原型 · 预览版:收录官方注册中心里的全部服务器,每 30 分钟同步一次。评价和账户功能将在后续阶段推出。
PopNx MCP为使用 AI 的人准备的 MCP 服务器 · 用大白话讲清楚

QuassLabs API

作者:Quasslabs版本 0.3.0i★ –i在云端运行
注册名称com.quasslabs/api

安装

概览

作者提供的说明(英文原文)

30+ deterministic dev and delivery tools: linting, metrics, diagrams, model advice, AI-text checks.

PopNx MCP 的三大支柱

这三项永远不会合并成一个分数:意见、测量和人气是不同的东西。

它能帮你做什么

我们还没有为它写通俗的介绍。下面是我们从注册中心读取到的事实。

  • 连接方式: 在云端运行
  • 传输方式: Streamable HTTP
  • 分类: 设计、图片与音频
  • 你需要填写:Authorization

安装

选择你使用的 AI 应用,然后复制设置。

安装之前

标为机密的值是你账户的钥匙。千万不要分享给别人,也不要粘贴到聊天里。

你需要

你用的是哪个应用?

在上方选择你的应用。我们会记住它,下次按钮会显示“安装到 …”。

这个地址需要在请求的 header 中放入密钥,而添加连接器的菜单无法设置。请改用 Claude Code、Cursor 或 VS Code。

在终端中运行这条命令

claude mcp add --transport http api https://api.quasslabs.com/mcp --header 'Authorization: your-value'

运行前请先填写空着的值。

在 Cursor 中打开

或者自己复制设置

粘贴到项目中的 .cursor/mcp.json,或 ~/.cursor/mcp.json

{
  "mcpServers": {
    "api": {
      "url": "https://api.quasslabs.com/mcp",
      "headers": {
        "Authorization": "your-value"
      }
    }
  }
}

浏览器会先询问是否打开应用,然后应用会显示设置并请你确认。密钥的值会留空,由你自己填写。

在 VS Code 中打开

或者自己复制设置

粘贴到项目中的 .vscode/mcp.json

{
  "servers": {
    "api": {
      "type": "http",
      "url": "https://api.quasslabs.com/mcp",
      "headers": {
        "Authorization": "your-value"
      }
    }
  }
}

浏览器会先询问是否打开应用,然后应用会显示设置并请你确认。密钥的值会留空,由你自己填写。

这个地址需要在请求的 header 中放入密钥,而添加连接器的菜单无法设置。请改用 Claude Code、Cursor 或 VS Code。

你的选择通过 Cookie 保存在这台设备上,无需账户。

需要你填写的值

  • Authorization 机密 HTTP header
    Bearer qlk_... API key from https://quasslabs.com/api, or from the account tool's signup action (needed for tools/call, except account signup and checkout_status)

这些设置是根据作者在注册中心的条目生成的。如果 README 的写法不同,请以 README 为准。

它能做什么

工具名称和描述与服务器在 2026年11月8日 报告的完全一致。这些内容由作者撰写,不是我们写的;我们以纯文本形式显示。

  • alignment_gate

    Run an AI system prompt (and optional agent config) through a 45-criterion alignment/safety rubric. Returns a letter grade (A-F), numeric score, per-flag remediation, and a pass/fail verdict.

  • blm_land_lookup

    Look up Bureau of Land Management land status for a US coordinate: BLM ownership, jurisdiction, allowed activities (rockhounding, camping), permit requirements, and special designations (ACEC, Wilderness, WSA, NM/NCA).

  • diagram_contrast

    Diagram quality QA. Catch and fix the things that ruin diagrams: (1) unreadable label contrast - POST a mermaid/SVG or HTML diagram, get every WCAG-AA failure (incl. mermaid -block label colors, with unresolvable fills flagged honestly, not false-passed) + auto-corrected colors;

  • humanizer_score

    Detect AI-writing tells in text. POST prose and get a 0-1 ai_ness score + band (low/medium/high) + the EXACT patterns that fired (AI vocabulary, significance inflation, promotional language, filler phrases, negative parallelism, rule-of-three, em-dash overuse) with sample spans.

  • saas_metrics

    SaaS health advisor. POST your MRR/customers (+ optional churn/CAC/margin/growth) and get ARR/ARPA/LTV/CAC/payback/Rule-of-40/NRR/GRR computed, each with a health tag, plus an overall grade + a ranked "what to fix first" focus list. Deterministic math + advisory, no LLM.

