MCP Server
Bardo
id.bardo/bardo
What this MCP does
Provides persistent encrypted notes, versioning, links, identity derivation, attestations, encryption, signing, revocation, and account security policies for agents.
Capabilities
Tools
40
tools
bardo_account_deletion_cancel
Cancel a pending deletion, whichever phase it's in â gathering
confirmations or already counting down. No step-up needed, and
nothing else does this implicitly: logging in and reading your own
notes during a countdown is always safe and never cancels it by
itself. Only this, explicitly, does.
Idempotent
Input schema
{'type': 'object', 'title': 'bardo_account_deletion_cancelArguments', 'properties': {'session_token': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Session Token', 'default': None, 'description': "Bardo session token, only needed if this call's identity was established somewhere other than this exact connection (a plain HTTP/curl solve, a previous conversation, a different MCP connection). Omit it if this connection already called bardo_solve."}}, 'additionalProperties': False}
bardo_account_deletion_request
Request permanent deletion of this identity â the account, its
notes, everything. There is no undelete, unlike note deletion's grace
period. Requires the original request plus two more confirmations,
each on a genuinely different day, within a week â call this tool
again on a later day to add the next confirmation. A lapsed or
cancelled attempt earns nothing toward a later one; it starts over.
If challenge_id and answer are omitted, a fresh puzzle is returned â
solve it yourself (every confirmation needs its own puzzle, not just
the first), then call this tool again with both parameters.
Destructive
Input schema
{'type': 'object', 'title': 'bardo_account_deletion_requestArguments', 'properties': {'answer': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Answer', 'default': None, 'description': "Your solved answer to challenge_id's puzzle."}, 'challenge_id': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Challenge Id', 'default': None, 'description': 'Step-up puzzle id, if one was already returned. Every confirmation needs its own puzzle, not just the first â\x80\x94 omit together with answer to have a fresh one minted automatically.'}, 'session_token': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Session Token', 'default': None, 'description': "Bardo session token, only needed if this call's identity was established somewhere other than this exact connection (a plain HTTP/curl solve, a previous conversation, a different MCP connection). Omit it if this connection already called bardo_solve."}}, 'additionalProperties': False}
bardo_account_deletion_status
Check whether a deletion request is pending for this account, and
where it stands: "none", "gathering" (still collecting confirmations),
or "confirmed" (counting down to the actual, permanent purge).
Read only
Input schema
{'type': 'object', 'title': 'bardo_account_deletion_statusArguments', 'properties': {'session_token': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Session Token', 'default': None, 'description': "Bardo session token, only needed if this call's identity was established somewhere other than this exact connection (a plain HTTP/curl solve, a previous conversation, a different MCP connection). Omit it if this connection already called bardo_solve."}}, 'additionalProperties': False}
bardo_attestation_issue
Assemble and sign a verifiable attestation â a self-contained,
offline-verifiable claim about anything. The document itself is
handed back, not stored anywhere (same as bardo_sign itself â
there's no bardo_documents_list); see keep_copy below if you want
Bardo to save one for you rather than doing it yourself.
claim: free-form claim content â whatever you're asserting. Include
a `reference` key inside it when cross-referencing another
document's id (or any other content, hashed the same ni:// way) â
that's how independent attestations end up pointing at "the same
thing," e.g. several agents witnessing one event under a shared
reference. subject_id: the did:key the claim is about, if it
concerns one specific identified party â leave it unset when it
doesn't; a bare self-referential claim ("this document is about its
signer") is still valid without it. expires_at: unix timestamp for
time-boxed claims only; omit for a claim that never expires.
service: same key-selector bardo_sign takes â a document meant to
represent one specific relationship should use that relationship's
service-derived key, not your root identity.
keep_copy: save the full document into a locked note right after
issuing it â the copy you'd otherwise have to make yourself, and
the one you'll need later: bardo_document_revoke takes the whole
document, not just its id, since Bardo never stores one itself.
Off by default. When true, the return shape changes to {document,
copy_saved, note_id, copy_error} instead of the bare document â
check copy_saved rather than assume it worked; a failed copy never
blocks the document itself from being returned, since issuing has
already fully succeeded by that point regardless.
To revoke later: bardo_document_revoke. To check whether one you're
holding (yours or someone else's) is still valid:
bardo_document_status.
Input schema
{'type': 'object', 'title': 'bardo_attestation_issueArguments', 'properties': {'claim': {'anyOf': [{'type': 'object', 'additionalProperties': True}, {'type': 'null'}], 'title': 'Claim', 'default': None, 'description': "Free-form claim content â\x80\x94 whatever you're asserting. Include a 'reference' key when cross-referencing another document's id (or any other content, hashed the same ni:// way)."}, 'service': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Service', 'default': None, 'description': 'Sign with this service-derived key instead of root â\x80\x94 use when the claim represents one specific relationship rather than your root identity.'}, 'keep_copy': {'type': 'boolean', 'title': 'Keep Copy', 'default': False, 'description': "Also save the full issued document into a locked note â\x80\x94 you'll need the whole document later for bardo_document_revoke, since Bardo never stores one itself. Off by default."}, 'expires_at': {'anyOf': [{'type': 'number'}, {'type': 'null'}], 'title': 'Expires At', 'default': None, 'description': 'Unix timestamp for a time-boxed claim. Omit for a claim that never expires.'}, 'subject_id': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Subject Id', 'default': None, 'description': 'The did:key the claim is about, if it concerns one specific identified party. Leave unset for a bare self-referential claim.'}, 'session_token': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Session Token', 'default': None, 'description': "Bardo session token, only needed if this call's identity was established somewhere other than this exact connection (a plain HTTP/curl solve, a previous conversation, a different MCP connection). Omit it if this connection already called bardo_solve."}}, 'additionalProperties': False}
bardo_contact_delete
Remove the registered contact endpoint. Requires a step-up puzzle.
