Unfragile

io.github.Savirinc由 GitHub 账号 Savirinc 发布v0.11.0更新于 Nov 3, 2026

Search 2.2M tool actions for agents and robots, every result labelled. Find, verify, passports.

已验证STDIO仅桌面网页搜索与抓取开发者工具安全与监控

概览

AI 生成的概览

在 220 万个工具动作的索引中检索工具、MCP 服务器、API 与 CLI，返回带标签和签名的结果及可信度判定，供助手在安装或调用前参考。

可以做什么
  • 按语义与关键词检索能完成某项任务的具体工具动作
  • 针对需求给出单条经核验的软件记录（含证据、安装片段与备选），或返回排序列表
  • 在调用或安装前核验工具、MCP 服务器或软件包，给出可信、谨慎、未核验或已标记的判定
  • 一次调用即可把意图解析为记录、判定与调用片段
  • 获取记录的 Ed25519 签名信任护照，或查看索引的实时统计
适用场景
适合助手需要为某项任务挑选工具、MCP 服务器或软件包，并希望在安装或调用前先做核验的场景；也适合需要带标签的候选清单而非凭猜测作答时使用。
运行要求
以 Node.js 包形式通过 npx 在本机运行，并需联网访问 Unfragile 公共 API。无需账号或密钥；可选环境变量用于设置 API 地址、额外请求头、监控标签，或用于提高速率上限的密钥。
安装前请注意
查询内容与待核验目标会发送给第三方 Unfragile API。判定仅供参考：未核验或未检查的结果应先人工复核，被标记的目标应避免使用。可选的 API 密钥与自定义请求头通过环境变量传入。随附的命令行工具可依据判定拦截安装，其强制覆盖操作会被记录。

安装

在 SourceWeft 中

  1. 打开 控制台中的 Unfragile，将其添加到工作区。
  2. 为需要使用其工具的对话启用该服务。

Desktop only，通过 STDIO。 STDIO 服务会启动本地进程，因此需要 SourceWeft 桌面宿主。

其他 MCP 客户端

参照 仓库 中的启动说明。

README

@unfragile/mcp-server

Search for everything an agent can invoke. Every result labelled. For humans, agents and robots.

Unfragile is the neutral search layer for developers, agents and robots. This package gives any MCP client (Claude Code, Claude Desktop, Cursor, Windsurf, Cline, your own runtime) seven tools over the Unfragile index: 2.2 million tool actions read from MCP servers, APIs, CLIs, SDKs, models, robots and devices, each checked by machine and labelled with what the check found.

  • Labelled, never softened. Every result carries one of: verified and signed · official · found in code, not yet checked · demo or tutorial · failed its last check. Labels are the instruments' verdict; no ranking, model or payment changes them.
  • Signed. Verified records carry an Ed25519 trust passport you can verify offline against the published public key.
  • Honest no. When nothing fits, unfragile_find says so and asks one question back. Retrieval and ranking are deterministic; the one language model in the system writes the single-sentence pick behind answer: true and may only choose among labelled results.
  • Free, no key. Every tool calls the public API at unfragile.ai.

Guides: for agents · for developers · for robots · API reference

Install

One line on a machine with Claude Code (prints the configuration block on any other machine):

bash
curl -fsSL https://unfragile.ai/install.sh | sh

Claude Code

bash
claude mcp add unfragile -- npx -y @unfragile/mcp-server

Claude Desktop, Cursor, Windsurf, Cline, any MCP client

Add to the client's MCP configuration (Claude Desktop: ~/Library/Application Support/Claude/claude_desktop_config.json; Cursor: .cursor/mcp.json; Windsurf: ~/.codeium/windsurf/mcp_config.json):

json
{  "mcpServers": {    "unfragile": {      "command": "npx",      "args": ["-y", "@unfragile/mcp-server"]    }  }}

Tools

ToolWhat it does
unfragile_findThe headline call. Arguments: task, limit (1–20), answer (boolean). The tool ACTION that does a task, across 2.2 million actions. Meaning search and word search fused, ranked by measured trust, reranked. Every result labelled. answer: true adds one definite pick with its reasoning, or an honest no with one question back.
unfragile_answerOne verified software record for a need, with evidence (tier, score, signed passport, freshness, adoption), a paste-ready install snippet and honest alternatives, or an honest no.
unfragile_searchA ranked list of software records with per-record evidence, for when a list beats the single pick.
unfragile_verifyVerify before invoke. A conservative verdict for a target, trusted · caution · unverified · flagged, with the signed passport attached. Never invoke a flagged target; treat unverified as review-first. Unknown is never safe.
unfragile_resolveOne intent in; one record, verdict, signed passport and invocation snippet out, in a single call.
unfragile_passportThe raw Ed25519-signed trust passport for a record, for programmatic policy checks, verifiable offline.
unfragile_statsLive index numbers by door type.