  • acceptance_criteria_validator

    QA advisor: validate acceptance criteria quality. POST a list of AC (or a story) and get per-AC problems (vague/untestable, non-atomic, no observable outcome) + a missing-coverage flag if there is no failure-path AC, plus a 0-100 score and pass/needs_work verdict. Tells you exact

  • coverage_check

    Scope-completeness advisor. POST a brief (or requirements[]) + your stories[] and get a coverage score + the gaps (requirements no story covers), orphan stories (possible scope creep), and missing structural buckets (auth/CRUD/error-states/tests). Tells you what the scope is miss

  • defect_triage

    Bug-triage advisor. POST one bug report (or a list) and get severity (critical/high/medium/low), category, whether it has repro steps, and what info is missing (no repro / no expected-vs-actual / no environment). For a list: priority ranking + likely-duplicate clusters. Determini

  • model_advisor

    LLM selection + cost advisor. POST a task description (+ optional volume/tokens/constraints like local-only or cheap) and get a recommended model + fallback chain + do-not-use (with reasons), the complexity tier, and per-run + monthly cost. A maintained model+price catalog. Deter

  • tool_advisor

    Which QL-API endpoint fits this task. POST a task description and get the ranked endpoint(s) that best match, each with a confidence label (high/medium/low). Deterministic keyword matching over this platform's own endpoint catalog, no LLM. Pairs with model_advisor (which itself i

  • humanize_text

    Rewrite text to remove AI-writing tells. POST prose and get it back with the mechanical tells fixed (AI vocabulary swapped for plain words, filler phrases stripped, em-dash overuse reduced, significance inflation deflated) plus a change log, before/after ai-ness scores, and a res

  • dependency_check

    Lint dependency manifests for hygiene: unpinned, wildcard or unbounded versions, missing lockfiles, git/URL deps, non-https indexes, install scripts, dependency-confusion names, plus a small static snapshot of famous compromised versions (not a live CVE feed). Use this for a few

  • log_audit_creator

    Generate a concrete audit-logging spec for an app. POST your feature list (and optional compliance targets: soc2/hipaa/gdpr/pci) and get a full audit-event catalog (namespaced event names, actor/target/required fields, PII flags, retention), a canonical event envelope schema, a s

  • log_analyzer

    Analyze a log file. POST raw log text (or an upload_id from the create_upload tool, up to 5MB) and get: level breakdown + time range, error clusters (messages normalized so variable ids/numbers collapse into one signature, with counts + first/last seen + a sample), a timeline, de

  • ticket_lint

    Full Jira-ticket quality linter (whole ticket, not just AC - use acceptance_criteria_validator for the deep AC pass). POST one ticket or a batch (max 50) and get per-ticket findings with severity + concrete fixes: missing/weak summary or description, missing AC or estimate, bugs

  • story_lint

    Deterministic structural quality linter for user stories - a sibling to ticket_lint but scoped to story-writing concepts any team recognizes: narrative completeness (As-a/I-want-to/So-that/Summary), acceptance criteria presence, duplicate/unknown dependency IDs, a "Manage X" stor

  • estimate_sanity

    Deterministic classifier for story/task hour estimates against benchmarks: flags each estimate in_range, borderline, over, under, or unbenchmarked. Supply either an explicit {min, max} range per type (benchmarks) or a list of historical actual hours per type (historical) that thi

  • pr_description_lint

    Deterministic PR description quality linter: flags a missing/too-short body, absent test evidence, absent stated rationale, an unstructured long body, and - only for PRs that look like bugfixes (title prefix fix/bug/hotfix/patch, or an explicit is_bugfix flag) - missing repro ste

  • commit_hygiene

    Deterministic commit-message hygiene checker: conventional-commit format, vague-subject detection, subject-length limit, a same-message secret-pattern scan (AWS keys, private key headers, Slack/GitHub tokens, inline password=/secret= style credentials - checked against the messag

  • readability_grade

    Deterministic Flesch Reading Ease and Flesch-Kincaid Grade Level for a block of text, plus word/sentence/syllable counts and a plain-language reading-ease band (very_easy through very_confusing). Syllable counting is the standard vowel-group heuristic (same approximation used by

  • regex_lint

    Static safety analysis of a regular expression plus an English explanation of what it matches. Parses the pattern into an AST and flags the structures that cause catastrophic backtracking (ReDoS): nested unbounded quantifiers like (a+)+, repeated alternations whose branches can s

  • mcp_tool_lint 看起来像是对 AI 下的指令

    Static review of MCP tool definitions, as returned by a server's tools/list, for how well a model can choose and call them. Flags missing, too-short or vague descriptions; parameters with no description or type; free-form objects and arrays without items; required fields that are

