Unfragile

io.github.Savirinc由 GitHub 帳號 Savirinc 發布v0.11.0更新於 Nov 3, 2026

Search 2.2M tool actions for agents and robots, every result labelled. Find, verify, passports.

已驗證STDIO僅桌面網頁搜尋與抓取開發者工具安全與監控

概覽

AI 產生的概覽

在 220 萬個工具動作的索引中搜尋工具、MCP 伺服器、API 與 CLI，回傳附標籤與簽章的結果及可信度判定，供助理在安裝或呼叫前參考。

可以做什麼
  • 以語意與關鍵字搜尋能完成某項任務的具體工具動作
  • 針對需求給出單筆已驗證的軟體紀錄（含證據、安裝片段與替代方案），或回傳排序清單
  • 在呼叫或安裝前驗證工具、MCP 伺服器或套件，給出可信、謹慎、未驗證或已標記的判定
  • 一次呼叫即可把意圖解析為紀錄、判定與呼叫片段
  • 取得紀錄的 Ed25519 簽章信任護照，或查看索引的即時統計
適用情境
適合助理需要為某項任務挑選工具、MCP 伺服器或套件，並希望在安裝或呼叫前先做驗證的情境；也適合需要附標籤的候選清單而非憑猜測作答時使用。
執行需求
以 Node.js 套件形式透過 npx 在本機執行，並需連網存取 Unfragile 公開 API。不需帳號或金鑰；選用環境變數可設定 API 位址、額外請求標頭、監控標籤，或用於提高速率上限的金鑰。
安裝前請注意
查詢內容與待驗證目標會傳送給第三方 Unfragile API。判定僅供參考：未驗證或未檢查的結果應先人工複核，被標記的目標應避免使用。選用的 API 金鑰與自訂請求標頭透過環境變數傳入。隨附的命令列工具可依判定阻擋安裝，其強制覆寫操作會被記錄。

安裝

在 SourceWeft 中

  1. 開啟 儀表板中的 Unfragile，將其新增到工作區。
  2. 為需要使用其工具的對話啟用該服務。

Desktop only，透過 STDIO。 STDIO 服務會啟動本機處理程序，因此需要 SourceWeft 桌面主機。

其他 MCP 客戶端

參照 儲存庫 中的啟動說明。

README

@unfragile/mcp-server

Search for everything an agent can invoke. Every result labelled. For humans, agents and robots.

Unfragile is the neutral search layer for developers, agents and robots. This package gives any MCP client (Claude Code, Claude Desktop, Cursor, Windsurf, Cline, your own runtime) seven tools over the Unfragile index: 2.2 million tool actions read from MCP servers, APIs, CLIs, SDKs, models, robots and devices, each checked by machine and labelled with what the check found.

  • Labelled, never softened. Every result carries one of: verified and signed · official · found in code, not yet checked · demo or tutorial · failed its last check. Labels are the instruments' verdict; no ranking, model or payment changes them.
  • Signed. Verified records carry an Ed25519 trust passport you can verify offline against the published public key.
  • Honest no. When nothing fits, unfragile_find says so and asks one question back. Retrieval and ranking are deterministic; the one language model in the system writes the single-sentence pick behind answer: true and may only choose among labelled results.
  • Free, no key. Every tool calls the public API at unfragile.ai.

Guides: for agents · for developers · for robots · API reference

Install

One line on a machine with Claude Code (prints the configuration block on any other machine):

bash
curl -fsSL https://unfragile.ai/install.sh | sh

Claude Code

bash
claude mcp add unfragile -- npx -y @unfragile/mcp-server

Claude Desktop, Cursor, Windsurf, Cline, any MCP client

Add to the client's MCP configuration (Claude Desktop: ~/Library/Application Support/Claude/claude_desktop_config.json; Cursor: .cursor/mcp.json; Windsurf: ~/.codeium/windsurf/mcp_config.json):

json
{  "mcpServers": {    "unfragile": {      "command": "npx",      "args": ["-y", "@unfragile/mcp-server"]    }  }}

Tools

ToolWhat it does
unfragile_findThe headline call. Arguments: task, limit (1–20), answer (boolean). The tool ACTION that does a task, across 2.2 million actions. Meaning search and word search fused, ranked by measured trust, reranked. Every result labelled. answer: true adds one definite pick with its reasoning, or an honest no with one question back.
unfragile_answerOne verified software record for a need, with evidence (tier, score, signed passport, freshness, adoption), a paste-ready install snippet and honest alternatives, or an honest no.
unfragile_searchA ranked list of software records with per-record evidence, for when a list beats the single pick.
unfragile_verifyVerify before invoke. A conservative verdict for a target, trusted · caution · unverified · flagged, with the signed passport attached. Never invoke a flagged target; treat unverified as review-first. Unknown is never safe.
unfragile_resolveOne intent in; one record, verdict, signed passport and invocation snippet out, in a single call.
unfragile_passportThe raw Ed25519-signed trust passport for a record, for programmatic policy checks, verifiable offline.
unfragile_statsLive index numbers by door type.

