ModelsAtlas
Explore
Atlas / MCP servers / postoaklabs / ocs-mcp-worker

ocs-mcp-workerCAUTION

mcp/postoaklabs/ocs-mcp-worker
MCP server by postoaklabs · cloudflare workers · deterministic · mcp · Audited 2026-10-12
⚑ Report / re-scanSource ↗

MCP server for OmegaCentauri.me (evidence-evaluation tools, signed receipts)

Verdict
CAUTION
Grade
B
Trust score
85 /100
Exposed tools
11 10r · 1w · 0d
Transport
stdio · streamable-http
License
MIT
Stars
0
01

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

[](LICENSE) [](https://mcp.omegacentauri.me/mcp) [](https://workers.cloudflare.com/)

MCP server exposing OmegaCentauri.me's astrophysics evidence-evaluation tools (IMBH evidence, black-hole physics, Fermi paradox, SETI sensitivity, Kardashev metrics) as agent-callable tools. Deployed as a Cloudflare Worker — no separate hosting, no Node/Python server.

Sister workers: ainumbers-mcp (markets & institutions), apexlogics-mcp (career/education). Anchoring/timestamping for all three is centralized at anchor.ainumbers.co.

Live Endpoint

https://mcp.omegacentauri.me/mcp

Agent Quickstart

Add to any MCP-compatible client config:

{
"mcpServers": {
"ocs": {
"url": "https://mcp.omegacentauri.me/mcp"
}
}
}

list_ocs_tools / find_tool return the live catalog — start there rather than hardcoding tool names, since counts drift as the suite grows. See `omegacentauri.me` for the browser catalog and the OCS repo for the live tool/chain counts (never hardcoded here).

What's Exposed

Each OCS evidence tool is wrapped as an MCP tool: deterministic inputs in, a structured evidence assessment plus a ChainGraph v0.8 hash-anchored artifact out, with a reproducible execution_hash. Zero PII.

A prompts capability is also served (data/showcase-prompts.json): ready-made example prompts that walk agents through the suite's evidence workflows, following the same vendored-asset pattern as the tools surface.

Verification Scope (read before citing proofs)

  • Hash-verifiable (all tools): deterministic client-side execution, SHA-256 executio
Read from source at commit 5f64370bab0fOBSERVED · 2026-10-12
02

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.

claude-code
claude mcp add ocs-mcp-worker -- npx -y [email protected]
claude-desktop
{
  "mcpServers": {
    "ocs-mcp-worker": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ]
    }
  }
}
03

Exposed tools (11)

10 read · 1 write · 0 destructive.

ToolRiskDescription
apophis_flyby_geometryread
bayes_factor_routerread
build_ocs_workflow_linksread
constraint_stackerread
gwtc_remnant_classifierread
jwst_accretion_ledgerread
list_ocs_toolsread
roman_microlensingread
rubin_alert_throughputread
run_chainwrite
verify_execution_hashread
04

Trust audit

CAUTIONgrade B · trust 85/100 Install with care. The audit found things worth knowing before you trust its output.

LayerWhat it checksResult
L0Provenance & inventoryPASS
L1Static analysis of the codeWARN
L2Instruction surface (what it tells the agent)PASS
L3Class-specific surfacePASS
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
none-observed
Network
declared (2 observation(s))
Shell
none-observed
Dependencies
not all pinned
Secrets in source
none-found

Findings (13)

