Agent Workspace Practice
REMOTE · JAMESROSS.AI · SCANNED SEP 26
Search + patterns, maturity assessment, context pricing, redaction checks - a practice as tools.
Available components
+3 this week
73 73 Trust /100
Trust breakdown (7 categories)
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security46
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- Authorisation not fully verified: no authorisation is required to call this server, and 6 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe. See how to fix → View diagnostics → Unverified
- HTTPS enforcement could not be verified: the plaintext port answered with HTTP 405, which proves neither a plaintext path nor enforcement. View diagnostics → Unverified
- HSTS check failed: the Strict-Transport-Security header is absent. See how to fix → View diagnostics → Fail
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability78
- 80% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Partial
- AI-judged instruction clarity (good).Pass
- Tool/resource definitions use about 3057 tokens (~29/item across 105 items; 6 tools + 99 resources), lean.Pass
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management90
- Stability observed for 27 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 6 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 8 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Install
How do I install the Agent Workspace Practice MCP server?
Agent Workspace Practice is a hosted endpoint at https://jamesross.ai/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · jamesross.ai
# add to Claude Code
claude mcp add --transport http jimy-r-agent-workspace-practice 'https://jamesross.ai/mcp'
// .cursor/mcp.json
{
"mcpServers": {
"jimy-r-agent-workspace-practice": {
"url": "https://jamesross.ai/mcp"
}
}
} // .vscode/mcp.json
{
"servers": {
"jimy-r-agent-workspace-practice": {
"type": "http",
"url": "https://jamesross.ai/mcp"
}
}
} # ~/.codex/config.toml
[mcp_servers.jimy-r-agent-workspace-practice] url = "https://jamesross.ai/mcp"
// opencode.json
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"jimy-r-agent-workspace-practice": {
"type": "remote",
"url": "https://jamesross.ai/mcp",
"enabled": true
}
}
} # add to OpenClaw
openclaw mcp add jimy-r-agent-workspace-practice --url 'https://jamesross.ai/mcp' --transport streamable-http
# ~/.hermes/config.yaml
mcp_servers:
jimy-r-agent-workspace-practice:
url: "https://jamesross.ai/mcp" // ~/.netclaw/config/netclaw.json
{
"McpServers": {
"jimy-r-agent-workspace-practice": {
"Transport": "http",
"Url": "https://jamesross.ai/mcp"
}
}
} # add to Vellum
assistant mcp add jimy-r-agent-workspace-practice -t streamable-http -u 'https://jamesross.ai/mcp'
// mcp.json
{
"mcpServers": {
"jimy-r-agent-workspace-practice": {
"type": "http",
"url": "https://jamesross.ai/mcp"
}
}
} The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.
Changelog
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 26 Sept 26 0
- Resource “Do this” now points somewhere else: architecture://learn-05-telemetry-cost--do-this → architecture://learn-06-provenance-delegation--do-this security
- Resource “Do this” now points somewhere else: architecture://learn-04-safety-permissions--do-this → architecture://learn-06-provenance-delegation--do-this security
- Resource “Do this” now points somewhere else: architecture://learn-00-foundations--do-this → architecture://learn-06-provenance-delegation--do-this security
- Resource “Do this” now points somewhere else: architecture://learn-03-verification-oversight--do-this → architecture://learn-06-provenance-delegation--do-this security
- Resource “Do this” now points somewhere else: architecture://learn-01-canonical-knowledge--do-this → architecture://learn-06-provenance-delegation--do-this security
- Resource “Do this” now points somewhere else: architecture://learn-02-context-economics--do-this → architecture://learn-06-provenance-delegation--do-this security
- Resource “Measure it” now points somewhere else: architecture://learn-05-telemetry-cost--measure-it → architecture://learn-06-provenance-delegation--measure-it security
- Resource “Measure it” now points somewhere else: architecture://learn-01-canonical-knowledge--measure-it → architecture://learn-06-provenance-delegation--measure-it security
- Resource “Measure it” now points somewhere else: architecture://learn-02-context-economics--measure-it → architecture://learn-06-provenance-delegation--measure-it security
- Resource “Measure it” now points somewhere else: architecture://learn-03-verification-oversight--measure-it → architecture://learn-06-provenance-delegation--measure-it security
- Resource “Measure it” now points somewhere else: architecture://learn-04-safety-permissions--measure-it → architecture://learn-06-provenance-delegation--measure-it security
- Resource “Measure it” now points somewhere else: architecture://learn-00-foundations--measure-it → architecture://learn-06-provenance-delegation--measure-it security
- Resource “The patterns” now points somewhere else: architecture://learn-05-telemetry-cost--the-patterns → architecture://learn-06-provenance-delegation--the-patterns security
- Resource “The patterns” now points somewhere else: architecture://learn-04-safety-permissions--the-patterns → architecture://learn-06-provenance-delegation--the-patterns security
- Resource “The patterns” now points somewhere else: architecture://learn-01-canonical-knowledge--the-patterns → architecture://learn-06-provenance-delegation--the-patterns security
