io.github.magist-io由 GitHub 帳號 magist-io 發布v0.1.1更新於 Nov 6, 2026
Deterministic, cited regulatory research for product launches; legal information, not legal advice.
Magist 為助理提供可重現、附引用的法規研究：產品可能適用的法律、相應控制措施、執法案例與律師資源。
Web executable，透過 Streamable HTTP。 遠端服務在工作區中設定後即可從網頁執行環境執行。
把這段提示詞貼上到 Claude Code、Codex、Cursor 等代理程式，或 SourceWeft 對話中。代理程式會讀取該伺服器的安裝指南，先向你展示發布者、端點和登入方式，經你同意後再把它新增到你的客戶端。金鑰不會寫進任何命令。
閱讀 https://sourceweft.com/mcp/io.github.magist-io%2Fmagist/install.md，並按其中說明把這個 MCP 伺服器接入我的客戶端。修改任何設定之前，先告訴我它的發布者、端點和登入方式，等我確認。不要把 API 金鑰寫進命令或我會提交的檔案；問我金鑰應從哪裡取得。把它新增到你客戶端的 mcpServers 設定中。
{
"mcpServers": {
"magist": {
"type": "http",
"url": "https://magist.io/api/mcp"
}
}
}Connect Magist to your AI host over the Model Context Protocol. Magist is an open, deterministic, cited reference for product regulation: which laws apply to a product, the obligations and Controls they imply, and the primary sources behind each. Open data (CC BY-SA 4.0), a deterministic engine (same inputs produce the same outputs, no LLM in the path), permanent citation URLs, and a named-practitioner attribution on every response.
This package is a thin stdio bridge to the hosted server at
https://magist.io/api/mcp. Remote-capable hosts can skip it and point straight
at that URL.
The separate receipt-v9 content-integrity utility checks a saved JSON body hash using only Node built-ins. It makes no network call and does not run the engine or authenticate the sender. Its synthetic tests and source are separate from the published bridge and plugin payloads.
This repository also contains the separate magist-research 0.1.1 portable
plugin: root plugin.json, the remote connection in mcp.json, and a newly
authored workflow in skills/magist-research/. It connects directly to the
public HTTPS service and does not run the npm stdio bridge.
The portable connection uses only type and url, as allowed by the
Agent Plugins 1.0.0 MCP schema.
The endpoint requires no authentication. The schema does not admit the
server-level authentication extensions shown in some host-specific examples;
those extensions are omitted here. Schema validation alone does not establish
that a host can install and run the complete plugin.
Create its bounded source package with Python 3.9 or newer:
The ZIP includes the two portable manifests, the skill and its MCP
dependency declaration, an existing public Magist icon, and this repository's MIT license. It excludes
the bridge executable, dependencies, private platform source and assets. The
plugin version is independent of @magist/[email protected].
This is a proposed integration package, not an accepted directory listing or a host validation certificate. Public submission uses OpenAI's With MCP route; publisher verification, actual host/reviewer cases, media, any required visual assets, connection checks and submission review remain separate requirements. See the portable package format.
OpenAI listing metadata and five positive/three negative reviewer scenarios
are included in plugin.json. Those are proposed host cases, not records of
completed installed-plugin runs. A reviewer video is not yet supplied; the
website demo is not an installed-plugin walkthrough.
The Claude plugin lives at integrations/claude. It uses Claude's separate
.claude-plugin/plugin.json and .mcp.json format, pins its reviewed Claude
skill bytes, and connects to the same hosted endpoint. Version 0.1.2 adds an
explicit audience, bounded research work shape, evidence-confidence bands and
escalation rules, retaining the illustrative lookup and response template.
These design controls do not establish unconditional framework readiness,
installed-host behavior or directory acceptance. The shared OpenAI skill and optional
Desktop bundle remain separate, unchanged artifacts. Its clean
subfolder excludes this repository's top-level bin/, which chat and Cowork
do not accept in a plugin. Build both artifacts without installing dependencies:
The .mcpb embeds the exact dependency-free published 0.1.1 bridge and requires
Node.js 18 or newer. It is unsigned and for private Desktop testing. Claude's
current directory no longer accepts Desktop MCPB listings. For public review,
submit the remote MCP connector and the integrations/claude plugin folder as
two linked submissions from the same intended publisher organization. See
Claude's current directory routes.
No package here implies installation, portal validation, acceptance or a
completed Claude workflow.
Beta: content under attorney review. The server is live and the engine is stable; substantive attorney review of the regulation corpus is in progress. Entries carry a
contentReviewStatusfield (reviewedis human-verified,draftis AI-prepared and pending review). Magist returns legal information for research and attorney handoff, not legal advice. Consult a licensed attorney before relying on any output for a launch decision.
Claude Code (CLI) uses the remote transport directly (no npm install):
Claude Desktop / Cursor / Windsurf (npx): add the bridge to the host's
mcpServers config:
Claude Desktop: Settings -> Developer -> Edit Config (claude_desktop_config.json). Restart Claude after saving.
Cursor: Settings -> MCP -> Add new server, or edit ~/.cursor/mcp.json.
Windsurf: edit ~/.codeium/windsurf/mcp_config.json, then reload.
Codex: add to ~/.codex/config.toml:
ChatGPT (Developer Mode / Connectors), Manus, and other remote-capable hosts:
add a custom connector pointing at the Streamable-HTTP endpoint
https://magist.io/api/mcp (no npm package needed).
A 200 with name: "magist" means the endpoint is live:
List the tools (you should see nine):
In your host, once connected, ask Magist to look up COPPA and list its Controls. A working connection returns a cited regulation record, not a refusal or a no-such-tool error.
