Zeqqat
The safe MCP for Dokploy: agents deploy and fix apps without holding keys or seeing secrets.
作者提供的说明(英文原文)
138-tool MCP server for AI agent firms: security, A2A, Hebbian memory, fleet mgmt
这三项永远不会合并成一个分数:意见、测量和人气是不同的东西。
我们还没有为它写通俗的介绍。下面是我们从注册中心读取到的事实。
选择你使用的 AI 应用,然后复制设置。
你需要
你用的是哪个应用?
在上方选择你的应用。我们会记住它,下次按钮会显示“安装到 …”。
打开 Claude Desktop → Settings → Developer → Edit Config,把下面的内容粘贴到 claude_desktop_config.json
{
"mcpServers": {
"openclaw": {
"command": "uvx",
"args": [
"mcp-openclaw-extensions"
]
}
}
}在终端中运行这条命令
claude mcp add openclaw -- uvx mcp-openclaw-extensions粘贴到项目中的 .cursor/mcp.json,或 ~/.cursor/mcp.json
{
"mcpServers": {
"openclaw": {
"command": "uvx",
"args": [
"mcp-openclaw-extensions"
]
}
}
}浏览器会先询问是否打开应用,然后应用会显示设置并请你确认。密钥的值会留空,由你自己填写。
粘贴到项目中的 .vscode/mcp.json
{
"servers": {
"openclaw": {
"type": "stdio",
"command": "uvx",
"args": [
"mcp-openclaw-extensions"
]
}
}
}浏览器会先询问是否打开应用,然后应用会显示设置并请你确认。密钥的值会留空,由你自己填写。
这个服务器在你的电脑上运行,而 ChatGPT 只能连接互联网上的服务器。请选择其他应用。
你的选择通过 Cookie 保存在这台设备上,无需账户。
这些设置是根据作者在注册中心的条目生成的。如果 README 的写法不同,请以 README 为准。
它在你的电脑上运行;安装后,工具列表会显示在你的 AI 应用中。
我们检查的是任何人都能看到的信息;我们没有阅读代码。不适用的检查项不计入总数。 · 检查于 2026年11月9日
注册名称已通过 GitHub 账户 romainsantoli-web 验证,该账户拥有此仓库
我们还没有从 GitHub 读取这个仓库
我们还没有从 GitHub 读取这个仓库
它在你的电脑上运行,没有互联网端点
在你的电脑上运行,改用本地设置
它在你的电脑上运行;我们只能读取互联网端点的工具列表
与注册中心里这个分类中所有活跃的服务器比较。只有当发布者拥有该仓库时,星标数才计入。
它在 1 项适用的基础检查中通过了 1 项。我们没有阅读代码。在添加密钥或令牌之前,请先看看这个服务器要求哪些权限,并使用只具备所需权限的密钥。
注册中心没有列出必需的密钥,不过有些服务器会在首次使用时要求你登录。
它在你的电脑上运行。你的 AI 应用会在需要时启动它,数据不会经过作者的服务器(除非它自己调用在线服务)。
GitHub 仓库最后更新于–,最新版本(3.3.0)于8个月前进入注册中心。
支持 MCP 的应用,例如 Claude Desktop、Claude Code、Cursor 和 VS Code。你的电脑上还需要有 Python (uv)。
同一分类中有:Zeqqat, 4da MCP Server, Dependency Vulnerability Tracker — package security advisories ($0.01/query)
同一分类中其他作者的服务器,按星标数排序。
如何看卡片:↓ 每周下载量i★ GitHub 星标i三大支柱:评价 · 检查 · 使用情况i更新 = 最新版本发布到注册中心的时间i
The safe MCP for Dokploy: agents deploy and fix apps without holding keys or seeing secrets.
Upgrade intelligence for AI agents: what an upgrade changes, where it touches your code, CVE scans.
Dependency vulns & malicious-package advisories. Be born in one call — free testnet funds.
按原文从作者的仓库复制。PopNx MCP 没有审查或背书其内容。HTML、图片和脚本已被移除。链接会离开本站。
Python MCP server (port 8012) that bridges VS Code Copilot agents to the
[Firm](https://github.com/the server) Gateway ecosystem.
Companion to setup-vs-agent-firm.