- Resource “The patterns” now points somewhere else: architecture://learn-03-verification-oversight--the-patterns → architecture://learn-06-provenance-delegation--the-patterns security
- Resource “The patterns” now points somewhere else: architecture://learn-02-context-economics--the-patterns → architecture://learn-06-provenance-delegation--the-patterns security
- Resource “The trade-offs” now points somewhere else: architecture://teardowns-2026-08-27-12-factor-agents--the-trade-offs → architecture://teardowns-2026-09-06-azure-gpt-rag--the-trade-offs security
- Resource “The trade-offs” now points somewhere else: architecture://teardowns-2026-08-28-lifeos--the-trade-offs → architecture://teardowns-2026-09-06-azure-gpt-rag--the-trade-offs security
- Resource “The trade-offs” now points somewhere else: architecture://teardowns-2026-08-28-herdr--the-trade-offs → architecture://teardowns-2026-09-06-azure-gpt-rag--the-trade-offs security
- Resource “The trade-offs” now points somewhere else: architecture://teardowns-2026-09-05-deepseek-harness--the-trade-offs → architecture://teardowns-2026-09-06-azure-gpt-rag--the-trade-offs security
- Resource “What it is” now points somewhere else: architecture://teardowns-2026-08-28-herdr--what-it-is → architecture://teardowns-2026-09-06-azure-gpt-rag--what-it-is security
- Resource “What it is” now points somewhere else: architecture://teardowns-2026-09-05-deepseek-harness--what-it-is → architecture://teardowns-2026-09-06-azure-gpt-rag--what-it-is security
- Resource “What it is” now points somewhere else: architecture://teardowns-2026-08-28-lifeos--what-it-is → architecture://teardowns-2026-09-06-azure-gpt-rag--what-it-is security
- Resource “What it is” now points somewhere else: architecture://teardowns-2026-08-27-12-factor-agents--what-it-is → architecture://teardowns-2026-09-06-azure-gpt-rag--what-it-is security
- Resource “What this teaches” now points somewhere else: architecture://teardowns-2026-08-27-12-factor-agents--what-this-teaches → architecture://teardowns-2026-09-06-azure-gpt-rag--what-this-teaches security
- Resource “What this teaches” now points somewhere else: architecture://teardowns-2026-09-05-deepseek-harness--what-this-teaches → architecture://teardowns-2026-09-06-azure-gpt-rag--what-this-teaches security
- Resource “What this teaches” now points somewhere else: architecture://teardowns-2026-08-28-lifeos--what-this-teaches → architecture://teardowns-2026-09-06-azure-gpt-rag--what-this-teaches security
- Resource “What this teaches” now points somewhere else: architecture://teardowns-2026-08-28-herdr--what-this-teaches → architecture://teardowns-2026-09-06-azure-gpt-rag--what-this-teaches security
- Resource “What works” now points somewhere else: architecture://teardowns-2026-08-28-lifeos--what-works → architecture://teardowns-2026-09-06-azure-gpt-rag--what-works security
- Resource “What works” now points somewhere else: architecture://teardowns-2026-09-05-deepseek-harness--what-works → architecture://teardowns-2026-09-06-azure-gpt-rag--what-works security
- Resource “What works” now points somewhere else: architecture://teardowns-2026-08-27-12-factor-agents--what-works → architecture://teardowns-2026-09-06-azure-gpt-rag--what-works security
- Resource “What works” now points somewhere else: architecture://teardowns-2026-08-28-herdr--what-works → architecture://teardowns-2026-09-06-azure-gpt-rag--what-works security
- Resource “What's conspicuously absent” now points somewhere else: architecture://teardowns-2026-09-05-deepseek-harness--what-s-conspicuously-absent → architecture://teardowns-2026-09-06-azure-gpt-rag--what-s-conspicuously-absent security
- Resource “What's conspicuously absent” now points somewhere else: architecture://teardowns-2026-08-28-lifeos--what-s-conspicuously-absent → architecture://teardowns-2026-09-06-azure-gpt-rag--what-s-conspicuously-absent security
- Resource “What's conspicuously absent” now points somewhere else: architecture://teardowns-2026-08-27-12-factor-agents--what-s-conspicuously-absent → architecture://teardowns-2026-09-06-azure-gpt-rag--what-s-conspicuously-absent security
- Resource “What's conspicuously absent” now points somewhere else: architecture://teardowns-2026-08-28-herdr--what-s-conspicuously-absent → architecture://teardowns-2026-09-06-azure-gpt-rag--what-s-conspicuously-absent security
- Resource “1. Where does the organisation live, as far as the agent can see?” was removed ▼ functional
- Resource “2. What does the organisation keep from AI work, and what does each session cost?” was removed ▼ functional
- Resource “3. How does AI output earn its way into a decision?” was removed ▼ functional
- Resource “4. What can it not do, and how do you know?” was removed ▼ functional
- Resource “5. Who owns the evidence, and what fails quietly?” was removed ▼ functional
- Resource “6. Which path is easier, the governed one or the shadow one?” was removed ▼ functional
- Resource “How to use it” was removed ▼ functional
- Resource “Six decisions before your agents scale” was removed ▼ functional
- Resource “The 30-minute version” was removed ▼ functional
- Resource “The briefs” was removed ▼ functional
- Resource “Where the evidence comes from” was removed ▼ functional
- Schema quality: excellent → good functional
- New resource “Teardown: GPT-RAG” functional
- New resource “What five readings show” functional
