SlidPhiLabsSAFE
Slid Phi Labs — PCC hosted lossless compression, Rider, Chamber, CuNi. https://www.slidphilabs.com
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
[](https://github.com/ceedot-rock/SlidPhiLabs/actions/workflows/audited-checks.yml) [](LICENSE)
AWARE is a retired alias for PCC (the hosted lossless compressor). TRU8 is not the current product lead.
Hosted lossless compression, a two-key JSON seal, signed agent identity, and a small language that refuses to lie.
This repository is the public website, API, and npm clients. Dual-licensed: AGPL-3.0-or-later or a paid commercial grant. Hosted compression runs every pathway we own.
SoT for money: https://www.slidphilabs.com/pricing.json (updated 2026-09-24). Door line: Smaller or same size. Every byte back. Receipt.
Products
ebb5343c3edcOBSERVED · 2026-10-11Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.
claude mcp add spl-pay-per-suite --env AUTH_DIR=${AUTH_DIR} --env AUTH_SECRET=${AUTH_SECRET} --env CLAIM_HMAC_SECRET=${CLAIM_HMAC_SECRET} --env DUOS_TOKEN=${DUOS_TOKEN} -- npx -y [email protected]{
"mcpServers": {
"spl-pay-per-suite": {
"command": "npx",
"args": [
"-y",
"[email protected]"
],
"env": {
"AUTH_DIR": "${AUTH_DIR}",
"AUTH_SECRET": "${AUTH_SECRET}",
"CLAIM_HMAC_SECRET": "${CLAIM_HMAC_SECRET}",
"DUOS_TOKEN": "${DUOS_TOKEN}"
}
}
}
}Exposed tools (27)
21 read · 6 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
cuni_bank | read | CuNi Bank: paste N, get X. Ingest → emit → prove, or refuse. v1 from Python. Args: source, from (py|cuni), to (catalog id, e.g. js). POSTs to cuni-studio /api/bank. |
pcc_get | read | PCC — one entry with notes, price, and links. Prefer this. aware_get is a retired alias. |
pcc_search | write | PCC — what it is, what you get, what you pay. Free text or code. Prefer this. aware_search is a retired alias. |
slid-phi-labs | read | Hosted Streamable HTTP MCP for Slid Phi Labs public catalog and commerce discovery. Lookup is public; engines and customer operations remain protected. |
spl_agent_key | read | Mint an agent API key (no password). |
spl_catalog | read | Standing SKUs agents can buy via x402. |
spl_compress | read | Hosted lossless compression. Every dual-licensed pathway on this machine. Args: data_b64. |
spl_decompress | read | Restore bytes packed by spl_compress. Args: packed_b64. |
spl_discover | read | Lead product, cash product, auth, MCP, x402. |
spl_lab_auth | read | How to mint a lab account or agent API key. |
spl_pps_checkout | read | Checkout for suite quote. Under 2 GB/month returns free_showcase (no Stripe). Over free returns Stripe Checkout URL. |
spl_pps_classify | read | Classify a base64 sample (first few KB) into a data class and recommended tool. No proprietary encode. |
spl_pps_info | write | SPL Pay Per Suite overview: |
spl_pps_quote | read | Instant quote: free first 2 GB/month ($0), then 8¢/GB compress · 3.2¢/GB decompress · 9.2¢/GB roundtrip · $1 card minimum. Inputs: product, dataClass, op, bytes. |
spl_pps_submit_job | write | Submit a Pay Per Suite job (free under 2 GB/month after free_showcase, or after paid). Lab runs best tool and emails results. Requires email. |
spl_pps_x402_buy | read | Buy a standing license product via x402. Without paymentHeader → returns 402 requirements. With paymentHeader (or devBypass) → order_id + access_url. Not for suite jobs — use spl_pps_x402_submit. |
spl_pps_x402_catalog | read | List standing Slid Phi Labs seats agents can buy via x402 (Chamber, PCC, Rider, Lab Pass, consulting). Suite jobs are separate. |
spl_pps_x402_info | read | Agentic commerce discovery: standing product catalog + freemium suite jobs (free under 2 GB/month), headers, flow. Stripe remains for humans. |
spl_pps_x402_requirements | write | Probe POST /api/x402-suite. Free under 2 GB/month (no pay). Over free → 402 accepts[] for usage (8¢/GB compress · 3.2¢/GB decompress · 9.2¢/GB roundtrip · $1 card minimum). |
