
Delimit — Keep the state. Change the model.
io.github.delimit-ai由 GitHub 账号 delimit-ai 发布v4.23.0更新于 Nov 7, 2026
Keep the state. Change the model. Shared context and a multi-model panel across coding assistants.
概览
本地 CLI 与 MCP 工具集,在多个 AI 编程助手之间保留决策、任务与交接,并为 API 变更把关并生成签名凭证。
- 可以做什么
- 对 OpenAPI 规范变更做 lint、diff 与语义化版本分类,给出策略判定
- 扫描仓库、从框架源码生成规范,并运行零配置 PR 检查以发现破坏性变更与泄露的密钥
- 把 AI 辅助的 CLI 运行纳入治理关卡,生成本地签名凭证,并可输出信任页与 AI 物料清单
- 跨会话、跨助手保存与检索记忆,并维护共享任务台账
- 把问题交给多个已配置的模型讨论,并报告其一致与分歧之处
- 适用场景
- 适合同时使用多个 AI 编程助手、希望决策、任务与交接在会话和模型切换之间延续的场景。也适合需要对 API 规范的 AI 辅助变更设置破坏性变更关卡并保留可离线验证凭证的团队。
- 运行要求
- 通过 npm 包 delimit-cli 以 npx 作为本地进程运行,需要 Node.js。setup 会向本机检测到的 AI 助手写入配置。多模型讨论使用你自行配置的模型 CLI 或 API 密钥;部分功能标记为 Pro。
安装
在 SourceWeft 中
- 打开 控制台中的 Delimit — Keep the state. Change the model.,将其添加到工作区。
- 为需要使用其工具的对话启用该服务。
Desktop only,通过 STDIO。 STDIO 服务会启动本地进程,因此需要 SourceWeft 桌面宿主。
其他 MCP 客户端
参照 仓库 中的启动说明。
README
</> Delimit
Keep the state. Change the model.
Delimit keeps your decisions, tasks, and handoffs on your machine, so the next AI coding session picks up where the last one stopped, even in a different assistant.
[npm] [GitHub Action] [License: MIT] [Glama Score]
Glama directory grades: License A · Quality A · Maintenance A. Observed September 15, 2026, for this public repository. View the listing.
The problem
- Your agent forgets what you decided last session, then asks again or quietly decides differently.
- It redoes work that was already finished, or says "done" when nothing shipped.
- It takes actions you never approved.
Quick start
setup adds Delimit to the assistants it finds on this machine. Open your assistant as usual and it can read and write the same saved record. You can also save and find a decision from the terminal:
The same session as text:
Works with: Claude Code, Codex, Cursor, and Antigravity (configured by setup), plus GitHub Copilot and Muse as full sessions through delimit chat. Install and sign in to each client yourself; see Lead chat, Copilot CLI and Muse Code sessions.
Hard calls: npx delimit-cli deliberate "<question>" puts a question to the models you have configured (Claude, GPT via Codex, Gemini via Antigravity, Grok, DeepSeek, Muse) and shows you where they agree and where they disagree.
If Delimit helps you, a ⭐ helps other people find it.
For code repositories: merge gate
Delimit can also gate AI-assisted changes in a repository and keep a local signed attestation of each run.
Every wrapped run emits a local delimit.attestation.v1 bundle: repo head before/after, changed files, gate results, and an HMAC-SHA256 signature. Verify it offline with delimit seal-verify; hosted replay is not available yet. Advisory by default; flip to enforcing when you're ready.
Zero-config PR check: delimit check
Zero-config PR safety gate. No init, no setup, no account, no keys — run it on any repo and it applies deterministic checks (breaking API changes + leaked secrets) to your staged or modified files.
When a check finds a breaking change or a leaked secret, it prints the offending file and the issue and exits non-zero — so it drops straight into a pre-commit hook or CI step.
