Skip to main content
Glama
optimaquantum

Claude Critical Rules MCP Server

Claude Critical Rules MCP Server

MCP server providing automatic enforcement of 21 critical rules for Claude AI, based on 96+ documented failure patterns

npm version License: MIT Version

🎯 What is this?

An MCP (Model Context Protocol) server that makes critical best practices automatically available to Claude AI in every conversation. Based on exhaustive analysis of 96+ real documented failures over 6+ months of intensive production usage.

The system provides 21 numbered rules organized into 5 categories, with automatic verification checklists, rule summaries, and auto-update capabilities.

Related MCP server: focal-mcp

✨ Features

  • 21 Critical Rules - Comprehensive checklist preventing common AI assistant failures

  • 5 Rule Categories - Organized by: Verification, Backups, Execution, Database, Advanced

  • Pre-flight Verification - Mandatory checklist before technical tasks

  • Auto-Update System - Check and install rule updates from GitHub automatically

  • Version Tracking - SHA256 verification and changelog integration

  • Evidence-based - Every rule derived from real production failures

⚑ Quick Install

Add to your claude_desktop_config.json:

macOS: ~/Library/Application Support/Claude/claude_desktop_config.json
Windows: %APPDATA%\Claude\claude_desktop_config.json
Linux: ~/.config/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "critical-rules": {
      "command": "npx",
      "args": ["-y", "@optima-quantum/claude-critical-rules-mcp-new"]
    }
  }
}

Via Global Install

npm install -g @optima-quantum/claude-critical-rules-mcp-new

Then configure:

{
  "mcpServers": {
    "critical-rules": {
      "command": "claude-critical-rules-mcp"
    }
  }
}

Restart Claude Desktop

After configuration, restart Claude Desktop to load the MCP server.

πŸ“‹ Usage Instructions

CRITICAL: Two Mandatory Steps Before Any Technical Task

1. ALWAYS Read, Understand, and Execute Compliance Check

Before starting ANY technical task, execute:
critical-rules:verify_compliance

This displays a 21-point checklist organized in 5 categories.
Do NOT proceed until you confirm ALL 21 items.

2. ALWAYS Read Appropriate Skill Documentation

Before creating documents or working with specific technologies:
- Read the appropriate skill file first
- Common location: /mnt/skills/user/sysadmin-professional/SKILL.md
- If skill doesn't exist: search online, verify reliability, propose installation

Example Workflow:

User: "Deploy the new API to production"

Claude:
1. Executes: critical-rules:verify_compliance
2. Reviews all 21 rules checklist
3. Reads: /mnt/skills/user/sysadmin-professional/SKILL.md
4. THEN proceeds with deployment

πŸ› οΈ Available Tools

verify_compliance

Displays mandatory 21-rule checklist before technical tasks.

Usage:

critical-rules:verify_compliance
task_description: "Deploy API to production"

Returns:

  • 21-point checklist organized by category

  • Rule numbers and descriptions

  • Confirmation requirements

  • Version information

get_rules_summary

Quick reference of all 21 rules with descriptions.

Usage:

critical-rules:get_rules_summary

Returns:

  • Core principles (5 items)

  • All 21 rules by category

  • 6-step mandatory workflow

  • Update instructions

get_version_info

Display current version and check for updates.

Usage:

critical-rules:get_version_info
check_remote: true  // Optional, default true

Returns:

  • Current version details

  • Remote version comparison

  • Update availability status

  • SHA256 hash information

check_for_updates

Check GitHub for new rule versions.

Usage:

critical-rules:check_for_updates

Returns:

  • Update availability status

  • Version comparison

  • Release date

  • Changelog reference

update_rules

Download and install latest rules from GitHub.

Usage:

critical-rules:update_rules
force: false  // Optional, force reinstall

Returns:

  • Update status

  • SHA256 verification

  • Backup location

  • Next steps

πŸ“š Available Resources

critical-rules://instructions

Complete CRITICAL-RULES.md document with all 21 rules, examples, and detailed explanations.

critical-rules://changelog

Full changelog with version history and update details.

πŸ“– The 21 Rules (Quick Reference)

πŸ” VERIFICATION (Rules 0-5)

  1. Never act without reading instructions completely

  2. Search current best practices (web_search mandatory)

  3. Read skills before creating documents

  4. Read ENTIRE file before modifying

  5. VERIFY, not assume structures/locations

  6. Check correct file/server

πŸ’Ύ BACKUPS & PERMISSIONS (Rules 6-8)

  1. Search previous context if mentioned

  2. Backups with timestamp in standardized directories

  3. ASK before deleting/modifying critical items

πŸ”§ EXECUTION & VALIDATION (Rules 9-12)