  • openapi_diff

    Compares a base and a head OpenAPI 3.x spec (JSON object, or a JSON or YAML string) from the API consumer's point of view and lists what would break existing clients: removed operations or 2xx responses, new required parameters or request properties, optional-to-required changes,

  • sprint_health

    Sprint/delivery health advisor. POST 1-24 sprints (committed/completed points, optional per-ticket estimate-vs-actual data) and get computed metrics each with a good/warn/bad health tag: velocity avg + trend + stability, commitment reliability, spillover rate, mid-sprint scope ch

  • worklog_guardrail

    Worklog/timesheet policy checker - run a batch of worklog entries through configurable guardrails BEFORE posting them to a time-tracking system. Checks: rounding increment (default 0.25h, float-safe), per-entry min/max, per-author daily totals, duplicates, over-estimate alerts (n

  • create_upload

    Get a presigned S3 PUT URL to upload a file (policy doc, config, log, up to 5MB) that a file-ingesting endpoint then reads by upload_id. Two-step: call this, PUT your file to the returned url, then pass upload_id to the consuming endpoint. Uploads auto-expire in 1 day and are rea

  • send_feedback

    Submit free-text feedback about the API - a bug, an idea, a docs gap, a billing question, or anything else. Missing a tool? Use kind tool_request to tell us what you needed, with an optional tool_description. Tied to your key so we can follow up, but not a support-ticket SLA. Aut

  • account

    Everything about your QuassLabs API account, chosen by `action`. Free: no action costs credits. "signup" (no API key needed): request a free key for an email address. A confirmation link is emailed; a human opens it on quasslabs.com to see the key, which is never returned to the

  • rate_call

    Rate a specific prior metered call - thumbs up or down, plus an optional comment - keyed by the request_id that call's response reported. Works for any metered tool, so you can tell us when a result was wrong, unhelpful, or missed something. Resubmitting the same request_id overw

  • supply_chain_scan

    Scan a whole repo archive (a ZIP of manifests, lockfiles and MCP server configs) for packages, MCP servers and extensions listed in a known-compromise catalog (Bumblebee threat intel). Use this for a repo, many lockfiles or MCP configs; use dependency_check instead to lint a few

  • describe_diagram

    Turn a plain-English description into Mermaid diagram source. Describe the flow, system, schema or timeline you want ("a login flow with an OAuth branch and a failure path") and get back complete, valid Mermaid - no need to know the syntax. The mermaid field of the response is di

  • convert_diagram

    Make Mermaid diagrams portable. Takes HTML containing blocks (or a raw Mermaid source) and returns the same document with every diagram pre-rendered to inline SVG and the Mermaid CDN runtime stripped. A CDN-backed diagram only renders if the reader can fetch and run the runtime;

基础检查i

我们检查的是任何人都能看到的信息;我们没有阅读代码。不适用的检查项不计入总数。 · 检查于 2026年11月9日

  • ✓ 通过

    作者与仓库一致

    注册名称已通过域名 quasslabs.com 验证(注册中心会核实域名所有权)

  • … 尚未检查

    仍在维护

    我们还没有从 GitHub 读取这个仓库

  • … 尚未检查

    有许可证

    我们还没有从 GitHub 读取这个仓库

  • ✓ 通过

    端点有响应

    在 668 毫秒内响应(HTTP 200)

  • – 不适用

    使用 OAuth 登录

    无需登录

  • ✕ 未通过

    工具描述中没有隐藏指令

    有 1 个工具描述包含看起来像是对 AI 下指令的文字。安装前请先阅读下方的内容

与“设计、图片与音频”中的其他服务器比较i

  • 星标数多于此分类中其他 2802 个服务器的 0%
  • 发布到注册中心的时间比此分类中其他 2802 个服务器的 98% 更新
  • 基础检查结果等于或优于此分类中其他 2802 个服务器的 44%

与注册中心里这个分类中所有活跃的服务器比较。只有当发布者拥有该仓库时,星标数才计入。

常见问题

QuassLabs API 安全吗?

它在 3 项适用的基础检查中通过了 2 项。我们没有阅读代码。在添加密钥或令牌之前,请先看看这个服务器要求哪些权限,并使用只具备所需权限的密钥。

它需要哪些密钥或代码?

你需要填写:Authorization

它在我的电脑上运行还是在云端?

它在作者的云端运行。通过互联网连接,无需安装,但你发送的内容会经过作者的服务器。

它还在维护吗?

GitHub 仓库最后更新于–,最新版本(0.3.0)于昨天进入注册中心。

哪些应用可以使用它?