Eight tools read the public corpus or verify a grounding-proof signature.
compute_requirements additionally persists the public receipt report described
above. Access is unauthenticated and subject to server rate limits; do not send
personal, confidential or privileged information. Tool-call telemetry may be
recorded. The bridge package license does not license the hosted platform.
Set MAGIST_MCP_URL to point the bridge at your own deployment of the open
corpus and engine:
Every tool response is wrapped in a canonical envelope. When you render a Magist
response to a user: render the disclaimer.text field verbatim; do not restate
outputs as directives or conclusions; surface the practitioner attribution and
the verification field; suggest a licensed attorney when counsel_recommended
is true; and prefer the citations links when you summarize.
來源：README.md，提交 2912d9f
Look up a regulation
Look up one regulation by its Magist id and return structured research information: title, citation, jurisdiction, status, review dates, a plain-language summary, and the Controls that may satisfy it. Returns facts about what a regulation says, not a determination of how it applies to a specific product. Consult counsel for situation-specific questions.
id必填Search regulations
Search Magist’s regulation corpus by keyword with optional filters (jurisdiction, domain, status, content-review status, coverage depth). Returns a paginated list of matching regulations with permanent citation URLs. Deterministic: the same query and filters return the same results every time. Returns research information for discovery, not a determination of which regulations apply to a specific product.
limitquerydomainoffsetstatusjurisdictioncoverageDepthcontentReviewStatusCompute regulatory requirements
Run Magist’s deterministic compliance engine over a product description (features, target markets, audience age bands, optional business model) and return the regulations and Controls that may be triggered, a complexity tier with a numeric score, a blocker count, and a per-audience cohort breakdown. The call also creates or refreshes an idempotent public report URL for the receipt, retained for up to 90 days. Deterministic and reproducible: the same inputs always produce the same output, with no LLM in the path. Returns which obligations may apply for research purposes; it is not a determination that they do apply, and does not replace counsel. Consult a licensed attorney before relying on the result.
markets必填features必填audiencesbusinessModelFind compliance controls
Given a regulation id, return the compliance Controls that may satisfy it, each with a priority signal (blocker / required / evaluate / best-practice) and a short summary of the work involved. Returns research information about typical control mappings, not a determination that a given product needs them. Consult counsel for scoping.
regulationId必填Find implementation vendors
Given a Control id, list third-party vendors and in-house approaches that may implement it, with effort/cost signals and a source-disclosure (editorial research vs vendor submission). Magist does not accept payment from vendors and does not rank or endorse them. Returns a neutral catalog for research; evaluate fit independently.
controlId必填jurisdictionGet enforcement actions
Return recent regulatory enforcement actions from Magist’s catalog, optionally filtered by regulation id and a since-date. Each action includes the penalty, authority, a primary-source link, and (where authored) a practitionerAnalysis: a hedged, third-person editorial note on what the action illustrates, informational context that never addresses a specific product. penaltyAmount is null when no monetary amount is recorded (pending, confidential, annulled, or non-monetary outcomes; the amount string carries the honest description). Returns historical facts about what regulators have done: informational context, not a prediction about a specific product.
limitsinceregulationIdFind licensed counsel
Search Magist’s open counsel directory for law firms by jurisdiction and practice area. Returns an editorial / firm-claimed directory to help a user identify licensed attorneys to consult. Inclusion is not endorsement; verify bar status and conflicts independently before engaging.
languagejurisdiction必填practiceAreaVerify a Magist citation
Verify a Magist grounding-proof token: the "groundingProof" field on a regulation or control record from the REST API (GET /api/v1/regulations/{id} or /api/v1/controls/{id}) when the server has signing enabled. MCP tool responses do not carry these tokens. Proves the citation was genuinely served by Magist's server for that exact atom at that exact corpus version; it does NOT verify legal correctness or that any obligation applies to a product. Returns valid:false with a reason when the token is missing, malformed, unsigned, or fails signature verification; this is expected when the record never carried a token (signing is an opt-in server setting).
token必填List supported features and markets
Return Magist’s closed catalogs of valid product feature ids and target market ids, each with a short human-readable label -- the exact identifiers compute_requirements accepts as "features" and "markets". Use this to validate ids before calling compute_requirements; ids outside these catalogs are rejected with an actionable error. Deterministic and reproducible; this is reference data, not itself a regulatory determination.
無需輸入參數。
已滿足適用檢查項的 100%
該評分衡量此收錄條目的完整程度，依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價，也不表示伺服器安全或目前可用：可連通性是帶日期的檢查結果，評分也不包含安裝量或使用者評價。
python3 scripts/package-plugin.py --output /absolute/new/path/magist-research-0.1.1.zippython3 scripts/package-claude.py --kind plugin --output /absolute/new/path/magist-claude-plugin-0.1.2.zippython3 scripts/package-claude.py --kind desktop --output /absolute/new/path/magist-desktop-0.1.1.mcpbclaude mcp add --transport http magist https://magist.io/api/mcp{ "mcpServers": { "magist": { "command": "npx", "args": ["-y", "@magist/mcp-server"] } }}[mcp_servers.magist]command = "npx"args = ["-y", "@magist/mcp-server"]curl -s https://magist.io/api/mcpcurl -s -X POST https://magist.io/api/mcp \ -H 'content-type: application/json' \ -d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'{ "mcpServers": { "magist": { "command": "npx", "args": ["-y", "@magist/mcp-server"], "env": { "MAGIST_MCP_URL": "https://your-host.example.com/api/mcp" } } }}