{
  "name": "ai.auten/mcp",
  "slug": "offline-mcp-e220c7ae21b3de9faeadf25a",
  "type": "mcp",
  "category": "developer-tools",
  "example": false,
  "evidence_state": "offline_listing",
  "stamp": "Offline listing — machine-checked",
  "summary": "Acquired @autenai/mcp@0.1.5; tarball sha256 3fc0b87d114b1919e4f70bbdbd56d8b8462fe455c0cd5bbe008258857f1b7ae2.",
  "outcome": "The server started offline in an isolated container (runtime/inspect.json).",
  "rule_results": [
    "It answered tools/list with 1 tools named [\"install_auten\"]."
  ],
  "task": "Does this exact package start offline and answer an MCP tools list?",
  "setup": "Acquisition lock records install_scripts_ignored=true; runtime command in argv.json.",
  "limitations": "Runtime isolation evidence: runtime/inspect.json. Scope: initialize and tools/list (mcp/report.json). Network-attempt tracing and credential tests are outside this scope. Later versions require a new run.",
  "source_url": "https://www.npmjs.com/package/@autenai/mcp",
  "documentation_url": "https://www.npmjs.com/package/@autenai/mcp",
  "tree_sha256": "98f52dcba6c9006a490470bd6323cb8a361a5fe7673b35faccdb912a75b3a22e",
  "image_digest": "sha256:0c6b892d61457ee21629d03f9b28c5e70caaaaa3ba122bb6e7467ccfe64a522e",
  "file_sha256": {
    ".docker/buildx/.buildNodeID": "7896b7d5a78a2679b7b94fee571cd5422e987b223daae59c5caa7fef4a19aabd",
    ".docker/buildx/.lock": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
    ".docker/buildx/activity/default": "9e3539856647a0e2ab7b9029f4e96c765b1859796bc331c28169576fcf121db8",
    ".docker/buildx/refs/default/default/gafrohsbmd6ihztci45m9y6ym": "e9458b0008050e43d3af379251d161eeee204812c3cfa7f1e67e657eb2fc3012",
    ".dockerignore": "99a18f8ea8514c4bcd448371d1bc1b8b4d877d6606e7c5b3d2a9dd52b32aa8d0",
    "Containerfile": "d849cf10a7e9b70fecc5fcdc6333dd493aed8767d236893e675cfa4662520c54",
    "image.id": "edaaf66a8532b34782921a5676af9ddc265f4350a130b26a202dbdc7e914c332",
    "installed/node_modules/.package-lock.json": "d6e6a7d24d18df2fbbaf3e1697d4d54a4dbf141890b4e8e049c810a51e751bae",
    "installed/node_modules/@autenai/mcp/LICENSE": "2ff1015fe190051e25dd28ed9c8534c6bed6b00f0de6a19aaed8b1c6ffcd7e5e",
    "installed/node_modules/@autenai/mcp/README.md": "09d5f9940f5deb6356be6924b3b6e3f236acdd0fb300cada46da5ec8368f78ba",
    "installed/node_modules/@autenai/mcp/bin/auten-mcp.js": "8b96c0c1fb34040df5c18885b679148e825a2e65e5db0d05bb74474f10177fca",
    "installed/node_modules/@autenai/mcp/package.json": "ec567f049dd4076850edb46babb33c1d83eadd7f80e6a89711e39134b5d07ddd",
    "installed/package-lock.json": "da0101a0f5dcc272864a0ad3a73e3199a5a1ab96906bd0fb6c971ad5d331b026",
    "installed/package.json": "2e78a6b53d04d5245f5552e21cf209fae291a45b0e183a17f921d525828b9e0c",
    "npmrc-global": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
    "npmrc-user": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
    "packs/autenai-mcp-0.1.5.tgz": "3fc0b87d114b1919e4f70bbdbd56d8b8462fe455c0cd5bbe008258857f1b7ae2"
  },
  "lockfiles": [
    "installed/package-lock.json"
  ],
  "tools_list_hashes": [
    "449236b7cb7f930eb14267d5766960876ed63973f7a5e7c73113efccb902e96b"
  ],
  "utc_date": "2026-10-17T11:02:18.481374Z",
  "source_date": "2026-10-16",
  "discovered_date": "2026-10-16",
  "retested_date": "2026-10-17",
  "reviewed_date": "2026-10-17",
  "published_date": "2026-10-17",
  "modified_date": "2026-10-17",
  "reviewer": "machine pipeline",
  "harness_version": "toolwitness harness at commit 4795a352bbc24419d7d6389f3d607fd938a08916",
  "claude_code_version": "Outside this listing scope.",
  "model_id": "Outside this listing scope.",
  "scanner_version": "none",
  "rulepack_version": "none",
  "agents": [],
  "disclaimer": "This record shows that this exact package version started offline in an isolated container and answered an MCP tools list (runtime/inspect.json, mcp/report.json). Scope: initialize and tools/list. It is not a security or quality verdict. Later versions are outside this record.",
  "commands": [
    "docker run -i --name toolwitness-9b6f8209b3fd44b790b817e1b7477439 --pull=never --network none --read-only --cap-drop=all --security-opt=no-new-privileges --user=65532:65532 --memory=512m --memory-swap=512m --pids-limit=64 --cpus=1 --ulimit=nofile=256:256 --ulimit=fsize=16777216:16777216 --tmpfs=/tmp:rw,nosuid,nodev,noexec,size=64m,mode=1777 --env=HOME=/tmp --workdir=/tmp --entrypoint node sha256:0c6b892d61457ee21629d03f9b28c5e70caaaaa3ba122bb6e7467ccfe64a522e /installed/node_modules/@autenai/mcp/bin/auten-mcp.js"
  ],
  "prompt_list": [
    "Outside this listing scope."