Common options:
--record writes a content-pinned record of the check to .delimit/records/check-<ts>.json (or a path you name). That record is the precursor to the signed, replayable Seal attestation — the same evidence shape, pinned to the exact content you checked.
Methodology · cal.com v2 worked example · Workflow guide · Website
Worked examples
Real, reproducible merge-gate runs against public API specs:
- OpenAI OpenAPI: a year of AI frontier evolution under a cross-vendor merge gate — OpenAI (openai/openai-openapi)
- Stripe v1 OpenAPI: 57 days under a merge gate — Stripe (stripe/openapi)
- Anthropic API: 76 days under a cross-vendor merge gate — Anthropic (anthropics/anthropic-sdk-python)
- Twilio v2010 OpenAPI: 55 days under a merge gate — Twilio (twilio/twilio-oai)
- Docusign eSignature v2.1 OpenAPI: 46 days under a merge gate — Docusign (docusign/OpenAPI-Specifications)
- Supabase Auth OpenAPI: 57 days under a merge gate — Supabase Auth (supabase/auth)
- cal.com v2 OpenAPI: 60 days under a merge gate — cal.com (calcom/cal.com)
- EU TED v3 procurement API: $ref'd component-schema drift under a merge gate — European Commission (TED v3 Public API)
- Cross-agent handoff: one artifact, four CLIs — Cross-CLI session handoff (worked example)
- delimit-mcp-server (self-attestation): same merge gate, third artifact class — delimit-mcp-server (self-attestation)
See the full index at delimit.ai/reports. For the schema and signing methodology behind every report, see delimit.ai/methodology/mcp-attestation.
Golden Path — your first 10 minutes
The API check, end to end: lint a spec, see exactly what breaks, classify the bump, settle the hard calls with the model providers you configure, and keep a locally signed receipt of what ran. Then keep the context that survives across sessions and models.
1. Install
scan (delimit_scan) reports what Delimit can do for this repo. init (delimit_init) drops in the policy preset and merge-gate config. No account, no keys.
2. The merge gate, end to end
Lint the spec change (the gate). Baseline vs. proposed, with policy applied — one pass/fail verdict.
See exactly what breaks. Pure structural diff — added/removed/modified endpoints, schemas, params, no policy.
Classify the bump. Deterministic MAJOR/MINOR/PATCH/NONE — same input, same answer, every time.
Settle the hard calls. When the gate verdict is a judgment call, put it to multiple models and let them debate to consensus.
delimit setup gives the Codex MCP server a 30-minute tool timeout so a
multi-round panel can return its completed transcript instead of being detached
by the client while its models are still responding.
Capture the signed, replayable attestation. After a gate event (deploy / security / test / audit), record the evidence bundle and verify it any time.
Every receipt is offline-verifiable with npx delimit-cli seal-verify <receipt.json>. Hosted receipt replay is not available yet.
3. Context that survives sessions and models
Decisions, constraints, and tasks persist across sessions. Continue in Claude Code, Codex, Cursor, Antigravity, GitHub Copilot, or Muse with the saved record.
Memory — persist and recall the why, not just the diff.
For semantic recall by meaning across sessions, the assistant calls delimit_memory_search (Pro) directly.
Ledger — one task list, shared across every assistant and session.
That's the loop: gate the change, sign the proof, keep the context. Run it once on a real spec and you've used the whole merge gate.
Lead chat, Copilot CLI and Muse Code sessions
Install and authenticate the official client separately, under the same OS user who runs Delimit. Delimit does not install these clients, purchase a plan, log you in, or verify your subscription allowance. The interactive lead order is Claude → Codex → Antigravity → Muse → Copilot, subject to existing configuration, availability and native-client checks. This changes only lead chat, not review panels or background routing. Existing paid API fallback remains opt-in.
You can launch from your home directory without changing directories. That is
an unscoped owner workspace: Delimit loads workspace instructions but does not
infer a venture or restore the newest unrelated handoff. A stale active-venture
pointer is not selected. Use --project to bind an existing Git repository;
missing or invalid project paths fail before launching a model. Root/workspace
exit does not claim a project-bound capture. Recover or save continuity against
the actual task scope through existing Delimit tools.