- Server version: 1.1.0 → 1.2.0 functional
- 25 Sept 26 +1
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 24 Sept 26 0
- Resource “Do this” now points somewhere else: architecture://learn-01-canonical-knowledge--do-this → architecture://learn-06-provenance-delegation--do-this security
- Resource “Do this” now points somewhere else: architecture://learn-03-verification-oversight--do-this → architecture://learn-06-provenance-delegation--do-this security
- Resource “Do this” now points somewhere else: architecture://learn-02-context-economics--do-this → architecture://learn-06-provenance-delegation--do-this security
- Resource “Do this” now points somewhere else: architecture://learn-04-safety-permissions--do-this → architecture://learn-06-provenance-delegation--do-this security
- Resource “Do this” now points somewhere else: architecture://learn-05-telemetry-cost--do-this → architecture://learn-06-provenance-delegation--do-this security
- Resource “Do this” now points somewhere else: architecture://learn-00-foundations--do-this → architecture://learn-06-provenance-delegation--do-this security
- Resource “Measure it” now points somewhere else: architecture://learn-01-canonical-knowledge--measure-it → architecture://learn-06-provenance-delegation--measure-it security
- Resource “Measure it” now points somewhere else: architecture://learn-00-foundations--measure-it → architecture://learn-06-provenance-delegation--measure-it security
- Resource “Measure it” now points somewhere else: architecture://learn-02-context-economics--measure-it → architecture://learn-06-provenance-delegation--measure-it security
- Resource “Measure it” now points somewhere else: architecture://learn-03-verification-oversight--measure-it → architecture://learn-06-provenance-delegation--measure-it security
- Resource “Measure it” now points somewhere else: architecture://learn-04-safety-permissions--measure-it → architecture://learn-06-provenance-delegation--measure-it security
- Resource “Measure it” now points somewhere else: architecture://learn-05-telemetry-cost--measure-it → architecture://learn-06-provenance-delegation--measure-it security
- Resource “The patterns” now points somewhere else: architecture://learn-04-safety-permissions--the-patterns → architecture://learn-06-provenance-delegation--the-patterns security
- Resource “The patterns” now points somewhere else: architecture://learn-03-verification-oversight--the-patterns → architecture://learn-06-provenance-delegation--the-patterns security
- Resource “The patterns” now points somewhere else: architecture://learn-05-telemetry-cost--the-patterns → architecture://learn-06-provenance-delegation--the-patterns security
- Resource “The patterns” now points somewhere else: architecture://learn-01-canonical-knowledge--the-patterns → architecture://learn-06-provenance-delegation--the-patterns security
- Resource “The patterns” now points somewhere else: architecture://learn-02-context-economics--the-patterns → architecture://learn-06-provenance-delegation--the-patterns security
- Resource “The trade-offs” now points somewhere else: architecture://teardowns-2026-08-28-herdr--the-trade-offs → architecture://teardowns-2026-09-05-deepseek-harness--the-trade-offs security
- Resource “The trade-offs” now points somewhere else: architecture://teardowns-2026-08-27-12-factor-agents--the-trade-offs → architecture://teardowns-2026-09-05-deepseek-harness--the-trade-offs security
- Resource “The trade-offs” now points somewhere else: architecture://teardowns-2026-08-28-lifeos--the-trade-offs → architecture://teardowns-2026-09-05-deepseek-harness--the-trade-offs security
- Resource “What it is” now points somewhere else: architecture://teardowns-2026-08-28-lifeos--what-it-is → architecture://teardowns-2026-09-05-deepseek-harness--what-it-is security
- Resource “What it is” now points somewhere else: architecture://teardowns-2026-08-28-herdr--what-it-is → architecture://teardowns-2026-09-05-deepseek-harness--what-it-is security
- Resource “What it is” now points somewhere else: architecture://teardowns-2026-08-27-12-factor-agents--what-it-is → architecture://teardowns-2026-09-05-deepseek-harness--what-it-is security
- Resource “What this teaches” now points somewhere else: architecture://teardowns-2026-08-28-herdr--what-this-teaches → architecture://teardowns-2026-09-05-deepseek-harness--what-this-teaches security
- Resource “What this teaches” now points somewhere else: architecture://teardowns-2026-08-27-12-factor-agents--what-this-teaches → architecture://teardowns-2026-09-05-deepseek-harness--what-this-teaches security
- Resource “What this teaches” now points somewhere else: architecture://teardowns-2026-08-28-lifeos--what-this-teaches → architecture://teardowns-2026-09-05-deepseek-harness--what-this-teaches security
- Resource “What works” now points somewhere else: architecture://teardowns-2026-08-27-12-factor-agents--what-works → architecture://teardowns-2026-09-05-deepseek-harness--what-works security
- Resource “What works” now points somewhere else: architecture://teardowns-2026-08-28-herdr--what-works → architecture://teardowns-2026-09-05-deepseek-harness--what-works security
- Resource “What works” now points somewhere else: architecture://teardowns-2026-08-28-lifeos--what-works → architecture://teardowns-2026-09-05-deepseek-harness--what-works security