| Module | Tool | Description | Gaps |
|---|---|---|---|
| vs_bridge | vs_context_push | Push VS Code context → Firm session | — |
| vs_bridge | vs_context_pull | Pull Firm session state → VS Code | — |
| vs_bridge | vs_session_link | Associate workspace path ↔ session ID | — |
| vs_bridge | vs_session_status | Bridge health check | — |
| gateway_fleet | firm_gateway_fleet_status | Parallel health-check all instances | — |
| gateway_fleet | firm_gateway_fleet_add | Register a Gateway instance | — |
| gateway_fleet | firm_gateway_fleet_remove | Remove a Gateway instance | — |
| gateway_fleet | firm_gateway_fleet_broadcast | Broadcast to all instances | — |
| gateway_fleet | firm_gateway_fleet_sync | Sync config+skills to all instances | — |
| gateway_fleet | firm_gateway_fleet_list | List instances | — |
| delivery_export | firm_export_github_pr | Create draft PR on GitHub | — |
| delivery_export | firm_export_jira_ticket | Create Jira ticket (ADF) | — |
| delivery_export | firm_export_linear_issue | Create Linear issue (GraphQL) | — |
| delivery_export | firm_export_slack_digest | Post Slack digest (Block Kit) | — |
| delivery_export | firm_export_document | Write local Markdown deliverable | — |
| delivery_export | firm_export_auto | Auto-route by delivery_format | — |
| security_audit | firm_security_scan | Scan files for SQL injection + XSS patterns | C1 |
| security_audit | firm_sandbox_audit | Detect sandbox.mode: off → CRITICAL | C2 |
| security_audit | firm_session_config_check | Detect ephemeral SESSION_SECRET in .env/compose | C3 |
| security_audit | firm_rate_limit_check | Detect Funnel without rate limiter → CRITICAL | H8 |
| acp_bridge | acp_session_persist | Persist ACP session to ~/.firm/acp_sessions.json | C4 |
| acp_bridge | acp_session_restore | Restore persisted ACP session by run_id | C4 |
| acp_bridge | acp_session_list_active | List ACP sessions active in last N hours | C4 |
| acp_bridge | fleet_session_inject_env | Inject env vars to spawned sessions (allowlist) | H3 |
| acp_bridge | fleet_cron_schedule | Schedule cron with sandbox enforcement | H4 |
| acp_bridge | firm_workspace_lock | Advisory file lock with owner tracking (fcntl) | H5 |
| acp_bridge | firm_acpx_version_check | ACPX plugin version pin (≥0.1.15) + streaming mode check | 3.1 |
| reliability_probe | firm_gateway_probe | WS probe with backoff — detects close 1006, returns launchctl | H6/H7 |
| reliability_probe | firm_doc_sync_check | Detect version drift in docs vs package.json | M5 |
| reliability_probe | firm_channel_audit | Detect zombie channel SDK deps (LINE, Baileys…) | M1 |
| reliability_probe | firm_adr_generate | Generate MADR + commit path for architecture decisions | M6 |
| gateway_hardening | firm_gateway_auth_check | Verify Gateway auth config — CRITICAL if Funnel without password | H2 |
| gateway_hardening | firm_credentials_check | Check Baileys/channel credential integrity and freshness | M3 |
| gateway_hardening | firm_webhook_sig_check | Verify HMAC signing secrets for all inbound webhook channels | M4 |
| gateway_hardening | firm_log_config_check | Detect debug/trace logging and missing redactPatterns | M7 |
| gateway_hardening | firm_workspace_integrity_check | Validate ~/.firm/workspace (AGENTS.md, SOUL.md, staleness) | M8 |
| runtime_audit | firm_node_version_check | Verify Node.js ≥ 22.12.0 (CVE-2025-59466, CVE-2026-21636) | C5 |
| runtime_audit | firm_secrets_workflow_check | Detect hardcoded secrets in config.json (migrate to firm secrets) | C6 |
| runtime_audit | firm_http_headers_check | Verify HTTP security headers (HSTS, X-Content-Type-Options, Referrer-Policy) | H9 |
| runtime_audit | firm_nodes_commands_check | Detect dangerous gateway.nodes.allowCommands override | H10 |
| runtime_audit | firm_trusted_proxy_check | Verify trusted-proxy config coherence (bind + trustedProxies + auth mode) | H11 |
| runtime_audit | firm_session_disk_budget_check | Verify session.maintenance.maxDiskBytes / highWaterBytes configured | M15 |
| runtime_audit | firm_dm_allowlist_check | Detect dmPolicy=allowlist with empty allowFrom (fail-closed) across 9 channels | M16 |
| advanced_security | firm_secrets_lifecycle_check | Verify External Secrets lifecycle (audit/configure/apply/reload) | C7 |
| advanced_security | firm_channel_auth_canon_check | Verify channel auth path canonicalization (encoded traversal) | C8 |
| advanced_security | firm_exec_approval_freeze_check | Verify exec approval plan immutability (symlink cwd rebind) | C9 |
| advanced_security | firm_hook_session_routing_check | Verify hook session-key routing hardening | H12 |
| advanced_security | firm_config_include_check | Verify $include hardlink escape + file-size guardrails | H13 |
| advanced_security | firm_config_prototype_check | Detect prototype pollution (proto, constructor, prototype) in config | H14 |
| advanced_security | firm_safe_bins_profile_check | Verify safeBins entries have explicit profiles | H15 |
| advanced_security | firm_group_policy_default_check | Verify group policy default is fail-closed (allowlist) | H16 |
| config_migration | firm_shell_env_check | Verify shell env sanitization (LD_PRELOAD, DYLD_*, ZDOTDIR) | H17 |
| config_migration | firm_plugin_integrity_check | Verify plugin install integrity/pin + drift detection | H18 |
| config_migration | firm_token_separation_check | Verify hooks.token ≠ gateway.auth.token | H19 |
| config_migration | firm_otel_redaction_check | Verify OTEL secret redaction in diagnostics export | M17 |
| config_migration | firm_rpc_rate_limit_check | Verify control-plane RPC rate limiting config | M21 |
| observability | firm_observability_pipeline | Ingest JSONL traces into SQLite for offline analysis | T1 |
| observability | firm_ci_pipeline_check | Validate CI workflow completeness (lint, test, secrets) | T6 |
| memory_audit | firm_pgvector_memory_check | Verify pgvector config (HNSW index, dimensions, distance metrics) | T3 |
| memory_audit | firm_knowledge_graph_check | Audit knowledge graph integrity (orphan nodes, cycles, TTL) | T9 |
| compliance_me
只显示了开头部分;其余内容请在仓库中阅读