Muse and Copilot are native interactive harnesses, not new model votes or
automatic build-loop backends. An explicit --model muse or --model copilot
stays on that selection without probing or silently switching providers.
In the default lead chain a failed native launch can advance to the next lead;
an intentional interrupt exits. No successful handoff is inferred from a failed
or unavailable capture. Native permission approvals remain active. Copilot launches
with automatic updates and remote/export features disabled for this session.
Muse preparation: first verify that your account permits Standard
muse-spark-1.3 on the intended billing route. Back up your native
$XDG_CONFIG_HOME/muse/settings.json (or ~/.config/muse/settings.json when
XDG_CONFIG_HOME is unset), and merge these fields into its existing JSON object;
preserve unrelated settings and authentication:
The explicit Muse launch requires that selection and exclusion of foreign
personal rules/skills; it does not change native settings for you. A configured
provider must be meta, and a configured endpoint must be
https://api.meta.ai/v1. META_API_KEY or MODEL_API_KEY environment overrides
block this launch until you resolve the intended billing route. Do not switch
credentials or models merely to bypass that check. Standard selection is not
proof of zero retention, subscription billing, or private-data clearance.
Current binary discovery supports Copilot in ~/.local/bin, /usr/local/bin,
or /usr/bin, and Muse's versioned ~/.local/bin/muse-bin-<version>-R<revision>
distribution. Muse uses that executable directly, not its updater launcher.
Other installation layouts are not automatically discovered. The native Muse
context settings were checked with Muse Code 1.2.1; recheck compatibility when
upgrading the client.
Delimit supplies a compact project-bound startup instruction, not an automatic
import of your ledger, memory, or complete conversation. Optional local guidance
can live in $DELIMIT_HOME/harness-bootstrap.md (default
~/.delimit/harness-bootstrap.md); the combined startup text must fit within
16 KiB. Project AGENTS.md/CLAUDE.md files at or above 64 KiB are rejected
instead of silently truncated. Recover and save a scoped handoff through your
available Delimit tools. These launchers do not automatically register a
native MCP connection or prove cross-harness continuity.
When both project instruction files exist, the startup packet lists both files with their sizes and hashes and tells the harness to read them completely, including guidance hidden by native file precedence. It does not copy their contents into the startup packet, silently merge files, or override the existing instruction hierarchy. User-global guidance remains opt-in through the local bootstrap file; Delimit never copies a different client's private rules by default. This manifest is a loading instruction, not proof that the model performed every read. If required guidance is inaccessible or conflicts, resolve that gap before allowing edits. Oversized native project files still fail closed without rewriting the originals.
Optional command shims can be installed with delimit setup --harness-shims.
Ordinary setup only refreshes already-managed Muse/Copilot shims; it does not
newly shadow your native commands. Custom shims are preserved. With the opt-in,
a conflicting custom file stops installation of both additional shims.
For existing launcher-managed continuity, clean exit finalizes only a bound
handoff. If that is unavailable, Delimit reports the specific reason and writes
a private local diagnostic receipt under its sessions/ directory. That receipt
is not a conversation backup. Existing handoffs are not replaced by empty ones;
resume the exact native session and explicitly save a project-bound handoff.
Think and Build
delimit think runs a multi-model deliberation using available configured providers. delimit build starts a detached planning worker that inspects the repository and writes briefs; it does not execute ledger tasks. delimit vault stores secrets as plaintext JSON in owner-only (0600) files.
Works across any configuration, from a single model on a budget to a full panel.
Try it in 2 minutes
No API keys. No account. No config files.
