Topolift Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Topolift Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
MCP server exposing TopoLift's atom-grounded negotiation reasoning to any MCP-capable agent — Claude Code, Cursor, OpenAI Agents SDK, etc.
Listed on the official MCP Registry as io.github.TopoLift/topolift-mcp.>
mcp-name: io.github.TopoLift/topolift-mcp
Two tools:
topology slot (regime, load_bearing_strategies[], bridge_pivots[], topology_signals{}) drawn from a closed vocabulary[Cluster_X#strategy1,strategy2] citation tokens anchoring every claim to the cluster + load-bearing atoms that drove itAtoms stay on the TopoLift server. What travels is the grammar of the dialect — the vocabulary your agent uses to read structural reasoning.
pip install topolift-mcpSet your API key (get one at <https://topolift.ai>):
export TOPOLIFT_API_KEY=tl-...claude mcp add topolift-negotiation -- topolift-mcp…or, with the API key inline:
claude mcp add topolift-negotiation -e TOPOLIFT_API_KEY=tl-... -- topolift-mcpAdd to your MCP config (~/.cursor/mcp.json or equivalent):
{
"mcpServers": {
"topolift-negotiation": {
"command": "topolift-mcp",
"env": {
"TOPOLIFT_API_KEY": "tl-..."
}
}
}
}TOPOLIFT_API_KEY=tl-... python -m topolift_mcp.serverEnvironment variables:
| Var | Default | Purpose |
|---|---|---|
TOPOLIFT_API_KEY | (required for negotiate) | Bearer key; get one at <https://topolift.ai> |
TOPOLIFT_API_URL | https://api.topolift.ai | API base URL |
TOPOLIFT_TIMEOUT | 600 | Negotiate-call timeout in seconds |
TOPOLIFT_LOG_LEVEL | INFO | Python logging level |
The dialect tool works without TOPOLIFT_API_KEY — only topolift_negotiate requires it.
https://api.topolift.ai/v1/negotiate with no API key — see the API's 402 challenge for details.topolift_dialect once and learns the vocabulary.topolift_negotiate with a scenario.topology for machine-readable structure and reads the prose fields with citation-traceable evidence.The atoms — the structural primitives — never leave TopoLift's servers. The dialect — the names and the grammar — is published openly so any agent can read structural reasoning fluently.
MIT
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.