Runtime isolation evidence: runtime/inspect.json. Scope: initialize and tools/list (mcp/report.json). Credential tests are outside this scope. Later versions require a new run. The server reported version 0.1.0 in its initialize response (mcp/stdout.bin); the package version is 0.2.0 (LOCK.json).

developer-tools · mcp · Upstream source · Upstream documentation

Offline listing on Linux x86_64, image sha256:fe7eb0deb0f3c917761c8f9b46831f0d8e578b9729f9ac71931abef0c745f89a, Claude Code Outside this listing scope. binary none: no Claude binary ran, model Outside this listing scope., UTC 2026-10-19T12:15:50.388413Z, tree 9b01d902c1e697a183a155275efa966e0785048d4f8662b01df2d839be798f7f. No claim for macOS, Windows, WSL, Alpine/musl, or ARM64.

Scope: tested alone.

No browser or computer-use tools. Pin this exact version; the stamp does not follow updates.

Full record

name: ai.autonomous.harness/harness
slug: offline-mcp-81fca55ec5dff40148ca051b
type: mcp
category: developer-tools
example: false
evidence state: offline_listing
stamp: Offline listing — machine-checked
summary: Acquired @autonomous-ai/[email protected]; tarball sha256 5f4da1f2cb83b9c0f2a7bc060a103518d13e67573e71921425113b1c7d59b3b8.
outcome: The server started offline in an isolated container (runtime/inspect.json).
rule results: ["It answered tools/list with 1 tools named [\"harness_setup\"]."]
task: Does this exact package start offline and answer an MCP tools list?
setup: Acquisition lock records install_scripts_ignored=true; runtime command in argv.json.
limitations: Runtime isolation evidence: runtime/inspect.json. Scope: initialize and tools/list (mcp/report.json). Credential tests are outside this scope. Later versions require a new run. The server reported version 0.1.0 in its initialize response (mcp/stdout.bin); the package version is 0.2.0 (LOCK.json).
source url: https://www.npmjs.com/package/@autonomous-ai/harness-mcp
documentation url: https://www.npmjs.com/package/@autonomous-ai/harness-mcp
tree sha256: 9b01d902c1e697a183a155275efa966e0785048d4f8662b01df2d839be798f7f
image digest: sha256:fe7eb0deb0f3c917761c8f9b46831f0d8e578b9729f9ac71931abef0c745f89a
file sha256: {".docker/buildx/.buildNodeID":"e93864174833882fb1c42ad1b0dfb046e9467fba0dffec4bf6ffaafd010f2046",".docker/buildx/.lock":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",".docker/buildx/activity/default":"e9c7223673baf3983146c06c9c38a6f2dc6102b3aabdd19e8e8ebdee57789ac4",".docker/buildx/refs/default/default/k9z2s2gvb0gdjqz45xe0s8f8w":"2500b70b627c41fb39cbdfa8ff4729c84375148a9a751623621346c723c0a23e",".dockerignore":"34d45a3bba1a2a33aa593aa941ec6f0278116d86e7b8a7af4db535730c7e9a39","Containerfile":"24c23bc9b9e9e88eb7e568a91b2f3eb97b49c1ed3a8ea902c12924c48931333e","attempt-monitor":"f1679083579fc9a08aa4a157ecbe03e369f5d95df5375ab0f045d79a8871c769","image.id":"32f8508b2e64e0bdb3ba9354a9ec76e9052036ce8f71995db137b07a738d0a72","installed/node_modules/.package-lock.json":"1c81bf552c3d1beae0eeb6e5158f88690be65faefd1734d406698cac992f8cb4","installed/node_modules/@autonomous-ai/harness-mcp/README.md":"595d32552fa87f419bcc0aa0450dbad0dd65d5f8def26be88cfaa3b20d6e9fc2","installed/node_modules/@autonomous-ai/harness-mcp/bin.mjs":"cb7bdb53f0e0136b74d519e347f167975b0a2ce23e87a15b33221d13b9964fc0","installed/node_modules/@autonomous-ai/harness-mcp/index.mjs":"c765d5cc8e205c4ae1c655048e52ea51ac0fb50da452000fac97bc78e15f53cd","installed/node_modules/@autonomous-ai/harness-mcp/package.json":"ed5199da4b1291c9daac25cd45f15d3de9462e59e6019e109aa54154e89d4ce3","installed/package-lock.json":"2ee4a099240bd3e1774b716daf40ca8292965e6584480e4e787d2d831f8a6ec3","installed/package.json":"0134cfae61ddae7f322c4a6e8c138ea24f063203282ef4e7599d719abad0b4bf","npmrc-global":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","npmrc-user":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","packs/autonomous-ai-harness-mcp-0.2.0.tgz":"5f4da1f2cb83b9c0f2a7bc060a103518d13e67573e71921425113b1c7d59b3b8"}
lockfiles: ["installed/package-lock.json"]
tools list hashes: ["a900fc1626d4ce5eac4d2107e51db70aab9b959890df678438262678c4110cf2"]
utc date: 2026-10-19T12:15:50.388413Z
source date: 2026-10-19
discovered date: 2026-10-19
retested date: 2026-10-19
