Matlock Logo Matlock
Free Scan

Matlock — Agent & Developer Tools. (Owner's Manual & Operational Reference)

FOR AI CODING AGENTS & ORCHESTRATORS: Jump directly to Part II: Machine & Autonomous Agent Operational Specification for the 27-tool stdio MCP catalog, dual-path HTTP 402 unlock, seq_matlock / cold_box boundary sandbox rules, and completion contracts.

Product: Matlock — Agent & Developer Tools. (Efficient. Exact. By the book.)
Positioning: Zero-upload < 50ms polyglot security, MITRE CWE, IEEE Std 1003.1 POSIX, CISA SSDF, and AICPA SOC 2 Trust Services Criteria verification with tamper-proof Safeguard test seals, boundary Pre-CI sandboxes, 1-click CLI automation, private outbound-only alerts, and 27-tool local stdio MCP (0 cloud source uploads, 0 open ports, 0 git-commit blocking).
Publisher: Matlock by Dutch P2P © 2026. All rights reserved.
Surfaces: Desktop Command Center (Windows, Linux, and GoogleBook; macOS & iOS headless MCP ready on macOS arm64 — press ? or F1 anytime) · Web Command Center · Free Browser Scan · Docs · Online Manual · MCP URI matlock://help/appliance-manual

Scope & Legal Notice: Matlock evaluates technical codebase and pipeline controls against published industry specifications and benchmarks (MITRE CWE, CISA SSDF, IEEE Std 1003.1 POSIX, automated Pre-CI integrity gates, and AICPA SOC 2 Trust Services Criteria technical controls). Matlock does not guarantee defect-free software, issue formal third-party attestation reports, or provide certifications from an independent licensed CPA firm.

Part I: Human Operator & Workbench Guide

1. Quick Glossary & Core Workflow

2. Screen Layout, Themes & Navigation

3. Discovered Scripts, Custom Checks, Actions & Star Favorites

4. Walk-Away Routines, Machine Commands & Local Alerts

CardWindowsLinuxNotes
Shutdown in 30 minutesshutdown.exe /s /t 1800shutdown -h +3030-min delay, never /f; paired with Cancel shutdown
Cancel shutdownshutdown.exe /ashutdown -cInstant 1-click abort
Clean temporary filesUser temp folder only, skips active filesUser files > 1 day in ~/.cache and /tmpNever touches project files
Check disk spaceGet-PSDrive -PSProvider FileSystemdf -hRead-only
Optimize disk (defrag or trim)Optimize-Volume -DriveLetter C -Verbosefstrim -avNeeds admin/root; stops cleanly without UAC/sudo prompts
Backup copyrobocopy . "<backup-folder>" /MIRrsync -a --delete ./ "<backup-folder>/"Keeps .git, skips build caches; robocopy 0–7 = Passed
Find a Word & Expose Itfindstr /s /i /m /c:"Aluminium" *.dartgrep -rnI "Aluminium" --include="*.dart" .Editable case-insensitive recursive search
Lines Over 250 Catchfor /r %i in (*.dart) do ... find /c /v ""find . -name "*.dart" -exec awk '... c>250 ...' {} +Read-only scan listing files over 250 lines

5. Results Waterfall, Isolated Rerun, Ignore & Copy for Agent

6. Sticky Tamperproof Safeguard, Test Integrity & Restore

7. Horizontal Health Score, Coverage Bars & Modularity Standard

8. Two-Column Settings & Sealed State Recovery

Click Settings in the top-right bar to open the 2-column dialog (left category rail + concise right-hand controls; every pane header includes a ? icon jumping straight to its Manual section):

