{
  "name": "ai.autonomous.harness/harness",
  "slug": "offline-mcp-81fca55ec5dff40148ca051b",
  "type": "mcp",
  "category": "developer-tools",
  "example": false,
  "evidence_state": "offline_listing",
  "stamp": "Offline listing — machine-checked",
  "summary": "Acquired @autonomous-ai/harness-mcp@0.2.0; tarball sha256 5f4da1f2cb83b9c0f2a7bc060a103518d13e67573e71921425113b1c7d59b3b8.",
  "outcome": "The server started offline in an isolated container (runtime/inspect.json).",
  "rule_results": [
    "It answered tools/list with 1 tools named [\"harness_setup\"]."
  ],
  "task": "Does this exact package start offline and answer an MCP tools list?",
  "setup": "Acquisition lock records install_scripts_ignored=true; runtime command in argv.json.",
  "limitations": "Runtime isolation evidence: runtime/inspect.json. Scope: initialize and tools/list (mcp/report.json). Credential tests are outside this scope. Later versions require a new run. The server reported version 0.1.0 in its initialize response (mcp/stdout.bin); the package version is 0.2.0 (LOCK.json).",
  "source_url": "https://www.npmjs.com/package/@autonomous-ai/harness-mcp",
  "documentation_url": "https://www.npmjs.com/package/@autonomous-ai/harness-mcp",
  "tree_sha256": "9b01d902c1e697a183a155275efa966e0785048d4f8662b01df2d839be798f7f",
  "image_digest": "sha256:fe7eb0deb0f3c917761c8f9b46831f0d8e578b9729f9ac71931abef0c745f89a",
  "file_sha256": {
    ".docker/buildx/.buildNodeID": "e93864174833882fb1c42ad1b0dfb046e9467fba0dffec4bf6ffaafd010f2046",
    ".docker/buildx/.lock": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
    ".docker/buildx/activity/default": "e9c7223673baf3983146c06c9c38a6f2dc6102b3aabdd19e8e8ebdee57789ac4",
    ".docker/buildx/refs/default/default/k9z2s2gvb0gdjqz45xe0s8f8w": "2500b70b627c41fb39cbdfa8ff4729c84375148a9a751623621346c723c0a23e",
    ".dockerignore": "34d45a3bba1a2a33aa593aa941ec6f0278116d86e7b8a7af4db535730c7e9a39",
    "Containerfile": "24c23bc9b9e9e88eb7e568a91b2f3eb97b49c1ed3a8ea902c12924c48931333e",
    "attempt-monitor": "f1679083579fc9a08aa4a157ecbe03e369f5d95df5375ab0f045d79a8871c769",
    "image.id": "32f8508b2e64e0bdb3ba9354a9ec76e9052036ce8f71995db137b07a738d0a72",
    "installed/node_modules/.package-lock.json": "1c81bf552c3d1beae0eeb6e5158f88690be65faefd1734d406698cac992f8cb4",
    "installed/node_modules/@autonomous-ai/harness-mcp/README.md": "595d32552fa87f419bcc0aa0450dbad0dd65d5f8def26be88cfaa3b20d6e9fc2",
    "installed/node_modules/@autonomous-ai/harness-mcp/bin.mjs": "cb7bdb53f0e0136b74d519e347f167975b0a2ce23e87a15b33221d13b9964fc0",
    "installed/node_modules/@autonomous-ai/harness-mcp/index.mjs": "c765d5cc8e205c4ae1c655048e52ea51ac0fb50da452000fac97bc78e15f53cd",
    "installed/node_modules/@autonomous-ai/harness-mcp/package.json": "ed5199da4b1291c9daac25cd45f15d3de9462e59e6019e109aa54154e89d4ce3",
    "installed/package-lock.json": "2ee4a099240bd3e1774b716daf40ca8292965e6584480e4e787d2d831f8a6ec3",
    "installed/package.json": "0134cfae61ddae7f322c4a6e8c138ea24f063203282ef4e7599d719abad0b4bf",
    "npmrc-global": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
    "npmrc-user": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
