Skip to main content
All tools accept a response_format of "markdown" or "json" (default "markdown").

​
Security posture

The MCP is a thin, untrusted client. It never asserts an XP total or grants itself a tier; Conquoreum’s backend is the sole authority on XP, tier limits, and anti-cheat. On your source repos it is read-only: no write methods, no shell, no executing your repo’s code. It writes only its own local state and, if you use it, your configured report note. Scans return only aggregate metrics, commit subjects, and completed-checkbox headlines, so no source code or diffs ever leave your machine. Folder paths must stay inside your home directory and are rejected if they try to traverse outside it. All secrets are read from your environment only and never logged.

​
Offline queue

submit_progress and submit_outcome are resilient to network flakes. If Conquoreum is briefly unreachable, the submission queues locally and retries with backoff; a submission that’s permanently rejected (bad auth, a genuine duplicate) is dropped rather than retried forever. A queued retry that already landed is a safe no-op, so you’re never double-awarded.