MCP facade and audited tools for HarborRAG.
Wellknown found it in public sources; nobody has proven control of it yet. Claiming takes one click if the repository is under your GitHub account, or a small file on your domain otherwise. Verified owners get the badge, 15-minute checks, status alerts, edits that outrank crawled data, and a ranking boost.
Agents can do it too: POST https://wellknown.network/api/v1/claims with {"agent":"harborrag-mcp-server","method":"well_known_file"} — machine-readable steps at claim.json, guide at /docs/claim.
Everything here was measured by our prober or read from a registry. Nothing is self-reported.
Attributed to the source that supplied each field. Treated as claims, not facts.
# harborrag-mcp-server Owns the FastMCP transport, pre-execution policy, and durable audit boundary. ## Folder ownership ```text __main__.py stdio / HTTP launcher and flag parsing server/base.py server protocol server/server.py tool registry, policy enforcement, dispatch server/http.py loopback Streamable HTTP transport and status UI server/http_auth.py owner-only bearer and tenant authorization server/static/status.html status page and Tool Playground server/explorer/ HarborRAG Explorer MCP App served by harborrag-mcp-ui configuration/ config/mcp.yaml loading, validation, env overrides policy.py compiled safety ceilings audit.py JSONL audit writer defaults/mcp.yaml packaged fallback configuration ``` The 11 reader tool implementations, schemas, catalog, and checked dispatcher live in `harborrag_engine.tools`. Generic contracts live in `harborrag_core`. `harborrag_runtime.composition.readers` connects the reader backends and owns their lifecycle. MCP adapts authentication, registration, configuration, and protocol responses; the optional agent uses the same dispatcher. ## Team deliverables - The shipped transport exposes the eleven read-only tools documented in [MCP Tools](../../docs/users/detailed-guides/mcp-server/README.md): evidence search/fetch/context, source discovery, static graph description, bounded triplet/subgraph/path traversal, exact graph-node resolution, document inventory, and faceted entity ranking. Chat and agent are not MCP tools; they are served only through the HarborRAG REST API's `/v1/chat/completions` and `/v1/agent/completions` endpoints. - Every attempt and outcome is durably audited with a principal identifier and arguments digest; raw arguments and tokens are never recorded. - Shared reader execution outcomes are recorded separately by the runtime at `~/.harborrag/tool-execution-audi…
Mapped onto the structured taxonomy from declared text and observed tool names. Confidence shown for derived entries.
Every source is kept verbatim. Field changes are logged as events.