    "packs/autonomous-ai-harness-mcp-0.2.0.tgz": "5f4da1f2cb83b9c0f2a7bc060a103518d13e67573e71921425113b1c7d59b3b8"
  },
  "lockfiles": [
    "installed/package-lock.json"
  ],
  "tools_list_hashes": [
    "a900fc1626d4ce5eac4d2107e51db70aab9b959890df678438262678c4110cf2"
  ],
  "utc_date": "2026-10-19T12:15:50.388413Z",
  "source_date": "2026-10-19",
  "discovered_date": "2026-10-19",
  "retested_date": "2026-10-19",
  "reviewed_date": "2026-10-19",
  "published_date": "2026-10-19",
  "modified_date": "2026-10-19",
  "reviewer": "machine pipeline",
  "harness_version": "toolwitness harness at commit bb5f6ab8ae7d288da61715b984ccaa78e6224577",
  "claude_code_version": "Outside this listing scope.",
  "model_id": "Outside this listing scope.",
  "scanner_version": "none",
  "rulepack_version": "none",
  "agents": [],
  "disclaimer": "This record shows that this exact package version started offline in an isolated container and answered an MCP tools list (runtime/inspect.json, mcp/report.json). Scope: initialize and tools/list. It is not a security or quality verdict. Later versions are outside this record.",
  "commands": [
    "docker run -i --name toolwitness-b9f0c75128944d44b7e2585b761be1e3 --pull=never --network none --read-only --cap-drop=all --security-opt=no-new-privileges --user=65532:65532 --memory=512m --memory-swap=512m --pids-limit=64 --cpus=1 --ulimit=nofile=256:256 --ulimit=fsize=16777216:16777216 --tmpfs=/tmp:rw,nosuid,nodev,noexec,size=64m,mode=1777 --env=HOME=/tmp --workdir=/tmp --entrypoint /attempt-monitor sha256:fe7eb0deb0f3c917761c8f9b46831f0d8e578b9729f9ac71931abef0c745f89a /installed/node_modules/@autonomous-ai/harness-mcp node /installed/node_modules/@autonomous-ai/harness-mcp/bin.mjs"
  ],
  "prompt_list": [
    "Outside this listing scope."
  ],
  "history": [
    "2026-10-19T12:15:50.388413Z: offline initialize and tools/list"
  ],
  "application": {
    "name": "@autonomous-ai/harness-mcp",
    "softwareVersion": "0.2.0",
    "applicationCategory": "DeveloperApplication"
  },
  "artifacts": {
    "transcript": "stdin:\n{\"id\":1,\"jsonrpc\":\"2.0\",\"method\":\"initialize\",\"params\":{\"capabilities\":{},\"clientInfo\":{\"name\":\"toolwitness\",\"version\":\"s772-v0\"},\"protocolVersion\":\"2025-11-25\"}}\n{\"jsonrpc\":\"2.0\",\"method\":\"notifications/initialized\"}\n{\"id\":2,\"jsonrpc\":\"2.0\",\"method\":\"tools/list\",\"params\":{}}\n\nstdout:\n{\"jsonrpc\":\"2.0\",\"id\":1,\"result\":{\"protocolVersion\":\"2025-11-25\",\"capabilities\":{\"tools\":{}},\"serverInfo\":{\"name\":\"harness\",\"title\":\"Harness (not installed)\",\"version\":\"0.1.0\"},\"instructions\":\"Harness is not installed on this computer. It runs coding agents (Claude Code, Codex) in sessions of their own that the person can watch, and gives you tools to start, wait for, read and close them.\\n\\nTo install it, ask the person, then run:\\n  curl -fsSL https://harness.autonomous.ai/cli/install.sh | bash\\n  harness start\\n\\nThen restart this MCP server (or your client) to get the Harness tools, and call harness_whoami: it says whether you may start harnesses.