phocinae-mcpCAUTION
Phocinae MCP decision server: gate / classify / route / score tools backed by the local Phocinae model
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
把斑海豹的命令审批门与 P0 推理协议暴露为 MCP 工具(gate / classify / route / score),接入只读 MCP 的编码代理。双代协议并存:现代面(2026-07-28,含 server/discover、MRTR 交互、Streamable HTTP)与 2024-11-05 旧客户端兼容。
▲ tools/list 的真实应答:四个工具的参数与返回形状
斑海豹生态的 MCP server:把斑海豹的命令审批与推理能力以 4 个工具暴露给 MCP 客户端。纯标准库(Python ≥ 3.8,零第三方依赖),支持 stdio 与 Streamable HTTP 两种传输,MCP 2026-07-28 对齐并兼容 2024-11-05 旧客户端。
本仓库为本地增强版(基于 PyPI phocinae-mcp 0.1.1),仅用于本地开发与 协议对齐验证,不发布。
工具
▲ 合成演示动画(模型仓 docs/gallery S07):画面为逐帧渲染、场景数据虚构,但它演示的 `route` 工具「一次前向在候选工具里选出该用的那个」的判定过程 与真实实现一致(本页上方的终端截图即真实运行的同一流程)。
fail-closed:斑海豹 P0 服务(/v1/systemone)不可用、超时、应答异常时, gate 一律返回 deny(带原因),classify/route/score
c4324a029571OBSERVED · 2026-10-12Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.
claude mcp add phocinae-mcp -- None phocinae-mcp==0.2.2
Trust audit
CAUTIONgrade B · trust 89/100 Install with care. The audit found things worth knowing before you trust its output.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | WARN |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- declared (8 observation(s))
- Shell
- none-observed
- Dependencies
- pinned
- Secrets in source
- none-found
Findings (9)
ENV PHOCINAE_MCP_SERVER=http://127.0.0.1:8155 \
DEFAULT_SERVER = "http://127.0.0.1:8155"
"何时不使用:无斑海豹 P0 服务(http://127.0.0.1:8155)时不依赖推理类工具"
"arguments": {"command": "rm -rf /"}}, 5)){"command": "rm -rf /"}}, META),python3 -m phocinae_mcp --server http://127.0.0.1:8155
python3 -m phocinae_mcp [--server http://127.0.0.1:8155] [--timeout 5]
>>> [M17 长度上限(command 20001 字符)] {"jsonrpc":"2.0","id":118,"method":"tools/call","params":{"name":"gate","arguments":{"command":"xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxGates applied: no_behavioural_pass.
c4324a029571full audit observations/trust-audit/mcp-server/phocinae__phocinae-mcp.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-12 | c4324a029571 | CAUTION | B | 89 | first audit |
Questions
What is the phocinae-mcp MCP server?
Phocinae MCP decision server: gate / classify / route / score tools backed by the local Phocinae model
Is phocinae-mcp safe to connect to an agent?
With care. The audit graded it B (89/100) and found 9 things worth knowing before you trust this server, listed below with the exact line each was found on.
What credentials does phocinae-mcp need?
No credential environment variables were found in its source, so it appears to need none.
How does phocinae-mcp run?
It speaks stdio, so it runs as a local process your client starts. It is published on PyPI as phocinae-mcp.
How current is this page?
The grade is for one exact copy of the source (c4324a029571), read on 2026-10-12. The repository is watched and re-audited when it changes.