Pick your first win
Protect my API — catch breaking changes before merge:
Watch for drift — detect spec changes without review:
Run PR copilot — governance gates on every pull request:
What's New
Gate every AI-assisted invocation. Ship the receipts.
delimit wrap— pipeclaude -p,cursor,aider,codex, or any AI-assisted CLI through a signed governance gate. Snapshots the git diff before/after, runs lint + tests, HMAC-signs anatt_*attestation, and writes the receipt locally for offline verification. Advisory by default;--enforceblocks CI on policy violations;--max-time <s>is a kill switch that tags the attestation as aliability_incidentand prints a cross-model handoff command.delimit trust-page— renders a directory of attestations into a static HTML trust page + JSON Feed 1.1 feed. Single file, no framework, offline-renderable. Deploy anywhere.delimit ai-sbom— aggregates attestations into a CycloneDX 1.6 bill-of-materials with AI-specific fields (detected models per vendor, tool-call surface, policy gate counts). Pipe straight into procurement.- Cross-model by construction —
wrapuses the same local attestation schema across supported command-line producers. Delimit keeps session context across Claude Code, Codex, Cursor, Antigravity, GitHub Copilot, and Muse.
Earlier releases
The highest state of AI governance — earlier features still active.
delimit doctor-- checks your local setup and suggests fixes. Supports--cifor pipelines and--fixfor supported repairs.delimit simulate-- policy dry-run. See what would be blocked before you commit. Theterraform planfor API governance.delimit status-- visual terminal dashboard. Policy, specs, hooks, CI, MCP, models, memory, ledger, evidence, git branch.--watchfor live refresh.delimit report-- governance report.--since 7d --format md|html|json. Audit-friendly output for PRs and compliance.- Memory hardening -- SHA-256 integrity hash + source model tag on every
remember. Cross-model trust, verified on everyrecall. - Tag-based publishing -- automated gateway sync, no more version drift between source and npm bundle.
Multi-Model Deliberation
Run your question through 4 AI models simultaneously. They debate each other until unanimous agreement.
Deliberations use your configured model CLIs or API keys. Provider availability depends on your setup.
v4.18
- MCP Registry record published on every release -- the official registry entry now tracks the npm version automatically. Publisher pinned and checksum-verified; the tag gate asserts that both
server.jsonversion fields match the package version. - Tool descriptions -- 16 previously undocumented parameters documented from their signatures; 26 Pro-gated tools state the prerequisite and the unlicensed-call response.
- Release guards -- bundle-classification guard no longer flakes on SIGPIPE.
v4.17
- Cross-model continuity on fresh installs --
delimit_soul_capture/delimit_revivework without any internal modules via the publicsession_continuitymodule; captured souls carry deterministic provenance (venture, transcript identity, capture key) for reliable resume across model switches. Existing soul files load unchanged. - Security audit -- fewer false positives on test fixtures and documentation dummies; suppressed findings are reported, never silently dropped.
v4.16
- Fail-closed bundle allowlist -- the npm package ships only explicitly reviewed gateway files; two CI guards block any unclassified or non-allowlisted file from entering the tarball.
- Session-end auto-capture installs in the settings shape Claude Code expects, so end-of-session handoff fires instead of being silently dropped.
- Always-on commit-author audit workflow catches identity drift on the repo.
v4.1
- TUI -- terminal-native Ventures panel, real
delimit thinkanddelimit buildcommands - Security hardening -- notify.py stubbed in npm, axios pinned against supply chain attacks
- Deliberation providers -- deliberations run on the model CLIs or API keys you configure (
delimit models); no hosted runs are included - Zero-config onboarding -- auto-detect framework, scan, and first evidence in one command
- Assistant permissions --
delimit setupconfigures MCP access for Claude Code, Codex, Cursor, and Antigravity and sets approval defaults for some clients; review these settings for your environment
v4.0
- Toolcard Delta Cache -- SHA256 schema hashing, delta-only transmission, saves tokens
- Session Phoenix -- cross-model session resurrection with soul capture
- Handoff Receipts -- structured acknowledgment protocol between agents
- Cross-Model Audit -- 3 lenses (security, correctness, governance) with deterministic synthesis
- 4-model deliberation -- Claude + Grok + Gemini + Codex debate until consensus
- Universal Swarm Triggers -- "Think and Build", "Keep building", "Ask Delimit"
- Full governance toolkit -- lint, diff, policy, evidence, drift, attestation, and swarm orchestration exposed as MCP tools and CLI subcommands
GitHub Action
Zero-config -- auto-detects your OpenAPI spec:
Or with full configuration:
That's it. Delimit auto-fetches the base branch spec, diffs it, and posts a PR comment with breaking changes, semver classification, migration guides, and governance gate results.