- Resource “What's conspicuously absent” now points somewhere else: architecture://teardowns-2026-08-28-lifeos--what-s-conspicuously-absent → architecture://teardowns-2026-09-05-deepseek-harness--what-s-conspicuously-absent security
- Resource “What's conspicuously absent” now points somewhere else: architecture://teardowns-2026-08-27-12-factor-agents--what-s-conspicuously-absent → architecture://teardowns-2026-09-05-deepseek-harness--what-s-conspicuously-absent security
- Resource “What's conspicuously absent” now points somewhere else: architecture://teardowns-2026-08-28-herdr--what-s-conspicuously-absent → architecture://teardowns-2026-09-05-deepseek-harness--what-s-conspicuously-absent security
- Schema quality: 2715 → 3148 ▼ functional
- Schema quality: 76% → 81% ▲ functional
- New resource “Teardown: DeepSeek Harness” functional
- New resource “1. Where does the organisation live, as far as the agent can see?” functional
- New resource “2. What does the organisation keep from AI work, and what does each session cost?” functional
- New resource “3. How does AI output earn its way into a decision?” functional
- New resource “4. What can it not do, and how do you know?” functional
- New resource “5. Who owns the evidence, and what fails quietly?” functional
- New resource “6. Which path is easier, the governed one or the shadow one?” functional
- New resource “Disagree with a reading?” functional
- New resource “How to use it” functional
- New resource “Questions and corrections” functional
- New resource “Six decisions before your agents scale” functional
- New resource “The 30-minute version” functional
- New resource “The briefs” functional
- New resource “Track your progress” functional
- New resource “Where the evidence comes from” functional
- 23 Sept 26 +1
- Resource “Do this” now points somewhere else: architecture://learn-01-canonical-knowledge--do-this → architecture://learn-06-provenance-delegation--do-this security
- Resource “Do this” now points somewhere else: architecture://learn-03-verification-oversight--do-this → architecture://learn-06-provenance-delegation--do-this security
- Resource “Do this” now points somewhere else: architecture://learn-02-context-economics--do-this → architecture://learn-06-provenance-delegation--do-this security
- Resource “Do this” now points somewhere else: architecture://learn-04-safety-permissions--do-this → architecture://learn-06-provenance-delegation--do-this security
- Resource “Do this” now points somewhere else: architecture://learn-05-telemetry-cost--do-this → architecture://learn-06-provenance-delegation--do-this security
- Resource “Do this” now points somewhere else: architecture://learn-00-foundations--do-this → architecture://learn-06-provenance-delegation--do-this security
- Resource “Measure it” now points somewhere else: architecture://learn-01-canonical-knowledge--measure-it → architecture://learn-06-provenance-delegation--measure-it security
- Resource “Measure it” now points somewhere else: architecture://learn-00-foundations--measure-it → architecture://learn-06-provenance-delegation--measure-it security
- Resource “Measure it” now points somewhere else: architecture://learn-02-context-economics--measure-it → architecture://learn-06-provenance-delegation--measure-it security
- Resource “Measure it” now points somewhere else: architecture://learn-03-verification-oversight--measure-it → architecture://learn-06-provenance-delegation--measure-it security
- Resource “Measure it” now points somewhere else: architecture://learn-04-safety-permissions--measure-it → architecture://learn-06-provenance-delegation--measure-it security
- Resource “Measure it” now points somewhere else: architecture://learn-05-telemetry-cost--measure-it → architecture://learn-06-provenance-delegation--measure-it security
- Resource “The patterns” now points somewhere else: architecture://learn-04-safety-permissions--the-patterns → architecture://learn-06-provenance-delegation--the-patterns security
- Resource “The patterns” now points somewhere else: architecture://learn-03-verification-oversight--the-patterns → architecture://learn-06-provenance-delegation--the-patterns security
- Resource “The patterns” now points somewhere else: architecture://learn-05-telemetry-cost--the-patterns → architecture://learn-06-provenance-delegation--the-patterns security
- Resource “The patterns” now points somewhere else: architecture://learn-01-canonical-knowledge--the-patterns → architecture://learn-06-provenance-delegation--the-patterns security
- Resource “The patterns” now points somewhere else: architecture://learn-02-context-economics--the-patterns → architecture://learn-06-provenance-delegation--the-patterns security
- Resource “The trade-offs” now points somewhere else: architecture://teardowns-2026-08-28-herdr--the-trade-offs → architecture://teardowns-2026-08-28-lifeos--the-trade-offs security
- Resource “The trade-offs” now points somewhere else: architecture://teardowns-2026-08-27-12-factor-agents--the-trade-offs → architecture://teardowns-2026-08-28-lifeos--the-trade-offs security
- Resource “What it is” now points somewhere else: architecture://teardowns-2026-08-28-herdr--what-it-is → architecture://teardowns-2026-08-28-lifeos--what-it-is security
- Resource “What it is” now points somewhere else: architecture://teardowns-2026-08-27-12-factor-agents--what-it-is → architecture://teardowns-2026-08-28-lifeos--what-it-is security
- Resource “What this teaches” now points somewhere else: architecture://teardowns-2026-08-28-herdr--what-this-teaches → architecture://teardowns-2026-08-28-lifeos--what-this-teaches security
