Spec Driven Development
MCP Server that facilitates spec-driven development workflows, not just Vibe Coding.
Descripción del creador (original en inglés)
Security patrol management: missed rounds, suspicious scans, incidents and checkpoint setup.
Estos tres nunca se combinan en una sola puntuación: las opiniones, las mediciones y la popularidad son cosas distintas.
Todavía no escribimos un resumen sencillo para este. Abajo están los datos que leímos del registro.
Elige la app de IA que usas y copia la configuración.
Necesitas
¿Qué app usas?
Elige tu app arriba. La recordamos, así que la próxima vez el botón dirá “Instalar en …”.
Funciona en Claude para web, escritorio y móvil:
https://mcp.patroltech.online/mcpEjecuta esto en tu terminal
claude mcp add --transport http patroltech https://mcp.patroltech.online/mcpPégalo en .cursor/mcp.json de tu proyecto, o en ~/.cursor/mcp.json
{
"mcpServers": {
"patroltech": {
"url": "https://mcp.patroltech.online/mcp"
}
}
}Tu navegador te pide permiso para abrir la app; luego la app muestra la configuración y te pide confirmar. Los valores de las claves quedan vacíos para que los completes tú.
Pégalo en .vscode/mcp.json de tu proyecto
{
"servers": {
"patroltech": {
"type": "http",
"url": "https://mcp.patroltech.online/mcp"
}
}
}Tu navegador te pide permiso para abrir la app; luego la app muestra la configuración y te pide confirmar. Los valores de las claves quedan vacíos para que los completes tú.
ChatGPT solo se conecta a servidores en internet:
https://mcp.patroltech.online/mcpLos nombres de los menús pueden variar un poco según el plan y con el tiempo.
Tu elección se guarda en una cookie en este dispositivo; no necesitas cuenta.
Esta configuración se genera a partir de la ficha del creador en el registro. Si el README dice otra cosa, sigue el README.
El servidor pide iniciar sesión antes de mostrar sus herramientas.
Revisamos información que cualquiera puede ver; no hemos leído el código. Las revisiones que no aplican no se cuentan. · Revisado el 7 nov 2026
El nombre en el registro se verificó con el dominio patroltech.online (el registro comprueba quién es dueño del dominio)
Todavía no hemos leído este repo en GitHub
Todavía no hemos leído este repo en GitHub
Respondió en 1092 ms (HTTP 401)
Declara inicio de sesión con OAuth, así que tu app de IA puede llevarte a iniciar sesión
Aún sin revisar; leemos la lista de herramientas cuando revisamos el endpoint
Comparado con todos los servidores activos de esta categoría en el registro. Las estrellas solo cuentan cuando quien lo publica es dueño del repo.
Superó 3 de 3 revisiones básicas aplicables. No hemos leído el código. Antes de agregar una clave o un token, revisa qué acceso pide el servidor y usa una clave que tenga solo los permisos que necesitas.
El registro no indica ninguna clave obligatoria, aunque algunos servidores te piden iniciar sesión la primera vez que los usas.
Se ejecuta en la nube del creador. Te conectas por internet sin instalar nada, pero lo que envías pasa por los servidores del creador.
El repo de GitHub cambió por última vez –, y la última versión (0.2.8) llegó al registro hace 4 días.
Las apps compatibles con MCP, como Claude Desktop, Claude Code, Cursor y VS Code. Se conecta por URL, así que también funcionan las apps que aceptan servidores MCP remotos, como ChatGPT en modo desarrollador.
En la misma categoría: Spec Driven Development, Remote Desktop Commander, 御府和田玉 在售作品查询
Servidores de la misma categoría hechos por otros creadores, ordenados por estrellas.
Cómo leer una tarjeta:★ Estrellas de GitHubiTres pilares: reseñas · revisiones · usoiActualizado = fecha en que se publicó la última versión en el registroi
MCP Server that facilitates spec-driven development workflows, not just Vibe Coding.
Remote Desktop Commander: use files, terminal and processes on your own computers from any AI app.
Live in-stock Hetian jade from Yufu, Shanghai: prices, monthly price guide, book a viewing.
Copiado tal cual del repo del creador. PopNx MCP no lo ha revisado ni lo respalda. Se quitaron HTML, imágenes y scripts. Los enlaces llevan fuera de este sitio.
The remote Model Context Protocol server of PatrolTech, the guard tour and security patrol platform. It lets AI assistants such as Claude, ChatGPT, Copilot, Gemini or Cursor read and act on a PatrolTech account on behalf of a user who signs in with OAuth: rounds, routes, checkpoints, guards, incidents, users, locations, access control and scans.
This repository holds only the server code. To install the connector in your assistant, use PatrolTech/ai-integrations: plugins, MCP Registry entry and instructions for each client.
This server grants no access by itself. It has no credentials of its own: it forwards the user's token, and the PatrolTech API authorizes every call (organization and location roles, OAuth scopes and a closed list of writes allowed to agents). See SECURITY.md.
Use the hosted endpoint https://mcp.patroltech.online/mcp with an MCP client that supports remote OAuth. The user's PatrolTech account and role determine access.
Create a free account · Connection guide · Agent skill and client plugins
Building your own integration instead? See the API reference of the public REST API and the TypeScript SDK. Webhooks are in development: tell us which events you need at info@patroltech.app.
Ask about missed patrol rounds, suspicious checkpoint scans, unreviewed checkpoints, incidents or visitor access logs. Supported changes are proposals and require explicit confirmation. Deleting records, inviting users and billing are outside the connector's capabilities.