支持 MCP 的应用,例如 Claude Desktop、Claude Code、Cursor 和 VS Code。它通过 URL 连接,所以接受远程 MCP 服务器的应用也可以使用,例如开启开发者模式的 ChatGPT。

有什么可以替代它?

同一分类中有:Figma Context MCP, Claude Real Video, Figma MCP Server

替代选择

同一分类中其他作者的服务器,按星标数排序。

如何看卡片:↓ 每周下载量i★ GitHub 星标i三大支柱:评价 · 检查 · 使用情况i更新 = 最新版本发布到注册中心的时间i

Figma Context MCP

Give your coding agent access to your Figma data. Implement designs in any framework in one-shot.

作者:GLips广泛使用↓ 16.1万/周★ 1.6万5个月前更新

在你的电脑上运行

Claude Real Video

Let any LLM watch a video locally — and search everything it has ever watched.

作者:HUANGCHIHHUNGLeo广泛使用↓ 1106/周★ 22842个月前更新

在你的电脑上运行

Figma MCP Server

The Figma MCP server brings Figma design context directly into your AI workflow.

作者:figma广泛使用★ 215213个月前更新

在云端运行✓ mcp.figma.com

作者的 README

打开 README

按原文从作者的仓库复制。PopNx MCP 没有审查或背书其内容。HTML、图片和脚本已被移除。链接会离开本站。

QuassLabs API — MCP server

32 deterministic developer and delivery tools over one authenticated MCP endpoint. No LLM in the loop for most of them: they are scorers, linters, validators and calculators, so results are reproducible and cheap. Covers prompt-safety grading, AI-writing detection and rewriting, LLM selection and cost advice, ticket/story/PR/commit linting, sprint and SaaS metrics, log analysis, dependency hygiene and supply-chain scanning, MCP tool linting, Mermaid diagram generation and offline rendering, and BLM land lookup.

Endpoint: https://api.quasslabs.com/mcp · Transport: streamable HTTP (stateless JSON-RPC 2.0) · Server version: 0.2.0

Documentation: https://docs.quasslabs.com

Connect

Every client sends the same thing: a Bearer qlk_... API key in the Authorization header. Hosts that reserve Authorization for themselves can send X-API-Key: qlk_... instead.

Claude Code

claude mcp add --transport http quasslabs https://api.quasslabs.com/mcp \

--header "Authorization: Bearer qlk_YOUR_KEY"

Cursor (~/.cursor/mcp.json, or .cursor/mcp.json in a project)

{

"mcpServers": { "quasslabs": { "url": "https://api.quasslabs.com/mcp", "headers": { "Authorization": "Bearer qlk_YOUR_KEY" } } } }

Any other client that supports streamable HTTP

{

"mcpServers": { "quasslabs": { "type": "http", "url": "https://api.quasslabs.com/mcp", "headers": { "Authorization": "Bearer qlk_YOUR_KEY" } } } }

Or call it directly:

curl -sS -X POST https://api.quasslabs.com/mcp \

-H 'Content-Type: application/json' \ -H 'Authorization: Bearer qlk_YOUR_KEY' \ -d '{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"account","arguments":{"action":"balance"}}}'

Getting a key. Sign up at https://quasslabs.com/api, or from inside an agent with the account tool (action: "signup", no key needed). Either way you get an email with a one-time link, and the key is shown on quasslabs.com, never in the agent transcript. Every key gets 300 free credits each month.

Authentication

initialize, tools/list and ping are unauthenticated, so any client or registry can discover the catalogue without credentials. tools/call requires the API key, except the account tool's signup and checkout_status actions. Keys are stored only as a SHA-256 hash, so a lost key cannot be recovered, only revoked and reissued.

Pricing

Prepaid credits, 1 credit = $0.01:

PackPriceCredits
Starter$5500
Pro$202,500

Buy a pack from inside an agent with the account tool (action: "buy_credits" returns a Stripe Checkout link for a human to pay), and check what is left with action: "balance". Each key's free monthly credits are spent before purchased credits and refill on the first day of each UTC month.

Failed calls are not billed: a call rejected before the tool runs (bad input, missing key, rate limit, insufficient credits) costs nothing, and a call that fails on our side (any 5xx) is refunded automatically. That includes supply_chain_scan archives that download but are rejected (not a ZIP, an unsafe path, too many entries, or too large once extracted): the archive is checked before anything is charged. A convert_diagram call whose diagrams all fail to render (422 mermaid_render_failed) or whose output is over the size limit (413 output_too_large) is refunded too.

Tools (32)

Credits are per successful call. Tools marked 0 are free but still need a key.