- Resource “What this teaches” now points somewhere else: architecture://teardowns-2026-08-27-12-factor-agents--what-this-teaches → architecture://teardowns-2026-08-28-lifeos--what-this-teaches security
- Resource “What works” now points somewhere else: architecture://teardowns-2026-08-27-12-factor-agents--what-works → architecture://teardowns-2026-08-28-lifeos--what-works security
- Resource “What works” now points somewhere else: architecture://teardowns-2026-08-28-herdr--what-works → architecture://teardowns-2026-08-28-lifeos--what-works security
- Resource “What's conspicuously absent” now points somewhere else: architecture://teardowns-2026-08-27-12-factor-agents--what-s-conspicuously-absent → architecture://teardowns-2026-08-28-lifeos--what-s-conspicuously-absent security
- Resource “What's conspicuously absent” now points somewhere else: architecture://teardowns-2026-08-28-herdr--what-s-conspicuously-absent → architecture://teardowns-2026-08-28-lifeos--what-s-conspicuously-absent security
- 22 Sept 26 0
- Resource “Do this” now points somewhere else: architecture://learn-01-canonical-knowledge--do-this → architecture://learn-06-provenance-delegation--do-this security
- Resource “Do this” now points somewhere else: architecture://learn-03-verification-oversight--do-this → architecture://learn-06-provenance-delegation--do-this security
- Resource “Do this” now points somewhere else: architecture://learn-02-context-economics--do-this → architecture://learn-06-provenance-delegation--do-this security
- Resource “Do this” now points somewhere else: architecture://learn-04-safety-permissions--do-this → architecture://learn-06-provenance-delegation--do-this security
- Resource “Do this” now points somewhere else: architecture://learn-05-telemetry-cost--do-this → architecture://learn-06-provenance-delegation--do-this security
- Resource “Do this” now points somewhere else: architecture://learn-00-foundations--do-this → architecture://learn-06-provenance-delegation--do-this security
- Resource “Measure it” now points somewhere else: architecture://learn-01-canonical-knowledge--measure-it → architecture://learn-06-provenance-delegation--measure-it security
- Resource “Measure it” now points somewhere else: architecture://learn-00-foundations--measure-it → architecture://learn-06-provenance-delegation--measure-it security
- Resource “Measure it” now points somewhere else: architecture://learn-02-context-economics--measure-it → architecture://learn-06-provenance-delegation--measure-it security
- Resource “Measure it” now points somewhere else: architecture://learn-03-verification-oversight--measure-it → architecture://learn-06-provenance-delegation--measure-it security
- Resource “Measure it” now points somewhere else: architecture://learn-04-safety-permissions--measure-it → architecture://learn-06-provenance-delegation--measure-it security
- Resource “Measure it” now points somewhere else: architecture://learn-05-telemetry-cost--measure-it → architecture://learn-06-provenance-delegation--measure-it security
- Resource “The patterns” now points somewhere else: architecture://learn-04-safety-permissions--the-patterns → architecture://learn-06-provenance-delegation--the-patterns security
- Resource “The patterns” now points somewhere else: architecture://learn-03-verification-oversight--the-patterns → architecture://learn-06-provenance-delegation--the-patterns security
- Resource “The patterns” now points somewhere else: architecture://learn-05-telemetry-cost--the-patterns → architecture://learn-06-provenance-delegation--the-patterns security
- Resource “The patterns” now points somewhere else: architecture://learn-01-canonical-knowledge--the-patterns → architecture://learn-06-provenance-delegation--the-patterns security
- Resource “The patterns” now points somewhere else: architecture://learn-02-context-economics--the-patterns → architecture://learn-06-provenance-delegation--the-patterns security
- Resource “The trade-offs” now points somewhere else: architecture://teardowns-2026-08-28-herdr--the-trade-offs → architecture://teardowns-2026-08-28-lifeos--the-trade-offs security
- Resource “The trade-offs” now points somewhere else: architecture://teardowns-2026-08-27-12-factor-agents--the-trade-offs → architecture://teardowns-2026-08-28-lifeos--the-trade-offs security
- Resource “What it is” now points somewhere else: architecture://teardowns-2026-08-28-herdr--what-it-is → architecture://teardowns-2026-08-28-lifeos--what-it-is security
- Resource “What it is” now points somewhere else: architecture://teardowns-2026-08-27-12-factor-agents--what-it-is → architecture://teardowns-2026-08-28-lifeos--what-it-is security
- Resource “What this teaches” now points somewhere else: architecture://teardowns-2026-08-28-herdr--what-this-teaches → architecture://teardowns-2026-08-28-lifeos--what-this-teaches security
- Resource “What this teaches” now points somewhere else: architecture://teardowns-2026-08-27-12-factor-agents--what-this-teaches → architecture://teardowns-2026-08-28-lifeos--what-this-teaches security
- Resource “What works” now points somewhere else: architecture://teardowns-2026-08-27-12-factor-agents--what-works → architecture://teardowns-2026-08-28-lifeos--what-works security
- Resource “What works” now points somewhere else: architecture://teardowns-2026-08-28-herdr--what-works → architecture://teardowns-2026-08-28-lifeos--what-works security
