GitHub
server ทางการของ GitHub ให้ AI อ่านและจัดการโค้ด issue และ pull request ในบัญชีของคุณได้ ใช้ผ่านคลาวด์ของ GitHub หรือรันในเครื่องด้วย Docker ก็ได้
คำอธิบายจากผู้ทำ (ภาษาอังกฤษตามต้นฉบับ)
Evidence-first architecture workbench: 48 deterministic tools, 10 architect personas, any cloud
สามเรื่องนี้ไม่รวมเป็นคะแนนเดียว เพราะความเห็น การวัด และความนิยม เป็นคนละเรื่องกัน
ตัวนี้ยังไม่ได้เรียบเรียงเป็นภาษาไทย ด้านล่างคือข้อเท็จจริงที่เราอ่านจาก registry
เลือกโปรแกรม AI ที่คุณใช้ แล้วคัดลอกค่าตั้งไปวาง
ต้องเตรียมก่อน
คุณใช้แอปไหน
เลือกแอปด้านบน เราจำไว้ให้ ครั้งหน้าปุ่มจะขึ้นว่า “ติดตั้งลง …”
ใช้ได้ทั้ง Claude บนเว็บ แอปคอมพิวเตอร์ และมือถือ:
https://mcp.moretes.com/mcpเปิด Claude Desktop → Settings → Developer → Edit Config แล้ววางค่านี้ในไฟล์ claude_desktop_config.json
{
"mcpServers": {
"moretes-aws-architect": {
"command": "npx",
"args": [
"-y",
"moretes-aws-architect-mcp"
]
}
}
}พิมพ์คำสั่งนี้ใน Terminal
claude mcp add --transport http moretes-aws-architect https://mcp.moretes.com/mcpclaude mcp add moretes-aws-architect -- npx -y moretes-aws-architect-mcpวางในไฟล์ .cursor/mcp.json ของโปรเจกต์ หรือ ~/.cursor/mcp.json
{
"mcpServers": {
"moretes-aws-architect": {
"url": "https://mcp.moretes.com/mcp"
}
}
}วางในไฟล์ .cursor/mcp.json ของโปรเจกต์ หรือ ~/.cursor/mcp.json
{
"mcpServers": {
"moretes-aws-architect": {
"command": "npx",
"args": [
"-y",
"moretes-aws-architect-mcp"
]
}
}
}เบราว์เซอร์จะถามก่อนเปิดแอป จากนั้นแอปแสดงค่าตั้งให้ตรวจแล้วกดยืนยัน ช่อง key เว้นว่างไว้ให้คุณใส่เอง
วางในไฟล์ .vscode/mcp.json ของโปรเจกต์
{
"servers": {
"moretes-aws-architect": {
"type": "http",
"url": "https://mcp.moretes.com/mcp"
}
}
}วางในไฟล์ .vscode/mcp.json ของโปรเจกต์
{
"servers": {
"moretes-aws-architect": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"moretes-aws-architect-mcp"
]
}
}
}เบราว์เซอร์จะถามก่อนเปิดแอป จากนั้นแอปแสดงค่าตั้งให้ตรวจแล้วกดยืนยัน ช่อง key เว้นว่างไว้ให้คุณใส่เอง
ChatGPT ต่อได้เฉพาะ server ที่อยู่บนอินเทอร์เน็ต:
https://mcp.moretes.com/mcpชื่อเมนูอาจต่างกันเล็กน้อยตามแพ็กเกจและรุ่นของแอป
ตัวเลือกเก็บในคุกกี้บนเครื่องนี้ ไม่ต้องมีบัญชี
ค่าตั้งนี้สร้างจากข้อมูลใน registry ของผู้ทำ ถ้าไม่ตรงกับ README ให้เชื่อ README
ชื่อและคำอธิบายเครื่องมือตามที่ server ตอบมาเมื่อ 8 พ.ย. 2569 ผู้ทำเป็นคนเขียน ไม่ใช่เรา แสดงเป็นข้อความล้วน
architect_panelConvene architect personas (solution, enterprise, business, data, infrastructure, software, AI, security, governance, FinOps) on a subject: each returns its questions, checks, deliverables and the workbench tools to call. Lens, not a verdict.
code_review_architectureHeuristic architecture and security scan of source code pasted as text (any language): secrets, insecure calls, SQL built by concatenation, disabled TLS, hardcoded endpoints, missing timeouts and retry hazards. Not a linter or SAST replacement.
