Mcp Cesm Runner — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Mcp Cesm Runner (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
MCP server for driving CESM case lifecycle: setup → build → submit → monitor.
Complements the CrocoDash MCP, which handles grid creation and forcing. This server picks up where that one leaves off — once a case directory exists, this server drives the CIME build/run pipeline.
| Tool | Purpose |
|---|---|
list_cases(search_root) | Find all CESM cases under a directory |
get_case_status(case_dir) | Read CaseStatus log + key XML config |
check_input_data(case_dir) | Verify all required input files are staged |
All three accept an optional container=<session_name> arg to run inside a crocontainer session instead of on the host.
| Tool | Purpose |
|---|---|
case_setup(case_dir, [container]) | Run ./case.setup |
case_build(case_dir, [container]) | Compile the model (./case.build) |
case_submit(case_dir, no_batch, [container]) | Submit to PBS/slurm or run interactively |
| Tool | Purpose |
|---|---|
xmlquery(case_dir, variable) | Query any CESM XML variable |
xmlchange(case_dir, variable, value) | Set a CESM XML variable |
preview_run(case_dir) | Show PE layout and batch script without submitting |
| Tool | Purpose |
|---|---|
tail_log(case_dir, component, lines) | Read recent run log output |
get_job_status(case_dir) | Check PBS/slurm queue for this case's job |
list_compsets(cesmroot, filter) | List available compsets in a CESM install |
| Tool | Purpose |
|---|---|
build_sandbox([sandbox_dir]) | One-time: build Apptainer sandbox from registry image (~1hr on Derecho) |
start_container(scratch_dir, [sandbox_or_image, inputdata_dir, name, runtime]) | Start a persistent container session |
container_exec(name, case_dir, command) | Run any command inside a running session |
stop_container(name) | Stop and clean up the session |
list_containers() | Show running sessions |
| URI | Content |
|---|---|
cesm://case/{case_dir}/env | All XML config variables |
cesm://case/{case_dir}/status | CaseStatus log |
cesm://case/{case_dir}/logs | List of run log files |
pip install -e .
# or in the CrocoDash conda env:
conda run -n CrocoDash pip install -e .cesm-runner-mcp
# or
python server.pyWire up to Claude Code by adding to .mcp.json:
{
"mcpServers": {
"cesm-runner": {
"command": "python",
"args": ["/path/to/MCP_cesm_runner/server.py"]
}
}
}Instead of waiting in the PBS queue, run CESM interactively inside a container. On Derecho, the full GLADE filesystem is mounted transparently so all host paths work inside.
# Build the writable sandbox (~1 hr on a compute node)
# Or call build_sandbox() via the MCP
qcmd -l walltime=03:00:00 -- apptainer build --sandbox \
/glade/derecho/scratch/$USER/crocontainer_sandbox \
docker://ghcr.io/crocodile-cesm/crocontainer:latest-amd64start_container(scratch_dir="~/scratch/croc_scratch")
→ Apptainer instance starts; /glade mounted; inputdata at /glade/campaign/cesm/cesmdata/inputdata
case_setup("~/croc_cases/mycase", container="croc_session")
case_build("~/croc_cases/mycase", container="croc_session")
→ compiles interactively, no queue
xmlchange("~/croc_cases/mycase", "STOP_N", "3")
case_submit("~/croc_cases/mycase", no_batch=True, container="croc_session")
→ runs synchronously; returns output in seconds
# Debugger MCP finds an error → fix → resubmit in the same conversation:
xmlchange("~/croc_cases/mycase", "DT", "900")
case_submit("~/croc_cases/mycase", no_batch=True, container="croc_session")
stop_container("croc_session")CESM inputdata is mounted directly from GLADE — no downloading required: /glade/campaign/cesm/cesmdata/inputdata → /root/cesm/inputdata inside container
start_container(
scratch_dir="./scratch",
sandbox_or_image="ghcr.io/crocodile-cesm/crocontainer:latest",
inputdata_dir="./cesm_nyf_inputdata", # pre-downloaded NYF data
runtime="podman"
)./xmlquery, ./case.setup, etc. directly — version-safe and matches what users run manuallycontainer= to route via apptainer exec instance:// or podman exec instead of running on the hostDefault reference install: ~/work/installs/cesm3_maddd_new
Cases live in: ~/croc_cases/
CESM inputdata: /glade/campaign/cesm/cesmdata/inputdata
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.