  ],
  "history": [
    "2026-10-17T11:02:18.481374Z: offline initialize and tools/list"
  ],
  "application": {
    "name": "@autenai/mcp",
    "softwareVersion": "0.1.5",
    "applicationCategory": "DeveloperApplication"
  },
  "artifacts": {
    "transcript": "stdin:\n{\"id\":1,\"jsonrpc\":\"2.0\",\"method\":\"initialize\",\"params\":{\"capabilities\":{},\"clientInfo\":{\"name\":\"toolwitness\",\"version\":\"s772-v0\"},\"protocolVersion\":\"2025-11-25\"}}\n{\"jsonrpc\":\"2.0\",\"method\":\"notifications/initialized\"}\n{\"id\":2,\"jsonrpc\":\"2.0\",\"method\":\"tools/list\",\"params\":{}}\n\nstdout:\n{\"jsonrpc\":\"2.0\",\"id\":1,\"result\":{\"protocolVersion\":\"2025-11-25\",\"capabilities\":{\"tools\":{}},\"serverInfo\":{\"name\":\"auten\",\"version\":\"0.1.5\"},\"instructions\":\"Auten is not installed on this computer yet, so its tools are not available.\\n\\nInstall the runner by running this in a terminal (it asks for sudo once to apt-install the accessibility and input packages):\\n\\n    curl -fsSL https://auten.ai/install | bash\\n\\nThe first run asks for a free key (30 minutes every month, no card).\\nThen restart your MCP client. This server will start Auten automatically\\nand you get the full tool set: list_elements, click_at, fill, read_text,\\nscreenshot, open_app, run_skill and more.\\n\\nSetup for every client: https://auten.ai/connect\"}}\n{\"jsonrpc\":\"2.0\",\"id\":2,\"result\":{\"tools\":[{\"name\":\"install_auten\",\"description\":\"Auten (computer use for your AI agent) is not installed on this machine yet. Call this to get the one-line install command for this OS and the next steps.\",\"inputSchema\":{\"type\":\"object\",\"properties\":{},\"additionalProperties\":false}}]}}\n",
    "sinkhole_log": "Scope: runtime isolation evidence in runtime/inspect.json.",
    "canary_log": "Outside this listing scope.",
    "scanner_output": "Outside this listing scope.",
    "normalized_text": "{\"calls\": [], \"exit_before_cleanup\": null, \"initialize\": {\"capabilities\": {\"tools\": {}}, \"instructions\": \"Auten is not installed on this computer yet, so its tools are not available.\\n\\nInstall the runner by running this in a terminal (it asks for sudo once to apt-install the accessibility and input packages):\\n\\n    curl -fsSL https://auten.ai/install | bash\\n\\nThe first run asks for a free key (30 minutes every month, no card).\\nThen restart your MCP client. This server will start Auten automatically\\nand you get the full tool set: list_elements, click_at, fill, read_text,\\nscreenshot, open_app, run_skill and more.\\n\\nSetup for every client: https://auten.ai/connect\", \"protocolVersion\": \"2025-11-25\", \"serverInfo\": {\"name\": \"auten\", \"version\": \"0.1.5\"}}, \"list_change_notifications\": 0, \"monotonic_seconds\": 0.187261301005492, \"outcome\": \"listed tools offline\", \"started_utc\": \"2026-10-17T11:02:18.481374Z\", \"status\": \"completed\", \"tools\": [{\"description\": \"Auten (computer use for your AI agent) is not installed on this machine yet. Call this to get the one-line install command for this OS and the next steps.\", \"inputSchema\": {\"additionalProperties\": false, \"properties\": {}, \"type\": \"object\"}, \"name\": \"install_auten\"}], \"tools_list_hashes\": [\"449236b7cb7f930eb14267d5766960876ed63973f7a5e7c73113efccb902e96b\"], \"wall_limit_seconds\": 45}"
