Legitshow Search

io.github.commitshow由 GitHub 帳號 commitshow 發布v0.1.0更新於 Oct 24, 2026

Search launched software (SaaS, AI tools, MCP servers) by measured production-readiness.

概覽

AI 產生的概覽

一個本機 stdio MCP 伺服器,讓助理搜尋 Legit.Show 已上線軟體目錄,並依實測的生產就緒度評分篩選結果。

可以做什麼
依名稱、類別、是否開源及各項最低評分搜尋已上線軟體(SaaS、AI 工具、MCP 伺服器),回傳每個符合項目的各項評分與頁面連結。取得 Legit.Show 的標準文件,包括 7-Frame 基準及如何引用某項服務。結果僅限各項評分、摘要和頁面,不提供合併的總分。
適用情境
適合希望助理依據實測生產就緒度(效能、安全、隱私等)而非人氣或 GitHub 星數推薦工具的情境,例如尋找安全評分高於某門檻的開源 MCP 伺服器。
執行需求
透過 npx(Node.js)以 stdio 程序在本機執行。不需 API 金鑰或帳號。需連網存取 Legit.Show 公開 REST API;可用 LEGIT_SEARCH_API 和 LEGIT_DOCS_BASE 環境變數覆寫端點。
安裝前請注意
README 說明此伺服器已合併進 commitshow-mcp,npm 套件和登錄項目皆已棄用,應改用後繼版本。查詢與篩選條件會傳送給第三方 Legit.Show API。評分僅反映提供者量測的公開表面,並非整體評級。

安裝

在 SourceWeft 中

  1. 開啟 儀表板中的 Legitshow Search,將其新增到工作區。
  2. 為需要使用其工具的對話啟用該服務。

Desktop only,透過 STDIO。 STDIO 服務會啟動本機處理程序,因此需要 SourceWeft 桌面主機。

其他 MCP 客戶端

參照 儲存庫 中的啟動說明。

README

[!IMPORTANT] This server has been merged into commitshow-mcp and is no longer published.

commitshow-mcp carries the same two tools — search_services and fetch_docs, with identical arguments — and adds audit_repo and project_status. Two entries under one name, half of them the same, gave anyone browsing the registry no way to tell which to install; there is one now.

jsonc
{ "mcpServers": { "legitshow": { "command": "npx", "args": ["-y", "commitshow-mcp@latest"] } } }

The npm package and the registry entry io.github.commitshow/legitshow-search are both marked deprecated. The source stays here as the record of what it was.

Legit.Show MCP server

Model Context Protocol server for Legit.Show. Plug it into Claude Desktop, Cursor, Cline, Windsurf, or any MCP host, and your model can search a directory of launched software by measured production-readiness — not GitHub stars — without ever leaving the chat.

[npm] [MIT license] [node 20+]

jsonc
// any MCP host config (Claude Desktop · Cursor · Cline · Windsurf · …){  "mcpServers": {    "legitshow": {      "command": "npx",      "args": ["-y", "legitshow-mcp"]    }  }}

That's the entire install. No API key. The server is a stdio shim over the public https://legit.show/api/search REST surface — one source of truth for the data.


Why this is different

Most "find me a tool" flows rank by GitHub stars or popularity. Legit.Show carries a deterministic 7-Frame production-readiness benchmark (Performance, Accessibility, Security, Privacy, Reliability, Standards, Discoverability) measured from the public surface — real Lighthouse, HTTP headers, live probes, no LLM in the scoring path. So your agent can filter by whether something is actually production-ready:

"find production-ready, open-source MCP servers with Security ≥ 80"

Tools exposed

ToolWhat it does
search_services({ query?, category?, min_scores?, is_open_source?, limit? })Search launched software by name or filter. Returns each match with its per-frame scores and its legit.show/s/<slug> page.
fetch_docs()Pull the canonical Legit.Show docs (llms.txt) — what Legit.Show is, the 7-Frame benchmark, and how to cite a service.

Boundary: per-frame scores + summary + the page only. There is no combined overall total in the public data (it's a licensed product), so the model won't invent one.

Host wiring snippets

Claude Desktop — claude_desktop_config.json

jsonc
{ "mcpServers": { "legitshow": { "command": "npx", "args": ["-y", "legitshow-mcp"] } } }

Cursor — .cursor/mcp.json

jsonc
{ "mcpServers": { "legitshow": { "command": "npx", "args": ["-y", "legitshow-mcp"] } } }

Cline / Continue / Windsurf

Same three-line npx -y legitshow-mcp invocation in the host's MCP config.

No MCP host? Plain REST

GET https://legit.show/api/search?q=<name>

Filters: category, min_scores (e.g. {"security":80}), is_open_source, limit (≤50). GET or POST. No key.

Self-hosting / dev overrides

EnvDefaultUsed by
LEGIT_SEARCH_APIhttps://legit.show/api/searchsearch_services
LEGIT_DOCS_BASEhttps://legit.showfetch_docs (llms.txt)

Links

  • Legit.Show — the directory: every launched service, tested
  • Methodology — how the 7-Frame benchmark is measured
  • llms.txt — the canonical machine-readable doc

MIT · operated by Madeflo, Inc.

來源:legitshow-mcp/README.md,提交 bcdb9dd

工具

0
SourceWeft 尚未在沙箱中啟動過該軟體包,因此其工具未知。

版本歷史

1
  1. v0.1.0最新Sep 16, 2026

評分

已滿足適用檢查項的 50%

該評分衡量此收錄條目的完整程度,依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價,也不表示伺服器安全或目前可用:可連通性是帶日期的檢查結果,評分也不包含安裝量或使用者評價。

  • 近 30 天內可連通25 分

    請保持端點能夠回應 MCP 握手;SourceWeft 每 30 天探測一次。

  • 已宣告認證方式10 分

    請在註冊中心條目中宣告憑證請求標頭,或保持端點能夠回應探測,以便判定其認證方式。

  • 已列出工具15 分

    請讓伺服器在無憑證時回應 tools/list,或發布可在沙箱中無憑證啟動的軟體包。

  • 描述必需15 分
  • 圖示10 分
  • 文件15 分
  • 授權條款10 分