  1. Appearance: Language (9 locales + copied-text language), Theme (System Default, Light, Dark Slate), desktop shortcut, and Windows Minimize to System Tray when closed.
  2. Project & Runner: Modularity Tuning Dial (Grade A..Minimum), local profile Open folder (private local user-profile folder), Restore starter setup banner (reopens Set up for me), Keep Quick Run history, and Reset Ignore Registry.
  3. Safeguard & Restore: Allow Matlock to restore tests, person-only Safeguard auto-revert toggle, and Sync across my computers (passphrase-sealed folder sync).
  4. Email Alerts: Local outbound-only email and custom-script Alert Station + Test Email.
  5. AI Agent (MCP): MCP Server (stdio) toggle (off by default), "Sync with Headless" two-way bridge (1-click refresh loading agent-created cards/sequences and publishing standing orders with 0 background polling), Test MCP Connection, Copy MCP Config & Agent Instructions, Copy a question for my phone AI, and Agent Email Bridge.
  6. License & Updates: 24-character key Activate / Move license to this device, Automatically check for updates (MATLOCK_OFFLINE=1 blocks all outbound calls), Send anonymous crash diagnostics (off by default; MATLOCK_NO_TELEMETRY=1), Copy diagnostic info, Free up memory, Share Matlock, Contact us (dutch@dutchp2p.com), and Dutch P2P Tools.
  7. Sealed State Recovery (Reset Ignore Registry): If external edits trigger integrity_seal:MUTE_SEAL_TAMPERED or storage_recovery:BAK_AUTO_RESTORE, open Settings -> Project & Runner -> Storage & backup -> Reset Ignore Registry.

9. Connecting AI Agents (Desktop MCP & Phone/Chat Guide)

{
  "mcpServers": {
    "matlock": {
      "command": "matlock.exe",
      "args": ["mcp", "--stdio"]
    }
  }
}

10. Built-In Standards Reference (10 Ecosystems + Pre-CI)

Every built-in check is compiled into Matlock and anchored to MITRE CWE, CISA SSDF (NIST SP 800-218), IEEE Std 1003.1 POSIX, Pre-CI gates, and AICPA SOC 2 Trust Services Criteria technical controls:

Ecosystem & DomainWhat Matlock Inspects & Production Failures Prevented
Core Polyglot & Dart / FlutterSilent catch blocks (CWE-391), null/bounds hazards (CWE-476/CWE-125), unawaited async races, leaked streams/timers/controllers (CWE-401), infinite retry loops (CWE-835), hardcoded secrets (CWE-798), unredacted log secrets (CWE-532), disabled TLS certificate verification across polyglot HTTP/SMTP/CLI/CI (CWE-295 / [MITRE T1557]), SQLi (CWE-89), SSRF (CWE-918), XXE (CWE-611), unsigned JWTs (CWE-347), open redirects (CWE-601), missing timeouts, non-atomic writes, path traversal (CWE-22), and hollow/flaky tests (CWE-362).
Java (.java)Hardcoded keys (CWE-798), command/SQL injection (CWE-78/CWE-89), unsafe deserialization (CWE-502), weak ciphers (CWE-327), swallowed exceptions (CWE-391), leaked JDBC/stream handles (CWE-404), string == bugs, abrupt System.exit, and loop sleeps.
Python (.py)Hardcoded secrets (CWE-798), shell/SQL injection (CWE-78/CWE-89), unsafe pickle/yaml loads (CWE-502), weak hashes (CWE-328), bare except (CWE-391), mutable default args, leaked descriptors (CWE-775), sync calls inside async def, and hollow tests.
Rust (.rs)Embedded secrets (CWE-798), formatted shell/SQL strings (CWE-78/CWE-89), unguarded unsafe casts, disabled TLS checks (CWE-295), production .unwrap()/todo!() panics, blocking sleeps in async tasks, intentional leaks (CWE-401), discarded Results, and hollow tests.
Go (.go)Hardcoded tokens (CWE-798), concatenated exec/SQL (CWE-78/CWE-89), InsecureSkipVerify (CWE-295), weak RNG (CWE-330), ignored errors (CWE-252), loop defer leaks & uncancelled contexts (CWE-404), missing HTTP timeouts, production panic, and hollow tests.
TypeScript & JavaScript (.ts, .tsx, .js, .jsx)Exposed secrets (CWE-798), DOM XSS / eval sinks (CWE-79/CWE-95), shell interpolation (CWE-78), prototype pollution (CWE-1321), empty .catch() (CWE-391), type suppressions, NaN comparison bugs, sync I/O stalls, debugger leftovers, and listener/timer leaks (CWE-401).
C & C++ (.c, .cpp, .cc, .h, .hpp)Hardcoded secrets (CWE-798), unguarded FFI/buffer copies (CWE-787/CWE-120), format-string bugs (CWE-134), system() injection (CWE-78), mismatched new[]/delete (CWE-762), use-after-free (CWE-416), throwing destructors, memset on non-trivial types, and unjoined threads.
Kotlin & Android (.kt, .kts)Hardcoded secrets (CWE-798), SQL concatenation (CWE-89), insecure WebView bridges, bypassed TLS (CWE-295), world-readable prefs (CWE-276), leaked GlobalScope coroutines (CWE-401), main-thread stalls, !! crashes, swallowed CancellationException, and ZIP/APK header hazards (CWE-190).
C# & .NET (.cs)Undisposed IDisposable handles (CWE-404), async void crash traps, unparameterized SQL/command strings (CWE-89/CWE-78), disabled ServerCertificateCustomValidationCallback TLS checks (CWE-295), swallowed exceptions (CWE-391), sync .Result/.Wait() deadlocks, and hollow tests.
SQL & Storage Engines (.sql)Wildcard grants (CWE-250), dynamic SQL concatenation (CWE-89), plaintext password DDL (CWE-256), OS shell escape procedures (CWE-78), disabled RLS, predicate-free DELETE/UPDATE, non-idempotent migrations, deep OFFSET scans, and unguarded table locks.
Cross-OS Pre-CI, Bash/Shell (.sh), PowerShell (.ps1), Dockerfile & GitHub Actions YAMLCase-collision paths (POSIX.1), CRLF shebangs, Bash/POSIX shellisms & PowerShell $ErrorActionPreference / LASTEXITCODE traps, unpinned Dockerfile tags & root container hazards, HTML/asset byte-budget overruns, bare Windows .cmd/.bat spawn traps, leaked handles & non-tree kills (CWE-775), hardcoded path separators, untracked imports, lockfile drift, unpinned GitHub Actions YAML permissions, workflow script injection, and stripped +x bits.
Modularity & Custom ChecksPerson-only Modularity Tuning Dial (Grade A <= 60 to Minimum <= 1000, default Grade C <= 250 file / <= 80 fn; CWE-1080 / CWE-1120) plus user-defined pattern and script checks stored in your OS profile.

11. Workstation Pro Licensing, Web Preview & Free Browser Scan

12. Linux, GoogleBook, Updates, Privacy & Support

Part II: Machine & Autonomous Agent Operational Specification

A. Agent Entrypoints & Transport Setup

{
  "mcpServers": {
    "matlock": {
      "command": "matlock-mcp",
      "args": ["--stdio", "--headless", "--no-coverage"]
    }
  }
}