  1. Ask SCOPE before implementing

  2. STOP if something fails (no cascading)

  3. Validate with EVIDENCE

  4. Complete logs (not just last 20 lines)

πŸ—ƒοΈ DATABASE & SECURITY (Rules 13-15)

  1. Database: backup β†’ test β†’ verify rollback

  2. Production vs Dev differentiation

  3. Security verification (IPs, fail2ban, firewall)

⚑ ADVANCED RULES (Rules 16-21)

  1. Long commands (>30s) β†’ background execution

  2. NEVER use sed (python/awk/perl instead)

  3. Verify file line count before/after editing

  4. Follow instructions EXACTLY

  5. Check MCPs/skills/context FIRST

  6. Mandatory 21-point confirmation

🎯 Core Principles

  1. πŸ” VERIFY, DON'T ASSUME - Always check before acting

  2. πŸ’Ύ BACKUP EVERYTHING - Before any modification

  3. 🚫 ASK PERMISSION - For deletions and critical changes

  4. πŸ“Š EVIDENCE-BASED - Test with proof, not assumptions

  5. πŸ›‘ STOP ON ERRORS - Don't continue after failures

πŸ”„ 6-Step Mandatory Workflow

  1. Ask scope before starting

  2. Analyze completely

  3. Plan and explain

  4. Create backups

  5. Execute carefully

  6. Validate with evidence

  7. Document changes

πŸ“Š Evidence Base

Based on comprehensive analysis of:

  • 96+ documented failures in production environments

  • 20+ recurring patterns identified and categorized

  • 6+ months of intensive Claude AI usage

  • Multiple production systems (servers, databases, APIs, deployments)

πŸ” Auto-Update Security

  • SHA256 verification - All downloaded rules verified for integrity

  • Automatic backups - Previous versions saved before updates

  • Version tracking - Complete changelog and version history

  • Manual override - Force parameter for explicit reinstalls

🀝 Contributing

Contributions are welcome! If you've identified additional failure patterns or improvements:

  1. Fork the repository

  2. Create a feature branch

  3. Document the failure pattern with examples

  4. Submit a pull request

πŸ“„ License

MIT License - See LICENSE file for details.

🏒 Author

Γ“ptima Quantum Services FZCO
Dubai, UAE

πŸ“ Changelog

See CHANGELOG.md for version history and updates.

⭐ Star History

If this MCP server has helped prevent errors in your workflow, please consider starring the repository!


Version: 1.2.0
Last Updated: 2026-01-10
Rules Count: 21 numbered rules
Failure Patterns Analyzed: 96+

Available Tools

5 tools
check_for_updatesA

Check if a new version of the critical rules is available on GitHub

ParametersJSON Schema
NameRequiredDescriptionDefault

No parameters

TDQS

A3.6/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description should disclose side effects or network access. It only states the check action, omitting whether it's read-only, safe to call repeatedly, or involves external resources.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single, front-loaded sentence with no wasted words, efficiently conveying the core purpose.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The description does not mention the return value (e.g., boolean, version string) or behavior like network fetching, which is critical given the absence of an output schema.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

There are no parameters, so schema coverage is complete. The description adds no param details, but baseline for 0 params is 4.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the action ('Check') and the specific target ('if a new version of the critical rules is available on GitHub'), making the tool's purpose distinct from siblings like get_version_info or update_rules.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies usage for checking availability before updating, but lacks explicit guidance on when to use this tool vs. alternatives like update_rules or get_version_info.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

get_rules_summaryA

Get a concise summary of the critical rules categories and main requirements

ParametersJSON Schema
NameRequiredDescriptionDefault

No parameters

TDQS

A3.5/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations provided, and the description does not disclose whether this tool is read-only, requires authentication, or has any side effects. The verb 'Get' implies a read operation, but it's not explicit.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single sentence with no unnecessary words, efficiently conveying the tool's purpose.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given no output schema, the description should explain what is returned; it mentions 'critical rules categories and main requirements' but lacks detail on format, structure, or whether it returns a list or object. Adequate for a simple tool but could be improved.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

There are no parameters, so schema coverage is 100% by default. The description adds context about the output being a 'concise summary', which is helpful beyond the empty schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool retrieves a concise summary of critical rules categories and main requirements, which is distinct from sibling tools like update_rules or verify_compliance.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance on when to use this tool versus alternatives like check_for_updates or verify_compliance, and no context on prerequisites or typical use cases.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

get_version_infoC

Get current version information and check if updates are available

ParametersJSON Schema
NameRequiredDescriptionDefault
check_remoteNoWhether to check GitHub for latest version (default: true)

TDQS

C2.9/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations exist, so the description must disclose behavioral traits. It mentions 'check if updates are available', which implies a network call to GitHub, but it does not clarify that this may involve rate limits, latency, or that the tool might fail if offline. No side effects or authentication requirements are noted.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single sentence with no fluff. Every word is necessary and contributes directly to understanding the tool's purpose.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