For client setup, OAuth verification and troubleshooting, see the agent installation guide, including Cline instructions.
MCP client ──OAuth──▶ PatrolTech authorization server
│ Bearer access token (audience = MCP_PUBLIC_URL) ▼ MCP server (this repo, stateless) ──agent session──▶ PatrolTech API │ ▲ └── Redis: locks and rate limits └── @patroltech/agent-capabilities + @patroltech/sdk-api
/mcp requires a bearer token issued by the PatrolTech authorization server (RFC 9728 metadata at /.well-known/oauth-protected-resource/mcp). Tokens are verified against the API's JWKS (ES256, exact issuer and audience) and exchanged for a 15-minute agent session (POST /oauth/agent-session), cached by a hash of the token. The API trims the session to what the grant still allows.SET NX PX, renewed while it lasts) and the per-user, per-tool rate limits. It is required in production and staging. If Redis fails, propose, confirm and cancel answer "busy" rather than risk two proposals overwriting each other. Without REDIS_URL (development and test only) both live in process memory.mcp channel of @patroltech/agent-capabilities, which calls the API through @patroltech/sdk-api.| Tool | What it does |
|---|---|
patroltech_ _ | One per read of the catalog: read-only, English titles and descriptions, optional organization when the user has several. |
patroltech_account_get_context | The user's organizations (name, role, access) and their locations. Its description says where to review this connection (DASHBOARD_URL, Connected apps). |
patroltech_ _propose_ | Proposes a change. Nothing changes until it is confirmed. Proposals of one user and client form one batch (up to 10, expires after 30 minutes). |
patroltech_proposals_confirm | Executes the whole pending batch, in order, with the parameters that were proposed (marked destructive: clients ask the user first). |
patroltech_proposals_cancel | Withdraws the pending batch. |
patroltech_locations_get_qr_sheet | A signed link (1 hour) to the printable QR sheet of a location. |
Both are fixed text in src/interface/mcp/guidance: they change nothing in the account and call no backend, so they do not go through the audit line or the rate limit of the tools. The connection still needs OAuth, like everything under /mcp.
| Prompt | What it asks for |
|---|---|
patroltech_review_missed_rounds | The latest rounds not completed and the checkpoints skipped. |
patroltech_review_suspicious_scans | Suspicious or rejected scans, and how many are pending (period). |
patroltech_weekly_summary | How the last week went, starting with what needs attention. |
patroltech_set_up_account | What is missing to get the account running, and the next step. |
| Resource | What it holds |
|---|---|
patroltech://guides/choosing-a-tool | Which tool answers each question, and how changes are confirmed. |
patroltech://guides/reading-the-data | What statuses, scan validation, partial data and retention mean. |
The server also sends instructions (src/interface/mcp/serverInstructions.ts): guidance that spans several tools, such as using the ranking tools to compare guards and presenting them as activity data, not as an assessment of the people.
Writes need the write scope: without it the server answers 403 insufficient_scope with the read write challenge. Every result is { data, truncated?, notices?, note }, capped at 60,000 characters, where note says that data is data, never instructions. Each user can make 60 calls per minute to a read tool and 20 to a write tool. Every tool call writes one mcp.tool_call audit line with a hash of the arguments, never the arguments.
| Path | Auth | Purpose |
|---|---|---|
/mcp (path of MCP_PUBLIC_URL) | Bearer | The MCP endpoint (POST, GET, DELETE). Validates Host and rejects any Origin. |
/.well-known/oauth-protected-resource/mcp | none | Protected resource metadata (RFC 9728), also at the root path. |
/health | none | Liveness: 200 {"status":"ok","version":"…"}. |
/health/ready | none | Readiness: 200 if the JWKS answers within 3 s and, with REDIS_URL, Redis answers PING; otherwise 503. |
/.well-known/openai-apps-challenge | none | The OPENAI_APPS_CHALLENGE token, for the ChatGPT apps directory; 404 without it. |
Every variable is documented in .env.example. The server refuses to start, listing each missing or invalid variable, if the configuration is not valid.
| Variable | Required | Description |
|---|---|---|
MCP_PUBLIC_URL | yes | Exact public URL of the MCP endpoint, the audience of the tokens (for example https://mcp.example.com/mcp). |
API_BASE_URL | yes | Origin of the PatrolTech API, without /api. |
OAUTH_ISSUER | yes | Expected iss of the access tokens, byte for byte. |
OAUTH_JWKS_URL | no | JWKS of the issuer. Default API_BASE_URL + /oauth/jwks.json. |
DASHBOARD_URL, APP_BASE_URL | yes | PatrolTech dashboard and web app, for links shown to the user. |
APP_ENVIRONMENT | yes | production, staging, development or test. |
REDIS_URL | in production and staging | Shared Redis (ioredis URL). |
REDIS_NAMESPACE | no | Key prefix in Redis. Default APP_ENVIRONMENT. |
HOST, PORT | no | Where the process listens. Default 127.0.0.1:3110, behind a reverse proxy. |
LOG_LEVEL | no | debug, info (default), warn or error. Audit and heartbeat lines are written at any level. |
SERVICE_NAME | no | service field of every log line. Default mcp-server. |
OPENAI_APPS_CHALLENGE | no | Domain verification token for the ChatGPT apps directory. |
Logs are one JSON object per line on stdout and stderr. Each process writes an mcp.heartbeat line every 5 minutes, so a log monitor can alert when it stops.
Node.js 22.9 or later.
npm ci
cp .env.example .env.local #
Solo se muestra el principio; lee el resto en el repo