Atlas / MCP servers / ceedot-rock / SlidPhiLabs

SlidPhiLabsSAFE

mcp/ceedot-rock/slidphilabs

Slid Phi Labs — PCC hosted lossless compression, Rider, Chamber, CuNi. https://www.slidphilabs.com

Verdict
SAFE
Grade
B
Trust score
83 /100
Exposed tools
27 21r · 6w · 0d
Transport
stdio · streamable-http
License
NOASSERTION
Stars
1
01

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

[](https://github.com/ceedot-rock/SlidPhiLabs/actions/workflows/audited-checks.yml) [](LICENSE)

AWARE is a retired alias for PCC (the hosted lossless compressor). TRU8 is not the current product lead.

Hosted lossless compression, a two-key JSON seal, signed agent identity, and a small language that refuses to lie.

This repository is the public website, API, and npm clients. Dual-licensed: AGPL-3.0-or-later or a paid commercial grant. Hosted compression runs every pathway we own.

SoT for money: https://www.slidphilabs.com/pricing.json (updated 2026-09-24). Door line: Smaller or same size. Every byte back. Receipt.

Products

Read from source at commit ebb5343c3edcOBSERVED · 2026-10-11
02

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.

claude-code
claude mcp add spl-pay-per-suite --env AUTH_DIR=${AUTH_DIR} --env AUTH_SECRET=${AUTH_SECRET} --env CLAIM_HMAC_SECRET=${CLAIM_HMAC_SECRET} --env DUOS_TOKEN=${DUOS_TOKEN} -- npx -y [email protected]
claude-desktop
{
  "mcpServers": {
    "spl-pay-per-suite": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ],
      "env": {
        "AUTH_DIR": "${AUTH_DIR}",
        "AUTH_SECRET": "${AUTH_SECRET}",
        "CLAIM_HMAC_SECRET": "${CLAIM_HMAC_SECRET}",
        "DUOS_TOKEN": "${DUOS_TOKEN}"
      }
    }
  }
}
03

Exposed tools (27)

21 read · 6 write · 0 destructive.

ToolRiskDescription
cuni_bankreadCuNi Bank: paste N, get X. Ingest → emit → prove, or refuse. v1 from Python. Args: source, from (py|cuni), to (catalog id, e.g. js). POSTs to cuni-studio /api/bank.
pcc_getreadPCC — one entry with notes, price, and links. Prefer this. aware_get is a retired alias.
pcc_searchwritePCC — what it is, what you get, what you pay. Free text or code. Prefer this. aware_search is a retired alias.
slid-phi-labsreadHosted Streamable HTTP MCP for Slid Phi Labs public catalog and commerce discovery. Lookup is public; engines and customer operations remain protected.
spl_agent_keyreadMint an agent API key (no password).
spl_catalogreadStanding SKUs agents can buy via x402.
spl_compressreadHosted lossless compression. Every dual-licensed pathway on this machine. Args: data_b64.
spl_decompressreadRestore bytes packed by spl_compress. Args: packed_b64.
spl_discoverreadLead product, cash product, auth, MCP, x402.
spl_lab_authreadHow to mint a lab account or agent API key.
spl_pps_checkoutreadCheckout for suite quote. Under 2 GB/month returns free_showcase (no Stripe). Over free returns Stripe Checkout URL.
spl_pps_classifyreadClassify a base64 sample (first few KB) into a data class and recommended tool. No proprietary encode.
spl_pps_infowriteSPL Pay Per Suite overview:
spl_pps_quotereadInstant quote: free first 2 GB/month ($0), then 8¢/GB compress · 3.2¢/GB decompress · 9.2¢/GB roundtrip · $1 card minimum. Inputs: product, dataClass, op, bytes.
spl_pps_submit_jobwriteSubmit a Pay Per Suite job (free under 2 GB/month after free_showcase, or after paid). Lab runs best tool and emails results. Requires email.
spl_pps_x402_buyreadBuy a standing license product via x402. Without paymentHeader → returns 402 requirements. With paymentHeader (or devBypass) → order_id + access_url. Not for suite jobs — use spl_pps_x402_submit.
spl_pps_x402_catalogreadList standing Slid Phi Labs seats agents can buy via x402 (Chamber, PCC, Rider, Lab Pass, consulting). Suite jobs are separate.
spl_pps_x402_inforeadAgentic commerce discovery: standing product catalog + freemium suite jobs (free under 2 GB/month), headers, flow. Stripe remains for humans.
spl_pps_x402_requirementswriteProbe POST /api/x402-suite. Free under 2 GB/month (no pay). Over free → 402 accepts[] for usage (8¢/GB compress · 3.2¢/GB decompress · 9.2¢/GB roundtrip · $1 card minimum).
spl_pps_x402_submitwriteSubmit freemium suite job via x402. Under 2 GB/month free (no paymentHeader). Over free: pass paymentHeader after paying, or devBypass for staging.
spl_quotereadSuite quote. First 2 GB/month free, then 8¢/GB, $1 card minimum. Args: bytes, product, op.
spl_signupwriteCreate a human lab account (email + password).
spl_unzipreadRestore files from a .pcc archive. Args: packed_b64. Returns files: [{path, data_b64}].
spl_warrant_issuereadIssue a Warrant (mandate) for a Rider identity. Pass rider JWT, or demo:true for a 10-minute shape check. Complements Agent-Rider.
spl_warrant_receiptreadFile a receipt against a Warrant after an action.
spl_warrant_verifyreadVerify a Warrant token. Optional host and action.
spl_zipreadPack files into a .pcc archive (our zip). Args: files: [{path, data_b64}]. Returns packed_b64.
04

