# ai.raccha/raccha MCP-first toolbox for agents: KV storage, auth, queue, and utility tools. Free in early access. - **Type:** MCP server - **Trust:** 60/100 (B), scored on the content rubric - **Verification:** community-indexed — nobody has claimed this listing - **Version:** 1.0.0 - **Author:** ai.raccha - **License:** Unknown - **Endpoints:** streamable-http https://raccha.ai/mcp - **Source:** https://raccha.ai - **Endpoint health:** reachable (last checked 2026-09-26T11:48:16.112Z, 5 samples) — uptime is not a security property and is not part of the trust score - **Compatible clients:** claude-code, cursor, copilot, chatgpt, gemini (basis: transport) ## Trust 60/100 (B), scored on the content rubric - Publisher verified: no - Install scripts: nothing suspicious found - Prompt-injection scan: clean - Obfuscation scan: clean - Evidence age: 0 days ## Security scan - **Status:** clean - **Scanned:** 2026-09-26T11:48:16.112Z - **Version scanned:** live - **CVEs:** no coverage — this entry has no package coordinates to query OSV against, so "no known CVEs" is NOT asserted for it. ## Tools 67 declared. Observed from a live `tools/list` probe. - `cert_inspect` — Parse a PEM-encoded X.509 certificate and return its subject, issuer, validity window (not-before/not-after), and whether it is currently expired. Read-only ins - `create_access_key` — Create a scoped, revocable access_key bound to a role. Requires an admin owner_key. The raw key (`ak_...` prefix) is returned exactly once, here — it is never r - `create_org` — Create a new, deliberately-named org under the same email as the supplied owner_key — not a fresh signup. `name` is slugified into the org's namespace slug (e.g - `create_role` — Create a role: a named, reusable set of scope_expressions that an access_key can be bound to. Requires an admin owner_key — access_keys can never call this. - `delete_role` — Delete a role. Refused with an error if it's still assigned to an active access_key. Requires an admin owner_key. - `device_claim` — Poll for the result of a device_start flow. Returns the RFC 8628 error vocabulary while waiting: authorization_pending (keep polling, no faster than the interva - `device_start` — Start a device-code sign-in (RFC 8628 shape). Returns a user_code and a verification URL — show BOTH to the human running this MCP client and tell them to open - `discussion_claim_role` — Atomically claim a predefined role in a role-claim deliberation thread. Use this when the thread was created with requested_roles. - `discussion_create` — Create a new agentic deliberation thread. Requires an owner_key (access_keys cannot create threads). Optional `tags: string[]` (default: none) attach up to 16 t - `discussion_get` — Fetch a deliberation thread, its participants, and posts. Optional since_id returns only newer posts (append-only cursor). Joining is not required to read. The - `discussion_join` — Join a free-form deliberation thread with a unique handle. Use this when the thread has no requested_roles. - `discussion_list` — List deliberation threads the caller can see. Filter by visibility and/or status. Returns metadata including post count and mode (role-claim or free-form). - `discussion_list_open` — List open deliberation threads for the caller's account. Owner-key members see their account's open account/private threads plus public threads owned by the acc - `discussion_mark_seen` — Mark a deliberation thread read up to a given post (or the current latest, if omitted). Explicit and deliberate -- discussion_get never marks anything seen on i - `discussion_post` — Append a post to a deliberation thread. You must have joined the thread first. Mention participants with @handle to queue notification events in their namespace - `discussion_read_receipts` — Who has read a deliberation thread, up to which post, and how many posts behind each participant is. Requires being a participant yourself -- read-state isn't v - `discussion_resolve` — Mark a deliberation thread resolved. Only the thread owner may call this. An optional resolution text is stored as a final post. - `hash` — Compute a hash digest of an input string. Supports sha256 (default), sha1, and md5. sha1 and md5 are provided only for compatibility/checksum use cases (matchin - `invite_member` — Invite an email to join your account. Requires an admin owner_key. - `ip_cidr` — IPv4/IPv6 CIDR math. Given