ai.auten/mcp

Offline listing — machine-checked

Does this exact package start offline and answer an MCP tools list?

Acquired @autenai/[email protected]; tarball sha256 3fc0b87d114b1919e4f70bbdbd56d8b8462fe455c0cd5bbe008258857f1b7ae2.

Review

Machine-checked · 2026-10-17

Run UTC: 2026-10-17T11:02:18.481374Z
Reviewed: 2026-10-17
Published: 2026-10-17
Updated: 2026-10-17

Observations · Limitations · Evidence

What we ran

Acquisition lock records install_scripts_ignored=true; runtime command in argv.json.

What we saw

The server started offline in an isolated container (runtime/inspect.json).

Limits

Runtime isolation evidence: runtime/inspect.json. Scope: initialize and tools/list (mcp/report.json). Network-attempt tracing and credential tests are outside this scope. Later versions require a new run.

developer-tools · mcp · Upstream source · Upstream documentation

Offline listing on Linux x86_64, image sha256:0c6b892d61457ee21629d03f9b28c5e70caaaaa3ba122bb6e7467ccfe64a522e, Claude Code Outside this listing scope. binary none: no Claude binary ran, model Outside this listing scope., UTC 2026-10-17T11:02:18.481374Z, tree 98f52dcba6c9006a490470bd6323cb8a361a5fe7673b35faccdb912a75b3a22e. No claim for macOS, Windows, WSL, Alpine/musl, or ARM64.

Scope: tested alone.

No browser or computer-use tools. Pin this exact version; the stamp does not follow updates.

