” added an optional parameter “folderId” cosmetic
- “compass_links_create” reworded the description of “sourceId” cosmetic
- “compass_links_create” reworded the description of “sourceKind” cosmetic
- “compass_step_claims_propose” reworded the description of “sourceId” cosmetic
- “compass_step_claims_propose” reworded the description of “sourceKind” cosmetic
- “compass_step_measures_propose” reworded the description of “sourceId” cosmetic
- “search_workspace” reworded the description of “kinds” cosmetic
- “search_workspace” reworded the description of “q” cosmetic
- 16 Oct 26 +1
- Tool “compass_inbox_list” rewrote its description, which is the text the model reads security
- Tool “compass_links_create” rewrote its description, which is the text the model reads security
- Server version: 0.0.0 → 1.0.0 functional
- 14 Oct 26 +1
- Tool “compass_priority_steps_find” rewrote its description, which is the text the model reads security
- Tool “compass_step_claims_propose” rewrote its description, which is the text the model reads security
- Tool “compass_transformations_make_change” rewrote its description, which is the text the model reads security
- New resource “prism/synthetic-panels” functional
- New tool “compass_transformations_respond” functional
- “compass_interviews_create” reworded the description of “focusPrompt” cosmetic
- 13 Oct 26 0
- Tool “compass_step_claims_propose” rewrote its description, which is the text the model reads security
- Tool “compass_workflow_steps” rewrote its description, which is the text the model reads security
- New tool “compass_priority_steps_find” functional
- New tool “compass_transformations_get” functional
- New tool “compass_transformations_make_change” functional
- New tool “compass_transformations_read” functional
- Tool “compass_step_claims_propose” changed its title: Propose who does a workflow's steps → Propose who does a workflow's steps and what in cosmetic
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 24 Oct 2026 · Probed https://api.zerowidth.ai/mcp/x/compass
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=api.zerowidth.ai | CN=WR3,O=Google Trust Services,C=US | 20 Sept 2026 | 19 Dec 2026 | RSA 2048 | SHA256-RSA | ef3f24a330d02ed80992778a6ead44bf |
| SANs: api.zerowidth.ai | ||||||
| CN=WR3,O=Google Trust Services,C=US (CA) | CN=GTS Root R1,O=Google Trust Services LLC,C=US | 13 Dec 2023 | 20 Feb 2029 | RSA 2048 | SHA256-RSA | 7ff005a91568d63abc22861684aa4b5a |
| CN=GTS Root R1,O=Google Trust Services LLC,C=US (CA) | CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE | 19 Jun 2020 | 28 Jan 2028 | RSA 4096 | SHA256-RSA | 77bd0d6cdb36f91aea210fc4f058d30d |
Background: What to check on a remote MCP endpoint →
DNSSEC insecure
Validation of api.zerowidth.ai. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| ai. | present | 3799 | 8 | Verified |
| zerowidth.ai. | absent | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication No authorisation required
The endpoint answered without asking for a token. Anyone who knows the URL can reach it.
| Result | No authorisation required |
|---|---|
| HTTP status | 200 |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://api.zerowidth.ai/mcp/x/compass | Verified | 200 | |
| http (plaintext) | http://api.zerowidth.ai/mcp/x/compass | HTTPS enforced |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
compass_transformations_read Read a priority's transformations again ~86
Starts reading the five levels for a PRIORITY in the background (a minute or two). Needs at least one kept step that impacts the priority. A read under way is left to finish. Check back with compass_transformations_get.
| Name | Type | Req | Description |
|---|---|---|---|
| priorityPageId | string | yes | The PRIORITY page id. |
| workspace | string | – | Workspace slug. Ignored for workspace API keys. |
No output schema declared.
No examples provided.
compass_transformations_respond Record what's true about a transformation level ~212
Records what someone told you about one level of a PRIORITY's current transformations, in their words or a faithful summary: that they already do it, what rules it out, a system that isn't ready, work still done on paper, and so on. Compass works out what it means in the background: a label for the level, facts kept on the steps they're about (every later reading of those workflows sees them), and open questions to confirm. Then it reads the priority again. Use it whenever a conversation settles something about a level, so it lands on the priority's page, not only in this chat.
| Name | Type | Req | Description |
|---|---|---|---|
| level | integer | yes | 1 Assist, 2 Automate, 3 Re-form, 4 Invert, 5 Dissolve. |
| priorityPageId | string | yes | The PRIORITY page id. |
| said | string | yes | What's true about the level, as the person said it. |
| workspace | string | – | Workspace slug. Ignored for workspace API keys. |
No output schema declared.