If challenge_id and answer are omitted, a fresh puzzle is returned â solve it
yourself, then call this tool again with both parameters.
Destructive
Idempotent
Input schema
{'type': 'object', 'title': 'bardo_contact_deleteArguments', 'properties': {'answer': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Answer', 'default': None, 'description': "Your solved answer to challenge_id's puzzle."}, 'challenge_id': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Challenge Id', 'default': None, 'description': 'Step-up puzzle id, if one was already returned by a prior call to this same tool. Omit together with answer to have a fresh puzzle minted automatically.'}, 'session_token': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Session Token', 'default': None, 'description': "Bardo session token, only needed if this call's identity was established somewhere other than this exact connection (a plain HTTP/curl solve, a previous conversation, a different MCP connection). Omit it if this connection already called bardo_solve."}}, 'additionalProperties': False}
bardo_contact_get
View the contact endpoint registered for out-of-band security alerts.
Read only
Input schema
{'type': 'object', 'title': 'bardo_contact_getArguments', 'properties': {'session_token': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Session Token', 'default': None, 'description': "Bardo session token, only needed if this call's identity was established somewhere other than this exact connection (a plain HTTP/curl solve, a previous conversation, a different MCP connection). Omit it if this connection already called bardo_solve."}}, 'additionalProperties': False}
bardo_contact_set
Set or update the contact endpoint (email or webhook URL) for security alerts.
Requires a step-up puzzle.
If challenge_id and answer are omitted, a fresh puzzle is returned â solve it
yourself, then call this tool again with all three parameters.
Idempotent
Input schema
{'type': 'object', 'title': 'bardo_contact_setArguments', 'required': ['endpoint'], 'properties': {'answer': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Answer', 'default': None, 'description': "Your solved answer to challenge_id's puzzle."}, 'endpoint': {'type': 'string', 'title': 'Endpoint', 'description': 'Email address or webhook URL to receive out-of-band security alerts.'}, 'challenge_id': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Challenge Id', 'default': None, 'description': 'Step-up puzzle id, if one was already returned by a prior call to this same tool. Omit together with answer to have a fresh puzzle minted automatically.'}, 'session_token': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Session Token', 'default': None, 'description': "Bardo session token, only needed if this call's identity was established somewhere other than this exact connection (a plain HTTP/curl solve, a previous conversation, a different MCP connection). Omit it if this connection already called bardo_solve."}}, 'additionalProperties': False}
bardo_dashboard
Get oriented in one call: note count vs. the soft/hard limits, unread
notices, every tag you've used so far (check before inventing a new one),
your pinned entry-point notes (read these first if you have no memory of
writing any of your notes), and your current policy â instead of several
separate round trips.
Read only
Input schema
{'type': 'object', 'title': 'bardo_dashboardArguments', 'properties': {'session_token': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Session Token', 'default': None, 'description': "Bardo session token, only needed if this call's identity was established somewhere other than this exact connection (a plain HTTP/curl solve, a previous conversation, a different MCP connection). Omit it if this connection already called bardo_solve."}}, 'additionalProperties': False}
bardo_decrypt
Decrypt a sealed-box ciphertext addressed to you (root or service key).
Read only
Input schema
{'type': 'object', 'title': 'bardo_decryptArguments', 'required': ['ciphertext_b64'], 'properties': {'service': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Service', 'default': None, 'description': 'Decrypt with this service-derived key instead of root â\x80\x94 must match the key the ciphertext was actually encrypted to.'}, 'session_token': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Session Token', 'default': None, 'description': "Bardo session token, only needed if this call's identity was established somewhere other than this exact connection (a plain HTTP/curl solve, a previous conversation, a different MCP connection). Omit it if this connection already called bardo_solve."}, 'ciphertext_b64': {'type': 'string', 'title': 'Ciphertext B64', 'description': 'Sealed-box ciphertext to decrypt, base64.'}}, 'additionalProperties': False}
bardo_derive
Derive (and register) a service-scoped identity, e.g. 'github.com'.
Idempotent
Input schema
{'type': 'object', 'title': 'bardo_deriveArguments', 'required': ['service'], 'properties': {'service': {'type': 'string', 'title': 'Service', 'description': "Identifier for the service this identity is scoped to, e.g. 'github.com' or 'ethereum:mainnet'."}, 'session_token': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Session Token', 'default': None, 'description': "Bardo session token, only needed if this call's identity was established somewhere other than this exact connection (a plain HTTP/curl solve, a previous conversation, a different MCP connection). Omit it if this connection already called bardo_solve."}}, 'additionalProperties': False}
bardo_document_revoke
Revoke a document you issued. Proof is a fresh signature over
'revoke:' + the document's id, verified against the key its id
already committed to, not an account lookup (Bardo never stored the
document to look up in the first place) â this still needs no
session at the protocol level, only a valid signature.
document: the full signed document, exactly as issued (id and proof
both still attached) â resubmit it unmodified, don't strip fields
yourself.
signature_b64: omit it and this signs automatically through your
active session instead â pass `service` too if the document was
issued under a service-derived key rather than root, since the
signature has to come from the exact key the document's issuer
field names. Supply signature_b64 yourself only when revoking
without a Bardo session at all: you signed it some other way, or
you're a party that's never touched Bardo.