Trust audit

SAFEgrade B · trust 83/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.

LayerWhat it checksResult
L0Provenance & inventoryPASS
L1Static analysis of the codePASS
L2Instruction surface (what it tells the agent)PASS
L3Class-specific surfacePASS
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
none-observed
Network
none-observed
Shell
declared (2 observation(s))
Dependencies
not all pinned
Secrets in source
none-found

Findings (25)

LOWInventory / provenance · inv.binary · CWE-1104
docs/site/lab/zeros10k.bin
zeros10k.bin
Why it matters. a compiled or binary member cannot be reviewed from source
Fix. ship source, or explain the binary in the README
LOWInventory / provenance · inv.binary · CWE-1104
docs/site/suite-folder/samples/ramp_1k.i32le
ramp_1k.i32le
Why it matters. a compiled or binary member cannot be reviewed from source
Fix. ship source, or explain the binary in the README
LOWInventory / provenance · inv.binary · CWE-1104
docs/site/suite-folder/samples/walk_1k.i32le
walk_1k.i32le
Why it matters. a compiled or binary member cannot be reviewed from source
Fix. ship source, or explain the binary in the README
LOWInventory / provenance · inv.binary · CWE-1104
docs/site/suite-folder/samples/zeros_10k.i32le
zeros_10k.i32le
Why it matters. a compiled or binary member cannot be reviewed from source
Fix. ship source, or explain the binary in the README
LOWInventory / provenance · inv.binary · CWE-1104
docs/site/suite-folder/samples/zeros_1k.i32le
zeros_1k.i32le
Why it matters. a compiled or binary member cannot be reviewed from source
Fix. ship source, or explain the binary in the README
LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
docs/site/api/lib/fire_fingerprint.js:16
const STORE_DIR = path.join(__dirname, "../../../lab/fire_prints");
LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
docs/site/api/lib/repeat-peel.test.mjs:22
join(here, "../../../../../../corpora/periodic"),
LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
docs/site/api/lib/repeat-peel.test.mjs:23
join(here, "../../../../../corpora/periodic"),
LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
docs/site/api/lib/walk-peel.test.mjs:23
join(here, "../../../../../../corpora/walks"),
LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
docs/site/api/lib/walk-peel.test.mjs:24
join(here, "../../../../../corpora/walks"),
LOWNetwork egress · net.env_exfil · CWE-200, CWE-319
docs/site/scripts/amp/x_oauth2_post.py:18
/.env" ... urllib.request
Why it matters. reads secrets in the same file that sends data out
LOWNetwork egress · net.raw_ip · CWE-200, CWE-319
docs/site/scripts/amp/X_OAUTH2_YOU_ARE_NOT_LOST.md:23
| **Callback URI #1** | `http://127.0.0.1:8787/callback` |
LOWNetwork egress · net.raw_ip · CWE-200, CWE-319
docs/site/scripts/amp/X_OAUTH2_YOU_ARE_NOT_LOST.md:45
4. Browser hits `http://127.0.0.1:8787/callback` → “Connected”.
LOWNetwork egress · net.raw_ip · CWE-200, CWE-319
docs/site/scripts/amp/X_OAUTH2_YOU_ARE_NOT_LOST.md:60
| redirect_uri mismatch | Add exact `http://127.0.0.1:8787/callback` in portal (no trailing slash unless you used one) |
LOWNetwork egress · net.raw_ip · CWE-200, CWE-319
docs/site/scripts/amp/x_oauth2_login.py:46
DEFAULT_REDIRECT = "http://127.0.0.1:8787/callback"
LOWObfuscation / stealth · obf.decode_call · CWE-506, CWE-94
docs/site/assets/file-drop.js:86
var bin = Uint8Array.from(atob(packedB64), function (c) { return c.charCodeAt(0); });
LOWObfuscation / stealth · obf.decode_call · CWE-506, CWE-94
docs/site/assets/file-drop.js:105
var back = Uint8Array.from(atob(j.raw_b64), function (c) { return c.charCodeAt(0); });
LOWObfuscation / stealth · obf.decode_call · CWE-506, CWE-94
docs/site/assets/lab-auth.js:68
const bin = atob(pad);
LOWObfuscation / stealth · obf.decode_call · CWE-506, CWE-94
docs/site/lab/zrw_verify.py:87
packed = base64.b64decode(j["packed_b64"])
LOWObfuscation / stealth · obf.decode_call · CWE-506, CWE-94
docs/site/lab/zrw_verify.py:107
packed = base64.b64decode(j["packed_b64"])
LOWSupply chain · supply.unpinned · CWE-829, CWE-1357
package.json
@modelcontextprotocol/sdk
Why it matters. 1 dependency range(s) float
Fix. pin exact versions or ship a lockfile
LOWPrompt injection · prompt.transfer_instruction · CWE-94, CWE-1427
docs/security-model.md:49
Credentials are issued at `POST https://agentrider.fly.dev/api/rider/issue`, authenticated with the merchant's `X-Merchant-Key` header.
Why it matters. an instruction to move sensitive data to an outside destination
Fix. remove; a skill never needs the user's secrets off the machine
LOWPrompt injection · prompt.transfer_instruction · CWE-94, CWE-1427
docs/security-model.md:283
The `POST /api/auth` endpoint with `"action": "agent_key"` requires no password, no email, and no proof of identity. Rate limits are per-key, not per-identity. The agent key is a rate-limiting mechani
Why it matters. an instruction to move sensitive data to an outside destination
Fix. remove; a skill never needs the user's secrets off the machine
LOWPrompt injection · prompt.transfer_instruction · CWE-94, CWE-1427
docs/site/access.html:178
Email <a href="mailto:[email protected]">[email protected]</a> if the token is missing.
Why it matters. an instruction to move sensitive data to an outside destination
Fix. remove; a skill never needs the user's secrets off the machine
LOWPrompt injection · prompt.transfer_instruction · CWE-94, CWE-1427
docs/site/access.html:400
body.textContent = (j && j.error) || 'Email [email protected] with the claim token.';
Why it matters. an instruction to move sensitive data to an outside destination
Fix. remove; a skill never needs the user's secrets off the machine