The command line: verify before you install

The same package ships an unfragile command.

bash
# Check a target before installing (exit code 1 = flagged, stop)npx -p @unfragile/mcp-server unfragile verify npm:postmark-mcp
# Guard a real install: verifies the target first, blocks on FLAGGEDnpx -p @unfragile/mcp-server unfragile guard -- claude mcp add pg -- npx -y @scope/pg-mcp

guard extracts the install target from a claude mcp add / npx / uvx command, verifies it, and blocks a flagged verdict (unless --force, which is logged). Every verdict is Ed25519-signed. If verification is unreachable the CLI says so and treats the target as UNVERIFIED; it never fails silently open.

Ask your agent

  • "Find the tool that refunds a Stripe payment and tell me its label."
  • "Which action turns off the living room lights? Verified ones only."
  • "Verify npm:some-mcp-package before installing it."
  • "Get the signed trust passport for the pick."
  • "How big is the index right now?"

The rules

  1. Labels are the instruments' verdict. Read the label before acting on a result.
  2. Never invoke a failed or flagged target. Treat found in code, not yet checked as review-first.
  3. An honest no is an answer. Do not fill the gap with a guess.
  4. Cite the passport. A verified result's url is its signed passport.

Rankings are never for sale. Vendors may pay to have their own record checked sooner, never to change an answer or a label.

How it works

Every tool calls the free public Unfragile API: /api/v1/find, /api/answer, /api/v1/search, /api/v1/verify, /api/v1/resolve, /api/v1/passport, /api/v1/stats. The search runs on Unfragile's own GPU: a meaning index and a word index over the actions, fused and reranked, with trust as a measured nudge, never a label change. How we check.

Environment variables

VariableDescriptionDefault
UNFRAGILE_API_URLAPI base URLhttps://unfragile.ai
UNFRAGILE_MONITORName your monitoring or test traffic: it is measured, never used to train the ranking—
UNFRAGILE_HEADERSExtra request headers as JSON, e.g. {"x-team":"qa"}—
UNFRAGILE_API_KEYOptional key for higher rate limits (CLI guard)(none)

Links

License

MIT

來源：README.md，提交 e215b0d

工具

7

unfragile_answer

THE headline call: describe what you need and get ONE verified answer from the Unfragile corpus — fresh (crawled weekly), tested (machine-verified with honest tiers), signed (Ed25519 trust passport) — plus a paste-ready install snippet and honest alternatives. Same question, same answer (stored per question for 24 h). It names one product only when it does the task and was checked by us, through its maker's own door when there is one; otherwise an honest 'no confident answer' — trust the abstention.

輸入參數query必填

unfragile_find

Find the tool ACTION that does what you need, across 2.2 million actions read from MCP servers, APIs, CLIs, SDKs, models, robots and devices. Say the task in plain words ('refund a payment', 'move the robot arm home', 'what's on my calendar tomorrow'); meaning search + word search, fused and ranked by measured trust. Every result carries its label: verified and signed · official · checked: not enough evidence yet · found in code, not yet checked · demo or tutorial · failed its last check. Never invoke a 'failed' result; treat 'checked' and 'found in code' as review-first.

輸入參數kindtask必填limitnamedanswerintentsearch

unfragile_verify

Verify a tool, MCP server, or package BEFORE invoking or installing it. Returns a conservative verdict — trusted | caution | unverified | flagged — with the record's Ed25519-signed trust passport attached (verifiable offline against https://unfragile.ai/api/v1/trust-passport-public-key). RULE: never invoke or install a `flagged` target; treat `unverified` as review-first.

輸入參數target必填

unfragile_resolve

Agent-runtime resolution: one intent in, one verified record out — with verdict, Ed25519-signed passport, and a paste-ready invocation snippet in a single call. Returns an honest abstention when nothing qualifies.

輸入參數intent必填

unfragile_passport

Fetch the raw Ed25519-signed trust passport JSON for a record (by record page slug, record id, or npm package). For programmatic policy checks; verify offline against the published public key.

輸入參數slug必填

unfragile_stats

Live census of the verified corpus with honest tiers: listed, machine-verified, signed passports, official records, by envelope.

無需輸入參數。

版本歷史

5
  1. v0.11.0最新Nov 1, 2026
  2. v0.10.3Nov 1, 2026
  3. v0.10.2Oct 31, 2026
  4. v0.9.1Oct 29, 2026
  5. v0.3.2Sep 16, 2026

評分

已滿足適用檢查項的 90%

該評分衡量此收錄條目的完整程度，依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價，也不表示伺服器安全或目前可用：可連通性是帶日期的檢查結果，評分也不包含安裝量或使用者評價。

  • 近 30 天內可連通25 分
  • 已宣告認證方式10 分

    請在註冊中心條目中宣告憑證請求標頭，或保持端點能夠回應探測，以便判定其認證方式。

  • 已列出工具必需15 分
  • 描述必需15 分
  • 圖示10 分
  • 文件15 分
  • 授權條款10 分