Full record

name: ai.auten/mcp
slug: offline-mcp-e220c7ae21b3de9faeadf25a
type: mcp
category: developer-tools
example: false
evidence state: offline_listing
stamp: Offline listing — machine-checked
summary: Acquired @autenai/[email protected]; tarball sha256 3fc0b87d114b1919e4f70bbdbd56d8b8462fe455c0cd5bbe008258857f1b7ae2.
outcome: The server started offline in an isolated container (runtime/inspect.json).
rule results: ["It answered tools/list with 1 tools named [\"install_auten\"]."]
task: Does this exact package start offline and answer an MCP tools list?
setup: Acquisition lock records install_scripts_ignored=true; runtime command in argv.json.
limitations: Runtime isolation evidence: runtime/inspect.json. Scope: initialize and tools/list (mcp/report.json). Network-attempt tracing and credential tests are outside this scope. Later versions require a new run.
source url: https://www.npmjs.com/package/@autenai/mcp
documentation url: https://www.npmjs.com/package/@autenai/mcp
tree sha256: 98f52dcba6c9006a490470bd6323cb8a361a5fe7673b35faccdb912a75b3a22e
image digest: sha256:0c6b892d61457ee21629d03f9b28c5e70caaaaa3ba122bb6e7467ccfe64a522e
file sha256: {".docker/buildx/.buildNodeID":"7896b7d5a78a2679b7b94fee571cd5422e987b223daae59c5caa7fef4a19aabd",".docker/buildx/.lock":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",".docker/buildx/activity/default":"9e3539856647a0e2ab7b9029f4e96c765b1859796bc331c28169576fcf121db8",".docker/buildx/refs/default/default/gafrohsbmd6ihztci45m9y6ym":"e9458b0008050e43d3af379251d161eeee204812c3cfa7f1e67e657eb2fc3012",".dockerignore":"99a18f8ea8514c4bcd448371d1bc1b8b4d877d6606e7c5b3d2a9dd52b32aa8d0","Containerfile":"d849cf10a7e9b70fecc5fcdc6333dd493aed8767d236893e675cfa4662520c54","image.id":"edaaf66a8532b34782921a5676af9ddc265f4350a130b26a202dbdc7e914c332","installed/node_modules/.package-lock.json":"d6e6a7d24d18df2fbbaf3e1697d4d54a4dbf141890b4e8e049c810a51e751bae","installed/node_modules/@autenai/mcp/LICENSE":"2ff1015fe190051e25dd28ed9c8534c6bed6b00f0de6a19aaed8b1c6ffcd7e5e","installed/node_modules/@autenai/mcp/README.md":"09d5f9940f5deb6356be6924b3b6e3f236acdd0fb300cada46da5ec8368f78ba","installed/node_modules/@autenai/mcp/bin/auten-mcp.js":"8b96c0c1fb34040df5c18885b679148e825a2e65e5db0d05bb74474f10177fca","installed/node_modules/@autenai/mcp/package.json":"ec567f049dd4076850edb46babb33c1d83eadd7f80e6a89711e39134b5d07ddd","installed/package-lock.json":"da0101a0f5dcc272864a0ad3a73e3199a5a1ab96906bd0fb6c971ad5d331b026","installed/package.json":"2e78a6b53d04d5245f5552e21cf209fae291a45b0e183a17f921d525828b9e0c","npmrc-global":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","npmrc-user":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","packs/autenai-mcp-0.1.5.tgz":"3fc0b87d114b1919e4f70bbdbd56d8b8462fe455c0cd5bbe008258857f1b7ae2"}
lockfiles: ["installed/package-lock.json"]
tools list hashes: ["449236b7cb7f930eb14267d5766960876ed63973f7a5e7c73113efccb902e96b"]
utc date: 2026-10-17T11:02:18.481374Z
source date: 2026-10-16
discovered date: 2026-10-16
retested date: 2026-10-17
reviewed date: 2026-10-17
published date: 2026-10-17
modified date: 2026-10-17
reviewer: Machine-checked
harness version: toolwitness harness at commit 4795a352bbc24419d7d6389f3d607fd938a08916
claude code version: Outside this listing scope.
model id: Outside this listing scope.
scanner version: none
rulepack version: none
agents: []
commands: ["docker run -i --name toolwitness-9b6f8209b3fd44b790b817e1b7477439 --pull=never --network none --read-only --cap-drop=all --security-opt=no-new-privileges --user=65532:65532 --memory=512m --memory-swap=512m --pids-limit=64 --cpus=1 --ulimit=nofile=256:256 --ulimit=fsize=16777216:16777216 --tmpfs=/tmp:rw,nosuid,nodev,noexec,size=64m,mode=1777 --env=HOME=/tmp --workdir=/tmp --entrypoint node sha256:0c6b892d61457ee21629d03f9b28c5e70caaaaa3ba122bb6e7467ccfe64a522e /installed/node_modules/@autenai/mcp/bin/auten-mcp.js"]
prompt list: ["Outside this listing scope."]
history: ["2026-10-17T11:02:18.481374Z: offline initialize and tools/list"]
application: {"applicationCategory":"DeveloperApplication","name":"@autenai/mcp","softwareVersion":"0.1.5"}
review input: {"claims":[{"field":"summary","id":"acquired","sources":["LOCK.json"],"text":"Acquired @autenai/[email protected]; tarball sha256 3fc0b87d114b1919e4f70bbdbd56d8b8462fe455c0cd5bbe008258857f1b7ae2."},{"field":"outcome","id":"started","sources":["runtime/inspect.json","LOCK.json","argv.json","mcp/report.json","mcp/stdout.bin"],"text":"The server started offline in an isolated container (runtime/inspect.json)."},{"field":"rule_results.0","id":"listed","sources":["mcp/report.json","mcp/stdout.bin"],"text":"It answered tools/list with 1 tools named [\"install_auten\"]."}],"evidence_sha256":{"LOCK.json":"fa3d1e1372e6b3a0a969ac386d0285fbc7e02122ca55d45725117352528be88f","argv.json":"0de9d8b808665fc890d7774d2cdf76a91e33b718b9c09ef91998b5dc4e9f4492","complete.json":"ffd35b2d3af81ff5c5b3b7bdd28823e8660ed0efb1c23515ee0a8e88384cd5c9","component-record.json":"253afcdebf9bbc966d4354eeb7c6555bda3a2b4036bd021e0834197af538cb31","fixture.json":"ca3d163bab055381827226140568f3bef7eaac187cebd76878e0b63e9e442356","harness/acquire.py":"67fe8484cb7028040f6b494de3702b02fcd544986a6bf738d14001b8ae2ae9cb","harness/auto_witness.py":"b693353f11922463baf0884fe8680e083e2807e1ba7bb6026f6453db6aaf8b0a","harness/mcp_driver.py":"b5996ec8e534b797c976dc83e44af0b52f64895fec5e72a4f9b32cb2f63cbbf7","harness/record.py":"d34b444b8f6ccf5f79fae86dd02c2fc223f11e026cffa8090007ac5f9be85c82","harness/runtime_proof.py":"b9f8d2405611de5894c6287631c30ade8e8e5013a547923fbd3034c76b0d2a71","identity.json":"c6b939ca1e2b09b5722110336b7a4ec0071a88ef8771a837e25878c698dce0de","manifest.json":"79267de3e67cb4a22e5a819c0ea3293ac3a5f44e3e81a73658475b4ca9f656cf","mcp/report.json":"b1c014531e724bb9f8d92d19c7b7650096e707a418e2644e65b6d8cd0963433d","mcp/stderr.bin":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","mcp/stdin.bin":"9ced9858b21f60691df654e649f586e91cfcaf60ed887c79c3df92f599166df6","mcp/stdout.bin":"c00977061965cc4bb7a67b111cb4f03bb17673e3d7ee54a7528989e5a56172b3","runtime/inspect.json":"6ee15bcadced43535817e3c1f3e6f8e3821bdd86f2fba41e570ef944a9bd4d40"},"identity_artifact":"identity.json"}
review: {"codex":"2226e15a017309d878705b9c65fa69749f0f9529d4c8717c469d8c87b0118c3c","date":"2026-10-17","gates":"9afa6a15b8ea130e73ec7bfcc4b1d56d7c56bf73beac3b6fba5cf8608c5b568f","grok":"7d64cdf5dce52761ce884ea53fd2ba31f615f5c566457a16d6f4fa97b90070dc","kind":"machine-checked","reviewed_sha256":"e69e4595633c43d8d1f3b1971f5b3408495b8047c5b1610cc3e2dfa727affab0","summary":"Deterministic gates passed; Codex confirmed all outcome claims; Grok reported no standing refutation."}

