Open and Async MCP Server 1.0.2 security intelligence

Observed 2026-08-14T15:44:04.362Z using mcpSecurity-inventory. Protocol 2025-06-18.

Tool	Category	Risk
book_outlineThe map of Open and Async: every section and chapter with a one-line TL;DR. Use it to find the right chapter for a topic. Input schema { "$schema": "http://json-schema.org/draft-07/schema#", "type": "object", "properties": {} }	—	—
convert_meeting_to_asyncGiven a meeting's purpose or agenda, propose the async equivalent: the artifact that replaces it, where it lives, who decides, and the deadline. Meetings are a point of escalation, not the default. Input schema { "$schema": "http://json-schema.org/draft-07/schema#", "type": "object", "properties": { "purpose": { "type": "string", "description": "Why the meeting exists / what it's meant to accomplish." }, "agenda": { "description": "Agenda items, if any.", "type": "array", "items": { "type": "string" } } }, "required": [ "purpose" ] }	—	—
draft_decision_docTurn a decision plus its options into a structured, async-friendly decision record (ADR): context, options with tradeoffs, the decision, and its reversibility. Write the decision down so others can follow it without a meeting. Input schema { "$schema": "http://json-schema.org/draft-07/schema#", "type": "object", "properties": { "decision": { "type": "string", "description": "The decision to be made, in one line." }, "options": { "description": "Candidate options. Two or three is plenty.", "type": "array", "items": { "type": "string" } }, "context": { "description": "Background: what forces this decision now.", "type": "string" } }, "required": [ "decision" ] }	—	—
get_chapter_summaryReturn a chapter's TL;DR plus its taglines and a link to read the full chapter. Summary only — no body text. Input schema { "$schema": "http://json-schema.org/draft-07/schema#", "type": "object", "properties": { "slug": { "type": "string", "description": "Chapter slug, e.g. 'impact-over-input' (from book_outline)." } }, "required": [ "slug" ] }	—	—
get_guidanceRole-aware guidance (manager or IC) for a topic, paraphrased from the book's role callouts, with a chapter citation. Input schema { "$schema": "http://json-schema.org/draft-07/schema#", "type": "object", "properties": { "topic": { "type": "string", "description": "The topic you want guidance on." }, "role": { "description": "Audience: 'manager', 'ic', or 'any' (default).", "type": "string", "enum": [ "manager", "ic", "any" ] } }, "required": [ "topic" ] }	—	—
get_taglinesReturn the book's shareable taglines and their quote-card URLs. Optionally filter to one chapter. Input schema { "$schema": "http://json-schema.org/draft-07/schema#", "type": "object", "properties": { "chapter": { "description": "Chapter slug to filter by (omit for all).", "type": "string" } } }	—	—
handle_objectionMap a common objection to open/async work ('async is slow', 'remote kills culture') to the book's reframe, with a chapter citation. Input schema { "$schema": "http://json-schema.org/draft-07/schema#", "type": "object", "properties": { "objection": { "type": "string", "description": "The skepticism or pushback to address." } }, "required": [ "objection" ] }	—	—
run_async_standupReturn a structured async-standup prompt a team can adopt in any chat or issue — replaces the daily sync standup with a written, searchable thread that respects every time zone. Input schema { "$schema": "http://json-schema.org/draft-07/schema#", "type": "object", "properties": { "cadence": { "description": "e.g. 'daily', 'twice a week'. Defaults to daily.", "type": "string" } } }	—	—
score_status_updateScore a draft status update against the 'work loudly / no surprises' rubric and suggest fixes. Good updates surface blockers early, state outcomes over activity, and link to the work. Input schema { "$schema": "http://json-schema.org/draft-07/schema#", "type": "object", "properties": { "update": { "type": "string", "description": "The draft status update to score." } }, "required": [ "update" ] }	—	—
search_principlesKeyword search across the book's summary corpus (TL;DRs, key-takeaways, taglines, and reviewed frameworks). Returns short, cited snippets — a snippet view, not full text. Input schema { "$schema": "http://json-schema.org/draft-07/schema#", "type": "object", "properties": { "query": { "type": "string", "description": "What you're looking for." }, "limit": { "description": "Max results (default 5, capped at 10).", "type": "integer", "minimum": 1, "maximum": 10 } }, "required": [ "query" ] }	—	—
triage_sync_vs_asyncRecommend whether a task should be handled synchronously or asynchronously, using the decision rule from 'meetings are a point of escalation.' Async is the default; sync is the escalation. Input schema { "$schema": "http://json-schema.org/draft-07/schema#", "type": "object", "properties": { "task": { "type": "string", "description": "The task, conversation, or decision to triage." } }, "required": [ "task" ] }	—	—

Resources 3

about

What this server is, what it does and doesn't contain, and where to get the book. Pull it on demand; nothing is pushed into responses.

