Legitshow Search

io.github.commitshow由 GitHub 账号 commitshow 发布v0.1.0更新于 Oct 24, 2026

Search launched software (SaaS, AI tools, MCP servers) by measured production-readiness.

概览

AI 生成的概览

一个本地 stdio MCP 服务器,让助手搜索 Legit.Show 已上线软件目录,并按实测的生产就绪度评分筛选结果。

可以做什么
按名称、类别、是否开源及各项最低评分搜索已上线软件(SaaS、AI 工具、MCP 服务器),返回每个匹配项的各项评分与页面链接。获取 Legit.Show 的规范文档,包括 7-Frame 基准及如何引用某项服务。结果仅限各项评分、摘要和页面,不提供合并的总分。
适用场景
适合希望助手依据实测生产就绪度(性能、安全、隐私等)而非人气或 GitHub 星数推荐工具的场景,例如查找安全评分高于某阈值的开源 MCP 服务器。
运行要求
通过 npx(Node.js)以 stdio 进程在本地运行。无需 API 密钥或账号。需联网访问 Legit.Show 公开 REST API;可用 LEGIT_SEARCH_API 和 LEGIT_DOCS_BASE 环境变量覆盖端点。
安装前请注意
README 说明该服务器已合并进 commitshow-mcp,npm 包和注册表条目均已弃用,应改用后继版本。查询与筛选条件会发送给第三方 Legit.Show API。评分仅反映提供方测量的公开表面,并非综合评级。

安装

在 SourceWeft 中

  1. 打开 控制台中的 Legitshow Search,将其添加到工作区。
  2. 为需要使用其工具的对话启用该服务。

Desktop only,通过 STDIO。 STDIO 服务会启动本地进程,因此需要 SourceWeft 桌面宿主。

其他 MCP 客户端

参照 仓库 中的启动说明。

README

[!IMPORTANT] This server has been merged into commitshow-mcp and is no longer published.

commitshow-mcp carries the same two tools — search_services and fetch_docs, with identical arguments — and adds audit_repo and project_status. Two entries under one name, half of them the same, gave anyone browsing the registry no way to tell which to install; there is one now.

jsonc
{ "mcpServers": { "legitshow": { "command": "npx", "args": ["-y", "commitshow-mcp@latest"] } } }

The npm package and the registry entry io.github.commitshow/legitshow-search are both marked deprecated. The source stays here as the record of what it was.

Legit.Show MCP server

Model Context Protocol server for Legit.Show. Plug it into Claude Desktop, Cursor, Cline, Windsurf, or any MCP host, and your model can search a directory of launched software by measured production-readiness — not GitHub stars — without ever leaving the chat.

[npm] [MIT license] [node 20+]

jsonc
// any MCP host config (Claude Desktop · Cursor · Cline · Windsurf · …){  "mcpServers": {    "legitshow": {      "command": "npx",      "args": ["-y", "legitshow-mcp"]    }  }}

That's the entire install. No API key. The server is a stdio shim over the public https://legit.show/api/search REST surface — one source of truth for the data.


Why this is different

Most "find me a tool" flows rank by GitHub stars or popularity. Legit.Show carries a deterministic 7-Frame production-readiness benchmark (Performance, Accessibility, Security, Privacy, Reliability, Standards, Discoverability) measured from the public surface — real Lighthouse, HTTP headers, live probes, no LLM in the scoring path. So your agent can filter by whether something is actually production-ready:

"find production-ready, open-source MCP servers with Security ≥ 80"

Tools exposed

ToolWhat it does
search_services({ query?, category?, min_scores?, is_open_source?, limit? })Search launched software by name or filter. Returns each match with its per-frame scores and its legit.show/s/<slug> page.
fetch_docs()Pull the canonical Legit.Show docs (llms.txt) — what Legit.Show is, the 7-Frame benchmark, and how to cite a service.

Boundary: per-frame scores + summary + the page only. There is no combined overall total in the public data (it's a licensed product), so the model won't invent one.

Host wiring snippets

Claude Desktop — claude_desktop_config.json

jsonc
{ "mcpServers": { "legitshow": { "command": "npx", "args": ["-y", "legitshow-mcp"] } } }

Cursor — .cursor/mcp.json

jsonc
{ "mcpServers": { "legitshow": { "command": "npx", "args": ["-y", "legitshow-mcp"] } } }

Cline / Continue / Windsurf

Same three-line npx -y legitshow-mcp invocation in the host's MCP config.

No MCP host? Plain REST

GET https://legit.show/api/search?q=<name>

Filters: category, min_scores (e.g. {"security":80}), is_open_source, limit (≤50). GET or POST. No key.

Self-hosting / dev overrides

EnvDefaultUsed by
LEGIT_SEARCH_APIhttps://legit.show/api/searchsearch_services
LEGIT_DOCS_BASEhttps://legit.showfetch_docs (llms.txt)

Links

  • Legit.Show — the directory: every launched service, tested
  • Methodology — how the 7-Frame benchmark is measured
  • llms.txt — the canonical machine-readable doc

MIT · operated by Madeflo, Inc.

来源:legitshow-mcp/README.md,提交 bcdb9dd

工具

0
SourceWeft 尚未在沙箱中启动过该软件包,因此其工具未知。

版本历史

1
  1. v0.1.0最新Sep 16, 2026

评分

已满足适用检查项的 50%

该评分衡量此收录条目的完整程度,依据注册中心条目、端点与公开来源计算得出。它不是对服务器本身的评价,也不表示服务器安全或当前可用:可连通性是带日期的检查结果,评分也不包含安装量或用户评价。

  • 近 30 天内可连通25 分

    请保持端点能够响应 MCP 握手;SourceWeft 每 30 天探测一次。

  • 已声明认证方式10 分

    请在注册中心条目中声明凭据请求头,或保持端点能够响应探测,以便判定其认证方式。

  • 已列出工具15 分

    请让服务器在无凭据时响应 tools/list,或发布可在沙箱中无凭据启动的软件包。

  • 描述必需15 分
  • 图标10 分
  • 文档15 分
  • 许可证10 分