- Resource “What's conspicuously absent” now points somewhere else: architecture://teardowns-2026-08-27-12-factor-agents--what-s-conspicuously-absent → architecture://teardowns-2026-08-28-lifeos--what-s-conspicuously-absent security
- Resource “What's conspicuously absent” now points somewhere else: architecture://teardowns-2026-08-28-herdr--what-s-conspicuously-absent → architecture://teardowns-2026-08-28-lifeos--what-s-conspicuously-absent security
- 21 Sept 26 +1
- Resource “Do this” now points somewhere else: architecture://learn-01-canonical-knowledge--do-this → architecture://learn-06-provenance-delegation--do-this security
- Resource “Do this” now points somewhere else: architecture://learn-03-verification-oversight--do-this → architecture://learn-06-provenance-delegation--do-this security
- Resource “Do this” now points somewhere else: architecture://learn-02-context-economics--do-this → architecture://learn-06-provenance-delegation--do-this security
- Resource “Do this” now points somewhere else: architecture://learn-04-safety-permissions--do-this → architecture://learn-06-provenance-delegation--do-this security
- Resource “Do this” now points somewhere else: architecture://learn-05-telemetry-cost--do-this → architecture://learn-06-provenance-delegation--do-this security
- Resource “Do this” now points somewhere else: architecture://learn-00-foundations--do-this → architecture://learn-06-provenance-delegation--do-this security
- Resource “Measure it” now points somewhere else: architecture://learn-01-canonical-knowledge--measure-it → architecture://learn-06-provenance-delegation--measure-it security
- Resource “Measure it” now points somewhere else: architecture://learn-00-foundations--measure-it → architecture://learn-06-provenance-delegation--measure-it security
- Resource “Measure it” now points somewhere else: architecture://learn-02-context-economics--measure-it → architecture://learn-06-provenance-delegation--measure-it security
- Resource “Measure it” now points somewhere else: architecture://learn-03-verification-oversight--measure-it → architecture://learn-06-provenance-delegation--measure-it security
- Resource “Measure it” now points somewhere else: architecture://learn-04-safety-permissions--measure-it → architecture://learn-06-provenance-delegation--measure-it security
- Resource “Measure it” now points somewhere else: architecture://learn-05-telemetry-cost--measure-it → architecture://learn-06-provenance-delegation--measure-it security
- Resource “The patterns” now points somewhere else: architecture://learn-04-safety-permissions--the-patterns → architecture://learn-06-provenance-delegation--the-patterns security
- Resource “The patterns” now points somewhere else: architecture://learn-03-verification-oversight--the-patterns → architecture://learn-06-provenance-delegation--the-patterns security
- Resource “The patterns” now points somewhere else: architecture://learn-05-telemetry-cost--the-patterns → architecture://learn-06-provenance-delegation--the-patterns security
- Resource “The patterns” now points somewhere else: architecture://learn-01-canonical-knowledge--the-patterns → architecture://learn-06-provenance-delegation--the-patterns security
- Resource “The patterns” now points somewhere else: architecture://learn-02-context-economics--the-patterns → architecture://learn-06-provenance-delegation--the-patterns security
- Resource “The trade-offs” now points somewhere else: architecture://teardowns-2026-08-28-herdr--the-trade-offs → architecture://teardowns-2026-08-28-lifeos--the-trade-offs security
- Resource “The trade-offs” now points somewhere else: architecture://teardowns-2026-08-27-12-factor-agents--the-trade-offs → architecture://teardowns-2026-08-28-lifeos--the-trade-offs security
- Resource “What it is” now points somewhere else: architecture://teardowns-2026-08-28-herdr--what-it-is → architecture://teardowns-2026-08-28-lifeos--what-it-is security
- Resource “What it is” now points somewhere else: architecture://teardowns-2026-08-27-12-factor-agents--what-it-is → architecture://teardowns-2026-08-28-lifeos--what-it-is security
- Resource “What this teaches” now points somewhere else: architecture://teardowns-2026-08-28-herdr--what-this-teaches → architecture://teardowns-2026-08-28-lifeos--what-this-teaches security
- Resource “What this teaches” now points somewhere else: architecture://teardowns-2026-08-27-12-factor-agents--what-this-teaches → architecture://teardowns-2026-08-28-lifeos--what-this-teaches security
- Resource “What works” now points somewhere else: architecture://teardowns-2026-08-27-12-factor-agents--what-works → architecture://teardowns-2026-08-28-lifeos--what-works security
- Resource “What works” now points somewhere else: architecture://teardowns-2026-08-28-herdr--what-works → architecture://teardowns-2026-08-28-lifeos--what-works security
- Resource “What's conspicuously absent” now points somewhere else: architecture://teardowns-2026-08-27-12-factor-agents--what-s-conspicuously-absent → architecture://teardowns-2026-08-28-lifeos--what-s-conspicuously-absent security
- Resource “What's conspicuously absent” now points somewhere else: architecture://teardowns-2026-08-28-herdr--what-s-conspicuously-absent → architecture://teardowns-2026-08-28-lifeos--what-s-conspicuously-absent security
- 20 Sept 26 0
We did not load change detail this far back for this component, so this day may have recorded more than is shown.