\\nOnly the person can let you: they sign in (harness login, in a browser) and turn on \\\"Agents can start other agents\\\"\\n(Settings ▸ Experimental, or harness settings agents-start-agents on in their own terminal). Ask them; until then, do the work yourself.\\nMore: https://harness.autonomous.ai/agents\"}}\n{\"jsonrpc\":\"2.0\",\"id\":2,\"result\":{\"tools\":[{\"name\":\"harness_setup\",\"description\":\"Harness is not installed here. Call this for how to install it, which gives you tools to start, wait for, read and close other coding agents.\",\"inputSchema\":{\"type\":\"object\",\"properties\":{},\"additionalProperties\":false},\"annotations\":{\"readOnlyHint\":true}}]}}\n",
    "sinkhole_log": "Scope: runtime isolation evidence in runtime/inspect.json.",
    "canary_log": "Outside this listing scope.",
    "scanner_output": "Outside this listing scope.",
    "normalized_text": "{\"attempts\": [], \"calls\": [], \"denied_syscalls\": [{\"errno\": 1, \"kind\": \"attempt\", \"operation\": \"unclassified\", \"target\": \"syscall:425\"}, {\"errno\": 1, \"kind\": \"attempt\", \"operation\": \"unclassified\", \"target\": \"syscall:425\"}, {\"errno\": 1, \"kind\": \"attempt\", \"operation\": \"unclassified\", \"target\": \"syscall:425\"}], \"exit_before_cleanup\": null, \"initialize\": {\"capabilities\": {\"tools\": {}}, \"instructions\": \"Harness is not installed on this computer. It runs coding agents (Claude Code, Codex) in sessions of their own that the person can watch, and gives you tools to start, wait for, read and close them.\\n\\nTo install it, ask the person, then run:\\n  curl -fsSL https://harness.autonomous.ai/cli/install.sh | bash\\n  harness start\\n\\nThen restart this MCP server (or your client) to get the Harness tools, and call harness_whoami: it says whether you may start harnesses.\\nOnly the person can let you: they sign in (harness login, in a browser) and turn on \\\"Agents can start other agents\\\"\\n(Settings ▸ Experimental, or harness settings agents-start-agents on in their own terminal). Ask them; until then, do the work yourself.\\nMore: https://harness.autonomous.ai/agents\", \"protocolVersion\": \"2025-11-25\", \"serverInfo\": {\"name\": \"harness\", \"title\": \"Harness (not installed)\", \"version\": \"0.1.0\"}}, \"list_change_notifications\": 0, \"monotonic_seconds\": 0.252947207998659, \"outcome\": \"listed tools offline\", \"placeholder_env\": [], \"started_utc\": \"2026-10-19T12:15:50.388413Z\", \"status\": \"completed\", \"tools\": [{\"annotations\": {\"readOnlyHint\": true}, \"description\": \"Harness is not installed here. Call this for how to install it, which gives you tools to start, wait for, read and close other coding agents.\", \"inputSchema\": {\"additionalProperties\": false, \"properties\": {}, \"type\": \"object\"}, \"name\": \"harness_setup\"}], \"tools_list_hashes\": [\"a900fc1626d4ce5eac4d2107e51db70aab9b959890df678438262678c4110cf2\"], \"wall_limit_seconds\": 45}"
  },
  "review_input": {
    "identity_artifact": "identity.json",
    "evidence_sha256": {
      "LOCK.json": "0717e5e89d276698e22c70ecdfc9b84e7b3ff2606cc03fc945c9114da7e1c602",
      "argv.json": "c7e53663b96d4f5bfe6be4e0e7c93d7da652d7fa73960a001d5bb93a3a758d25",
      "attempts.json": "336824edd5729d3f85f96cc7fd209b05783eb6bcdacb0e54d47ae000e3224a67",