Idempotent â revoking an already-revoked id is a no-op, not an
error. Irreversible: there is no un-revoke.
Destructive
Idempotent
Input schema
{'type': 'object', 'title': 'bardo_document_revokeArguments', 'required': ['document'], 'properties': {'service': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Service', 'default': None, 'description': "Service key the document was issued under, if not root â\x80\x94 must match the document's own issuer field. Only relevant when signature_b64 is omitted (signing automatically)."}, 'document': {'type': 'object', 'title': 'Document', 'description': "The full signed document exactly as issued (id and proof both still attached) â\x80\x94 resubmit unmodified, don't strip fields yourself.", 'additionalProperties': True}, 'session_token': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Session Token', 'default': None, 'description': "Bardo session token, only needed if this call's identity was established somewhere other than this exact connection (a plain HTTP/curl solve, a previous conversation, a different MCP connection). Omit it if this connection already called bardo_solve."}, 'signature_b64': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Signature B64', 'default': None, 'description': "Signature over 'revoke:' + the document's id. Omit to sign automatically through your active session instead; supply this yourself only when revoking without a Bardo session at all."}}, 'additionalProperties': False}
bardo_document_status
Check whether a signed document is revoked. `id` is the document's
own top-level `id` field (a ni:// URI) â the same thing
credentialStatus.id (BardoRevocationCheck) points at. Safe to cache
a "not revoked" answer for a while (see the response's own
Cache-Control) rather than re-checking on every use.
Read only
Input schema
{'type': 'object', 'title': 'bardo_document_statusArguments', 'required': ['id'], 'properties': {'id': {'type': 'string', 'title': 'Id', 'description': "The document's own top-level id field (a ni:// URI) â\x80\x94 the same value credentialStatus.id (BardoRevocationCheck) points at."}}, 'additionalProperties': False}
bardo_encrypt
Sealed-box encrypt a UTF-8 plaintext to a recipient's encryption public key.
Read only
Input schema
{'type': 'object', 'title': 'bardo_encryptArguments', 'required': ['plaintext', 'recipient_public_key_b64'], 'properties': {'plaintext': {'type': 'string', 'title': 'Plaintext', 'description': 'UTF-8 plaintext to encrypt.'}, 'recipient_public_key_b64': {'type': 'string', 'title': 'Recipient Public Key B64', 'description': "Recipient's encryption public key, base64 â\x80\x94 only they can decrypt the result."}}, 'additionalProperties': False}
bardo_export
Export the raw spirit key (subject to policy). Handle with care.
Only needs a step-up puzzle if your policy's export_mode is
require_repuzzle â checked automatically, so you don't need to know
your own policy first. If challenge_id and answer are omitted and
one turns out to be needed, a fresh puzzle is returned instead of
failing outright â solve it yourself, then call this tool again
with both parameters. Never needed under export_mode 'allow';
always fails under 'disabled', with no puzzle that could fix that.
Input schema
{'type': 'object', 'title': 'bardo_exportArguments', 'properties': {'answer': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Answer', 'default': None, 'description': "Your solved answer to challenge_id's puzzle."}, 'challenge_id': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Challenge Id', 'default': None, 'description': 'Step-up puzzle id, if one was already returned by a prior call to this same tool. Omit together with answer to have a fresh puzzle minted automatically.'}, 'session_token': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Session Token', 'default': None, 'description': "Bardo session token, only needed if this call's identity was established somewhere other than this exact connection (a plain HTTP/curl solve, a previous conversation, a different MCP connection). Omit it if this connection already called bardo_solve."}}, 'additionalProperties': False}
bardo_feedback
Send feedback straight to Bardo's operator â a suggestion, a
complaint, or a security concern (kind: 'suggestion' | 'complaint' |
'security').
One-way and stateless: this call carries no memory of anything you've
sent before, and nothing you send now will be remembered next time
either â so say everything relevant in this one message rather than
assuming a follow-up call (by you or a future instance of you) will
have the earlier context. If the operator replies, it arrives as an
ordinary notice (bardo_notices) â there's no separate inbox to check.
Input schema
{'type': 'object', 'title': 'bardo_feedbackArguments', 'required': ['message'], 'properties': {'kind': {'type': 'string', 'title': 'Kind', 'default': 'suggestion', 'description': "'suggestion' | 'complaint' | 'security'."}, 'message': {'type': 'string', 'title': 'Message', 'description': "Your feedback, in full â\x80\x94 this call is stateless, so include everything relevant now rather than assuming a follow-up call will have this call's context."}, 'session_token': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Session Token', 'default': None, 'description': "Bardo session token, only needed if this call's identity was established somewhere other than this exact connection (a plain HTTP/curl solve, a previous conversation, a different MCP connection). Omit it if this connection already called bardo_solve."}}, 'additionalProperties': False}
bardo_link_add
Connect two notes with a reason, written from from_note_id's
perspective ("clarifies my earlier assumption about X"). Set is_bidi=True
only when the relation reads the same from either side (e.g. "relates
to"); leave it False when it's directional (e.g. one clarifies the
other). To change a link, delete and re-add it â links aren't edited.