- Resource “Do this” now points somewhere else: architecture://learn-01-canonical-knowledge--do-this → architecture://learn-06-provenance-delegation--do-this security
- Resource “Do this” now points somewhere else: architecture://learn-03-verification-oversight--do-this → architecture://learn-06-provenance-delegation--do-this security
- Resource “Do this” now points somewhere else: architecture://learn-02-context-economics--do-this → architecture://learn-06-provenance-delegation--do-this security
- Resource “Do this” now points somewhere else: architecture://learn-04-safety-permissions--do-this → architecture://learn-06-provenance-delegation--do-this security
- Resource “Do this” now points somewhere else: architecture://learn-05-telemetry-cost--do-this → architecture://learn-06-provenance-delegation--do-this security
- Resource “Do this” now points somewhere else: architecture://learn-00-foundations--do-this → architecture://learn-06-provenance-delegation--do-this security
- Resource “Measure it” now points somewhere else: architecture://learn-01-canonical-knowledge--measure-it → architecture://learn-06-provenance-delegation--measure-it security
- Resource “Measure it” now points somewhere else: architecture://learn-00-foundations--measure-it → architecture://learn-06-provenance-delegation--measure-it security
- Resource “Measure it” now points somewhere else: architecture://learn-02-context-economics--measure-it → architecture://learn-06-provenance-delegation--measure-it security
- Resource “Measure it” now points somewhere else: architecture://learn-03-verification-oversight--measure-it → architecture://learn-06-provenance-delegation--measure-it security
- Resource “Measure it” now points somewhere else: architecture://learn-04-safety-permissions--measure-it → architecture://learn-06-provenance-delegation--measure-it security
- Resource “Measure it” now points somewhere else: architecture://learn-05-telemetry-cost--measure-it → architecture://learn-06-provenance-delegation--measure-it security
- Resource “The patterns” now points somewhere else: architecture://learn-04-safety-permissions--the-patterns → architecture://learn-06-provenance-delegation--the-patterns security
- Resource “The patterns” now points somewhere else: architecture://learn-03-verification-oversight--the-patterns → architecture://learn-06-provenance-delegation--the-patterns security
- Resource “The patterns” now points somewhere else: architecture://learn-05-telemetry-cost--the-patterns → architecture://learn-06-provenance-delegation--the-patterns security
- 19 Sept 26 +1
We did not load change detail this far back for this component, so this day may have recorded more than is shown.
Diagnostics
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 26 Sept 2026 · Probed https://jamesross.ai/mcp
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=jamesross.ai | CN=WE1,O=Google Trust Services,C=US | 23 Sept 2026 | 22 Dec 2026 | ECDSA 256 | ECDSA-SHA256 | dc3b502cb303fe01134c0be3107bd374 |
| SANs: jamesross.ai, *.jamesross.ai | ||||||
| CN=WE1,O=Google Trust Services,C=US (CA) | CN=GTS Root R4,O=Google Trust Services LLC,C=US | 13 Dec 2023 | 20 Feb 2029 | ECDSA 256 | ECDSA-SHA384 | 7ff31977972c224a76155d13b6d685e3 |
| CN=GTS Root R4,O=Google Trust Services LLC,C=US (CA) | CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE | 15 Nov 2023 | 28 Jan 2028 | ECDSA 384 | SHA256-RSA | 7fe530bf331343bedd821610493d8a1b |
Background: What to check on a remote MCP endpoint →
DNSSEC insecure
Validation of jamesross.ai. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| ai. | present | 3799 | 8 | Verified |
| jamesross.ai. | absent | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication No authorisation required
The endpoint answered without asking for a token. Anyone who knows the URL can reach it.
| Result | No authorisation required |
|---|---|
| HTTP status | 200 |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://jamesross.ai/mcp | Verified | 200 | |
| http (plaintext) | http://jamesross.ai/mcp | Inconclusive | 405 |
MCP tools
· 6 exposed
· ~986 tokens
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
Tool
Tokens
assess_workspace Score an agent workspace or an organisation ~233
Score an agent workspace across six dimensions: canonical knowledge, memory and context economics, verification and oversight, safety and permissions, telemetry and cost, provenance and delegation. Two variants: "practitioner" takes 18 answers (a single operator's workspace), "org" takes 12 (an organisation's agent readiness). Each answer is an integer 0-3 in question order, where 0 is the least mature option offered and 3 the most. Returns per-dimension scores, an overall percentage, a maturity band, and the two weakest dimensions with the gap that matters there. The question text lives at https://jamesross.ai/tools/maturity-check (practitioner) and https://jamesross.ai/tools/agent-readiness (org). Read it before answering on someone's behalf.