Metadata

{
  "resource_key": "book://about",
  "uri": "book://about",
  "name": "about",
  "description": "What this server is, what it does and doesn't contain, and where to get the book. Pull it on demand; nothing is pushed into responses.",
  "mime_type": "text/markdown",
  "annotations": null,
  "metadata_hash": "71bcb037ac260f78bde0baed22b12c77bac40a04cbb3ef147cb482624f00fb5a"
}

outline

Sections, chapters, and one-line TL;DRs. The book's table of contents.

Metadata

{
  "resource_key": "book://outline",
  "uri": "book://outline",
  "name": "outline",
  "description": "Sections, chapters, and one-line TL;DRs. The book's table of contents.",
  "mime_type": "application/json",
  "annotations": null,
  "metadata_hash": "edece1fd459e5d60356d9239772658faffaf5ef545fd1cbf33edc5f415098b98"
}

taglines

Shareable 'bumper-sticker' lines, each with its /q/<slug> quote-card URL.

Metadata

{
  "resource_key": "book://taglines",
  "uri": "book://taglines",
  "name": "taglines",
  "description": "Shareable 'bumper-sticker' lines, each with its /q/<slug> quote-card URL.",
  "mime_type": "application/json",
  "annotations": null,
  "metadata_hash": "ec35447077999660f392f92bce1530441e272bac3cfe876b42f4149464268e3e"
}

Prompts 5

async-standup

Draft an async standup post from your day's work — outcome-first, blockers surfaced, everything linked.

Metadata

{
  "prompt_key": "async-standup",
  "name": "async-standup",
  "description": "Draft an async standup post from your day's work — outcome-first, blockers surfaced, everything linked.",
  "arguments": [
    {
      "name": "work",
      "description": "What you did / are doing, in rough notes.",
      "required": false
    }
  ],
  "metadata_hash": "68f4477fbad20bd37dcf74e383cf88d39ad1047be0a2b34bd7e685501ad781e4"
}

coach

Run the full Open & Async method on a situation: triage sync vs async, generate the right artifact, enrich with role guidance, and cap with a shareable tagline — one composed, consulting-style deliverable.

Metadata

{
  "prompt_key": "coach",
  "name": "coach",
  "description": "Run the full Open & Async method on a situation: triage sync vs async, generate the right artifact, enrich with role guidance, and cap with a shareable tagline — one composed, consulting-style deliverable.",
  "arguments": [
    {
      "name": "situation",
      "description": "The situation to coach, in free text.",
      "required": true
    },
    {
      "name": "role",
      "description": "Optional: tailor role callouts to 'manager' or 'ic'.",
      "required": false
    }
  ],
  "metadata_hash": "79bc7a8a66039acf4e7061bc6a42fd34497877a56f3d184b368269b47c54ee10"
}

meeting-to-issue

Convert a meeting agenda into the async artifact that should replace it.

Metadata

{
  "prompt_key": "meeting-to-issue",
  "name": "meeting-to-issue",
  "description": "Convert a meeting agenda into the async artifact that should replace it.",
  "arguments": [
    {
      "name": "agenda",
      "description": "The meeting agenda or purpose.",
      "required": true
    }
  ],
  "metadata_hash": "8426f3b24694489598070146a6cb44f5a17e69c2ae088b2d212249e2b1c3904c"
}

weekly-update

Draft a weekly update that doesn't suck — outcomes over activity, risks surfaced early, skimmable.

Metadata

{
  "prompt_key": "weekly-update",
  "name": "weekly-update",
  "description": "Draft a weekly update that doesn't suck — outcomes over activity, risks surfaced early, skimmable.",
  "arguments": [
    {
      "name": "notes",
      "description": "Your raw notes from the week.",
      "required": false
    }
  ],
  "metadata_hash": "a6e3f29da5d025fd7f9a10adb3b74574865154687571b2d3f2f9c66a78464bd0"
}

write-adr

Draft an architecture/architectural decision record from a decision and its options.

Metadata

{
  "prompt_key": "write-adr",
  "name": "write-adr",
  "description": "Draft an architecture/architectural decision record from a decision and its options.",
  "arguments": [
    {
      "name": "decision",
      "description": "The decision to record.",
      "required": true
    },
    {
      "name": "options",
      "description": "Options under consideration, comma-separated.",
      "required": false
    }
  ],
  "metadata_hash": "c77b38b928d981d1b85555c5977224a5630c3afa92bc3ef2fe862f6dd9f35811"
}

Changes from previous version

Confirmed vulnerabilities

Provenance

Risk	Change	Subject
No material changes recorded.

Severity	Finding	Advisory
No confirmed vulnerability is published for this version.

Artifact SHA-256: aea2aaffd4527766531fb37809754a83d2ca4ab57590b67d8e3c1812d1795743

Open and Async MCP Server `1.0.2`

Independent inventory

Resources 3

Resource templates 0

Prompts 5

Changes from previous version

Confirmed vulnerabilities

Provenance

Let’s talk about MCP security.