MEDIUMObfuscation / stealth · obf.base64_blob · CWE-506, CWE-94
kernels/receipts/apophis-flyby-geometry.computeproof.mjs:9
"seal": "AdI7OQ1hAdk6M0fUUjpIVjHX8lLkibNgfpTqS5g9DaoIEsZrjooVkVuJIChaDzsfBIOlE7TsRFRfOuYLVd0NWw5tEphwP+uSlJYWOTZN4QFA/3mbWouCpc0ohljwL9wXFfxqXY4idQNWjHIcs9aoDMV8F6VpZkmpV2S4eksa1CgG6vO77yt1PVxl21lam8i
MEDIUMObfuscation / stealth · obf.base64_blob · CWE-506, CWE-94
kernels/receipts/bayes-factor-router.computeproof.mjs:9
"seal": "KwhUFyqTtKRmtDBZjjgVR97XX8r+PCwu94pwceIDG1kcG0GZG1+06ht84O10Z31pjSL9qWd4s9WD4qAofDf0URKBcS4mO4g1U/z2AeaHFypG6DM41ssFyBM3Zdqu3RoJCf/H3a1nhAoPTDI33PGB91sxGSn6oHpkBcM13aW3Z+MV4aHg/9qlKcBM3CLXuF0
MEDIUMObfuscation / stealth · obf.base64_blob · CWE-506, CWE-94
kernels/receipts/constraint-stacker.computeproof.mjs:9
"seal": "K4Tp3UXI8w//zJr3fYTrVGLgEFZeWQ7J5HTSpggLdlsqPnEyObzr90bvtpsoMvYEEDXm98vE6iuUSFWpto/1NStMADgtxPtM04MKxVg9hoxiXbulGtVMQtg/zFbGMxNmDj1AiUJi726V8VnOE+uLNiA/jtzu3HCGKaS2bopJgqMLqZ4VPdnunOpiRg0R46Y
MEDIUMObfuscation / stealth · obf.base64_blob · CWE-506, CWE-94
kernels/receipts/gwtc-remnant-classifier.computeproof.mjs:9
"seal": "IRmT0dYtkOqGvDATtQofRAkhBTO4g9xrGRAkN8jmFS8JKXJZej2Y/CcBIp0oGDi2AQQjpxwbs5UnoHjIQdgtrR0QG6JNDpKJxWiVmSeBBhhhdBfcKxaxsvZ1CnrzYvQ9AWLkPi0jMqcLhnzhnheFhjm6azjGtPgeZ5S/tVhKvIwEEkrE5srT+LLajYiL19e
MEDIUMObfuscation / stealth · obf.base64_blob · CWE-506, CWE-94
kernels/receipts/jwst-accretion-ledger.computeproof.mjs:9
"seal": "CgYWcKfmmjr7fxlTHMsEMZqPquVCPsa4i7JTIgDBGscScZnJG4M3ZbpB9wuvQh3Hyt4BgGyhwpQRQB25+LnddiS+VIn762SrMLX28Ed9kdP5kN5Rg1C9J8pmSDgDw4K5FWuT+6JhFvUTJPy+cR01SXK2zEaJEhbV8gwAiwuZrakD2n7N8VvRekUppAnypgt
LOWNetwork egress · net.raw_ip · CWE-200, CWE-319
.github/workflows/preflight.yml:95
curl -s -o /dev/null http://127.0.0.1:8799/mcp && break
LOWNetwork egress · net.raw_ip · CWE-200, CWE-319
.github/workflows/preflight.yml:98
curl -s -o /dev/null http://127.0.0.1:8799/mcp || { echo "::error::local wrangler dev did not come up"; cat /tmp/wrangler-dev.log; exit 1; }
LOWNetwork egress · net.raw_ip · CWE-200, CWE-319
.github/workflows/preflight.yml:102
MCP_ENDPOINT: http://127.0.0.1:8799/mcp
LOWNetwork egress · net.raw_ip · CWE-200, CWE-319
README.md:58
MCP_ENDPOINT=http://127.0.0.1:8799/mcp node --test scripts/tests/tier-b-contracts.test.mjs scripts/tests/chains.test.mjs
LOWNetwork egress · net.raw_ip · CWE-200, CWE-319
scripts/tests/chains.test.mjs:33
const ENDPOINT = process.env.MCP_ENDPOINT || 'http://127.0.0.1:8799/mcp';
LOWObfuscation / stealth · obf.decode_call · CWE-506, CWE-94
lib/_computeproof.mjs:185
try { seal = Uint8Array.from(atob(cp.seal), (ch) => ch.charCodeAt(0)); } catch { return false; }
LOWObfuscation / stealth · obf.decode_call · CWE-506, CWE-94
lib/_noble-bn254.bundle.mjs:4
function ge(o){return o instanceof Uint8Array||ArrayBuffer.isView(o)&&o.constructor.name==="Uint8Array"&&"BYTES_PER_ELEMENT"in o&&o.BYTES_PER_ELEMENT===1}function Ft(o,t=""){if(typeof o!="number"){let
LOWSupply chain · supply.unpinned · CWE-829, CWE-1357
package.json
zod, wrangler
Why it matters. 2 dependency range(s) float
Fix. pin exact versions or ship a lockfile

Gates applied: no_behavioural_pass.

Audited 2026-10-12 · audit v0.4.1 · source sha 5f64370bab0ffull audit observations/trust-audit/mcp-server/postoaklabs__ocs-mcp-worker.json · Report an issue / request a re-scan
05

Audit history

Every audit this server has had. A grade with a past is a grade somebody is still checking.

DateSourceVerdictGradeScoreChange
2026-10-125f64370bab0fCAUTIONB85first audit
06

Questions

What is the ocs-mcp-worker MCP server?

MCP server for OmegaCentauri.me (evidence-evaluation tools, signed receipts)

What tools does ocs-mcp-worker expose?

11 in total: 10 read-only, 1 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.

Is ocs-mcp-worker safe to connect to an agent?

With care. The audit graded it B (85/100) and found 13 things worth knowing before you trust this server, listed below with the exact line each was found on.

What credentials does ocs-mcp-worker need?

No credential environment variables were found in its source, so it appears to need none.

How does ocs-mcp-worker run?

It speaks stdio and streamable-http, so it runs as a local process your client starts. It is published on npm as ocs-mcp-worker at 0.1.0.

How current is this page?

The grade is for one exact copy of the source (5f64370bab0f), read on 2026-10-12. The repository is watched and re-audited when it changes.

Advertisement