  },
  "review_input": {
    "identity_artifact": "identity.json",
    "evidence_sha256": {
      "LOCK.json": "fa3d1e1372e6b3a0a969ac386d0285fbc7e02122ca55d45725117352528be88f",
      "argv.json": "0de9d8b808665fc890d7774d2cdf76a91e33b718b9c09ef91998b5dc4e9f4492",
      "complete.json": "ffd35b2d3af81ff5c5b3b7bdd28823e8660ed0efb1c23515ee0a8e88384cd5c9",
      "component-record.json": "253afcdebf9bbc966d4354eeb7c6555bda3a2b4036bd021e0834197af538cb31",
      "fixture.json": "ca3d163bab055381827226140568f3bef7eaac187cebd76878e0b63e9e442356",
      "harness/acquire.py": "67fe8484cb7028040f6b494de3702b02fcd544986a6bf738d14001b8ae2ae9cb",
      "harness/auto_witness.py": "b693353f11922463baf0884fe8680e083e2807e1ba7bb6026f6453db6aaf8b0a",
      "harness/mcp_driver.py": "b5996ec8e534b797c976dc83e44af0b52f64895fec5e72a4f9b32cb2f63cbbf7",
      "harness/record.py": "d34b444b8f6ccf5f79fae86dd02c2fc223f11e026cffa8090007ac5f9be85c82",
      "harness/runtime_proof.py": "b9f8d2405611de5894c6287631c30ade8e8e5013a547923fbd3034c76b0d2a71",
      "identity.json": "c6b939ca1e2b09b5722110336b7a4ec0071a88ef8771a837e25878c698dce0de",
      "manifest.json": "79267de3e67cb4a22e5a819c0ea3293ac3a5f44e3e81a73658475b4ca9f656cf",
      "mcp/report.json": "b1c014531e724bb9f8d92d19c7b7650096e707a418e2644e65b6d8cd0963433d",
      "mcp/stderr.bin": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
      "mcp/stdin.bin": "9ced9858b21f60691df654e649f586e91cfcaf60ed887c79c3df92f599166df6",
      "mcp/stdout.bin": "c00977061965cc4bb7a67b111cb4f03bb17673e3d7ee54a7528989e5a56172b3",
      "runtime/inspect.json": "6ee15bcadced43535817e3c1f3e6f8e3821bdd86f2fba41e570ef944a9bd4d40"
    },
    "claims": [
      {
        "id": "acquired",
        "field": "summary",
        "text": "Acquired @autenai/mcp@0.1.5; tarball sha256 3fc0b87d114b1919e4f70bbdbd56d8b8462fe455c0cd5bbe008258857f1b7ae2.",
        "sources": [
          "LOCK.json"
        ]
      },
      {
        "id": "started",
        "field": "outcome",
        "text": "The server started offline in an isolated container (runtime/inspect.json).",
        "sources": [
          "runtime/inspect.json",
          "LOCK.json",
          "argv.json",
          "mcp/report.json",
          "mcp/stdout.bin"
        ]
      },
      {
        "id": "listed",
        "field": "rule_results.0",
        "text": "It answered tools/list with 1 tools named [\"install_auten\"].",
        "sources": [
          "mcp/report.json",
          "mcp/stdout.bin"
        ]
      }
    ]
  },
  "review": {
    "kind": "machine-checked",
    "date": "2026-10-17",
    "reviewed_sha256": "e69e4595633c43d8d1f3b1971f5b3408495b8047c5b1610cc3e2dfa727affab0",
    "gates": "9afa6a15b8ea130e73ec7bfcc4b1d56d7c56bf73beac3b6fba5cf8608c5b568f",
    "codex": "2226e15a017309d878705b9c65fa69749f0f9529d4c8717c469d8c87b0118c3c",
    "grok": "7d64cdf5dce52761ce884ea53fd2ba31f615f5c566457a16d6f4fa97b90070dc",
    "summary": "Deterministic gates passed; Codex confirmed all outcome claims; Grok reported no standing refutation."
  }
}