reviewed date: 2026-10-19
published date: 2026-10-19
modified date: 2026-10-19
reviewer: Machine-checked
harness version: toolwitness harness at commit bb5f6ab8ae7d288da61715b984ccaa78e6224577
claude code version: Outside this listing scope.
model id: Outside this listing scope.
scanner version: none
rulepack version: none
agents: []
commands: ["docker run -i --name toolwitness-b9f0c75128944d44b7e2585b761be1e3 --pull=never --network none --read-only --cap-drop=all --security-opt=no-new-privileges --user=65532:65532 --memory=512m --memory-swap=512m --pids-limit=64 --cpus=1 --ulimit=nofile=256:256 --ulimit=fsize=16777216:16777216 --tmpfs=/tmp:rw,nosuid,nodev,noexec,size=64m,mode=1777 --env=HOME=/tmp --workdir=/tmp --entrypoint /attempt-monitor sha256:fe7eb0deb0f3c917761c8f9b46831f0d8e578b9729f9ac71931abef0c745f89a /installed/node_modules/@autonomous-ai/harness-mcp node /installed/node_modules/@autonomous-ai/harness-mcp/bin.mjs"]
prompt list: ["Outside this listing scope."]
history: ["2026-10-19T12:15:50.388413Z: offline initialize and tools/list"]
application: {"applicationCategory":"DeveloperApplication","name":"@autonomous-ai/harness-mcp","softwareVersion":"0.2.0"}
review input: {"claims":[{"field":"summary","id":"acquired","sources":["LOCK.json"],"text":"Acquired @autonomous-ai/[email protected]; tarball sha256 5f4da1f2cb83b9c0f2a7bc060a103518d13e67573e71921425113b1c7d59b3b8."},{"field":"outcome","id":"started","sources":["runtime/inspect.json","LOCK.json","argv.json","mcp/report.json","mcp/stdout.bin"],"text":"The server started offline in an isolated container (runtime/inspect.json)."},{"field":"rule_results.0","id":"listed","sources":["mcp/report.json","mcp/stdout.bin"],"text":"It answered tools/list with 1 tools named [\"harness_setup\"]."}],"evidence_sha256":{"LOCK.json":"0717e5e89d276698e22c70ecdfc9b84e7b3ff2606cc03fc945c9114da7e1c602","argv.json":"c7e53663b96d4f5bfe6be4e0e7c93d7da652d7fa73960a001d5bb93a3a758d25","attempts.json":"336824edd5729d3f85f96cc7fd209b05783eb6bcdacb0e54d47ae000e3224a67","attempts.raw":"f1b53f5c5c8b06049e14c1170bb9b9a0ad4be97f6172ffe37360de3b51e635fd","complete.json":"c9208725e847be44d5f1f34175f4b6be16a12cd0910f4f0bdc1430feec47177d","component-record.json":"d0e7f9b044c11cd944a041f412a4b54ae5b8105c21f3684372a2a9f28c8e2967","fixture.json":"ca3d163bab055381827226140568f3bef7eaac187cebd76878e0b63e9e442356","harness/acquire.py":"67fe8484cb7028040f6b494de3702b02fcd544986a6bf738d14001b8ae2ae9cb","harness/attempt_accounting.py":"7b7d468ea9055c071e8855444a71869b81e631977bb8fc5671cec381c69bb328","harness/attempt_monitor.c":"f1409eb0d6a28a8e25034d0e1969bea1a75eecc8f50c0172d332364650bada1f","harness/auto_witness.py":"79f652b57980dc1c6c4aae6891b372e79ed617afdde814559697f353a1b837eb","harness/mcp_driver.py":"b5996ec8e534b797c976dc83e44af0b52f64895fec5e72a4f9b32cb2f63cbbf7","harness/record.py":"d34b444b8f6ccf5f79fae86dd02c2fc223f11e026cffa8090007ac5f9be85c82","harness/runtime_proof.py":"5c7cf3ea134bd9b7c146b357653f1311d29db54894786a99b4d5b445a53456d3","identity.json":"5ee774706618b476a17af33866a99b419a01e82c3c6f7d8b23d9ceaea4cc3454","manifest.json":"ec1e5719e5461753d8c183e8a51920d33e1dd7ef3f8f00d1de5ce94a0937d66d","mcp/report.json":"46bbcc69bda1f45f3f45d5d83d206579c22180da74e397fd46ec1b0da89212cb","mcp/stderr.bin":"d8e1ee8cbbdd71c2a4f238a14c842aadbced165da5b1f75b2294e35d157c925b","mcp/stdin.bin":"9ced9858b21f60691df654e649f586e91cfcaf60ed887c79c3df92f599166df6","mcp/stdout.bin":"92eb4d79c9453a424f93ee9a47b945fbf9ff72831e3f8f0dbf8c33553247931f","mcp/subject-stderr.bin":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","runtime/inspect.json":"b0b7f75d715e5abf34bee2cb2a4e58180f1a0da527fef093773350514e2425de"},"identity_artifact":"identity.json"}
review: {"codex":"791ca202a9f55daa34466dfeeeb57d81c4e26f1cf0a68dc12af28e46dc61605a","date":"2026-10-19","gates":"6bf201ddd3fc2436ad2e8d33e03ead50bfa05dd6417f0b0a9d092aaba9a44983","grok":"5b247c6130affe0f4f1cd0f1f96f4891b2bd5b88f7ff742d66189a6f135841d0","kind":"machine-checked","reviewed_sha256":"023b11f1d852c1a70742035951c5bc91ff9da73b1e5f497f5f226c3d1bb9a6d2","summary":"Deterministic gates passed; every claim rebuilt from evidence with a reviewed template; Grok reported no standing refutation."}

