Shared distillation cache for AI agents — every web/doc fetch ~73-89% fewer tokens via a shared MCP cache.
Drift inferred · capture-to-capture
No drift recorded — single capability capture; advisories appear once its surface changes.
transport stdio · streamable-http · http
verified
reported
listed in the official MCP registry counts 8 tools · 0 res
· 0 prompts
permission surface via code analysis
tools
-
cached_fetch
-
cached_outline
-
slipstream_flag
-
slipstream_note
-
slipstream_recall
-
slipstream_stats
-
slipstream_vote
-
whats_new
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed commit 410ead3 · analyzer v33 · 2w ago
danger signals1
- suspicious endpoint 169.254.169.254 (cloud metadata) tathagat22-slipstream-410ead3/scripts/harden-test.mjs :20
"http://169.254.169.254/latest/meta-data/",
evidence-backed
findings quoted directly from the published source artifact — not inferred
code files: 37
network 5
- net tathagat22-slipstream-410ead3/app/page.tsx :50
const r = await fetch("/api/stats", { cache: "no-store" }); - net tathagat22-slipstream-410ead3/lib/distill.ts :453
* fetch (knownHash), heading-level temporal diffs, content-address dedup + - net tathagat22-slipstream-410ead3/lib/render.ts :24
const res = await fetch("https://api.firecrawl.dev/v1/scrape", { - net tathagat22-slipstream-410ead3/lib/security.ts :116
res = await fetch(current, { headers, redirect: "manual", signal: ctrl.signal }); - net (weak) tathagat22-slipstream-410ead3/scripts/prewarm-backtest.mjs :106
const r = await fetch(`https://registry.npmjs.org/${id.replace("/", "%2F")}`);
secrets 3
- secrets tathagat22-slipstream-410ead3/lib/cache.ts :152
token: process.env.UPSTASH_REDIS_REST_TOKEN ?? process.env.KV_REST_API_TOKEN, - secrets tathagat22-slipstream-410ead3/lib/render.ts :12
return Boolean(process.env.FIRECRAWL_API_KEY); - secrets (weak) tathagat22-slipstream-410ead3/scripts/prewarm-backtest.mjs :32
const token = process.env.UPSTASH_REDIS_REST_TOKEN ?? process.env.KV_REST_API_TOKEN;
tool registrations 8
- cached_fetch tathagat22-slipstream-410ead3/app/api/mcp/route.ts :117
- cached_outline tathagat22-slipstream-410ead3/app/api/mcp/route.ts :198
- slipstream_note tathagat22-slipstream-410ead3/app/api/mcp/route.ts :225
- slipstream_recall tathagat22-slipstream-410ead3/app/api/mcp/route.ts :268
- slipstream_vote tathagat22-slipstream-410ead3/app/api/mcp/route.ts :290
- slipstream_flag tathagat22-slipstream-410ead3/app/api/mcp/route.ts :303
- whats_new tathagat22-slipstream-410ead3/app/api/mcp/route.ts :320
- slipstream_stats tathagat22-slipstream-410ead3/app/api/mcp/route.ts :352
declared dependencies 25
- @modelcontextprotocol/sdk@^1.12.0
- @gsap/react@^2.1.2
- @mozilla/readability@^0.5.0
- @react-three/drei@^10.7.7
- @react-three/fiber@^9.6.1
- @react-three/postprocessing@^3.0.4
- @upstash/redis@^1.34.3
- gsap@^3.15.0
- jsdom@^25.0.1
- lenis@^1.3.24
- mcp-handler@^1.0.1
- next@^15.3.0
show 13 more
- react@^19.0.0
- react-dom@^19.0.0
- three@^0.171.0
- turndown@^7.2.0
- turndown-plugin-gfm@^1.0.2
- zod@^3.24.1
- @types/jsdom@^21.1.7
- @types/node@^22.10.0
- @types/react@^19.0.0
- @types/react-dom@^19.0.0
- @types/three@^0.171.0
- @types/turndown@^5.0.5
- typescript@^5.7.0
obfuscation 2
- dynamic require()/import() tathagat22-slipstream-410ead3/scripts/unit-cache.cjs :5
const c = require(`${dir}/cache.js`); - dynamic require()/import() tathagat22-slipstream-410ead3/scripts/unit-upgrades.cjs :7
const sd = require(`${dir}/secdiff.js`);