.claude — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited .claude (MCP Server) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
MCP server that lets AI agents (Claude Code, Codex, …) drive the Isabelle theorem prover through its LSP/PIDE commands — fully autonomously, with no human in the loop.
This MCP server exists so that Claude / Codex can issue Isabelle LSP commands without any human mediation. The entire Isabelle process is encapsulated behind the MCP tools — it exposes no UI to the user. The agent works by editing .thy/.ML files on disk and calling the tools to evaluate them and query proof states; nobody watches or steers the prover interactively.
This server is not designed for human–AI collaboration (there is no jEdit/VSCode front-end in the picture). It implements a single AI ↔ Isabelle, no-human-in-the-loop model.
⚠️ One agent per server instance. This server holds a single Isabelle session with global mutable state — one set of open documents, one perspective, and one evaluation in flight at a time. It is single-threaded and not concurrency-safe: pointing multiple agents at one instance, or interleaving concurrent requests, corrupts the evaluation and document state with catastrophic, hard-to-debug results. The server runs over stdio, so each agent already gets its own dedicated server process (and its own isabelle mcp_server) — just don't share one or drive it concurrently.[!IMPORTANT] No Isabelle patch is needed. Earlier versions required one: the server drove the stockisabelle vscode_server, which lacks the PIDE requests it needs, so the distribution had to be patched. It no longer does. Isabelle-MCP now ships its own Isabelle Scala component —isabelle mcp_server— and registers it with your Isabelle the first time you launch a session. Nothing is compiled on your machine (the component carries a prebuilt jar and declaresno_build = true), sosite-packagesmay even be read-only, and no session heap is invalidated.
>
Requirements: Isabelle2026, withisabelleonPATH(or pinned withisabelle-mcp install --isabelle-bin /path/to/Isabelle/bin/isabelle). Isabelle2025-2 and Isabelle2024 are no longer supported; on Isabelle2025-2, use release 0.7.0 (pip install 'isabelle-mcp==0.7.0'). The last releases supporting them are taggedlast-isabelle2025-2-support(0.7.0) andlast-isabelle2024-support(0.2.1).
>
To undo the registration:isabelle-mcp uninstall. If you remove the package without it, Isabelle will print### Missing Isabelle component: …on every command until you runisabelle components -x <the path it names>— harmless, but noisy.
pip install isabelle-mcp # or: uv tool install isabelle-mcp
# register into Claude Code / Codex (auto-detects whichever is installed):
isabelle-mcp installFor Claude Desktop, register manually instead (~/.config/claude/claude_desktop_config.json):
{
"mcpServers": {
"isabelle": {
"command": "isabelle-mcp"
}
}
}| Tool | Description |
|---|---|
isabelle_launch | Start (or restart) the prover with the session/logic that fits the work (bare Main is only a minimal fallback); call this first |
isabelle_terminate | Terminate the running prover (the MCP server stays up; you can relaunch) |
isabelle_evaluate_to | Evaluate the theory up to a line; returns a per-file snapshot of errors / sorry / running command lines |
isabelle_evaluation_status | Poll progress of a running evaluation (same snapshot) |
isabelle_cancel_evaluation | Cancel a running evaluation |
isabelle_hover | Type info and documentation at position |
isabelle_definition | Jump to symbol definition |
isabelle_local_occurrences | In-file occurrences (definition + uses) of a local entity |
isabelle_goal | Proof goals — omit after_text for before/after diff |
isabelle_find_theorems | Search the theorem database in the context at a position (Isabelle's find_theorems): by name, pattern, intro/elim/dest, solves, simp |
isabelle_command_output | Prover output messages |
isabelle_command_status | What state the command(s) covering each of several lines are in |
isabelle_session_info | Current session info |
With isabelle_launch(session, debug=true) the ML debugger tools come alive (eleven more tools): set/delete/list breakpoints on compiled Isabelle/ML code (isabelle_set_breakpoint, isabelle_del_breakpoints, isabelle_list_breakpoints, isabelle_list_breakable_sites), arm and disarm them in bulk (isabelle_enable_all_breakpoints, isabelle_disable_all_breakpoints), and work with hits — threads stopped at a breakpoint: inspect (isabelle_debug_state), evaluate ML in a stack frame's scope (isabelle_eval_at_breakpoint), print a frame's locals (isabelle_locals_at_breakpoint), resume (isabelle_continue_breakpoint) and single-step (isabelle_step_at_breakpoint). A hit pauses the evaluation: the isabelle_evaluate_to result leads with a hit report (position, call stack, frame-0 locals), and asynchronous events arrive as one-line debugger notices on the next tool result. The full design lives in docs/archive/DEBUGGER_DESIGN.md.
All positions are 1-indexed. File paths must be absolute.
Every query tool names a file and a line, and the prover answers about the command there without moving its caret — so a query can run while an evaluation is in progress, and it may only be refused for the position it asked about, not because the session is busy. A query that cannot produce a result says why ("this command is not a proof operation", "it has not finished evaluating"); nothing is concluded from a timeout.
pip install -e ".[dev]" # editable install from a checkout
pytest # unit tests
pytest -m integration # requires running Isabelle
python -m mypy src/ # type checkingserver.py FastMCP entry point — tool registration, lifespan
lsp_client.py JSON-RPC 2.0 client for isabelle mcp_server
tools/ Tool implementations (one file per tool)
utils/ Position conversion, URI handling, HTML parsing
models.py Pydantic output modelsCopyright © 2024-2026 Qiyuan Xu.
This project is free software: you can redistribute it and/or modify it under the terms of the GNU Lesser General Public License as published by the Free Software Foundation, either version 2.1 of the License, or (at your option) any later version. See LICENSE for the full text.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.