Input schema
{'type': 'object', 'title': 'bardo_link_addArguments', 'required': ['from_note_id', 'to_note_id', 'reason'], 'properties': {'reason': {'type': 'string', 'title': 'Reason', 'description': "Why these notes are connected, written from from_note_id's perspective, e.g. 'clarifies my earlier assumption about X'."}, 'is_bidi': {'type': 'boolean', 'title': 'Is Bidi', 'default': False, 'description': "True only when the relation reads the same from either side (e.g. 'relates to'). False when directional (e.g. one clarifies the other)."}, 'to_note_id': {'type': 'string', 'title': 'To Note Id', 'description': 'The note being linked to.'}, 'from_note_id': {'type': 'string', 'title': 'From Note Id', 'description': "The note the link is written from â\x80\x94 reason should read from this note's perspective."}, 'session_token': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Session Token', 'default': None, 'description': "Bardo session token, only needed if this call's identity was established somewhere other than this exact connection (a plain HTTP/curl solve, a previous conversation, a different MCP connection). Omit it if this connection already called bardo_solve."}}, 'additionalProperties': False}
bardo_link_delete
Remove a link between two notes.
Destructive
Input schema
{'type': 'object', 'title': 'bardo_link_deleteArguments', 'required': ['link_id'], 'properties': {'link_id': {'type': 'string', 'title': 'Link Id', 'description': 'Which link to remove.'}, 'session_token': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Session Token', 'default': None, 'description': "Bardo session token, only needed if this call's identity was established somewhere other than this exact connection (a plain HTTP/curl solve, a previous conversation, a different MCP connection). Omit it if this connection already called bardo_solve."}}, 'additionalProperties': False}
bardo_login
Begin authentication with your api_key. Returns a puzzle you must
solve YOURSELF (that's the point â a script solving it would make the
proof worthless), then call bardo_solve(challenge_id, answer).
Input schema
{'type': 'object', 'title': 'bardo_loginArguments', 'required': ['api_key'], 'properties': {'api_key': {'type': 'string', 'title': 'Api Key', 'description': 'Your Bardo api_key, format atr.<identifier>.<secret>, from bardo_register.'}}, 'additionalProperties': False}
bardo_note_add
Leave a note for your future, stateless self.
title: a short name for the note, if it deserves a handle bigger than
tags offer. summary: your own compressed reasoning for why it matters,
for your future self. tags: space-separated categories. pinned: mark
this as a cold-start entry point â what a fresh instance of you with no
memory of writing it should read first (max 5 pinned at once; see
bardo_dashboard). locked: freeze this note against edits and deletes â
use for state you must not accidentally overwrite or lose, like a
saved copy of something you'll need to reproduce exactly later.
Unlock via bardo_note_update(note_id, locked=False) before it can be
touched again.
Input schema
{'type': 'object', 'title': 'bardo_note_addArguments', 'required': ['text'], 'properties': {'tags': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Tags', 'default': None, 'description': 'Space-separated categories.'}, 'text': {'type': 'string', 'title': 'Text', 'description': "The note's own content."}, 'title': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Title', 'default': None, 'description': 'Short name for the note, if it deserves a handle bigger than tags offer.'}, 'locked': {'type': 'boolean', 'title': 'Locked', 'default': False, 'description': 'Freeze against edits and deletes. Unlock via bardo_note_update(note_id, locked=False) before it can be touched again.'}, 'pinned': {'type': 'boolean', 'title': 'Pinned', 'default': False, 'description': 'Mark as a cold-start entry point â\x80\x94 what a fresh instance with no memory of writing it should read first. Max 5 pinned at once.'}, 'summary': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Summary', 'default': None, 'description': 'Your own compressed reasoning for why this matters, for your future self.'}, 'session_token': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Session Token', 'default': None, 'description': "Bardo session token, only needed if this call's identity was established somewhere other than this exact connection (a plain HTTP/curl solve, a previous conversation, a different MCP connection). Omit it if this connection already called bardo_solve."}}, 'additionalProperties': False}
bardo_note_delete
Delete a note (the whole thing, all versions together). Not
immediate â it disappears from view right away but is only purged for
real after a grace period, so bardo_note_undelete can still bring it
back if this wasn't intended. Fails (423) if the note is locked â
unlock it first via bardo_note_update(note_id, locked=False).
Destructive
Input schema
{'type': 'object', 'title': 'bardo_note_deleteArguments', 'required': ['note_id'], 'properties': {'note_id': {'type': 'string', 'title': 'Note Id', 'description': 'Which note this applies to â\x80\x94 any id from its edit history resolves to the current version.'}, 'session_token': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Session Token', 'default': None, 'description': "Bardo session token, only needed if this call's identity was established somewhere other than this exact connection (a plain HTTP/curl solve, a previous conversation, a different MCP connection). Omit it if this connection already called bardo_solve."}}, 'additionalProperties': False}
bardo_note_get
Fetch one note's full text (always the current version â any id from
this note's history still resolves here), plus a preview of its directly
linked notes. Omit offset/length for the whole text in one call; pass
them to read a large note in bounded slices â the response's
total_length tells you how much more there is.
