# spine_scan_corpus

Use this read-only tool to confirm a corpus path before learning. It recursively scans for .spine and .json files and returns counts without parsing or exporting projects. Do not use it to generate knowledge, call Spine CLI, modify corpus files, or build animations.

Agent View of the PolicyLayer registry record for `spine_scan_corpus`. HTML page: https://policylayer.com/tools/1425sd-spine-mcp/spine-scan-corpus

## Facts

- Tool: `spine_scan_corpus`
- Server: Spine (`1425sd/spine-mcp`) — https://policylayer.com/tools/1425sd-spine-mcp.md
- Homepage: https://github.com/1425sd/spine-MCP
- Risk category: Read (Low risk)
- Registry record: grade F, identity unverified
- Server rate-limited: no
- Parameters: 0
- Recommended policy verdict: Allowed

## Example call (MCP tools/call, JSON-RPC 2.0)

```json
{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "spine_scan_corpus",
    "arguments": {}
  }
}
```

## Why spine_scan_corpus is rated Low

spine_scan_corpus performs a passive enumeration of files in a directory structure and returns metadata (counts) with no side effects. This is a pure retrieval operation typical of Read category tools. The explicit read-only designation and prohibition against modification, parsing, or building further confirm this classification. Severity is low because file scanning poses minimal risk even if misused by an agent.

From the tool's own definition: "Tool is explicitly described as 'read-only' and 'scans for .spine and .json files and returns counts without parsing or exporting projects.' The description explicitly prohibits modification, CLI invocation, or animation building."

## Use case

AI agents call spine_scan_corpus to retrieve information from Spine without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

## Recommended policy (PolicyLayer)

Verdict: **Allowed**. Enforced by the PolicyLayer MCP gateway (https://policylayer.com/mcp-gateway) before a call reaches Spine:

```json
{
  "version": "1",
  "default": "deny",
  "tools": {
    "spine_scan_corpus": {}
  }
}
```

## Other tools on Spine (15)

- `spine_build_animation_from_json` — Execute — https://policylayer.com/tools/1425sd-spine-mcp/spine-build-animation-from-json.md
- `spine_clean` — Execute — https://policylayer.com/tools/1425sd-spine-mcp/spine-clean.md
- `spine_learn_from_corpus` — Execute — https://policylayer.com/tools/1425sd-spine-mcp/spine-learn-from-corpus.md
- `spine_open_project` — Execute — https://policylayer.com/tools/1425sd-spine-mcp/spine-open-project.md
- `spine_analyze_json` — Read — https://policylayer.com/tools/1425sd-spine-mcp/spine-analyze-json.md
- `spine_get_generation_guide` — Read — https://policylayer.com/tools/1425sd-spine-mcp/spine-get-generation-guide.md
- `spine_info` — Read — https://policylayer.com/tools/1425sd-spine-mcp/spine-info.md
- `spine_recommend_animation_params` — Read — https://policylayer.com/tools/1425sd-spine-mcp/spine-recommend-animation-params.md
- `spine_add_simple_animation` — Write — https://policylayer.com/tools/1425sd-spine-mcp/spine-add-simple-animation.md
- `spine_build_animation_from_existing_project` — Write — https://policylayer.com/tools/1425sd-spine-mcp/spine-build-animation-from-existing-project.md
- `spine_control_bones` — Write — https://policylayer.com/tools/1425sd-spine-mcp/spine-control-bones.md
- `spine_create_loading_animation_preset` — Write — https://policylayer.com/tools/1425sd-spine-mcp/spine-create-loading-animation-preset.md
- `spine_export` — Write — https://policylayer.com/tools/1425sd-spine-mcp/spine-export.md
- `spine_generate_animation_json` — Write — https://policylayer.com/tools/1425sd-spine-mcp/spine-generate-animation-json.md
- `spine_import_json` — Write — https://policylayer.com/tools/1425sd-spine-mcp/spine-import-json.md

## For agents

This record is a snapshot. Live verdicts and the full registry:

- Check every server in your MCP config at once: `npx -y policylayer stack`
- Vet a server before you add it: install the mcp-precheck skill — `npx skills add https://policylayer.com` (skill text: https://policylayer.com/skill.md)
- Query the registry over MCP: endpoint `https://api.policylayer.com/mcp` — tools `check_mcp_server`, `check_mcp_stack`, `check_tool`, `search_registry`, `get_change_events`

---

Source: the PolicyLayer MCP registry — one continuously verified record per MCP server. Full record: https://policylayer.com/registry?q=1425sd-spine-mcp · API: https://policylayer.com/registry/api · Policy library: https://policylayer.com/policies/1425sd-spine-mcp