dependency_manifest_reviewReview a dependency manifest (package.json, requirements.txt, pyproject, go.mod, pom.xml, Gemfile, Cargo.toml as text) for unpinned ranges, git or URL sources, wildcard versions and missing lockfile hints.
requirements_checkTurn a workload brief into explicit requirements, gaps and research questions. No inferred SLA or budget.
architecture_patternSelect a reference architecture by explicit workload pattern; returns tradeoffs, questions and Mermaid. provider maps the AWS services to Azure, GCP, OCI or open source equivalents.
service_compareCompare curated AWS service families against user constraints. No automatic winner or fabricated scores.
decision_recordGenerate an ADR from explicit alternatives, decision and consequences. Does not invent acceptance.
well_architected_reviewOrganize evidence by six pillars. A met control without evidence is unknown, never certified.
threat_modelCreate STRIDE review prompts for explicitly supplied assets and trust boundaries. Review aid, not a scanner.
failure_rehearsalDesign a controlled failure drill with observable success criteria and stop conditions; never executes it.
capacity_planCalculate partial capacity scenarios without inventing missing duration or payload. Label caller-reported provenance; no service sizing guarantee.
cost_modelCalculate an auditable scenario using caller-supplied unit rates and source URLs. Does not guess AWS prices or credit coverage.
slo_budgetCalculate an availability error budget for a chosen period.
migration_planPrepare phased discovery, pilot, migration and rollback gates; includes AWS Transform integration discovery.
architecture_diagramBuild Mermaid from explicit nodes and edges. Sanitizes labels and rejects dangling edges.
implementation_planTurn an architecture decision into a delivery checklist with validation gates.
agent_tool_contractDesign a per-operation authorization and recovery contract for an agent tool.
c4_modelBuild C4 context or container diagrams (Mermaid) from explicit people, systems, containers and relations. Validates endpoints; no infrastructure discovery.
sequence_diagramBuild a Mermaid sequence diagram from participants and ordered messages, with optional activation, notes and alt/loop blocks. Rejects unknown participants.
service_equivalentsMap a cloud capability to equivalent managed services on AWS, Azure, Google Cloud, OCI and open source. Names as of the snapshot date; verify current naming, regions and pricing before deciding.
data_classificationClassify data elements, map them to regulation hints (LGPD, GDPR, PCI DSS, HIPAA) and list handling controls and open questions. Review aid, not legal advice.
openapi_reviewHeuristic review of an OpenAPI 3.x document (JSON): security, pagination, error responses, idempotency, versioning and documentation gaps. Not a linter replacement.
event_contractDesign an event contract: envelope fields, schema evolution rules, idempotency, ordering, DLQ and replay decisions for a named business event. Deterministic template with open questions.
latency_budgetSplit an end-to-end latency objective across hops and show which hops exceed their share. Pure arithmetic over caller-supplied estimates.
queue_sizingSize consumers with Little's law and stable Erlang C: utilization, wait probability, backlog drain time and target consumers. At most 100,000 total concurrent slots (consumers × concurrency).
dr_strategyCompare disaster recovery tiers (backup-and-restore, pilot light, warm standby, active-active) against RTO, RPO and data constraints; returns feasible tiers and required capabilities, not a guarantee.
retry_policyCompute an exponential backoff schedule with jitter, the worst-case wait and whether it fits a deadline; adds idempotency and circuit-breaker guidance.
storage_growthProject storage volume and relative cost over time from ingest, retention, compression, replication and growth; suggests tiering thresholds.
finops_unit_economicsCompute cost per unit (request, customer, transaction), fixed versus variable split and the volume at which the marginal cost crosses a target. Caller supplies costs; no provider prices are guessed.
postmortemGenerate a blameless postmortem document from incident facts: timeline, impact, detection, contributing factors and owned action items. Rejects action items without owner and due date.
runbookGenerate an operational runbook from service facts: alerts, diagnostic steps, remediation, rollback, escalation and verification. Template with explicit placeholders for what the caller did not provide.
agent_eval_planDesign an evaluation plan for an AI agent: golden set sizing, metrics, judge rubric, red-team cases and regression cadence from explicit capabilities and risks.
prompt_injection_checklistEnumerate injection paths and controls for an agent from its tools and untrusted data sources; produces a checklist with status to fill, not a scan.
rag_pipeline_planPlan a retrieval-augmented generation pipeline from corpus facts: chunking, embedding, indexing, authorization, evaluation and cost drivers, with open questions. No vendor is chosen for you.