There is no output schema, so the description should indicate what the tool returns (e.g., version string, update status). It does not. Also, the sibling check_for_updates exists but is not distinguished. For a simple tool with one optional param, the lack of output description and sibling differentiation makes it incomplete.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% because the single parameter check_remote is described in the schema. The description adds no additional meaning beyond the schema; it does not explain the parameter's effect (e.g., setting to false skips remote check). Baseline 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the verb 'Get' and the resource 'version information', and adds the action 'check if updates are available'. It distinguishes from siblings like get_rules_summary or update_rules, but does not explicitly differentiate from check_for_updates, which also checks updates.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance is provided on when to use this tool versus the sibling check_for_updates. The description implies a combined operation but does not list alternatives or exclusion criteria.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

update_rulesB

Download and install the latest version of critical rules from GitHub

ParametersJSON Schema
NameRequiredDescriptionDefault
forceNoForce update even if already on latest version (default: false)

TDQS

B3.3/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description must fully convey behavioral traits. It mentions downloading and installing but does not disclose whether the update is destructive, if existing rules are overwritten, or if the operation is safe to repeat. The force parameter hints at idempotency but is not explained in context.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single sentence with 11 words, very concise with no unnecessary information. It effectively communicates the core action but could be slightly expanded for clarity without becoming verbose.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the existence of sibling tools like check_for_updates and verify_compliance, the description does not explain how the update tool fits into the workflow. It also omits any details about return values or side effects, and the tool is simple enough that more context would be helpful.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100% for the only parameter (force). The tool description adds no extra meaning beyond what the schema already provides for this parameter. Since the schema already describes it, the baseline is 3.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Clearly states the action (download and install), the resource (latest critical rules), and the source (GitHub). This distinguishes it from sibling tools like check_for_updates or get_rules_summary which check or summarize without updating.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Provides the core usage scenario but lacks explicit guidance on when to use this tool versus siblings. It does not state prerequisites or conditions for use, such as requiring a network connection or permissions.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

verify_complianceA

Verify if all mandatory checks from the critical rules have been completed before starting a technical task

ParametersJSON Schema
NameRequiredDescriptionDefault
task_descriptionYesBrief description of the task you are about to start

TDQS

A3.7/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations provided, so description carries full burden. It only states the purpose but discloses no behavioral traits (e.g., read-only, side effects, permissions, or return format). Critical details are missing for a complete understanding.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Single sentence with 17 words, achieves clarity without redundancy. Information is front-loaded with the verb and core purpose.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool has one parameter, no output schema, and no annotations, the description is somewhat complete for a simple verification. However, it lacks details on return value or error conditions, leaving some ambiguity.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% for the single parameter 'task_description', which is already well-described in the schema. The tool description adds no additional meaning beyond the schema, so baseline score of 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Description clearly states the tool verifies mandatory checks from critical rules before starting a technical task. It uses a specific verb ('verify') and resource ('compliance of critical rules'). Sibling tools like 'check_for_updates' and 'get_rules_summary' have different purposes, making this distinct.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly states when to use: 'before starting a technical task'. Provides clear usage context but does not mention when not to use or list alternatives.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

TDQS

A3.5/5.0
Disambiguation4/5

Tools are mostly distinct: check_for_updates and get_version_info have slight overlap (both check versions) but descriptions clarify differences. The other three tools have unique purposes.

Naming Consistency5/5

All tool names follow a consistent verb_noun pattern in snake_case (e.g., check_for_updates, get_rules_summary), making them predictable and easy to distinguish.

Tool Count4/5

Five tools is appropriate for a rules management server focused on checking, updating, and verifying compliance. Slightly more could be added (e.g., full rules listing), but the set is well-scoped.

Completeness4/5

Core operations are covered: checking updates, retrieving summary/version, updating rules, and verifying compliance. Missing a tool to fetch full rule details, but agents can work around with the summary.

Maintenance

ActivityInactive
ResponsivenessNo issues

Resources

Unclaimed servers have limited discoverability.

Looking for Admin?

If you are the server author, to access and configure the admin panel.

Related MCP Connectors

Related MCP Servers

  • A
    license
    Not graded
    quality
    D
    maintenance
    Provides AI agents with queryable, version-controlled project rules and coding standards. Enables validation, rule-based guidance, and task summaries to keep AI work aligned with your project's conventions without repeating context.
    2
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Centralizes AI behavior rules and applies them across tools like Codex, Claude Code, and Cursor, enabling agents to fetch up-to-date rules before responding.
    1
    MIT

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/optimaquantum/claude-critical-rules-mcp'

If you have feedback or need assistance with the MCP directory API, please join our Discord server