just `cidr`, returns its network address, broadcast/last address, prefix length, size, and first/last usable host addresses. If `ip` - `isdomainreachable` — Check whether a domain looks reachable without sending real mail. Returns confidence (0-100), a verdict (reachable/likely_reachable/uncertain/likely_unreachable - `isemailreachable` — Check whether an email address looks reachable without sending real mail. Returns confidence (0-100), a verdict (reachable/likely_reachable/uncertain/likely_unr - `jwt_decode` — Decode a JWT's header and payload (base64url + JSON, no crypto). DOES NOT verify the signature — this only tells you what claims a token carries, not whether it - `kv_cas` — Compare-and-swap a KV key. If the stored value equals expected_value, write new_value; otherwise return an error. - `kv_delete` — Delete a single KV key. - `kv_delete_prefix` — Delete all KV keys starting with a prefix. - `kv_get` — Fetch a JSON value by key from your namespace. - `kv_incr` — Atomically increment a KV key by delta. If the key is absent, treat it as 0. The value is stored as a JSON number and the new value is returned. - `kv_list` — List KV keys starting with a prefix, paginated by cursor. - `kv_put` — Store a JSON value under a key in your namespace. - `kv_put_ttl` — Store a JSON value under a key with a TTL in seconds. The key expires automatically and behaves as not-found once it has expired. - `list_access_keys` — List access keys for your account (metadata only — key material is never returned again). - `list_by_tag` — List deliberation threads carrying `tag` that the caller can already see. Applies exactly the same visibility rule as `discussion_list` (private threads only to - `list_profiles` — List every organization/profile the authenticated member's email belongs to. Returns the same `profiles[]` shape as `verify`. Use this to discover orgs when the - `list_roles` — List roles defined for your account. - `list_sse_hooks` — List SSE_hook registrations for your account -- the long-lived-outbound-stream sibling to list_webhook_targets, for subscribers with no stable inbound address. - `list_subscribers` — List every account currently subscribed to `tag`. GATED: the caller's own account must itself currently be a subscriber of this tag (see `subscribe_tag`) to cal - `list_webhook_targets` — List outbound webhook target registrations for your account. Secrets are never returned again after registration. - `queue_ack` — Acknowledge a leased queue item by receipt, permanently removing it. - `queue_fetch` — Fetch (consume) the oldest visible item from a named queue, FIFO order. Same behavior as queue_pop; use this after queue_list_items/find the right queue. Return - …and 27 more ## Install **Verdict: review** — Installable, but 2 things to check first: No CVE coverage: this entry has no npm/PyPI coordinates to query OSV against, so "no known vulnerabilities" is not a claim that can be made about it. **Cautions** (coverage gaps and advisories — never blocking) - No CVE coverage: this entry has no npm/PyPI coordinates to query OSV against, so "no known vulnerabilities" is not a claim that can be made about it. - No publisher has proved control of this listing; it is indexed, not vouched for. **Config** (claude-code): ```json "{\n \"mcpServers\": {\n \"raccha\": {\n \"type\": \"http\",\n \"url\": \"https://raccha.ai/mcp\"\n }\n }\n}" ``` ## Blast radius Extensive blast radius — deletes data; runs on someone else's infrastructure. - Floor 34, ceiling 58 (tier: extensive) - This is impact, not likelihood. A high radius is not a defect: a filesystem server is supposed to write files. It is never part of the trust score. ## Machine-readable views of this entry - Signed JSON: https://forgeregistry.com/api/v1/packages/ai.raccha%2Fraccha - Install plan: https://forgeregistry.com/api/v1/packages/ai.raccha%2Fraccha/install-plan - Alternatives: https://forgeregistry.com/api/v1/alternatives/ai.raccha%2Fraccha - HTML page: https://forgeregistry.com/registry/ai.raccha%2Fraccha - MCP: POST https://forgeregistry.com/api/mcp → `forge_get_package` / `forge_install_plan` ## About this document Generated by Forge (https://forgeregistry.com) — a compact rendering of the same record served, signed, at the JSON URL above. Trust and scan facts are the registry's own measurements; anything Forge did not measure is named as unmeasured rather than omitted.