No examples provided.
compass_workflow_learning What we've learned about a workflow ~166
Newest first: steps added to or dropped from the diagram (and by whom), and claims about who does what or what a step takes — said, corrected (with what they replaced), withdrawn, or accepted from a proposal — each with its source. This is when we LEARNED things; when they were true is each claim's validFrom/validTo. Use it to brief someone on what changed in the picture, or to see what an interview added.
| Name | Type | Req | Description |
|---|---|---|---|
| pageId | string | yes | The WORKFLOW page id. |
| since | – | – | Only what was learned on or after this date. |
| workspace | string | – | Workspace slug. Personal tokens with no default workspace MUST pass this; tokens with a default can override per call. Ignored for workspace API keys. |
No output schema declared.
No examples provided.
compass_workflow_rollup Roll up what a workflow takes ~340
Per run and per month: hands-on minutes, waiting minutes, labor cost (hands-on time priced through each role's hourly rate), and hard costs, each as a low–high range, with every step's share and its gates (approvals, handoffs, re-keying, rework). A step that is itself a workflow uses that workflow's roll-up unless it has its own estimate. `coverage` says how many steps are timed — always say how much of the total rests on estimates before quoting it, and never present a range as one number. `unpricedRoles` are roles doing timed work with no hourly rate; their time counts and its cost doesn't. Where the waiting dwarfs the hands-on time, or a gate rarely sends anything back, is usually where the improvement is. `at` reads the estimates as of a date; `variantId` rolls up one variant.
| Name | Type | Req | Description |
|---|---|---|---|
| at | – | – | How things were on this date (YYYY-MM-DD). Default today. |
| changeIds | array | – | Project the workflow as these changes would leave it (ids from compass_scenario_changes). Compare with a call without them: before vs after, what stays human, overlapping changes. |
| knownAt | – | – | Count only what had been said by this date — the picture as we knew it then. |
| pageId | string | yes | The WORKFLOW page id. |
| variantId | string | – | A variant id from compass_workflow_steps. |
| workspace | string | – | Workspace slug. Personal tokens with no default workspace MUST pass this; tokens with a default can override per call. Ignored for workspace API keys. |
No output schema declared.
No examples provided.
compass_workflow_steps List a workflow's steps and who does them ~251
Every step in a WORKFLOW page's steps diagram, in diagram order, with its phase, whether it is itself a workflow (subWorkflowPageId), and who the map says owns, does, approves, is consulted on, or doesn't do it, and `uses`: the systems or documents it's done in. `unknown: true` means nothing that counts says who does the step or what it's done in — those are the questions worth asking in an interview. A step with `uses` and nobody on it is one a system runs; don't ask who does it. `disputed` lists roles or people with conflicting claims; ask about those rather than picking a side. `proposals` counts claims waiting for review. `variants` are named subsets of the steps ("rush job", "enterprise client"); each step lists the variants it belongs to. Returns no steps when the workflow has no diagram yet (compass_process_diagram_ensure makes one).
| Name | Type | Req | Description |
|---|---|---|---|
| pageId | string | yes | The WORKFLOW page id. |
| workspace | string | – | Workspace slug. Personal tokens with no default workspace MUST pass this; tokens with a default can override per call. Ignored for workspace API keys. |
No output schema declared.
No examples provided.
entity_tags_browse Browse the workspace's tags ~149
Without a tag: every tag in use across the workspace with how many entities carry it, most-used first — the vocabulary the team already organizes by. With a tag: everything filed under it across every tool, each with its kind, id, title, and path. Use it to reuse existing labels instead of inventing near-duplicates, and to answer 'show me everything about X' when X is a label.
| Name | Type | Req | Description |
|---|---|---|---|
| tag | string | – | A tag to expand into its items. Omit to list tags. |
| workspace | string | – | Workspace slug. Personal tokens with no default workspace MUST pass this; tokens with a default can override per call. Ignored for workspace API keys. |
No output schema declared.
No examples provided.
entity_tags_get Read the tags on entities ~130
Returns the tags on a batch of entities of one kind — the labels galleries organize by. Ids come from the kind's list/get tool or from search_workspace. Use it before entity_tags_set so you replace the full set knowingly, and to answer 'what is this filed under'. Entities the user can't see are omitted.
| Name | Type | Req | Description |
|---|---|---|---|
| entityKind | string | yes | Which kind the ids belong to. |
| ids | array | yes | – |
| workspace | string | – | Workspace slug. Personal tokens with no default workspace MUST pass this; tokens with a default can override per call. Ignored for workspace API keys. |
No output schema declared.
No examples provided.
entity_tags_set Set an entity's tags ~173
Replaces the FULL tag set on one entity (an empty list clears it). Read the current tags with entity_tags_get first and pass the merged list — this is not additive. Tags are lowercase letters, numbers, spaces, and hyphens; prefer labels already in use (entity_tags_browse) so the workspace's vocabulary stays small. The id comes from the kind's list/get tool or search_workspace.
| Name | Type | Req | Description |
|---|---|---|---|
| approvalId | string | – | Approval id from a prior needs_confirmation response. Omit on the first call. |
| entityId | string | yes | – |
| entityKind | string | yes | – |
| tags | array | yes | – |
| workspace | string | – | Workspace slug. Personal tokens with no default workspace MUST pass this; tokens with a default can override per call. Ignored for workspace API keys. |
No output schema declared.