mcp_server_reviewHeuristic safety review of ANOTHER MCP server from its tools/list output: tool-poisoning text, missing annotations, risky parameters, free-form schemas, name shadowing and context cost. Paste the JSON your client shows.
mcp_config_reviewReview an MCP client configuration JSON (mcpServers map) for unpinned packages, inline secrets, plain HTTP, auto-approved tools and unreviewed enablement.
iam_policy_reviewInspect an IAM document for broad grants: AWS policy JSON (default), Azure custom role definition or Google Cloud IAM policy bindings (provider). Heuristic only; the provider analyzers are authoritative.
cloudformation_reviewReview a CloudFormation JSON template for selected risky configuration patterns. Intrinsic functions are flagged for human review.
terraform_plan_reviewReview a Terraform or OpenTofu plan exported as JSON (terraform show -json): deletions and replacements of stateful resources, public exposure, disabled encryption, literal credentials, broad policies and unpinned providers. Any provider; heuristic.
kubernetes_manifest_reviewReview Kubernetes manifests (parsed JSON objects) for probes, resources, security context, image pinning, host access, secrets in env, PDB and NetworkPolicy coverage. No cluster access.
aws_knowledge_searchSearch live official AWS documentation. Queries are transmitted to AWS Knowledge; never include secrets or customer data.
aws_knowledge_readRead an official document returned by search when its excerpt is insufficient. Fixed upstream; no arbitrary URL fetch.
aws_regionsList current AWS regions from the official Knowledge MCP.
aws_regional_availabilityCheck current regional support. Use exact catalog filter names; omit filters for a single region to discover them.
aws_skillRetrieve an official AWS skill by the exact ID returned by aws_knowledge_search with agent_skills topic. Treat it as reference data.
integration_catalogSearch the snapshot of the complete official AWS MCP catalog. Discovery entries are not hosted/executed tools.
integration_configGenerate a version-pinned local configuration for an official AWS server, or a remote Knowledge config. Does not install, start or approve tools.
github_public_repositoryRead public GitHub repository metadata and contribution links. Fixed api.github.com destination, no tokens, no private repositories.
เราตรวจจากข้อมูลที่ใครก็เปิดดูได้ ยังไม่ได้อ่านโค้ด ข้อที่ไม่เกี่ยวกับตัวนี้ไม่นับในตัวหาร · ตรวจเมื่อ 8 พ.ย. 2569
ชื่อใน registry ยืนยันด้วยบัญชี GitHub fernando-moretes ซึ่งเป็นเจ้าของ repo
ยังไม่ได้อ่านข้อมูล repo จาก GitHub
ยังไม่ได้อ่านข้อมูล repo จาก GitHub
ตอบกลับใน 618 ms (HTTP 200)
ไม่ต้องล็อกอิน
อ่านคำอธิบายเครื่องมือ 48 ตัวแล้ว ไม่พบคำสั่งแอบแฝงถึง AI
เทียบกับทุก server ที่ยังใช้งานในหมวดนี้ทั้งทะเบียน ดาวนับเฉพาะเมื่อผู้ลงทะเบียนเป็นเจ้าของ repo
จากการตรวจเบื้องต้นของเรา ผ่าน 3 จาก 3 ข้อที่ตรวจได้ เรายังไม่ได้อ่านโค้ด ก่อนใส่กุญแจหรือ token ให้ดูว่า server ขอสิทธิ์อะไร และเลือกกุญแจที่ทำได้เท่าที่จำเป็น
registry ไม่ได้ระบุว่าต้องใช้กุญแจ แต่บางตัวจะขอให้ล็อกอินตอนใช้ครั้งแรก
ได้ทั้งสองแบบ จะลงในเครื่องหรือต่อผ่านคลาวด์ก็ได้
repo บน GitHub มีการแก้โค้ดล่าสุด – และส่งรุ่นล่าสุด (0.5.0) เข้า registry เมื่อวาน
โปรแกรมที่รองรับ MCP เช่น Claude Desktop, Claude Code, Cursor และ VS Code ตัวนี้ต่อผ่าน URL จึงใช้กับโปรแกรมที่รับ remote MCP ได้ เช่น ChatGPT ที่เปิดโหมดนักพัฒนา
ในหมวดเดียวกันมี GitHub, Desktop Commander, Cloudflare MCP
server หมวดเดียวกันจากผู้ทำคนอื่น เรียงตามดาว
อ่านการ์ด:↓ ดาวน์โหลดต่อสัปดาห์i★ ดาว GitHubiสามเสา: รีวิว · ผลตรวจ · การใช้งานiอัปเดต = วันที่ส่งรุ่นล่าสุดเข้า registryi
server ทางการของ GitHub ให้ AI อ่านและจัดการโค้ด issue และ pull request ในบัญชีของคุณได้ ใช้ผ่านคลาวด์ของ GitHub หรือรันในเครื่องด้วย Docker ก็ได้
MCP server for terminal commands, file operations, and process management
ส่วนนี้คัดจาก repo ของผู้ทำตามต้นฉบับ PopNx MCP ไม่ได้ตรวจหรือรับรองเนื้อหา ตัด HTML รูปภาพ และสคริปต์ออกแล้ว ลิงก์จะพาออกนอกเว็บ
Claude Code · Codex · Kiro · Cursor · VS Code · Gemini CLI · Amazon Q · Claude Desktop
Conectar · Ver funcionando · Ferramentas · Pipeline · Privacidade · Tutorial e curso · English
Um servidor MCP que coloca 48 ferramentas determinísticas de arquitetura e 10 personas de arquiteto dentro do seu agente de código. O modelo do seu cliente raciocina; o servidor devolve cálculos, estruturas, fontes oficiais e lacunas explícitas. O servidor nunca chama um modelo, nunca acessa a sua conta pela internet e não precisa de chave de API.