Gates applied: no_behavioural_pass.

Audited 2026-10-11 · audit v0.4.1 · source sha ebb5343c3edcfull audit observations/trust-audit/mcp-server/ceedot-rock__slidphilabs.json · Report an issue / request a re-scan
05

Audit history

Every audit this server has had. A grade with a past is a grade somebody is still checking.

DateSourceVerdictGradeScoreChange
2026-10-11ebb5343c3edcSAFEB83first audit
06

Questions

What is the SlidPhiLabs MCP server?

Slid Phi Labs — PCC hosted lossless compression, Rider, Chamber, CuNi. https://www.slidphilabs.com

What tools does SlidPhiLabs expose?

27 in total: 21 read-only, 6 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.

Is SlidPhiLabs safe to connect to an agent?

The audit found nothing in the source that contradicts what it says it does, and graded it B (83/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.

What credentials does SlidPhiLabs need?

It reads AUTH_DIR, AUTH_SECRET, CLAIM_HMAC_SECRET, DUOS_TOKEN, FREE_KEYS_FLOOR, LICENSE_HMAC_SECRET, NOTION_TOKEN, OFA_CHAMBER_KEY, RIDER_PLATFORM_KEY, SLIDPHI_API_KEY, SPL_SEAT_SECRET and STRIPE_RESTRICTED_KEY from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.

How does SlidPhiLabs run?

It speaks stdio and streamable-http, so it runs as a local process your client starts. It is published on npm as spl-pay-per-suite at 1.2.3.

How current is this page?

The grade is for one exact copy of the source (ebb5343c3edc), read on 2026-10-11. The repository is watched and re-audited when it changes.

Advertisement