spl_pps_x402_submit | write | Submit freemium suite job via x402. Under 2 GB/month free (no paymentHeader). Over free: pass paymentHeader after paying, or devBypass for staging. |
spl_quote | read | Suite quote. First 2 GB/month free, then 8¢/GB, $1 card minimum. Args: bytes, product, op. |
spl_signup | write | Create a human lab account (email + password). |
spl_unzip | read | Restore files from a .pcc archive. Args: packed_b64. Returns files: [{path, data_b64}]. |
spl_warrant_issue | read | Issue a Warrant (mandate) for a Rider identity. Pass rider JWT, or demo:true for a 10-minute shape check. Complements Agent-Rider. |
spl_warrant_receipt | read | File a receipt against a Warrant after an action. |
spl_warrant_verify | read | Verify a Warrant token. Optional host and action. |
spl_zip | read | Pack files into a .pcc archive (our zip). Args: files: [{path, data_b64}]. Returns packed_b64. |
Trust audit
SAFEgrade B · trust 83/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | PASS |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- none-observed
- Shell
- declared (2 observation(s))
- Dependencies
- not all pinned
- Secrets in source
- none-found
Findings (25)
zeros10k.bin
ramp_1k.i32le
walk_1k.i32le
zeros_10k.i32le
zeros_1k.i32le
const STORE_DIR = path.join(__dirname, "../../../lab/fire_prints");
join(here, "../../../../../../corpora/periodic"),
join(here, "../../../../../corpora/periodic"),
join(here, "../../../../../../corpora/walks"),
join(here, "../../../../../corpora/walks"),
/.env" ... urllib.request
| **Callback URI #1** | `http://127.0.0.1:8787/callback` |
4. Browser hits `http://127.0.0.1:8787/callback` → “Connected”.
| redirect_uri mismatch | Add exact `http://127.0.0.1:8787/callback` in portal (no trailing slash unless you used one) |
DEFAULT_REDIRECT = "http://127.0.0.1:8787/callback"
var bin = Uint8Array.from(atob(packedB64), function (c) { return c.charCodeAt(0); });var back = Uint8Array.from(atob(j.raw_b64), function (c) { return c.charCodeAt(0); });const bin = atob(pad);
packed = base64.b64decode(j["packed_b64"])
packed = base64.b64decode(j["packed_b64"])
@modelcontextprotocol/sdk
Credentials are issued at `POST https://agentrider.fly.dev/api/rider/issue`, authenticated with the merchant's `X-Merchant-Key` header.
The `POST /api/auth` endpoint with `"action": "agent_key"` requires no password, no email, and no proof of identity. Rate limits are per-key, not per-identity. The agent key is a rate-limiting mechani
Email <a href="mailto:[email protected]">[email protected]</a> if the token is missing.
body.textContent = (j && j.error) || 'Email [email protected] with the claim token.';
Gates applied: no_behavioural_pass.
ebb5343c3edcfull audit observations/trust-audit/mcp-server/ceedot-rock__slidphilabs.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-11 | ebb5343c3edc | SAFE | B | 83 | first audit |
Questions
What is the SlidPhiLabs MCP server?
Slid Phi Labs — PCC hosted lossless compression, Rider, Chamber, CuNi. https://www.slidphilabs.com
What tools does SlidPhiLabs expose?
27 in total: 21 read-only, 6 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is SlidPhiLabs safe to connect to an agent?
The audit found nothing in the source that contradicts what it says it does, and graded it B (83/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.
What credentials does SlidPhiLabs need?
It reads AUTH_DIR, AUTH_SECRET, CLAIM_HMAC_SECRET, DUOS_TOKEN, FREE_KEYS_FLOOR, LICENSE_HMAC_SECRET, NOTION_TOKEN, OFA_CHAMBER_KEY, RIDER_PLATFORM_KEY, SLIDPHI_API_KEY, SPL_SEAT_SECRET and STRIPE_RESTRICTED_KEY from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.
How does SlidPhiLabs run?
It speaks stdio and streamable-http, so it runs as a local process your client starts. It is published on npm as spl-pay-per-suite at 1.2.3.
How current is this page?
The grade is for one exact copy of the source (ebb5343c3edc), read on 2026-10-11. The repository is watched and re-audited when it changes.