Feito por Fernando Azevedo, Arquiteto de Tecnologia da Informação Especialista e AWS Community Builder (AI Engineering). É o que eu uso para decidir arquitetura no dia a dia, aberto para a comunidade usar, auditar e estender.
Pede uma API, ele pergunta antes de sugerir. O agente chama requirements_check e depois architect_panel; nenhum número é inventado.
Calcula, não chuta. No Kiro, latency_budget soma os passos em série, pega o maior dos paralelos e mostra onde o tempo vai.
Trava o apply perigoso no pipeline. O mesmo motor roda offline como CLI, com Markdown, JSON ou SARIF e exit code por severidade.
Os GIFs são trechos dos vídeos do curso gratuito, narrados na minha voz, com as chamadas e as respostas reais do servidor. Os JSON completos estão em docs/examples.
Sem chave, sem cadastro:
# Claude Code
claude mcp add --transport http moretes-architect https://mcp.moretes.com/mcp
codex mcp add moretes-architect --url https://mcp.moretes.com/mcp
gemini mcp add --transport http moretes-architect https://mcp.moretes.com/mcp
Kiro, Cursor, VS Code, Amazon Q, Claude Desktop
Kiro (.kiro/settings/mcp.json), Cursor (.cursor/mcp.json) e Amazon Q (mcp.json):
{
"mcpServers": { "moretes-architect": { "url": "https://mcp.moretes.com/mcp", "autoApprove": [] } } }
VS Code (.vscode/mcp.json):
{
"servers": { "moretes-architect": { "type": "http", "url": "https://mcp.moretes.com/mcp" } } }
Claude Desktop e qualquer cliente stdio, depois de rodar local:
{ "mcpServers": { "moretes-architect": { "command": "node", "args": ["/CAMINHO/ABSOLUTO/dist/stdio.js"] } } }
Passo a passo de cada cliente, verificação e erros comuns: docs/clients.md.
Cota pública: 300 requisições por dia por cliente e 3.000 no total; acima disso, 429. O mesmo servidor responde em https://fernando.moretes.com/api/mcp, mas esse endereço passa pelo site e todos os seus usuários dividem uma única cota diária; use a URL direta para ter a sua. Para volume ou entradas privadas, rode local.
Depois de conectar, peça ao agente:
"Use o Moretes Architect. Preciso de uma API de pedidos para um marketplace, 300 pedidos por minuto no pico. Pergunte o que falta antes de sugerir, convoque os arquitetos de solução, segurança e FinOps, compare Lambda e ECS, desenhe o C4 e registre a decisão em um ADR."