      "attempts.raw": "f1b53f5c5c8b06049e14c1170bb9b9a0ad4be97f6172ffe37360de3b51e635fd",
      "complete.json": "c9208725e847be44d5f1f34175f4b6be16a12cd0910f4f0bdc1430feec47177d",
      "component-record.json": "d0e7f9b044c11cd944a041f412a4b54ae5b8105c21f3684372a2a9f28c8e2967",
      "fixture.json": "ca3d163bab055381827226140568f3bef7eaac187cebd76878e0b63e9e442356",
      "harness/acquire.py": "67fe8484cb7028040f6b494de3702b02fcd544986a6bf738d14001b8ae2ae9cb",
      "harness/attempt_accounting.py": "7b7d468ea9055c071e8855444a71869b81e631977bb8fc5671cec381c69bb328",
      "harness/attempt_monitor.c": "f1409eb0d6a28a8e25034d0e1969bea1a75eecc8f50c0172d332364650bada1f",
      "harness/auto_witness.py": "79f652b57980dc1c6c4aae6891b372e79ed617afdde814559697f353a1b837eb",
      "harness/mcp_driver.py": "b5996ec8e534b797c976dc83e44af0b52f64895fec5e72a4f9b32cb2f63cbbf7",
      "harness/record.py": "d34b444b8f6ccf5f79fae86dd02c2fc223f11e026cffa8090007ac5f9be85c82",
      "harness/runtime_proof.py": "5c7cf3ea134bd9b7c146b357653f1311d29db54894786a99b4d5b445a53456d3",
      "identity.json": "5ee774706618b476a17af33866a99b419a01e82c3c6f7d8b23d9ceaea4cc3454",
      "manifest.json": "ec1e5719e5461753d8c183e8a51920d33e1dd7ef3f8f00d1de5ce94a0937d66d",
      "mcp/report.json": "46bbcc69bda1f45f3f45d5d83d206579c22180da74e397fd46ec1b0da89212cb",
      "mcp/stderr.bin": "d8e1ee8cbbdd71c2a4f238a14c842aadbced165da5b1f75b2294e35d157c925b",
      "mcp/stdin.bin": "9ced9858b21f60691df654e649f586e91cfcaf60ed887c79c3df92f599166df6",
      "mcp/stdout.bin": "92eb4d79c9453a424f93ee9a47b945fbf9ff72831e3f8f0dbf8c33553247931f",
      "mcp/subject-stderr.bin": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
      "runtime/inspect.json": "b0b7f75d715e5abf34bee2cb2a4e58180f1a0da527fef093773350514e2425de"
    },
    "claims": [
      {
        "id": "acquired",
        "field": "summary",
        "text": "Acquired @autonomous-ai/harness-mcp@0.2.0; tarball sha256 5f4da1f2cb83b9c0f2a7bc060a103518d13e67573e71921425113b1c7d59b3b8.",
        "sources": [
          "LOCK.json"
        ]
      },
      {
        "id": "started",
        "field": "outcome",
        "text": "The server started offline in an isolated container (runtime/inspect.json).",
        "sources": [
          "runtime/inspect.json",
          "LOCK.json",
          "argv.json",
          "mcp/report.json",
          "mcp/stdout.bin"
        ]
      },
      {
        "id": "listed",
        "field": "rule_results.0",
        "text": "It answered tools/list with 1 tools named [\"harness_setup\"].",
        "sources": [
          "mcp/report.json",
          "mcp/stdout.bin"
        ]
      }
    ]
  },
  "review": {
    "kind": "machine-checked",
    "date": "2026-10-19",
    "reviewed_sha256": "023b11f1d852c1a70742035951c5bc91ff9da73b1e5f497f5f226c3d1bb9a6d2",
    "gates": "6bf201ddd3fc2436ad2e8d33e03ead50bfa05dd6417f0b0a9d092aaba9a44983",
    "codex": "791ca202a9f55daa34466dfeeeb57d81c4e26f1cf0a68dc12af28e46dc61605a",
    "grok": "5b247c6130affe0f4f1cd0f1f96f4891b2bd5b88f7ff742d66189a6f135841d0",
    "summary": "Deterministic gates passed; every claim rebuilt from evidence with a reviewed template; Grok reported no standing refutation."
  }
}