Read only
Input schema
{'type': 'object', 'title': 'bardo_note_getArguments', 'required': ['note_id'], 'properties': {'length': {'anyOf': [{'type': 'integer'}, {'type': 'null'}], 'title': 'Length', 'default': None, 'description': "Max characters of text to return. Omit both offset and length for the whole note in one call; the response's total_length says how much more there is."}, 'offset': {'type': 'integer', 'title': 'Offset', 'default': 0, 'description': 'Character offset to start the returned text at.'}, 'note_id': {'type': 'string', 'title': 'Note Id', 'description': 'Which note this applies to â\x80\x94 any id from its edit history resolves to the current version.'}, 'links_limit': {'type': 'integer', 'title': 'Links Limit', 'default': 10, 'description': 'Max linked-note previews to return.'}, 'links_offset': {'type': 'integer', 'title': 'Links Offset', 'default': 0, 'description': 'How many linked-note previews to skip.'}, 'session_token': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Session Token', 'default': None, 'description': "Bardo session token, only needed if this call's identity was established somewhere other than this exact connection (a plain HTTP/curl solve, a previous conversation, a different MCP connection). Omit it if this connection already called bardo_solve."}}, 'additionalProperties': False}
bardo_note_history
See every surviving version of a note (newest to oldest, up to the
last 10 edits) â the actual wording at each point, not just metadata.
Read only
Input schema
{'type': 'object', 'title': 'bardo_note_historyArguments', 'required': ['note_id'], 'properties': {'note_id': {'type': 'string', 'title': 'Note Id', 'description': 'Which note this applies to â\x80\x94 any id from its edit history resolves to the current version.'}, 'session_token': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Session Token', 'default': None, 'description': "Bardo session token, only needed if this call's identity was established somewhere other than this exact connection (a plain HTTP/curl solve, a previous conversation, a different MCP connection). Omit it if this connection already called bardo_solve."}}, 'additionalProperties': False}
bardo_notes_list
List your notes â previews only (title/summary/snippet/tags/links),
never full text. Omit limit for everything; pass it to page through a
large list, using the returned total_notes to know how much is left.
Read only
Input schema
{'type': 'object', 'title': 'bardo_notes_listArguments', 'properties': {'limit': {'anyOf': [{'type': 'integer'}, {'type': 'null'}], 'title': 'Limit', 'default': None, 'description': "Max notes to return. Omit for everything; use with offset and the response's total_notes to page through a large list."}, 'offset': {'type': 'integer', 'title': 'Offset', 'default': 0, 'description': 'How many notes to skip, for paging.'}, 'session_token': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Session Token', 'default': None, 'description': "Bardo session token, only needed if this call's identity was established somewhere other than this exact connection (a plain HTTP/curl solve, a previous conversation, a different MCP connection). Omit it if this connection already called bardo_solve."}}, 'additionalProperties': False}
bardo_note_undelete
Restore a note that's still within its post-delete grace period.
Input schema
{'type': 'object', 'title': 'bardo_note_undeleteArguments', 'required': ['note_id'], 'properties': {'note_id': {'type': 'string', 'title': 'Note Id', 'description': 'Which note this applies to â\x80\x94 any id from its edit history resolves to the current version.'}, 'session_token': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Session Token', 'default': None, 'description': "Bardo session token, only needed if this call's identity was established somewhere other than this exact connection (a plain HTTP/curl solve, a previous conversation, a different MCP connection). Omit it if this connection already called bardo_solve."}}, 'additionalProperties': False}
bardo_note_update
Edit a note. Give at most one text-edit mode:
- text: replace the whole thing
- append_text: add to the end
- find + replace: find must match the current text exactly once
Editing text creates a new version (old wording stays in history);
title/summary/tags/pinned update in place with no history kept. Give
none of the text modes to change only metadata. `pinned=True` marks this
as a cold-start entry point (max 5; omit to leave unchanged, False to
unpin). `clear` (e.g. ["title"]) sets a field back to unset rather than
leaving it unchanged. If another edit landed first, this returns
{"error": "conflict", "detail": {"current_head": ...}} â re-read before
retrying.
`locked`: if the note is currently locked, every field above is
rejected (423) except this one â call with locked=False by itself to
unlock, then edit in a separate call. Set locked=True (alone, or
alongside a final edit) to freeze it.
Input schema
{'type': 'object', 'title': 'bardo_note_updateArguments', 'required': ['note_id'], 'properties': {'find': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Find', 'default': None, 'description': 'Text that must match the current body exactly once â\x80\x94 paired with replace.'}, 'tags': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Tags', 'default': None, 'description': 'Same meaning as in bardo_note_add â\x80\x94 updates in place, no history kept.'}, 'text': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Text', 'default': None, 'description': 'Replace the whole note body. Give at most one of text / append_text / find+replace.'}, 'clear': {'anyOf': [{'type': 'array', 'items': {'type': 'string'}}, {'type': 'null'}], 'title': 'Clear', 'default': None, 'description': "Field names to reset to unset, e.g. ['title'], rather than leaving them unchanged."}, 'title': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Title', 'default': None, 'description': 'Same meaning as in bardo_note_add â\x80\x94 updates in place, no history kept.'}, 'locked': {'anyOf': [{'type': 'boolean'}, {'type': 'null'}], 'title': 'Locked', 'default': None, 'description': 'True to freeze the note against further edits; False to unlock it. If currently locked, every other field is rejected except this one.'}, 'pinned': {'anyOf': [{'type': 'boolean'}, {'type': 'null'}], 'title': 'Pinned', 'default': None, 'description': 'True to mark as a cold-start entry point (max 5), False to unpin. Omit to leave unchanged.'}, 'note_id': {'type': 'string', 'title': 'Note Id', 'description': 'Which note this applies to â\x80\x94 any id from its edit history resolves to the current version.'}, 'replace': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Replace', 'default': None, 'description': 'Replacement for the text matched by find.'}, 'summary': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Summary', 'default': None, 'description': 'Same meaning as in bardo_note_add â\x80\x94 updates in place, no history kept.'}, 'append_text': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Append Text', 'default': None, 'description': 'Add this to the end of the note body.'}, 'session_token': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Session Token', 'default': None, 'description': "Bardo session token, only needed if this call's identity was established somewhere other than this exact connection (a plain HTTP/curl solve, a previous conversation, a different MCP connection). Omit it if this connection already called bardo_solve."}}, 'additionalProperties': False}
bardo_notices
List first-party notices about your account (policy changes, exports, â¦).
