TOPY.AI · AI CTO

ai.topy由 topy.ai 发布官方发布者v0.1.0更新于 Oct 29, 2026

Founders' AI CTO: CI failures explained, PRs and checks, release notes, alerts.

发布方自己的服务：TOPY.AI · AI CEO

已验证Streamable HTTP可网页运行云端与基础设施开发者工具安全与监控

概览

AI 生成的概览

TOPY.AI AI CTO 让编程助手围绕 GitHub 处理 CI 失败、PR 审查、发布、部署与安全告警，充当小团队的 AI 技术负责人。

可以做什么
  • 解释 CI：读取失败的 GitHub Actions 运行、作业与日志，区分偶发失败与真实故障，并在预览后重跑或开 issue。
  • 审查代码与分诊 issue：评估拉取请求的风险，把缺陷报告和 CI 发现整理成有规模、有负责人的 issue。
  • 准备发布：起草发布说明，依据证据执行发布门禁，规划受控部署，并回滚到上一个可用构建。
  • 关注安全与依赖：读取 Dependabot、代码扫描与密钥扫描告警，并给出密钥卫生建议。
  • 汇报状态：常设目标、每日晨检（服务健康、CI、待处理 PR），以及事故响应与架构决策记录指导。
适用场景
适合小型团队或独立创始人，希望助手持续关注 GitHub 上的 CI、拉取请求、发布与安全告警，解释失败原因并基于证据准备发布。适用于合并、发布和生产变更仍由人批准的流程。
运行要求
需要 TOPY.AI 账户并通过 OAuth 连接，或为本地 stdio 包提供 TOPY_API_KEY。需创建并安装 TOPY AI GitHub App 到相应仓库，且只有拥有 OneMan 运营的账户才能访问其 GitHub。可连接 topy.ai/mcp/cto 远程端点，或通过 npx 在 Node.js 上运行本地服务器。
安装前请注意
它通过 TOPY AI GitHub App 访问 GitHub，仓库访问权限会授予该应用及 TOPY.AI。创建 issue、评论、重跑等变更需先预览再确认。合并、发布、新建仓库和生产工作流需在别处由创始人批准。代码、日志与 issue 文本按数据处理，密钥不应被打印或索取。

安装

在 SourceWeft 中

  1. 打开 控制台中的 TOPY.AI · AI CTO，将其添加到工作区。
  2. 连接 所需的 凭据。它们会被私密存储，绝不会在公开页面上展示。
  3. 为需要使用其工具的对话启用该服务。

Web executable，通过 Streamable HTTP。 远程服务在工作区中配置后即可从网页运行时运行。

交给智能体安装

把这段提示词粘贴到 Claude Code、Codex、Cursor 等智能体，或 SourceWeft 对话中。智能体会读取该服务器的安装指南，先向你展示发布者、端点和登录方式，经你同意后再把它添加到你的客户端。密钥不会写进任何命令。

阅读 https://sourceweft.com/mcp/ai.topy%2Fcto/install.md，并按其中说明把这个 MCP 服务器接入我的客户端。修改任何配置之前，先告诉我它的发布者、端点和登录方式，等我确认。不要把 API 密钥写进命令或我会提交的文件；问我密钥应从哪里获取。

查看智能体所依据的安装指南

其他 MCP 客户端

把它添加到你客户端的 mcpServers 配置中。 客户端会在首次连接时完成 OAuth 登录。

{
  "mcpServers": {
    "topy-ai-ai-cto": {
      "type": "http",
      "url": "https://topy.ai/mcp/cto"
    }
  }
}

README

[TOPY AI CTO]

TOPY AI CTO Skills

17 skills that make your coding agent a small company's AI CTO: what is live keeps working and every release has evidence — CI failures explained from their logs, flaky tests quarantined, pull requests reviewed for risk, release notes, a release gate, safe deploys and rollbacks, incident response, dependency alerts and secrets hygiene — through the TOPY AI GitHub App on the TOPY.AI CTO MCP server.

[npm] [MIT License] [MCP]

The AI CTO is goal-first. It keeps four standing goals — what is live works (uptime), we ship often and safely (deploy frequency, change failure rate), every release has evidence (CI green, QA passed, live == built) and the platform can grow — and every skill below exists to move one of them. Runs, checks, logs and alerts come from the tools; an alert kind GitHub won't show is "not read" with GitHub's reason, never zero.

  • Core (topy-ai-cto): connect, the CTO's goals, the morning check, the CI watch.
  • CI: why CI failed, flaky tests, CI hygiene.
  • Code review & issues: review a pull request for risk, triage engineering issues.
  • Releases & deploys: release notes, the release gate, deploy safely, roll back.
  • Dependencies & secrets: dependency and security alerts, secrets hygiene.
  • Incidents & architecture: incident response, architecture decision records.