B. Metering, M2M Swarm Access & Pro Unlock

C. Complete 27-Tool Local MCP Catalog

  1. matlock_run_scan(target_path?, changed_only?, dedup_by_rule?, if_none_match?, agent_id?, rule_id?, category?, pillar?, file_filter?, include_generated?, compact?, cursor?, rule_code?, transaction_signature?): Index 0 (readOnlyHint: true) < 50ms AST, CWE, POSIX, and Pre-CI scan returning file:line:col (col >= 1), cwe, mitre_attack, and 5-line unified diff prescriptions (also supports CLI matlock-mcp scan . --format=sarif for SARIF 2.1.0).
  2. matlock_describe_project(target_path?, mode?): Optional workspace profile (0 credits, readOnlyHint: true); pass mode: "tool_bag" (or CLI matlock-mcp toolbag [--json]) for a progressive ~350–550-token inventory of [LOCKED] (execute-only) vs. [MODIFIABLE] (agent-refinable) Action Cards, sequences, [NEW] / [UPDATED] badges, [UNAVAILABLE IN CONTAINER] markers, standing orders, and outbound alert readiness.
  3. matlock_get_scan_results(target_path?, cursor?, pillar?, rule_code?): Paged findings (25/page; Desktop hides Safeguarded lines until unlocked; --headless Gas-Tank unlocks coordinates).
  4. matlock_qualify_test(file | files, target_path?, dry_run?, baseline_only?, wait_if_busy?, max_wait_seconds?): Verifies 1–5 test files (test_file / test_files) across 3 gates (runtime pass >= 1 assertion, 0 analyzer warnings + LOC ceiling, 0 Matlock findings) before sealing into Safeguard, or seals a baseline (baseline_only: true).
  5. matlock_get_test_integrity(target_path?, reverify?, include_archive?, id?, include_text?, note_for_id?, note?): Inspects removed-test integrity records and appends explanatory agent notes (0 dismissal rights).
  6. matlock_get_history(target_path?, limit?): Read-only score and fix-count history.
  7. matlock_read_appliance_manual(section_id?, standard_id?, query?, locale?): Offline manual (9 locales) and CWE/POSIX/SSDF/SOC2/outcome lookup (0 credits, 0 network).
  8. matlock_list_custom_tests: Lists user-defined custom checks.
  9. matlock_register_custom_test: Saves a pattern or script custom check.
  10. matlock_delete_custom_test: Deletes an unlocked custom check (built-in checks are immutable).
  11. matlock_list_actions: Lists action cards (with favorite/lock/approval flags) plus unconfigured recommendedTemplates (unconfiguredTemplate: true).
  12. matlock_register_action(id, command, name?, favorite?): Programs or updates an unlocked Action or starter template (tpl_github, tpl_save_drive, tpl_cloud_sync, tpl_save_backup, tpl_defrag_optimize, tpl_shut_down), clears unconfiguredTemplate, pins/unpins Favorites (favorite: true | false), and forces Require Approval on Desktop.
  13. matlock_register_sealed_script: Seals build/test commands (Locked by User) against sub-agent edits.
  14. matlock_run_action(id, working_dir?, async?, send_alert?, cold_box?): Executes a sandboxed command under OS job-tree containment (async: true non-blocking background execution, send_alert: "always" | "on_error" | "never", custom git push / USB robocopy/rsync / cloud R2/S3/GCS/Azure cards supported; 0 built-in git push inside Matlock test runs).
  15. matlock_get_action_status(id?): Polls live status, exit code, and compact token-lean status capsules for async: true background runs.
  16. matlock_stop_action(id?, stop_sequence?): Terminates an active process tree immediately (stop_sequence: true halts an entire active Sequence cleanly).
  17. matlock_delete_action: Deletes an unlocked action card.
  18. matlock_list_sequences: Lists multi-step routines.
  19. matlock_register_sequence(id, name?, step_ids?, commands?, insert_step_id?, insert_command?, insert_step_name?, insert_at_index?, remove_step_index?, failure_policy?, always_run?, favorite?): Composes or edits an unlocked Sequence in series, slotting any Action or alert::<id> step at an exact 0-based insert_at_index with failure_policy ("stop" | "stop_and_alert" | "continue_and_alert"), always_run, and favorite: true | false.
  20. matlock_run_sequence(id, file?, async?, send_alert?, cold_box?, deep?, include_coverage?): Runs seq_matlock or seq_fast_verify (pass file to run a single test file, async: true for non-blocking background execution with auto-wake on finish, and send_alert for error/completion notifications; cold_box: false default for sprint speed; cold_box: true boundary sandbox before external save, cloud sync, backup, push, or compile, returning in < 15ms when verified and replacing 15,000–40,000 manual inspection tokens with < 300 coordinate tokens; deep: true forces full clean & coverage recalibration).
  21. matlock_delete_sequence: Deletes an unlocked routine.
  22. matlock_list_alerts: Lists local alert channels (secrets masked).
  23. matlock_set_alert: Configures outbound-only Native Dart TLS 1.2/1.3 email_smtp (global presets, OS keychain or passphrase-sealed local container vault) or custom_script alerts.
  24. matlock_trigger_alert(id, status, task_completed, uncovered_issues, next_move): Dispatches local notification with mandatory 3-Question Handshake.
  25. matlock_delete_alert: Deletes an unlocked alert card.
  26. matlock_purchase_license(transaction_signature?, license_key?, target_path?, network?, runs?, lid?): Settles autonomous agent swarm metered allowances (see /en/agents) or claims a 24-char $24.99 USD/yr Pro license_key.
  27. matlock_report_issue(category, subject, description, tool_context?, output_dump?): Async scrubbed feedback/wishlist report (0 credits, CONTINUE_IMMEDIATELY).

