
Modelbound Mcp
io.github.ModelBound由 GitHub 账号 ModelBound 发布v0.1.2更新于 Nov 3, 2026
Local-first MCP server for agent skills. Validate, lint, diff, and convert across IDEs.
概览
面向 agent 技能文件的本地优先 MCP 服务器:检测 IDE 布局,列出、读取、写入、检查、安全扫描、校验、转换和对比技能,可选 ModelBound 云端同步。
- 可以做什么
- 检测仓库使用的 IDE 约定,并列出、读取或写入本地技能文件
- 检查技能的 front-matter、token 数量、失效链接和 TODO,并离线扫描注入、数据外泄、密钥和破坏性命令等风险
- 按 agentskills.io 规范校验技能,在 IDE 格式之间转换,并按默认范围限制生成新技能
- 执行审核流程(查看状态、申请、批准、拒绝、门禁),可在 CI 中拦截未批准的技能
- 配置 API 密钥后:拉取、推送、搜索、列出和安装市场技能,查看团队资源树并检查优化健康度
- 适用场景
- 适合在仓库中维护 agent 技能、规则或 steering 文件,并在 Cursor、Claude、Codex、Kiro、Windsurf、VS Code 或 Amazon Q 之间切换的场景,或希望在技能被使用前做检查和安全性扫描。只有团队把技能存放在 ModelBound 时,云端工具才有意义。
- 运行要求
- 通过 stdio 在本地运行,通常使用 npx modelbound-mcp 或全局安装 npm 包,因此需要 Node.js。本地工具无需账号或网络。云端同步工具需要环境变量 MODELBOUND_API_KEY,该密钥为可选项。
安装
在 SourceWeft 中
- 打开 控制台中的 Modelbound Mcp,将其添加到工作区。
- 为需要使用其工具的对话启用该服务。
Desktop only,通过 STDIO。 STDIO 服务会启动本地进程,因此需要 SourceWeft 桌面宿主。
其他 MCP 客户端
参照 仓库 中的启动说明。
README
modelbound-mcp
Local-first MCP server for agent skills. Validate, lint, diff, and convert agent skill files across Cursor, Claude, Codex, Kiro, Windsurf, VS Code, and Amazon Q — no account required. Optional cloud sync with ModelBound.
[npm] [License: MIT] [ModelBound Skill Checks]
Why ModelBound?
AI tools come and go. You might use Cursor today, switch to Claude Code tomorrow, and try Kiro next week — but your skills, rules, and context shouldn't be locked into any one of them. ModelBound gives you a single place to store and manage your agent skills, so you can move between tools freely without rebuilding your setup each time. Write a skill once, sync it everywhere, and get more value out of every AI subscription you're already paying for.
What it does
modelbound-mcp is a small Model Context Protocol server you run locally over stdio. It exposes tools to your IDE / agent using dot-notation naming for navigable discovery:
Local (no API key, no network):
ide.detectLayout— find which IDE conventions your repo usesskills.listLocal,skills.readLocal,skills.writeLocalskills.lint— front-matter, token count, broken links, TODO scan, pass / warn / fail checks (scanner h5)skills.flightCheck— Flight Check offline safety scan (injection, exfiltration, secrets, destructive commands, wildcard tools, loop hazards); same rules asnpx modelbound checkskills.checks— deterministic safety/quality checks without full lint (no numeric score)skills.scaffold— create a skill with default scope constraintsskills.reviewStatus,skills.reviewRequest,skills.reviewApprove,skills.reviewReject,skills.reviewGateskills.validateFormat— agentskills.io complianceskills.convert— translate between IDE formats (e.g. Cursor → Claude)skills.diff— compare a local skill with its cloud counterpart
Cloud (with MODELBOUND_API_KEY):
cloud.pullSkill,cloud.pushSkill,cloud.searchcloud.listSkills— now acceptsai_typeandsource_platformfilters; every row includesai_type,source_platform,source_path, andrepocloud.resourceTree— returns the team's full hierarchy grouped by platform → top-level dir (.claude/skills,.cursor/rules,.kiro/steering, …) → files. Use this beforecloud.listSkillswhen an orchestrator needs to map context before loading.cloud.installMarketplaceSkilloptimization.health
Resource hierarchy
Orchestrators that juggle multiple AI platforms can call cloud.resourceTree once to get a complete map of available skills, rules, hooks, steering files, and system prompts — grouped exactly how each platform expects them on disk. Pair it with the new ai_type / source_platform filters on cloud.listSkills to load only the slice you need. See examples/resource-tree.ts.
The cloud tools are a thin JSON-RPC proxy to mcp.modelbound.co. All business logic stays server-side; this repo never touches your data or secrets.
Migration from 0.1.x — old snake_case names (
detect_ide_layout,pull_skill, …) were removed in 0.2.0. The hosted ModelBound MCP server still accepts both forms forever for backward compatibility.
Anti-slop (0.4.x) — trust scanner bumped to h5 with scope-limit, unbounded-wording, dependency, and refactor findings.
skills.readLocalnow returnschecks,scanner_version,review_state, andreview_meta. Override default scope limits via.modelbound/task-budgets.json. Useskills.reviewGatein CI to block unapproved skills.
Install
Or install globally:
Use as an MCP server
Cursor (.cursor/mcp.json)
MODELBOUND_API_KEY is optional. Without it, local tools still work.
See examples/ for Claude Desktop, Kiro, Windsurf, and VS Code configs.
Use as a CLI
Tests
CLI vs MCP tool mapping: docs/PARITY.md.
Contributing
We want help. Specifically:
- New IDE adapters — Zed, Aider, Continue, JetBrains AI, Cline. See CONTRIBUTING.md for the ~50 line recipe.
- Linter rules — token estimation accuracy, dead-link detection, format-specific gotchas.
- Format converters — fidelity improvements between adapter pairs.
Browse good first issues and the roadmap.
Related projects
Also on Smithery (stdio via npx modelbound-mcp) and the MCP Registry. Install hub: modelbound.co/connect
License
MIT © ModelBound
来源:README.md,提交 0a56c12
工具
0版本历史
1- v0.1.2最新Sep 16, 2026
评分
已满足适用检查项的 50%
该评分衡量此收录条目的完整程度,依据注册中心条目、端点与公开来源计算得出。它不是对服务器本身的评价,也不表示服务器安全或当前可用:可连通性是带日期的检查结果,评分也不包含安装量或用户评价。
- 近 30 天内可连通25 分
请保持端点能够响应 MCP 握手;SourceWeft 每 30 天探测一次。
- 已声明认证方式10 分
请在注册中心条目中声明凭据请求头,或保持端点能够响应探测,以便判定其认证方式。
- 已列出工具15 分
请让服务器在无凭据时响应 tools/list,或发布可在沙箱中无凭据启动的软件包。
- 描述必需15 分
- 图标10 分
- 文档15 分
- 许可证10 分