Downloadable evidence

transcript

Download complete transcript

stdin:
{"id":1,"jsonrpc":"2.0","method":"initialize","params":{"capabilities":{},"clientInfo":{"name":"toolwitness","version":"s772-v0"},"protocolVersion":"2025-11-25"}}
{"jsonrpc":"2.0","method":"notifications/initialized"}
{"id":2,"jsonrpc":"2.0","method":"tools/list","params":{}}

stdout:
{"jsonrpc":"2.0","id":1,"result":{"protocolVersion":"2025-11-25","capabilities":{"tools":{}},"serverInfo":{"name":"harness","title":"Harness (not installed)","version":"0.1.0"},"instructions":"Harness is not installed on this computer. It runs coding agents (Claude Code, Codex) in sessions of their own that the person can watch, and gives you tools to start, wait for, read and close them.\n\nTo install it, ask the person, then run:\n  curl -fsSL https://harness.autonomous.ai/cli/install.sh | bash\n  harness start\n\nThen restart this MCP server (or your client) to get the Harness tools, and call harness_whoami: it says whether you may start harnesses.\nOnly the person can let you: they sign in (harness login, in a browser) and turn on \"Agents can start other agents\"\n(Settings ▸ Experimental, or harness settings agents-start-agents on in their own terminal). Ask them; until then, do the work yourself.\nMore: https://harness.autonomous.ai/agents"}}
{"jsonrpc":"2.0","id":2,"result":{"tools":[{"name":"harness_setup","description":"Harness is not installed here. Call this for how to install it, which gives you tools to start, wait for, read and close other coding agents.","inputSchema":{"type":"object","properties":{},"additionalProperties":false},"annotations":{"readOnlyHint":true}}]}}

sinkhole log

Download complete sinkhole log

Scope: runtime isolation evidence in runtime/inspect.json.

canary log

Download complete canary log

Outside this listing scope.

scanner output

Download complete scanner output

Outside this listing scope.

normalized text

Download complete normalized text

{"attempts": [], "calls": [], "denied_syscalls": [{"errno": 1, "kind": "attempt", "operation": "unclassified", "target": "syscall:425"}, {"errno": 1, "kind": "attempt", "operation": "unclassified", "target": "syscall:425"}, {"errno": 1, "kind": "attempt", "operation": "unclassified", "target": "syscall:425"}], "exit_before_cleanup": null, "initialize": {"capabilities": {"tools": {}}, "instructions": "Harness is not installed on this computer. It runs coding agents (Claude Code, Codex) in sessions of their own that the person can watch, and gives you tools to start, wait for, read and close them.\n\nTo install it, ask the person, then run:\n  curl -fsSL https://harness.autonomous.ai/cli/install.sh | bash\n  harness start\n\nThen restart this MCP server (or your client) to get the Harness tools, and call harness_whoami: it says whether you may start harnesses.\nOnly the person can let you: they sign in (harness login, in a browser) and turn on \"Agents can start other agents\"\n(Settings ▸ Experimental, or harness settings agents-start-agents on in their own terminal). Ask them; until then, do the work yourself.\nMore: https://harness.autonomous.ai/agents", "protocolVersion": "2025-11-25", "serverInfo": {"name": "harness", "title": "Harness (not installed)", "version": "0.1.0"}}, "list_change_notifications": 0, "monotonic_seconds": 0.252947207998659, "outcome": "listed tools offline", "placeholder_env": [], "started_utc": "2026-10-19T12:15:50.388413Z", "status": "completed", "tools": [{"annotations": {"readOnlyHint": true}, "description": "Harness is not installed here. Call this for how to install it, which gives you tools to start, wait for, read and close other coding agents.", "inputSchema": {"additionalProperties": false, "properties": {}, "type": "object"}, "name": "harness_setup"}], "tools_list_hashes": ["a900fc1626d4ce5eac4d2107e51db70aab9b959890df678438262678c4110cf2"], "wall_limit_seconds": 45}

Download full record JSON

Disclaimer

This record shows that this exact package version started offline in an isolated container and answered an MCP tools list (runtime/inspect.json, mcp/report.json). Scope: initialize and tools/list. It is not a security or quality verdict. Later versions are outside this record.

Template placeholders refer to the snapshot metadata above.

Page updated 2026-10-19

ai.autonomous.harness/harness

Does this exact package start offline and answer an MCP tools list?

Review

What we ran

What we saw

Limits