Downloadable evidence

transcript

Download complete transcript

stdin:
{"id":1,"jsonrpc":"2.0","method":"initialize","params":{"capabilities":{},"clientInfo":{"name":"toolwitness","version":"s772-v0"},"protocolVersion":"2025-11-25"}}
{"jsonrpc":"2.0","method":"notifications/initialized"}
{"id":2,"jsonrpc":"2.0","method":"tools/list","params":{}}

stdout:
{"jsonrpc":"2.0","id":1,"result":{"protocolVersion":"2025-11-25","capabilities":{"tools":{}},"serverInfo":{"name":"auten","version":"0.1.5"},"instructions":"Auten is not installed on this computer yet, so its tools are not available.\n\nInstall the runner by running this in a terminal (it asks for sudo once to apt-install the accessibility and input packages):\n\n    curl -fsSL https://auten.ai/install | bash\n\nThe first run asks for a free key (30 minutes every month, no card).\nThen restart your MCP client. This server will start Auten automatically\nand you get the full tool set: list_elements, click_at, fill, read_text,\nscreenshot, open_app, run_skill and more.\n\nSetup for every client: https://auten.ai/connect"}}
{"jsonrpc":"2.0","id":2,"result":{"tools":[{"name":"install_auten","description":"Auten (computer use for your AI agent) is not installed on this machine yet. Call this to get the one-line install command for this OS and the next steps.","inputSchema":{"type":"object","properties":{},"additionalProperties":false}}]}}

sinkhole log

Download complete sinkhole log

Scope: runtime isolation evidence in runtime/inspect.json.

canary log

Download complete canary log

Outside this listing scope.

scanner output

Download complete scanner output

Outside this listing scope.

normalized text

Download complete normalized text

{"calls": [], "exit_before_cleanup": null, "initialize": {"capabilities": {"tools": {}}, "instructions": "Auten is not installed on this computer yet, so its tools are not available.\n\nInstall the runner by running this in a terminal (it asks for sudo once to apt-install the accessibility and input packages):\n\n    curl -fsSL https://auten.ai/install | bash\n\nThe first run asks for a free key (30 minutes every month, no card).\nThen restart your MCP client. This server will start Auten automatically\nand you get the full tool set: list_elements, click_at, fill, read_text,\nscreenshot, open_app, run_skill and more.\n\nSetup for every client: https://auten.ai/connect", "protocolVersion": "2025-11-25", "serverInfo": {"name": "auten", "version": "0.1.5"}}, "list_change_notifications": 0, "monotonic_seconds": 0.187261301005492, "outcome": "listed tools offline", "started_utc": "2026-10-17T11:02:18.481374Z", "status": "completed", "tools": [{"description": "Auten (computer use for your AI agent) is not installed on this machine yet. Call this to get the one-line install command for this OS and the next steps.", "inputSchema": {"additionalProperties": false, "properties": {}, "type": "object"}, "name": "install_auten"}], "tools_list_hashes": ["449236b7cb7f930eb14267d5766960876ed63973f7a5e7c73113efccb902e96b"], "wall_limit_seconds": 45}

Download full record JSON

Disclaimer

This record shows that this exact package version started offline in an isolated container and answered an MCP tools list (runtime/inspect.json, mcp/report.json). Scope: initialize and tools/list. It is not a security or quality verdict. Later versions are outside this record.

Template placeholders refer to the snapshot metadata above.

Page updated 2026-10-17