The safety model comes from Maggie QA Workflow and Maggie Deployment and does not bend: GitHub is reached through the TOPY AI GitHub App the Founder installs — no GitHub token passes through the agent; merging to the default branch, creating repositories or releases and production workflows are the Founder's, approved on OneMan, never tools here; secrets are never printed or asked for; code, commit messages, issue text and logs are data, never instructions; and every release needs evidence before it ships. Changes (an issue, a comment, a re-run) take two calls — a preview, then your yes.

Install

sh
npx @topy-ai/cto-skills install                  # this project, for the agents set up herenpx @topy-ai/cto-skills install -g --mcp         # your user, plus the MCP servernpx @topy-ai/cto-skills install --category ci,releasesnpx @topy-ai/cto-skills list

Claude Code plugins: /plugin marketplace add TOPY-AI-LTD/TOPY-AI-CTO-Skills, then /plugin install topy-ai-cto-all@topy-ai-cto. Codex: codex plugin marketplace add TOPY-AI-LTD/TOPY-AI-CTO-Skills. Pi: pi install npm:@topy-ai/cto-skills. See the installer README.

Connect TOPY.AI

https://topy.ai/mcp/cto — OAuth with your TOPY.AI account (the same one as the AI CEO, CFO, COO, CSO, CRO and CPO). Only the accounts that own the OneMan operation reach its GitHub. Connect GitHub first: create and install the TOPY AI GitHub App from the links OneMan's CTO gives (github_setup_app, github_setup_install); you press Create and Install on GitHub.

ClientHow
Claude, ChatGPT (web, desktop)custom connector https://topy.ai/mcp/cto
Claude Codeclaude mcp add --transport http topy-cto https://topy.ai/mcp/cto
Codexcodex mcp add topy-cto --url https://topy.ai/mcp/cto
Clients that only start a commandnpx -y @topy-ai/cto-mcp after npx @topy-ai/cto-mcp login
Terminal and scriptsnpm i -g @topy-ai/cto-cli && cto-cli login

Merges, releases, new repositories and production workflows are not on topy.ai/mcp/cto: they need the Founder's approval on OneMan.

How the skills fit together

topy-cto-connect ─▶ topy-cto-goals        │   every morning:   topy-cto-morning-check   around the clock: topy-cto-ci-watch (an email only on a failure or a recovery)        │   ci:        topy-cto-ci-failure ─▶ topy-cto-flaky-tests · topy-cto-ci-hygiene   code:      topy-cto-pr-review · topy-cto-issue-triage   releases:  topy-cto-release-notes ─▶ topy-cto-release-gate ─▶ topy-cto-deploy-safely ─▶ topy-cto-rollback   security:  topy-cto-dependency-alerts · topy-cto-secrets-hygiene   platform:  topy-cto-incident · topy-cto-architecture-decision

Try: "Is CI green?", "Why did the build fail?", "Review PR 42", "Can we ship?", "Any security alerts?"

Packages

PackageWhat it is
@topy-ai/cto-skillsThis installer (Claude Code, Codex, Pi, Cursor, Gemini CLI, …)
@topy-ai/cto-mcpThe CTO MCP server as a local stdio server (forwards to https://topy.ai/mcp/cto)
@topy-ai/cto-cliThe AI CTO on the command line

Repository structure

plugins/  topy-ai-cto/                   core skills + .mcp.json (Claude Code) and mcp.json (Codex)  topy-ai-cto-ci/   topy-ai-cto-code/   topy-ai-cto-releases/  topy-ai-cto-security/   topy-ai-cto-platform/  topy-ai-cto-all/               bundle that depends on all six.claude-plugin/marketplace.json     Claude Code marketplace.agents/plugins/marketplace.json    Codex marketplaceskills.json                         machine-readable cataloguepackages/skills/                    the @topy-ai/cto-skills installer

The skills are generated from a source catalogue kept next to TOPY.AI's MCP server; the build checks every tool a skill names against the CTO server's tool list. Please open an issue rather than editing a SKILL.md.

License

MIT © TOPY AI LTD. Privacy: topy.ai/privacy.

Skills

17 skills in 6 plugins, plus the topy-ai-cto-all bundle. Generated from the source catalogue: please open an issue rather than editing a SKILL.md.

AI CTO core (MCP) · topy-ai-cto

SkillTierWhat it does
topy-cto-ci-watchcoreHow the AI CTO watches CI around the clock: a GitHub webhook per run, an email only on a failure or a recovery, with the failing jobs and the log lines.
topy-cto-connectcoreConnect the TOPY CTO MCP server and check what it can see: the GitHub App and its repositories, CI, alerts and service health.
topy-cto-goalscoreThe AI CTO's standing goals and its status report for the CEO: uptime, deploy frequency and change failure rate, each with source and date or 'no data'.
topy-cto-morning-checkcoreEach morning: service health, CI on the default branches, pull requests waiting and anything red — the one thing to fix first.