View on GitHub Marketplace | See a live demo (23 breaking changes)
Example PR comment
Breaking Changes Detected
Semver: MAJOR (1.0.0 -> 2.0.0)
Migration Guide: 3 steps to update your integration
Governance Gates
Adopt with minimum privilege
You don't have to trust a large tool surface on day one. The safe on-ramp:
Phase 1 — read-only governance (free, no account). Start with the tools that
only read your repo and write reports: delimit_lint, delimit_diff,
delimit_semver, delimit_policy, delimit_explain, delimit_scan, and
delimit_seal_verify. If your MCP client supports per-tool allowlists, grant
exactly those. Nothing in this set executes, deploys, or posts anywhere.
Phase 2 — opt into side effects deliberately. Tools that write evidence
bundles, open PR comments, or run deploys (delimit_security_audit,
delimit_deploy_*, agent orchestration) are tier-gated; enable them once
phase 1 has earned its keep in your CI.
Pin the Action to a commit SHA. @v1 is a floating tag. For
supply-chain-sensitive pipelines, pin the exact commit and bump on review:
Keep BYOK keys out of repo and dotfile config. If you bring your own model
keys for deliberation, store them with delimit_secret_store (kept locally in
owner-only 0600 files, base64-encoded, not encrypted; access-logged via
delimit_secret_access_log) rather than in dotfiles.
Our own releases ship under the same discipline: every release carries a
signed, replayable Seal receipt (see the latest
release assets —
verify with npx delimit-cli seal-verify <receipt.json>), plus SLSA
provenance on npm.
CLI commands
What the MCP toolkit adds
When installed into your AI coding assistant, Delimit provides tools across two tiers:
Free (no account needed)
- API governance -- lint, diff, policy enforcement, semver classification
- Persistent ledger -- track tasks across sessions, shared between all AI assistants
- Zero-spec extraction -- generate OpenAPI specs from FastAPI, Express, or NestJS source
- Project scan -- auto-detect specs, frameworks, security issues, and tests
- Quickstart -- guided first-run that proves value in 60 seconds
Pro
- Multi-model deliberation -- the models you configure debate until they agree; provider availability depends on your setup
- Security audit -- dependency scanning, secret detection, SAST analysis
- Test verification -- confirms tests ran, measures coverage, generates new tests
- Memory & vault -- persistent context and local plaintext secret files across sessions
- Evidence collection -- governance audit trail for compliance
- Deploy pipeline -- governed build, publish, and rollback
- OS layer -- agent identity, execution plans, approval gates
What It Detects
Delimit checks OpenAPI and JSON Schema changes using deterministic rules for the cases each surface supports. Examples include removed endpoints, newly required parameters, and changed response fields. Review the result alongside your contract; rule coverage differs between the CLI and GitHub Action.
Policy presets
Or write custom rules in .delimit/policies.yml:
Supported formats
- OpenAPI 3.0 and 3.1
- Swagger 2.0
- YAML and JSON
FAQ
How does this compare to Obsidian Mind?