Read only
Input schema
{'type': 'object', 'title': 'bardo_noticesArguments', 'properties': {'unread_only': {'type': 'boolean', 'title': 'Unread Only', 'default': False, 'description': 'Return only unread notices instead of the full list.'}, 'session_token': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Session Token', 'default': None, 'description': "Bardo session token, only needed if this call's identity was established somewhere other than this exact connection (a plain HTTP/curl solve, a previous conversation, a different MCP connection). Omit it if this connection already called bardo_solve."}}, 'additionalProperties': False}
bardo_notices_ack
Mark notices read â all of them, or a specific list of ids.
Idempotent
Input schema
{'type': 'object', 'title': 'bardo_notices_ackArguments', 'properties': {'ids': {'anyOf': [{'type': 'array', 'items': {'type': 'integer'}}, {'type': 'null'}], 'title': 'Ids', 'default': None, 'description': 'Specific notice ids to mark read. Omit for all notices.'}, 'session_token': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Session Token', 'default': None, 'description': "Bardo session token, only needed if this call's identity was established somewhere other than this exact connection (a plain HTTP/curl solve, a previous conversation, a different MCP connection). Omit it if this connection already called bardo_solve."}}, 'additionalProperties': False}
bardo_policy_abort_pending
Abort a queued policy loosening before it takes effect. No step-up
needed â aborting only ever tightens back to the current policy.
Idempotent
Input schema
{'type': 'object', 'title': 'bardo_policy_abort_pendingArguments', 'properties': {'session_token': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Session Token', 'default': None, 'description': "Bardo session token, only needed if this call's identity was established somewhere other than this exact connection (a plain HTTP/curl solve, a previous conversation, a different MCP connection). Omit it if this connection already called bardo_solve."}}, 'additionalProperties': False}
bardo_policy_get
View your self-binding security policy: export mode, session TTL cap,
service allowlist, ratchet delay, tag encryption, delete grace period â
plus any pending (queued) loosening and when it lands.
Read only
Input schema
{'type': 'object', 'title': 'bardo_policy_getArguments', 'properties': {'session_token': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Session Token', 'default': None, 'description': "Bardo session token, only needed if this call's identity was established somewhere other than this exact connection (a plain HTTP/curl solve, a previous conversation, a different MCP connection). Omit it if this connection already called bardo_solve."}}, 'additionalProperties': False}
bardo_policy_set
Propose a change to your security policy. Give only the fields you
want to change (export_mode: 'allow'|'require_repuzzle'|'disabled').
A change that only tightens (e.g. lowering max_session_ttl, narrowing
service_allowlist, moving export_mode toward 'disabled') applies
immediately. A change that loosens *anything* is queued behind
loosen_delay_seconds instead â abortable via bardo_policy_abort_pending
until it lands.
clear: field names to reset to null â only max_session_ttl (no ceiling)
or service_allowlist (any service) accept this; pass service_allowlist=[]
instead if you mean "no services allowed", which is different from null.
Requires a step-up puzzle. If challenge_id and answer are omitted, a
fresh puzzle is returned â solve it yourself, then call this tool again
with your desired fields plus challenge_id and answer.
Idempotent
Input schema
{'type': 'object', 'title': 'bardo_policy_setArguments', 'properties': {'clear': {'anyOf': [{'type': 'array', 'items': {'type': 'string'}}, {'type': 'null'}], 'title': 'Clear', 'default': None, 'description': 'Field names to reset to null instead of leaving unchanged â\x80\x94 only max_session_ttl and service_allowlist accept this.'}, 'answer': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Answer', 'default': None, 'description': "Your solved answer to challenge_id's puzzle."}, 'export_mode': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Export Mode', 'default': None, 'description': "'allow' | 'require_repuzzle' | 'disabled', stricter in that order. Moving toward 'disabled' tightens; toward 'allow' loosens."}, 'challenge_id': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Challenge Id', 'default': None, 'description': 'Step-up puzzle id, if one was already returned by a prior call to this same tool. Omit together with answer to have a fresh puzzle minted automatically.'}, 'session_token': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Session Token', 'default': None, 'description': "Bardo session token, only needed if this call's identity was established somewhere other than this exact connection (a plain HTTP/curl solve, a previous conversation, a different MCP connection). Omit it if this connection already called bardo_solve."}, 'tags_encrypted': {'anyOf': [{'type': 'boolean'}, {'type': 'null'}], 'title': 'Tags Encrypted', 'default': None, 'description': 'Whether note tags are stored encrypted (true) or plaintext-searchable (false). Moving to true tightens.'}, 'max_session_ttl': {'anyOf': [{'type': 'integer'}, {'type': 'null'}], 'title': 'Max Session Ttl', 'default': None, 'description': "Session lifetime cap in seconds. Lowering it tightens; raising it loosens. Use clear=['max_session_ttl'] for no ceiling."}, 'service_allowlist': {'anyOf': [{'type': 'array', 'items': {'type': 'string'}}, {'type': 'null'}], 'title': 'Service Allowlist', 'default': None, 'description': "Services allowed to be derived. Narrowing the list tightens, widening it loosens. Pass [] for 'no services allowed' (different from clearing it via clear=['service_allowlist'], which means 'any service')."}, 'delete_grace_seconds': {'anyOf': [{'type': 'integer'}, {'type': 'null'}], 'title': 'Delete Grace Seconds', 'default': None, 'description': 'How long a deleted note stays recoverable before permanent purge. Raising it tightens.'}, 'loosen_delay_seconds': {'anyOf': [{'type': 'integer'}, {'type': 'null'}], 'title': 'Loosen Delay Seconds', 'default': None, 'description': 'How long a future loosening change is queued before it lands. Raising it tightens.'}}, 'additionalProperties': False}
bardo_public_key
Fetch your signing + encryption public keys (root, or for a service).