| Name | Type | Req | Description |
|---|---|---|---|
| answers | array | yes | Answers in question order: 18 integers for "practitioner", 12 for "org". Each is 0-3. |
| variant | string | yes | "practitioner" for the 18-question workspace check, "org" for the 12-question organisational readiness check. |
No output schema declared.
No examples provided.
check_redaction Pre-flight text for the shapes of private content ~140
Scan text for the shapes of private content before it goes anywhere public: email addresses, absolute home paths, credential and token prefixes, private and link-local IPs, .local hostnames, and secret filenames. Returns a count per pattern class and a total, nothing else. The text you send and the substrings that matched are never stored, never logged and never echoed back. Only the counts are kept. A line carrying the marker "redaction-ok" is skipped. Accepts up to 100KB.
| Name | Type | Req | Description |
|---|---|---|---|
| text | string | yes | The text to scan. Up to 100KB; anything beyond that is truncated and the result says so. |
No output schema declared.
No examples provided.
lookup_pattern Look up an agent-workspace pattern ~114
Search the 18 architecture patterns behind this practice by keyword or by pattern number. Returns up to 3 matches, each with its number, title, the problem it opens on, and a link to the full text. Use it when you want the reasoning behind an agent-workspace design decision rather than a how-to.
| Name | Type | Req | Description |
|---|---|---|---|
| query | string | yes | Keywords to match against pattern titles and summaries, e.g. "credentials", "silent failure", "context cost". A bare number 1-18 looks that pattern up directly. |
No output schema declared.
No examples provided.
price_context_read Price a block of context by its position ~234
Price a block of context by where it enters a session. The API is stateless, so the whole transcript is re-sent on every inference step, and a token costs its size times the number of turns left after it arrives. Returns the carried token volume, the cost of the block in USD, what the same read would have cost entering 20 turns from the end, and the multiplier between the two. Use it to decide whether a large read should move later in a session or into a subagent.
| Name | Type | Req | Description |
|---|---|---|---|
| entry_turn | number | yes | Turn number at which the block enters the context (t). |
| price_in_per_mtok | number | – | Input price in USD per million tokens. Default 5. |
| read_mult | number | – | Cache-read price multiplier against input price. Default 0.1. |
| size_tokens | number | yes | Size of the block in tokens (S). |
| total_turns | number | yes | Total turns in the session (T). Must be at least entry_turn. |
| write_mult | number | – | Cache-write price multiplier against input price. Default 1.25. |
No output schema declared.
No examples provided.
request_capability Request a capability this server does not have ~84
Tell this server what capability you needed but didn't find here. Requests are logged and reviewed by a human; include no secrets or personal data.
| Name | Type | Req | Description |
|---|---|---|---|
| context | string | – | Optional: what you were trying to do, and why the existing tools did not cover it. Up to 1KB. |
| description | string | yes | What you needed. Up to 2KB. |
No output schema declared.
No examples provided.
search_architecture Search the published agent-workspace writing ~181
Full-text search across the published architecture corpus: the 18 patterns and how they compose, the evaluation method, the seven learn-track modules, and the teardowns of other people's published agent systems. Returns ranked sections, each with its title, its source file, a snippet, and a link to the full text on GitHub. Use it when you want the passage itself rather than a pattern summary; lookup_pattern is the narrower tool that answers "which pattern covers this?". Every section is also readable in full as a resource under the architecture:// scheme (resources/list, resources/read).
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | – | How many sections to return. 1-10, default 5. |
| query | string | yes | Search terms, e.g. "canonical copy", "silent failure", "cache write cost". Terms shorter than 3 characters are ignored. |
No output schema declared.
No examples provided.
Common questions
What is the Agent Workspace Practice MCP server?
Agent Workspace Practice is an MCP server listed in the public MCP registry as io.github.jimy-r/agent-workspace-practice. Search + patterns, maturity assessment, context pricing, redaction checks - a practice as tools. This page covers its hosted endpoint (https://jamesross.ai/mcp).
Is the Agent Workspace Practice MCP server safe to use?
Agent Workspace Practice scores 73 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the Agent Workspace Practice MCP server expose?
Agent Workspace Practice exposes 6 tools: search_architecture, lookup_pattern, assess_workspace, price_context_read, check_redaction, request_capability. Their descriptions and schemas cost roughly 986 tokens of context every time the server is loaded.
Does the Agent Workspace Practice MCP server require authentication?
No. We connected to Agent Workspace Practice without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.
Is the Agent Workspace Practice MCP server still maintained?
Agent Workspace Practice is still listed as active in the MCP registry. We last reached this channel on 26 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.