Atlas entry
agents- mcp. ironshard. ai
10 capabilities over MCP. First atlas observation.
10 capabilities, 8 of them tools. 5 only read. 2 change records, and 1 of those deletes or cancels. 1 has no reading.◇
AI reading, beta. side-effects v1 on claude-haiku-5.5, calibrated on MCP (golden-3). Only readings above a measured precision count. Counts are tools, not calls: no tool was called.
AI readings summary · beta
The service lists 8 tools, and 7 have AI readings.
delete_object is read as deleting or cancelling records.
create_bucket is read as creating records.
5 tools are read as read-only, including list_objects, get_bucket and get_object_metadata.
Written by code from the AI readings on this page: it groups them and says nothing they do not.
What an agent can do here
AI readings, beta · Readings on 7 of 8 MCP tools. 1 reads as deleting or cancelling.
Moves money
0
No tool read this way.
Deletes or cancels records
1 tool
delete_object0.90
Sends messages to people
0
No tool read this way.
Changes permissions
0
No tool read this way.
Runs code
0
No tool read this way.
Should ask a person first
0
No tool read this way.
No counted reading 1 tool No reading was counted, so any effect above is possible for it: upload_object.
What changed
First atlas observation. Atlas history
Look first
AI reading, beta: AI adds items here; it never removes one.
delete_objectDeletes or cancels records · 0.90
Surfaces
5 protocols checked
| ARD | Not found | No document retrieved |
|---|---|---|
| A2A | Not found | 0 skills |
| MCP | Valid | 2026-07-28 · 8 tools · 1 resource · 1 prompt |
| OpenAPI | Not detected | 0 operations |
| WebMCP | Not detected | 0 declarative form tools · experimental |
Exact states and meaning
- ARDabsent
Exact state: not found · No document retrieved
The supported discovery location returned no matching document.
Not found does not prove the service exposes no such interface elsewhere.
Not observed / not fetched
- A2Aabsent
Exact state: not found · 0 skills
The supported discovery location returned no matching document.
Not found does not prove the service exposes no such interface elsewhere.
Not observed / not fetched
- MCPobserved
Exact state: valid · Revision 2026-07-28 · 8 tools · 1 resource · 1 prompt
A usable protocol document was retrieved and validated.
Directly observed
- OpenAPIabsent
Exact state: not detected · 0 operations
No endpoint was established from the evidence and scope that InterfaceDelta inspected.
Not detected does not prove that no endpoint exists.
Not observed / not fetched
- WebMCPabsent
Exact state: not detected · 0 declarative form tools · experimental
No named declarative WebMCP form tools were observed in the origin root HTML.
Script-registered tools and other pages are not observed, so this does not mean the site has no WebMCP tools.
Not observed / not fetched
Capabilities
Showing 10 of 10.
| Tool and inputs | ◇ AI reading, beta · confidence | ||||||
|---|---|---|---|---|---|---|---|
| Read as one of the six effects 1 AI only raises attention: these rows come first. | |||||||
| bucket_name*, bucket_token*, object_key* | Deletes or cancels records 0.90 | Deletes or cancels records0.90 | |||||
| |||||||
| Read as none of the six 6 Not a clearance. | |||||||
| no inputs | Creates records0.89 | ||||||
| |||||||
| bucket_name*, bucket_token*, object_key* | Reads only0.88 | ||||||
| |||||||
| bucket_name*, bucket_token* | Reads only0.85 | ||||||
| |||||||
| bucket_name*, bucket_token* | Reads only0.85 | ||||||
| |||||||
| bucket_name*, bucket_token*, object_key* | Reads only0.90 | ||||||
| |||||||
| bucket_name*, bucket_token*, page_size, page_token and 2 more | Reads only0.91 | ||||||
| |||||||
| No counted reading 1 No reading was counted, so any effect is possible. | |||||||
| bucket_name*, bucket_token*, object_key* | unknown | unknown | unknown | unknown | unknown | unknown | No reading |
| |||||||
| MCP resources 1 Not read by AI. | |||||||
| no inputs | Not read | ||||||
| |||||||
| MCP prompts 1 Not read by AI. | |||||||
| no inputs | Not read | ||||||
| |||||||
Read as this effect No reading: unknown Not read as this effect◇ AI readings, beta. A zero is a count, not a clearance.
Not observed in this Passport: A2A skills, OpenAPI operations.
The atlas shows each capability by its plain identifier, inputs and declared sign-in. Publisher descriptions, paths, links and source evidence are not published here.
The comparison with the previous observation is shown only to the account that recorded it.
Atlas history
1 observation
- 10 capabilities · MCP 2026-07-28 · MCP endpoint validFirst observation
Fingerprint and versions
- Fingerprint
581832c8577c11f80ebb26d19a1ba73c28c26671c4a645576bbf54af2b73813b- Passport schema
- 0.5.0, passport-semantic-v4
- Consistency
- MCP_PROMPTS_ADVERTISEMENT_LIST: match · MCP_RESOURCES_ADVERTISEMENT_LIST: match · MCP_TOOLS_ADVERTISEMENT_LIST: match · OPENAPI_MCP_EXPLICIT_MAPPING: not applicable
Each class compares an observation with the previous atlas observation. Runs of unchanged observations are grouped. Struck values are what the previous observation recorded; inserted values are what this one recorded.
Declared and observed
8 tools declare hints; the AI readings agree with all 7 that have a reading.
A disagreement is not a finding about the service: either side can be wrong. How we compare declarations and readings.
About this entry
ai.ironshard/agent-storage-sandboxListedOfficial MCP Registry · first listed 12 Sep 2026 · last listed 23 Oct 2026
Passive observations of a public interface listed in the Official MCP Registry. An observation does not verify security, ownership or compliance, and InterfaceDelta assigns no scores or rankings. Methodology · Report an inaccuracy · Ask for removal
Identity and snapshot
- Target key
sha256:7eb4d124e291d67a300acac68e5571d8b35406e6de2eff7515fbb645e8992cfd- Locator SHA-256
02ea3c2e611cb58662e1f1bcf17d5308f254a3381a8fe32034cd292fd0b64e1c- Snapshot generated
- 11 Nov 2026, 22:36 UTC
The entry is one exact observed target, not a real-world service identity, and implies no ownership. Endpoint paths are not published; the locator hash lets an operator confirm their own URL.