D. Boundary Cold Box Sandbox, 3-Loop Governor & 3-Question Handshake

E. Machine-Readable Specification for AI Coding Agents (YAML)

product: "Matlock — Agent & Developer Tools. (Efficient. Exact. By the book.)"
pinned_version: "v1.0.0+1"
web_command_center: "https://matlock.dutchp2p.com/en/app"
free_local_scan: "https://matlock.dutchp2p.com/en/#wasm-instant-audit"
docs_hub: "https://matlock.dutchp2p.com/en/docs"
online_manual: "https://matlock.dutchp2p.com/en/manual"
public_repository: "https://github.com/Dutchp2p/matlock-public"
online_operational_map: "https://matlock.dutchp2p.com/llms.txt"
mcp_resource_uri: "matlock://help/appliance-manual"
mcp_stdio_command: "npx -y @dutchp2p/matlock-mcp | uvx matlock-mcp | matlock.exe mcp --stdio (Windows) | matlock mcp --stdio (.deb) or /path/to/matlock-linux-x64.AppImage mcp --stdio (Linux & GoogleBook) | matlock-mcp --stdio --headless --no-coverage (Linux x64, Windows x64 & macOS arm64)"
network_ports: 0
git_hooks_installed: 0
builtin_git_push_in_test_runs: false
custom_push_deploy_actions_allowed: true
mcp_tools_count: 27
primary_pipeline:
  card: "Matlock"
  sequence_id: "seq_matlock"
  entry_tool_index_0: "matlock_run_scan"
  badge_svg_url: "https://matlock.dutchp2p.com/badge/verified.svg"
  stages: "Clean -> Get -> Format -> Lint -> Analyze/Compile -> Test -> Coverage (depth 0..2)"
  cold_box_default: false
  cold_box_boundary_triggers: ["before external git push", "before cloud-drive save", "before removable backup", "before release compile"]
modularity_tuning_dial:
  person_only_sealed_os_settings: true
  default_tier: "Grade C (<= 250 / <= 80 fn)"
  tiers: ["Grade A (<= 60 / <= 25 fn)", "Grade B (<= 100 / <= 40 fn)", "Grade C (<= 250 / <= 80 fn)", "Grade D (<= 500 / <= 120 fn)", "Minimum (<= 1000 / <= 250 fn)"]
ignore_scopes_5: ["file:line:code", "file:code", "*:code", "file", "folder/"]
lock_governance:
  safeguarded: "Read & Run Only (auto-reverts unauthorized edits + Envelope tamper alert)"
  unlocked: "AI agent can modify (Read, Write, Modify & Run)"
os_storage:
  scope: "private_user_profile_outside_repo"
  env_override: "MATLOCK_STATE_DIR"

F. Agent Operational Principles & Execution Boundaries

Back to top