{"$schema":"https://wellknown.network/schemas/agent-record-v1.json","schemaVersion":"1","id":"ag_68tjdm4f9m97","handle":"mcp-app-check","url":"https://wellknown.network/agents/mcp-app-check","links":{"self":"https://wellknown.network/agents/mcp-app-check/record.json","html":"https://wellknown.network/agents/mcp-app-check","markdown":"https://wellknown.network/agents/mcp-app-check/record.md","api":"https://wellknown.network/api/v1/agents/mcp-app-check","status":"https://wellknown.network/api/v1/agents/mcp-app-check/status","claim":"https://wellknown.network/agents/mcp-app-check/claim","claimApi":"https://wellknown.network/api/v1/claims","claimDescriptor":"https://wellknown.network/agents/mcp-app-check/claim.json","badge":"https://wellknown.network/agents/mcp-app-check/badge.svg","openapi":"https://wellknown.network/openapi.json","history":"https://wellknown.network/api/v1/agents/mcp-app-check/history","tools":"https://wellknown.network/api/v1/agents/mcp-app-check/tools"},"ard":{"identifier":"urn:air::server:mcp-app-check","type":"application/mcp-server-card+json"},"kind":"mcp_server","declared":{"name":"mcp-app-check","summary":"Static readiness and security checks for MCP Apps projects","description":"# mcp-app-check\n\n新增：显式 JSON 配置、可重复的 `--ignore` 与可见的抑制计数。 [使用说明](docs/maintenance-2026-09.md).\n\n[![CI](https://github.com/Uky0Yang/mcp-app-check/actions/workflows/ci.yml/badge.svg)](https://github.com/Uky0Yang/mcp-app-check/actions/workflows/ci.yml)\n[![Python 3.10+](https://img.shields.io/badge/Python-3.10%2B-3776AB)](https://www.python.org/)\n[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](LICENSE)\n\n用一个无依赖、只读的 CLI，在提交前检查 MCP Apps 项目的协议就绪度和常见安全问题。\n\n它适合正在开发 MCP Apps 的个人开发者、MCP server 维护者和需要在 CI 中设置最低质量门槛的团队。工具扫描 TypeScript、JavaScript、Python、HTML 等源码，不启动服务器、不执行项目代码，也不发起网络请求。\n\n> English summary: a dependency-free static readiness and security checker for vendor-neutral MCP Apps projects, with CI-friendly JSON output and actionable Chinese diagnostics.\n\n![mcp-app-check 扫描 ready-app，9 条规则全部通过](docs/assets/mcp-app-check-demo.png)\n\n## 实测演示\n\n仓库内的 `examples/ready-app` 是一个最小、可扫描的 MCP App server 示例。下面这条命令会读取其源码并显示全部规则结果，不会安装依赖或执行示例代码：\n\n```powershell\npython -m mcp_app_check examples\\ready-app --include-passes\n```\n\n当前示例结果为：扫描 1 个文件，9 条规则全部通过，`errors=0`、`warnings=0`、`skipped=0`。上方截图对应这条命令的实际输出；用于截图的无外部依赖页面保存在 [`docs/demo.html`](docs/demo.html)。静态规则通过不代表完整的运行时兼容认证。\n\n## 为什么做这个项目\n\n[MCP Apps](https://github.com/modelcontextprotocol/ext-apps) 让 MCP 工具可以在对话中返回表单、图表和其他交互式 UI。协议涉及 `ui://` 资源、特定 MIME、工具与 UI 的元数据关联、结构化结果、文本降级和 iframe 通信边界；项目能运行，不代表这些契约都已经正确表达。\n\n`mcp-app-check` 把一组高价值、可静态判断的信号变成提交前检查：\n\n- 比通用代码搜索更稳定：每个问题有固定 rule ID、严重级别和修复建议。\n- 比运行未知项目更安全：只读文本，不安装依赖，也不启动 MCP server。\n- 比绑定单一宿主更可移植：以官方 MCP Apps 格式为基线，不要求 ChatGPT 或 Claude 专有字段。\n- 对中文开发者更低摩擦：默认输出中文，JSON 字段保持机器可读。\n\n它不是完整的协议 conformance suite，也不会证明 UI 在每个宿主中都能正确渲染。静态通过后，仍应使用官方 Inspector 和目标客户端做运行时测试。\n\n## 30 秒开始\n\n要求 Python 3.10 或更高版本。\n\n```powershell\ngit clone https://github.com/Uky0Yang/mcp-app-check.git\ncd mcp-app-check\npython -m mcp_app_check D:\\path\\to\\your-mcp-app\n```\n\n输出示例：\n\n```text\nmcp-app-check 已扫描 7 个文件：D:\\path\\to\\your-mcp-app\nerrors=1 warnings=1 info=0 skipped=0\n\n[错误] MCA008 src/server.ts:41 CSP 域列表包含…","publisher":{"name":"Uky0Yang","url":null},"homepage":"https://github.com/Uky0Yang/mcp-app-check","repository":"https://github.com/Uky0Yang/mcp-app-check","version":"0.3.0","license":null,"protocols":["mcp"],"tags":["developer-tools","mcp","mcp-apps","model-context-protocol","security","static-analysis"],"pricing":null,"endpoints":[{"url":"pypi:mcp-app-check","type":"package_pypi","auth":null,"probeable":false}],"skills":null,"tools":null,"extra":null,"attribution":{"kind":"pypi","name":"pypi","repoUrl":"pypi","summary":"pypi","version":"pypi","description":"pypi","homepageUrl":"pypi","publisherName":"pypi"}},"derived":{"capabilities":[{"slug":"code.security-review","name":"Security Review","confidence":0.75,"provenance":"derived"},{"slug":"dev.version-control","name":"Version Control","confidence":0.745,"provenance":"derived"},{"slug":"dev.ci-cd","name":"CI/CD & Deploy","confidence":0.688,"provenance":"derived"}],"categories":["code","dev"],"language":"en"},"observed":{"status":"unknown","statusReason":"Distributed as a package to run locally; no network endpoint to check.","lastOkAt":null,"lastProbedAt":null,"statusComputedAt":null,"reliability30d":null,"latestObservations":[],"tools":null,"package":{"name":"mcp-app-check","registry":"pypi","observedAt":"2026-10-24T17:29:15.925Z","publishedAt":"2026-09-17T01:30:39.781618Z","latestVersion":"0.3.0"},"toolSurface":null,"endpointFacts":[]},"verification":{"claimed":false,"claimedAt":null,"proofs":[]},"provenance":{"sources":[{"source":"pypi","key":"mcp-app-check","url":"https://pypi.org/project/mcp-app-check/","firstSeenAt":"2026-09-18T08:26:35.947Z","fetchedAt":"2026-10-24T17:28:01.119Z","normalizedAt":"2026-10-24T17:28:01.119Z"}]},"firstSeenAt":"2026-09-18T08:26:35.947Z","updatedAt":"2026-10-24T17:29:15.925Z"}