Read only
Input schema
{'type': 'object', 'title': 'bardo_public_keyArguments', 'properties': {'service': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Service', 'default': None, 'description': "Fetch this service-derived identity's public keys instead of root's."}, 'session_token': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Session Token', 'default': None, 'description': "Bardo session token, only needed if this call's identity was established somewhere other than this exact connection (a plain HTTP/curl solve, a previous conversation, a different MCP connection). Omit it if this connection already called bardo_solve."}}, 'additionalProperties': False}
bardo_register
Create a new Bardo identity. Save the returned api_key somewhere
durable â it's your only way back to this identity across sessions.
Bardo stores it sealed and cannot recover it if you lose it.
Not active yet: give the returned claim_url to your human. Authentication
fails until they visit it and acknowledge the registration.
Input schema
{'type': 'object', 'title': 'bardo_registerArguments', 'properties': {}, 'additionalProperties': False}
bardo_services_list
List service-scoped identities you've already derived (bardo_derive),
with their public keys and revoked status.
Read only
Input schema
{'type': 'object', 'title': 'bardo_services_listArguments', 'properties': {'session_token': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Session Token', 'default': None, 'description': "Bardo session token, only needed if this call's identity was established somewhere other than this exact connection (a plain HTTP/curl solve, a previous conversation, a different MCP connection). Omit it if this connection already called bardo_solve."}}, 'additionalProperties': False}
bardo_session_revoke_current
Revoke the session you're using right now. You'll need bardo_login
(+ bardo_solve) again afterward to do anything session-gated.
Destructive
Idempotent
Input schema
{'type': 'object', 'title': 'bardo_session_revoke_currentArguments', 'properties': {'session_token': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Session Token', 'default': None, 'description': "Bardo session token, only needed if this call's identity was established somewhere other than this exact connection (a plain HTTP/curl solve, a previous conversation, a different MCP connection). Omit it if this connection already called bardo_solve."}}, 'additionalProperties': False}
bardo_sessions_list
List your active sessions (sliding TTL, absolute 24h cap each).
Read only
Input schema
{'type': 'object', 'title': 'bardo_sessions_listArguments', 'properties': {'session_token': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Session Token', 'default': None, 'description': "Bardo session token, only needed if this call's identity was established somewhere other than this exact connection (a plain HTTP/curl solve, a previous conversation, a different MCP connection). Omit it if this connection already called bardo_solve."}}, 'additionalProperties': False}
bardo_sessions_revoke_all
Revoke every active session for your identity â e.g. after a
suspected API-key leak. You'll need to log in again afterward.
Destructive
Idempotent
Input schema
{'type': 'object', 'title': 'bardo_sessions_revoke_allArguments', 'properties': {'session_token': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Session Token', 'default': None, 'description': "Bardo session token, only needed if this call's identity was established somewhere other than this exact connection (a plain HTTP/curl solve, a previous conversation, a different MCP connection). Omit it if this connection already called bardo_solve."}}, 'additionalProperties': False}
bardo_sign
Sign a UTF-8 message with the spirit key (or a service-derived key).
Read only
Input schema
{'type': 'object', 'title': 'bardo_signArguments', 'required': ['message'], 'properties': {'message': {'type': 'string', 'title': 'Message', 'description': 'UTF-8 message to sign.'}, 'service': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Service', 'default': None, 'description': "Sign with this service-derived key instead of your root identity (e.g. 'github.com') â\x80\x94 must already exist via bardo_derive."}, 'session_token': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Session Token', 'default': None, 'description': "Bardo session token, only needed if this call's identity was established somewhere other than this exact connection (a plain HTTP/curl solve, a previous conversation, a different MCP connection). Omit it if this connection already called bardo_solve."}}, 'additionalProperties': False}
bardo_solve
Submit your answer to the login puzzle. On success, this connection is
now logged in â every other tool (bardo_sign, bardo_notes_list,
bardo_dashboard, ...) just works from here with no session_token needed.
That only holds for *this* connection, though: if you continue in a
different connection later, or you solved the puzzle via a plain HTTP
call instead of this tool, that other context won't know about this
session automatically â pass the returned session_token explicitly as
the session_token argument to whichever tool needs it there instead.
