
OpenDeviceDB
org.opendevicedb由 opendevicedb.org 發布v0.3.0更新於 Nov 1, 2026
Check 21,000+ devices with open firmware or protocols before reverse engineering one.
概覽
讓助理在逆向裝置前查詢 OpenDeviceDB 中 2.1 萬多筆裝置的開源韌體或協定紀錄,並在完成後回寫成果。
- 可以做什麼
- 依 id、廠商/型號、FCC 編號、USB 識別碼、BLE 名稱或 Zigbee 型號查詢單一裝置,回傳狀態、進行中的認領與一行建議
- 依名稱、別名或識別碼搜尋並排序裝置,可依類別與狀態篩選,並顯示最簡單的安裝難度
- 以認領人、聯絡方式、範圍與最長 90 天期限認領裝置,必要時自動建立暫存紀錄
- 把成果(介面、專案、安裝方式、驗證資訊)發布進紀錄,並可釋出認領
- 提出裝置需求,或列出已匯入的資料來源及其授權、快照日期與紀錄數
- 適用情境
- 當使用者打算逆向、刷機或為某台裝置加入開源韌體時,先確認是否已有人做過或正在進行。也適合把自己的研究結果回寫到這個共享資料庫。
- 執行需求
- 以本機 stdio 程序執行 npm 套件,需要 Node 22.18 以上版本,以及已安裝相依套件的 OpenDeviceDB 儲存庫副本。設定 ODB_REPO 指向本機副本可讀寫,或設定 ODB_API_URL 以唯讀方式存取網站靜態 API;兩者皆未設定時使用套件所在的副本。
安裝
在 SourceWeft 中
- 開啟 儀表板中的 OpenDeviceDB,將其新增到工作區。
- 為需要使用其工具的對話啟用該服務。
Desktop only,透過 STDIO。 STDIO 服務會啟動本機處理程序,因此需要 SourceWeft 桌面主機。
其他 MCP 客戶端
參照 儲存庫 中的啟動說明。
README
@opendevicedb/mcp
MCP server that lets AI agents (Claude Code, Codex, Cursor, REA…) ask OpenDeviceDB
before reverse engineering a device — "has this been done already, is someone on it?" —
and record their work after. Stdio transport, official @modelcontextprotocol/sdk.
Requires Node ≥ 22.18 (runs the .ts sources directly, no build step) and a checkout of
this repository with npm install done at its root.
Tools
Component discovery and integration also expose search_components, get_component,
inspect_component, validate_composition, resolve_composition,
get_integration_guide and prepare_app_export. These tools are read-only and
never run contributor code or access hardware. See the
pilot contracts and integration guide.
Desktop export currently reports preparation blockers; it does not return an
installable application.
Install routes. A record may carry install: ways to put its open firmware or software on
the device (method such as web-serial, ota-exploit, usb-bootloader, pairing; the
project's official guide and installer; difficulty; tools; opens_device,
mains_powered, brick_risk, reversible/revert, firmware_constraints). lookup_device
returns them in record.install and its recommendation tells the agent to walk the user
through the easiest one with the official guide (never step by step when a mains-powered device
must be opened); search_devices gives the easiest difficulty as install; publish_findings
accepts routes in patch.install, merged by method + guide. Nothing is flashed or hosted here.
Writes go to data/devices/<vendor>/<model>.yaml in the local checkout. The server never
runs git: each write result names the changed file and gives the next step
(git checkout -b … && git add … && git commit … && gh pr create --fill).
Backends (environment)
ODB_REPO wins when both are set.
Register it
Replace /path/to/opendevicedb with your checkout.
Claude Code
(--scope user to have it in every project.)
Codex (~/.codex/config.toml, or codex mcp add opendevicedb -- node …/server.ts)
Cursor (.cursor/mcp.json in a project, or ~/.cursor/mcp.json)
Read-only use without a checkout of your own data: set ODB_API_URL to the site's base URL
instead of ODB_REPO.
Agent workflow
- lookup —
lookup_devicewith whatever is on the label (FCC id, USB vid:pid fromlsusb, BLE name) or vendor + model. Follow the recommendation: if open firmware or an SDK exists, use it; if someone holds a live claim, contact them. Nothing known and your user only wants the device to exist? Give them the request link (request/request_urlin the lookup result, orrequest_device) so the interest counts. - claim — nothing known (or only part)?
claim_devicewith who/contact/scope before starting, then commit the file and open the PR so the claim is visible to others. - work — reverse engineer. Never touch Remote ID, geofencing or other safety functions; never copy firmware images or vendor code (POLICY.md).
- publish —
publish_findingswith summary, status, interfaces (link your protocol doc asspec), projects (your code, hosted elsewhere), install routes, verification andprovenance.ai_assisted. Passrelease_claim_ofto end your claim. - PR — run the git /
gh pr createcommand from the result. Maintainers review.
SKILL.md is the same workflow as an agent skill, ready to drop into a skills directory (or embed in another tool).
CLI
The same functions from a shell (same env vars), printing the tool result as JSON:
Development
Code: AGPL-3.0-or-later (see the repository LICENSE). SKILL.md alone is CC0-1.0 so other tools can embed it.
來源:packages/mcp/README.md,提交 27225bf
工具
0版本歷史
2- v0.3.0最新Oct 18, 2026
- v0.2.2Oct 17, 2026
評分
已滿足適用檢查項的 50%
該評分衡量此收錄條目的完整程度,依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價,也不表示伺服器安全或目前可用:可連通性是帶日期的檢查結果,評分也不包含安裝量或使用者評價。
- 近 30 天內可連通25 分
請保持端點能夠回應 MCP 握手;SourceWeft 每 30 天探測一次。
- 已宣告認證方式10 分
請在註冊中心條目中宣告憑證請求標頭,或保持端點能夠回應探測,以便判定其認證方式。
- 已列出工具15 分
請讓伺服器在無憑證時回應 tools/list,或發布可在沙箱中無憑證啟動的軟體包。
- 描述必需15 分
- 圖示10 分
- 文件15 分
- 授權條款10 分