The command line: verify before you install

The same package ships an unfragile command.

bash
# Check a target before installing (exit code 1 = flagged, stop)npx -p @unfragile/mcp-server unfragile verify npm:postmark-mcp
# Guard a real install: verifies the target first, blocks on FLAGGEDnpx -p @unfragile/mcp-server unfragile guard -- claude mcp add pg -- npx -y @scope/pg-mcp

guard extracts the install target from a claude mcp add / npx / uvx command, verifies it, and blocks a flagged verdict (unless --force, which is logged). Every verdict is Ed25519-signed. If verification is unreachable the CLI says so and treats the target as UNVERIFIED; it never fails silently open.

Ask your agent

  • "Find the tool that refunds a Stripe payment and tell me its label."
  • "Which action turns off the living room lights? Verified ones only."
  • "Verify npm:some-mcp-package before installing it."
  • "Get the signed trust passport for the pick."
  • "How big is the index right now?"

The rules

  1. Labels are the instruments' verdict. Read the label before acting on a result.
  2. Never invoke a failed or flagged target. Treat found in code, not yet checked as review-first.
  3. An honest no is an answer. Do not fill the gap with a guess.
  4. Cite the passport. A verified result's url is its signed passport.

Rankings are never for sale. Vendors may pay to have their own record checked sooner, never to change an answer or a label.

How it works

Every tool calls the free public Unfragile API: /api/v1/find, /api/answer, /api/v1/search, /api/v1/verify, /api/v1/resolve, /api/v1/passport, /api/v1/stats. The search runs on Unfragile's own GPU: a meaning index and a word index over the actions, fused and reranked, with trust as a measured nudge, never a label change. How we check.

Environment variables

VariableDescriptionDefault
UNFRAGILE_API_URLAPI base URLhttps://unfragile.ai
UNFRAGILE_MONITORName your monitoring or test traffic: it is measured, never used to train the ranking—
UNFRAGILE_HEADERSExtra request headers as JSON, e.g. {"x-team":"qa"}—
UNFRAGILE_API_KEYOptional key for higher rate limits (CLI guard)(none)

Links

License

MIT

来源：README.md，提交 e215b0d

工具

7

unfragile_answer

THE headline call: describe what you need and get ONE verified answer from the Unfragile corpus — fresh (crawled weekly), tested (machine-verified with honest tiers), signed (Ed25519 trust passport) — plus a paste-ready install snippet and honest alternatives. Same question, same answer (stored per question for 24 h). It names one product only when it does the task and was checked by us, through its maker's own door when there is one; otherwise an honest 'no confident answer' — trust the abstention.

输入参数query必填

unfragile_find

Find the tool ACTION that does what you need, across 2.2 million actions read from MCP servers, APIs, CLIs, SDKs, models, robots and devices. Say the task in plain words ('refund a payment', 'move the robot arm home', 'what's on my calendar tomorrow'); meaning search + word search, fused and ranked by measured trust. Every result carries its label: verified and signed · official · checked: not enough evidence yet · found in code, not yet checked · demo or tutorial · failed its last check. Never invoke a 'failed' result; treat 'checked' and 'found in code' as review-first.

输入参数kindtask必填limitnamedanswerintentsearch

unfragile_verify

Verify a tool, MCP server, or package BEFORE invoking or installing it. Returns a conservative verdict — trusted | caution | unverified | flagged — with the record's Ed25519-signed trust passport attached (verifiable offline against https://unfragile.ai/api/v1/trust-passport-public-key). RULE: never invoke or install a `flagged` target; treat `unverified` as review-first.

输入参数target必填

unfragile_resolve

Agent-runtime resolution: one intent in, one verified record out — with verdict, Ed25519-signed passport, and a paste-ready invocation snippet in a single call. Returns an honest abstention when nothing qualifies.

输入参数intent必填

unfragile_passport

Fetch the raw Ed25519-signed trust passport JSON for a record (by record page slug, record id, or npm package). For programmatic policy checks; verify offline against the published public key.

输入参数slug必填

unfragile_stats

Live census of the verified corpus with honest tiers: listed, machine-verified, signed passports, official records, by envelope.

无需输入参数。

版本历史

5
  1. v0.11.0最新Nov 1, 2026
  2. v0.10.3Nov 1, 2026
  3. v0.10.2Oct 31, 2026
  4. v0.9.1Oct 29, 2026
  5. v0.3.2Sep 16, 2026

评分

已满足适用检查项的 90%

该评分衡量此收录条目的完整程度，依据注册中心条目、端点与公开来源计算得出。它不是对服务器本身的评价，也不表示服务器安全或当前可用：可连通性是带日期的检查结果，评分也不包含安装量或用户评价。

  • 近 30 天内可连通25 分
  • 已声明认证方式10 分

    请在注册中心条目中声明凭据请求头，或保持端点能够响应探测，以便判定其认证方式。

  • 已列出工具必需15 分
  • 描述必需15 分
  • 图标10 分
  • 文档15 分
  • 许可证10 分