No examples provided.
get_doc Fetch ZeroWidth doc by slug ~73
Fetch the full Markdown body of a specific docs page by its slug. Use this after `search_docs` when the user needs the complete content of a page. No authentication required.
| Name | Type | Req | Description |
|---|---|---|---|
| slug | string | yes | Page slug. Accepts 'compass/api', '/compass/api', or 'docs/compass/api'. |
No output schema declared.
No examples provided.
list_docs List ZeroWidth docs pages ~75
Enumerate all available docs pages, optionally filtered by product (e.g. 'compass', 'legal', 'overview'). Use this to discover what slugs exist before calling `get_doc`. No authentication required.
| Name | Type | Req | Description |
|---|---|---|---|
| product | string | – | Optional product slug filter (e.g. 'compass', 'legal', 'overview'). |
No output schema declared.
No examples provided.
search_docs Search ZeroWidth docs ~111
Search ZeroWidth product documentation. Returns matching pages with title, slug, public URL, and a query-relevant snippet. Use this when the user asks about a ZeroWidth product (Compass, Workbench, Caliper, Prism, Ledger, Napkin, the assistant), an API behavior, or a policy. No authentication required — the docs corpus is public.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | – | Max number of results. Defaults to 10. |
| query | string | yes | Search query — keywords or natural-language phrase. |
No output schema declared.
No examples provided.
search_workspace Search the whole workspace ~431
Finds anything in the workspace in one call — uploaded files (searching the text inside them), folders, Workbench flows, shims, knowledge bases and tasks, Compass pages and changes, Caliper datasets, evals, rubrics, reviews, specs and sources, Ledger entries, Napkin sketches, decks, docs, sheets, diagrams and interfaces. The same search the person uses in Home. Use it FIRST whenever the user mentions something without saying where it lives ('the SOW', 'the dispatch interviews', 'that invoice'). The query is words in any order: each word must appear in the thing's name, its tags, the names of the folders it's filed under, or the text inside it — so 'northwind sow' finds the SOW filed in the Northwind folder, and 'dispatch interview' finds 'Dispatcher interview 1.md'. Results are ranked best first. Each hit carries its id, kind, path (for a link), folderPath (where it's filed, top-down), tags, and a snippet when the words were found inside it rather than in its name — say where a thing lives using folderPath. A file's id feeds workspace_files_read; other ids feed the kind's *_get tool. Pass folderId to search only inside one folder and everything under it. If nothing comes back, try fewer or different words before telling the user it doesn't exist. Results only include what the user can see, and only kinds this token may read.
| Name | Type | Req | Description |
|---|---|---|---|
| folderId | string | – | Only search inside this folder and the folders under it (ids from workspace_folders_browse or a folder hit). |
| kinds | array | – | Restrict to these kinds (file, folder, flow, page, doc, dataset, …). Omit to search everything. |
| limit | integer | – | – |
| q | string | yes | Words, any order, case-insensitive. Fewer words find more. |
| workspace | string | – | Workspace slug. Personal tokens with no default workspace MUST pass this; tokens with a default can override per call. Ignored for workspace API keys. |
No output schema declared.
No examples provided.
How do I install the ZeroWidth Compass MCP server?
ZeroWidth Compass is a hosted endpoint at https://api.zerowidth.ai/mcp/x/compass, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · api.zerowidth.ai
claude mcp add --transport http ai-zerowidth-compass 'https://api.zerowidth.ai/mcp/x/compass'
What is the ZeroWidth Compass MCP server?
ZeroWidth Compass is an MCP server listed in the public MCP registry as ai.zerowidth/compass. Read and update your Compass map: pages, changes, opportunities and interviews. This page covers its hosted endpoint (https://api.zerowidth.ai/mcp/x/compass).
Is the ZeroWidth Compass MCP server safe to use?
ZeroWidth Compass scores 73 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the ZeroWidth Compass MCP server expose?
ZeroWidth Compass exposes 62 tools: search_docs, get_doc, list_docs, compass_pages_list, compass_pages_search, and 57 more. Their descriptions and schemas cost roughly 13,788 tokens of context every time the server is loaded.
Does the ZeroWidth Compass MCP server require authentication?
No. We connected to ZeroWidth Compass without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.
Is the ZeroWidth Compass MCP server still maintained?
ZeroWidth Compass is still listed as active in the MCP registry. We last reached this channel on 24 October 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.