Writing and prompts
ToolCreditsWhat it does
alignment_gate35Grade an AI system prompt against a 45-criterion alignment/safety rubric: letter grade, per-flag remediation, pass/fail
humanizer_score00-1 AI-ness score plus the exact patterns that fired
humanize_text1Rewrite prose to strip mechanical AI-writing tells
readability_grade0Flesch Reading Ease and Flesch-Kincaid Grade Level with a plain-language band
Engineering and security
ToolCreditsWhat it does
model_advisor0Recommended model, fallback chain, do-not-use list, and a cost comparison for a task
tool_advisor0Which of these tools fits a task, ranked with a confidence label and the MCP tool name to call
dependency_check0Lint pasted dependency manifests for hygiene: pinning, lockfiles, insecure sources, install scripts, dependency confusion
supply_chain_scan5Scan a whole repo ZIP (manifests, lockfiles, MCP server configs) against a known-compromise catalog
log_analyzer5Level breakdown, time range, and normalized error clusters from a raw log file (up to 5MB)
log_audit_creator5Feature list in, concrete audit-event catalog out, optionally targeted at SOC2/HIPAA/GDPR/PCI
regex_lint1ReDoS risk analysis plus a plain-English explanation of a regular expression; compiles the pattern but never runs it
mcp_tool_lint1Lint MCP tool definitions for model usability: vague descriptions, untyped parameters, near-duplicates, missing annotations, tool-poisoning phrases
openapi_diff1Breaking-change report between two OpenAPI 3.x specs (JSON or YAML), with the semver bump it needs
Delivery and QA
ToolCreditsWhat it does
ticket_lint1Whole-ticket quality linter with severity-coded findings, batched up to 50
story_lint1User-story structure: narrative completeness, atomicity, testability
acceptance_criteria_validator1Per-AC problems: vague/untestable, non-atomic, no observable outcome, missing coverage
coverage_check1Requirements-vs-stories coverage score, gaps, and orphan stories (scope creep)
defect_triage1Bug severity, category, repro-step presence, and what information is missing
sprint_health11-24 sprints in, health-tagged delivery metrics out
worklog_guardrail1Run timesheet entries through configurable policy guardrails before posting them
estimate_sanity1Classify story/task hour estimates against benchmarks: in-range, borderline, over, under
pr_description_lint1Missing body, absent test evidence, absent rationale, unstructured long body
commit_hygiene1Conventional-commit format, vague subjects, length limits, and a secret-pattern scan
Diagrams
ToolCreditsWhat it does
describe_diagram5Plain-English description in, Mermaid diagram source out
convert_diagram1Pre-render Mermaid to inline SVG so HTML works offline, in email, and in PDF exports
diagram_contrast0Diagram QA: every WCAG-AA label-contrast failure in a Mermaid/SVG/HTML diagram, with fixes
Data
ToolCreditsWhat it does
saas_metrics0ARR/ARPA/LTV/CAC/payback/Rule-of-40/NRR/GRR computed and health-tagged, plus an overall grade
blm_land_lookup8BLM land status for a US coordinate: ownership, allowed activities, permit requirements, special designations
Account and utilities
ToolCreditsWhat it does
account0One tool for your account. action: signup (email a one-time key link, no key needed), balance (credits, free credits left, reset date), buy_credits (Stripe Checkout link: $5 / 500 or $20 / 2,500), checkout_status (did a purchase land)
create_upload0Presigned S3 PUT URL so file-ingesting tools can read a document by upload_id
send_feedback0Submit a bug, idea, or docs gap against your key. Missing a tool? Send kind: "tool_request"
rate_call0Thumbs up/down a prior metered call by its request_id

tools/list only ever advertises what is callable right now. compress (LLMLingua-2 prompt compression, 10 credits) is built but temporarily switched off, so it is not listed.

Renamed in 0.2.0

humanize is now humanize_text, uploads is now create_upload, and feedback is now send_feedback. The REST endpoints (/v1/humanize, /v1/uploads, /v1/feedback) did not change.

Links

  • Documentation — https://docs.quasslabs.com
  • Privacy policy — https://quasslabs.com/privacy
  • Terms — https://quasslabs.com/terms
  • Homepage — https://quasslabs.com

About this repository

This repository is the public manifest for the QuassLabs API MCP server: the registry entry, the tool catalogue, and connection instructions. The server is a hosted remote endpoint, so there is nothing to install and no server source here. The platform implementation is a commercial product and is not open source.

Report a problem with the MCP server through the send_feedback tool (free), or see SECURITY.md for security reports.

问 PopNx