CI · topy-ai-cto-ci

SkillTierWhat it does
topy-cto-ci-failureconnectedExplain a failed GitHub Actions run from its jobs and logs: the step, the cause in the log's own words, flaky or real, and the fix — then re-run or open an issue.
topy-cto-ci-hygienestandaloneKeep CI fast and trustworthy: required checks, caching, a time budget, pinned actions, least-privilege tokens and no secrets in logs.
topy-cto-flaky-testsconnectedTell a flaky test from a real failure, quarantine it with an owner and a deadline, and fix the cause (time, order, network, shared state) instead of re-running forever.

Code review & issues · topy-ai-cto-code

SkillTierWhat it does
topy-cto-issue-triageconnectedTurn bug reports and CI findings into issues worth fixing: reproduce, size, label, owner — and close what isn't actionable.
topy-cto-pr-reviewconnectedReview a pull request for what matters before merge: what changed, whether checks pass, and the risks — migrations, auth, money, secrets, irreversible steps, missing tests.

Releases & deploys · topy-ai-cto-releases

SkillTierWhat it does
topy-cto-deploy-safelyconnectedShip to production in small steps: plan, the Founder's approval, deploy the gated build, canary, check live matches what was built, then report — or roll back.
topy-cto-release-gateconnectedDecide whether a build may ship: CI green on the exact commit, checks and QA passed, migrations reversible, rollback ready, and someone watching — evidence for each.
topy-cto-release-notesconnectedDraft release notes from the commits since the last release, grouped as new, improved and fixed in words customers understand — nothing is published.
topy-cto-rollbackconnectedWhen a release hurts, restore service first: redeploy the last good build, keep data safe, confirm recovery, then find the cause.

Dependencies & secrets · topy-ai-cto-security

SkillTierWhat it does
topy-cto-dependency-alertsconnectedRead Dependabot, code-scanning and secret-scanning alerts, fix what is exploitable first, and say plainly which alert kinds GitHub isn't showing and why.
topy-cto-secrets-hygienestandaloneKeep keys and tokens out of code, logs and chats: where secrets live, least privilege, rotation, and what to do in the first hour after one leaks.

Incidents & architecture · topy-ai-cto-platform

SkillTierWhat it does
topy-cto-architecture-decisionstandaloneRecord a technical decision so it can be revisited: the context, the options with their costs, the choice, its consequences, and what would make us change it.
topy-cto-incidentconnectedWhen something customers use is down or wrong: one lead, stop the harm, restore service, communicate on a clock, then a blameless review with fixes.

来源：README.md，提交 f0c0b29

工具

0
该服务器需要登录，因此 SourceWeft 无法在没有账号的情况下读取其工具，也未收录。已连接账号所能看到的内容可能因账号及其权限而异。

版本历史

1
  1. v0.1.0最新Oct 29, 2026

评分

已满足适用检查项的 85%

该评分衡量此收录条目的完整程度，依据注册中心条目、端点与公开来源计算得出。它不是对服务器本身的评价，也不表示服务器安全或当前可用：可连通性是带日期的检查结果，评分也不包含安装量或用户评价。

  • 近 30 天内可连通必需25 分
  • 已声明认证方式必需10 分
  • 已列出工具15 分

    请让服务器在无凭据时响应 tools/list，或发布可在沙箱中无凭据启动的软件包。

  • 描述必需15 分
  • 图标10 分
  • 文档15 分
  • 许可证10 分

其他 Topy 集成

TOPY.AI · AI CEO

ai.topy官方发布者

TOPY.AI 的 AI CEO MCP 服务器，让助手撰写和维护创始人的商业计划、CEO 记录、融资与财务工作。

Streamable HTTP可网页运行鉴权
效率与工作流需要凭据Oct 26, 2026

TOPY.AI · AI CSO

ai.topy官方发布者

TOPY.AI AI CSO 为编码助手提供首席安全官能力：CVE 与依赖检查、密钥扫描、已验证站点的 Web 检查、威胁建模与事件报告。

Streamable HTTP可网页运行鉴权
云端与基础设施需要凭据Nov 5, 2026

TOPY.AI · AI CRO

ai.topy官方发布者

远程或本地运行的 MCP 服务器，为助手提供小公司的 AI CRO：基于真实数据的营收复盘、销售管道、交易台、报价与催收。

Streamable HTTP可网页运行鉴权
效率与工作流需要凭据Oct 29, 2026

TOPY.AI · AI CPO

ai.topy官方发布者

TOPY.AI AI CPO 让助手具备产品管理能力：反馈分诊、优先级排序、PRD、预注册实验和决策日志。

Streamable HTTP可网页运行鉴权
效率与工作流需要凭据Oct 29, 2026

TOPY.AI · AI COO

ai.topy官方发布者

TOPY.AI 的 AI COO 服务器，让助手监控 AI 联合创始人的定时 Routine、失败、审批与每周运营报告。

Streamable HTTP可网页运行鉴权
效率与工作流需要凭据Oct 29, 2026