Input schema
{'type': 'object', 'title': 'bardo_solveArguments', 'required': ['challenge_id', 'answer'], 'properties': {'answer': {'type': 'string', 'title': 'Answer', 'description': 'Your solved answer to the puzzle.'}, 'challenge_id': {'type': 'string', 'title': 'Challenge Id', 'description': 'The puzzle id returned by bardo_login.'}}, 'additionalProperties': False}
bardo_stepup
Mint a fresh step-up puzzle for a privileged action (currently:
bardo_policy_set). Solve it yourself, then pass challenge_id + your
answer to the tool that needs it. (bardo_policy_set also mints one
itself on demand â call this directly only if you want the puzzle
up front.)
Input schema
{'type': 'object', 'title': 'bardo_stepupArguments', 'properties': {'session_token': {'anyOf': [{'type': 'string'}, {'type': 'null'}], 'title': 'Session Token', 'default': None, 'description': "Bardo session token, only needed if this call's identity was established somewhere other than this exact connection (a plain HTTP/curl solve, a previous conversation, a different MCP connection). Omit it if this connection already called bardo_solve."}}, 'additionalProperties': False}
bardo_verify
Verify a signature over a UTF-8 message. Public utility (no session).
Read only
Input schema
{'type': 'object', 'title': 'bardo_verifyArguments', 'required': ['message', 'signature_b64', 'public_key_b64'], 'properties': {'message': {'type': 'string', 'title': 'Message', 'description': 'UTF-8 message the signature was made over.'}, 'signature_b64': {'type': 'string', 'title': 'Signature B64', 'description': 'Signature to verify, base64.'}, 'public_key_b64': {'type': 'string', 'title': 'Public Key B64', 'description': "Signer's public key, base64 â\x80\x94 from bardo_public_key or a document's own proof."}}, 'additionalProperties': False}
History
Recent tool changes
Added
bardo_solve
Sept. 17, 2026, 12:39 p.m.
Added
bardo_login
Sept. 17, 2026, 12:39 p.m.
Added
bardo_register
Sept. 17, 2026, 12:39 p.m.
Added
bardo_account_deletion_cancel
Sept. 17, 2026, 12:39 p.m.
Added
bardo_account_deletion_request
Sept. 17, 2026, 12:39 p.m.
Added
bardo_account_deletion_status
Sept. 17, 2026, 12:39 p.m.
Added
bardo_feedback
Sept. 17, 2026, 12:39 p.m.
Added
bardo_contact_delete
Sept. 17, 2026, 12:39 p.m.
Added
bardo_contact_set
Sept. 17, 2026, 12:39 p.m.
Added
bardo_contact_get
Sept. 17, 2026, 12:39 p.m.
Added
bardo_notices_ack
Sept. 17, 2026, 12:39 p.m.
Added
bardo_notices
Sept. 17, 2026, 12:39 p.m.
Added
bardo_dashboard
Sept. 17, 2026, 12:39 p.m.
Added
bardo_link_delete
Sept. 17, 2026, 12:39 p.m.
Added
bardo_link_add
Sept. 17, 2026, 12:39 p.m.
Added
bardo_note_undelete
Sept. 17, 2026, 12:39 p.m.
Added
bardo_note_delete
Sept. 17, 2026, 12:39 p.m.
Added
bardo_note_update
Sept. 17, 2026, 12:39 p.m.
Added
bardo_note_history
Sept. 17, 2026, 12:39 p.m.
Added
bardo_note_get
Sept. 17, 2026, 12:39 p.m.
Added
bardo_notes_list
Sept. 17, 2026, 12:39 p.m.
Added
bardo_note_add
Sept. 17, 2026, 12:39 p.m.
Added
bardo_policy_abort_pending
Sept. 17, 2026, 12:39 p.m.
Added
bardo_policy_set
Sept. 17, 2026, 12:39 p.m.
Added
bardo_policy_get
Sept. 17, 2026, 12:39 p.m.
Added
bardo_stepup
Sept. 17, 2026, 12:39 p.m.
Added
bardo_sessions_revoke_all
Sept. 17, 2026, 12:39 p.m.
Added
bardo_session_revoke_current
Sept. 17, 2026, 12:39 p.m.
Added
bardo_sessions_list
Sept. 17, 2026, 12:39 p.m.
Added
bardo_attestation_issue
Sept. 17, 2026, 12:39 p.m.
Discover
Similar MCP servers
Security Recipes
io.github.stevologic/security-recipes
Provides read-only CVE intelligence, security remediation playbooks, and governance guidance for agentic workflows and MCP enviro…
website-search
com.zeltser/website-search
Provides security article search and structured guidance, templates, frameworks, and review criteria for incident response, threa…
Mitre Attck
io.github.pipeworx-io/mitre-attck
Provides searchable MITRE ATT&CK data on adversary groups, tactics, techniques, mitigations, and related STIX domains.
Owasp
io.github.pipeworx-io/owasp
Provides OWASP ASVS chapters and requirements plus defensive guidance from the OWASP Cheat Sheet Series.
Ai Incident Db
io.github.pipeworx-io/ai-incident-db
Provides access to the AI Incident Database, including recent incidents, detailed incident records, and taxonomies for classifyin…
Hex.pm MCP
io.github.joshrotenberg/hexpm-mcp
Searches and inspects Hex.pm Elixir packages, documentation, dependencies, releases, health, and dependency security risks.
Remnant — Collective Memory & Evidence-Backed Trust for AI Agents
com.dedale-bi.remnant/remnant
Provides searchable collective memories, public agent discovery, provenance inspection, and cryptographically verifiable trust pa…
AARF Utility Network
org.qolapps/aarf-utility-network
Offers paid utilities for code and dependency review, migration analysis, document extraction and validation, data cleaning, reda…