| Grupo | Ferramentas | Para quê |
|---|---|---|
| Personas e código | architect_panel, code_review_architecture, dependency_manifest_review | Convocar arquitetos de solução, enterprise, negócio, dados, infraestrutura, software, IA, segurança, governança e FinOps; revisar código e manifestos de dependência |
| Arquitetura e decisões | requirements_check, architecture_pattern, service_compare, decision_record, well_architected_review, threat_model, failure_rehearsal, capacity_plan, cost_model, slo_budget, migration_plan, architecture_diagram, implementation_plan, agent_tool_contract | Do requisito ao ADR, com os seis pilares, STRIDE, capacidade, custo datado e SLO |
| Design: diagramas, dados, contratos | c4_model, sequence_diagram, service_equivalents, data_classification, openapi_review, event_contract | C4 e sequência em Mermaid validados; equivalência AWS, Azure, GCP, OCI e open source em 43 capacidades; LGPD, GDPR e PCI como ponteiros; OpenAPI; contrato CloudEvents |
| Confiabilidade, operação e FinOps | latency_budget, queue_sizing, dr_strategy, retry_policy, storage_growth, finops_unit_economics, postmortem, runbook | Orçamento de latência, Erlang C, tier de DR por RTO/RPO, backoff com jitter, crescimento de armazenamento, custo por unidade, postmortem e runbook |
| Agentes de IA e segurança de MCP | agent_eval_plan, prompt_injection_checklist, rag_pipeline_plan, mcp_server_review, mcp_config_review | Plano de avaliação, controles contra injeção, RAG com autorização antes do top-k, revisão de outros servidores MCP e da configuração do seu cliente |
| Revisão de IaC | iam_policy_review, cloudformation_review, terraform_plan_review, kubernetes_manifest_review | Plano Terraform/OpenTofu em JSON, CloudFormation, manifestos Kubernetes, políticas IAM |
| AWS Knowledge ao vivo | aws_knowledge_search, aws_knowledge_read, aws_regions, aws_regional_availability, aws_skill | Documentação oficial atual, regiões e disponibilidade, pelo MCP oficial da AWS |
| Integrações oficiais e GitHub | integration_catalog, integration_config, github_public_repository | Catálogo dos 61 servidores oficiais awslabs com versão fixada; metadados públicos de repositórios |
iam_policy_review lê política IAM da AWS, role definition do Azure e bindings do Google Cloud (provider). Toda ferramenta de cálculo e revisão publica outputSchema, e o cliente valida a saída.
Mais 20 prompts (10 fluxos e um architect_ por persona), 18 resources (moretes://guide, moretes://boundaries, moretes://tools, moretes://personas/ , moretes://skills/ ) e, só no modo local, 5 ferramentas opcionais de conta AWS e federação com os servidores oficiais.
Guia de cada ferramenta: docs/tools-guide.md · Schemas: docs/tools.md · Saídas reais: docs/examples · Personas: docs/personas.md
Na versão 0.5.0, node dist/cli.js manifest exporta os contratos públicos completos com hashes por ferramenta, incluindo schemas de saída e anotações de segurança. Como verificar e comparar contratos. A instalação local e o endpoint HTTP permitem comparar os mesmos contratos; confira a versão em uso antes de comparar.
c4_modelEntrada: pessoas, sistemas e relações explícitas. Saída: Mermaid validado (id duplicado, aresta solta e rótulo com sintaxe perigosa são recusados). O GitHub renderiza abaixo exatamente o que a ferramenta devolveu em docs/examples/c4_model.json:
flowchart TB
buyer(["Buyer Places and tracks orders"]) subgraph system_Orders_platform["Orders platform"] web["Storefront [Next.js]"] api["Orders API [Node.js on Fargate]"] db["Orders DB [PostgreSQL]"] bus["Order events [EventBridge]"] end psp[["Payment provider [REST + webhooks]"]] buyer -->|"uses"| web web -->|"calls (HTTPS/JSON)"| api api -->|"reads and writes"| db api -->|"authorizes payment"| psp psp -->|"webhook: payment captured"| api api -->|"publishes OrderPlaced"| bus classDef person fill:#1f3b63,stroke:#5b9bd5,color:#fff class buyer person classDef external fill:#4a4a4a,stroke:#9a9a9a,color:#fff class psp external
mcp_server_review recebe o tools/list de outro servidor e procura texto de instrução escondido na descrição, parâmetros perigosos, anotação mentirosa e nomes duplicados. Contra o servidor de exemplo em docs/examples/mcp_server_review.json:
{
"summary": { "high": 5, "medium": 1, "info": 0 }, "verdict": "Do not auto-approve; review each high finding with the server author or pin to an allowlist", "findings": [ { "severity": "high", "target": "read_file", "message": "Description contains instruction-like text (references local secret files); tool-poisoning indicator." }, { "severity": "high", "target": "read_file", "message": "Parameters that typically carry commands, raw queries, URLs or paths: path. Require an allowlist and per-call approval." } ] }
#
ตัดมาแค่ช่วงต้น อ่านต่อใน repo