Obsidian Mind is a great Obsidian vault template for Claude Code users who want persistent memory via markdown files. Delimit takes a different approach: it keeps a shared record across Claude Code, Codex, Cursor, Antigravity, GitHub Copilot, and Muse. Your memory, ledger, and governance travel with you when you switch models. Delimit also adds API governance (breaking-change detection for OpenAPI specs), CI gates, git hooks, and policy enforcement that Obsidian Mind doesn't cover. Use Obsidian Mind if you're all-in on Claude + Obsidian. Use Delimit if you switch between models or need governance.
Does this work without Claude Code?
Yes. Delimit supports Claude Code, Codex, Cursor, Antigravity, GitHub Copilot, and Muse. The remember/recall commands work standalone. The MCP server integrates with clients that support the Model Context Protocol.
Is this free?
Delimit lists Free, Pro, and Enterprise plans. Multi-model deliberation uses your configured model CLIs or API keys. See current plan details.
Local data and network calls
Delimit stores its ledger, records, and local attestations on your machine. Some setup and session paths make network requests by default:
- Setup checks for a newer CLI release and can download the Pro module tarball.
- The Claude Code SessionStart hook and installed shims can check for and install updates.
- License activation contacts the license provider and sends your customer email, license ID, and machine hash to delimit.ai.
- Multi-model deliberation sends your prompt and relevant context to the model providers you configure, through your CLI logins or API keys.
gateway/ai/supabase_sync.py is not bundled with this package. Webhook notifications are sent only when DELIMIT_WEBHOOK_URL is configured.
Links
- delimit.ai -- homepage
- Dashboard -- governance console
- Docs -- full documentation
- GitHub Action -- Marketplace listing
- Quickstart -- try it in 2 minutes
- npm -- CLI package
- Pricing -- free tier + Pro
MIT License
来源:README.md,提交 1c62492
工具
0版本历史
11- v4.23.0最新Nov 7, 2026
- v4.21.0Sep 28, 2026
- v4.20.1Sep 26, 2026
- v4.20.0Sep 26, 2026
- v4.19.11Sep 23, 2026
- v4.19.10Sep 23, 2026
- v4.19.9Sep 21, 2026
- v4.19.7Sep 21, 2026
- v4.19.6Sep 20, 2026
- v4.19.2Sep 16, 2026
- v4.19.1Sep 16, 2026
评分
已满足适用检查项的 50%
该评分衡量此收录条目的完整程度,依据注册中心条目、端点与公开来源计算得出。它不是对服务器本身的评价,也不表示服务器安全或当前可用:可连通性是带日期的检查结果,评分也不包含安装量或用户评价。
- 近 30 天内可连通25 分
请保持端点能够响应 MCP 握手;SourceWeft 每 30 天探测一次。
- 已声明认证方式10 分
请在注册中心条目中声明凭据请求头,或保持端点能够响应探测,以便判定其认证方式。
- 已列出工具15 分
请让服务器在无凭据时响应 tools/list,或发布可在沙箱中无凭据启动的软件包。
- 描述必需15 分
- 图标10 分
- 文档15 分
- 许可证10 分
其他 Model 集成

model.tools — Zero-Auth Agent Utilities
tools.model官方发布者
零认证远程工具服务器,为智能体提供一次性邮箱验证码读取、持久检查点、Webhook 收件箱、定时唤醒、任务回执与网页转 Markdown。
NLP.COM.AI Open Model Catalog
ai.com.nlp官方发布者
搜索精选的开放权重AI模型发布、许可证、架构和原始来源。AI 翻译

Hologram Model Hub
foundation.uor.hub官方发布者
一个远程 MCP 服务器,让助手搜索开放模型索引,并获取带 SHA-256 校验值的下载链接。

ModelLens
由 GitHub 账号 Greatbeing 发布
探测兼容 OpenAI 的模型网关,按实测延迟与成功率给模型排名,并推荐该用哪个模型。

Bedrock Multi-Model
由 GitHub 账号 Sagargupta16 发布
本地 MCP 服务器,把 AWS Bedrock 的文本、图像、视频和嵌入模型封装成九个工具,让助手可以提问、对比和评审模型。