
OpenDeviceDB
org.opendevicedb由 opendevicedb.org 发布v0.3.0更新于 Nov 1, 2026
Check 21,000+ devices with open firmware or protocols before reverse engineering one.
概览
让助手在逆向设备前查询 OpenDeviceDB 中 2.1 万多条设备的开源固件或协议记录,并在完成后回写成果。
- 可以做什么
- 按 id、厂商/型号、FCC 编号、USB 标识、BLE 名称或 Zigbee 型号查询单台设备,返回状态、进行中的认领和一行建议
- 按名称、别名或标识符检索并排序设备,可按类别和状态筛选,并显示最易行的安装难度
- 以认领人、联系方式、范围和最长 90 天期限认领设备,必要时自动创建占位记录
- 把成果(接口、项目、安装方式、验证信息)发布进记录,并可释放认领
- 提交设备需求,或列出已导入的数据源及其许可证、快照日期和记录数
- 适用场景
- 当用户打算逆向、刷机或为某台设备添加开源固件时,先确认是否已有人做过或正在做。也适合把自己的研究结果回写到这个共享数据库。
- 运行要求
- 以本地 stdio 进程运行 npm 包,需要 Node 22.18 或更高版本,以及已安装依赖的 OpenDeviceDB 仓库副本。设置 ODB_REPO 指向本地副本可读写,或设置 ODB_API_URL 以只读方式访问站点静态 API;两者都不设时使用包所在的副本。
安装
在 SourceWeft 中
- 打开 控制台中的 OpenDeviceDB,将其添加到工作区。
- 为需要使用其工具的对话启用该服务。
Desktop only,通过 STDIO。 STDIO 服务会启动本地进程,因此需要 SourceWeft 桌面宿主。
其他 MCP 客户端
参照 仓库 中的启动说明。
README
@opendevicedb/mcp
MCP server that lets AI agents (Claude Code, Codex, Cursor, REA…) ask OpenDeviceDB
before reverse engineering a device — "has this been done already, is someone on it?" —
and record their work after. Stdio transport, official @modelcontextprotocol/sdk.
Requires Node ≥ 22.18 (runs the .ts sources directly, no build step) and a checkout of
this repository with npm install done at its root.
Tools
Install routes. A record may carry install: ways to put its open firmware or software on
the device (method such as web-serial, ota-exploit, usb-bootloader, pairing; the
project's official guide and installer; difficulty; tools; opens_device,
mains_powered, brick_risk, reversible/revert, firmware_constraints). lookup_device
returns them in record.install and its recommendation tells the agent to walk the user
through the easiest one with the official guide (never step by step when a mains-powered device
must be opened); search_devices gives the easiest difficulty as install; publish_findings
accepts routes in patch.install, merged by method + guide. Nothing is flashed or hosted here.
Writes go to data/devices/<vendor>/<model>.yaml in the local checkout. The server never
runs git: each write result names the changed file and gives the next step
(git checkout -b … && git add … && git commit … && gh pr create --fill).
Backends (environment)
ODB_REPO wins when both are set.
Register it
Replace /path/to/opendevicedb with your checkout.
Claude Code
(--scope user to have it in every project.)
Codex (~/.codex/config.toml, or codex mcp add opendevicedb -- node …/server.ts)
Cursor (.cursor/mcp.json in a project, or ~/.cursor/mcp.json)
Read-only use without a checkout of your own data: set ODB_API_URL to the site's base URL
instead of ODB_REPO.
Agent workflow
- lookup —
lookup_devicewith whatever is on the label (FCC id, USB vid:pid fromlsusb, BLE name) or vendor + model. Follow the recommendation: if open firmware or an SDK exists, use it; if someone holds a live claim, contact them. Nothing known and your user only wants the device to exist? Give them the request link (request/request_urlin the lookup result, orrequest_device) so the interest counts. - claim — nothing known (or only part)?
claim_devicewith who/contact/scope before starting, then commit the file and open the PR so the claim is visible to others. - work — reverse engineer. Never touch Remote ID, geofencing or other safety functions; never copy firmware images or vendor code (POLICY.md).
- publish —
publish_findingswith summary, status, interfaces (link your protocol doc asspec), projects (your code, hosted elsewhere), install routes, verification andprovenance.ai_assisted. Passrelease_claim_ofto end your claim. - PR — run the git /
gh pr createcommand from the result. Maintainers review.
SKILL.md is the same workflow as an agent skill, ready to drop into a skills directory (or embed in another tool).
CLI
The same functions from a shell (same env vars), printing the tool result as JSON:
Development
Code: AGPL-3.0-or-later (see the repository LICENSE). SKILL.md alone is CC0-1.0 so other tools can embed it.
来源:packages/mcp/README.md,提交 89eaa30
工具
0版本历史
2- v0.3.0最新Oct 18, 2026
- v0.2.2Oct 17, 2026
评分
已满足适用检查项的 50%
该评分衡量此收录条目的完整程度,依据注册中心条目、端点与公开来源计算得出。它不是对服务器本身的评价,也不表示服务器安全或当前可用:可连通性是带日期的检查结果,评分也不包含安装量或用户评价。
- 近 30 天内可连通25 分
请保持端点能够响应 MCP 握手;SourceWeft 每 30 天探测一次。
- 已声明认证方式10 分
请在注册中心条目中声明凭据请求头,或保持端点能够响应探测,以便判定其认证方式。
- 已列出工具15 分
请让服务器在无凭据时响应 tools/list,或发布可在沙箱中无凭据启动的软件包。
- 描述必需15 分
- 图标10 分
- 文档15 分
- 许可证10 分