wahyuzero/scorp-mcp-registry

开发工具

本页由 AI 翻译，技术细节请以原文为准。查看原文

0 stars 0 forks 质量 54 趋势 20NOASSERTION

Repository Install

Scorp代理原生Go MCP服务器官方注册表——仅源代码、零信任CI、SHA-256钉顶工件

概览

Scorp代理市场的官方注册。该注册表中的服务器是单一静态 Go 二进制文件（启动<时间 20 毫秒，~5MB 内存），基于 mark3labs/mcp-go 构建——这是一种可直接使用、低占用的替代方案，替代 Node.js（npx）和 Python（uvx）MCP 运行时。 * scorp /mcp 安装 — 提供预构建的二进制文件（钉顶 SHA-256）、从源代码本地重建，或上游 Node/Python 运行时。* 带服务器的 PR / /main.go + manifest.json。所有第二层门每次更新都必须再次通过。* 在清单中声明变体（名称：sqlite-cipher，规范基础 sqlite）。* 来源：“native”——无上游漂移跟踪。 MIT — 每个服务器目录都带有上游归因manifest.json。端口是社区驱动的 Go 重实现，与原始上游厂商无关联。

概述（AI 翻译）

Scorp代理市场的原生Go MCP服务器官方注册表。

该注册表中的服务器是单个静态 Go 二进制文件（startup '——提供预构建的二进制文件（SHA-256 钉顶）、从源代码本地重建，或上游的 Node/Python 运行时。

贡献一个端口： PR 带有 servers/ /main.go + manifest.json。所有第二层门必须在每次更新时再次通过。
口味/变体： 在清单中声明 variant （name: sqlite-cipher，典范基数为sqlite）。
Native Go原创： origin: "native" — 无上游漂移追踪。

地方发展

许可证

MIT — 每个服务器目录在manifest.json中带有上游归属。移植是社区驱动的 Go 重实现，与原始上游供应商。

本页由 AI 翻译，技术细节请以原文为准。

README

🦂 scorp-mcp-registry

Official registry of native Go MCP servers for the Scorp Agent marketplace.

Servers in this registry are single static Go binaries (startup < 20ms, ~5MB RAM) built on mark3labs/mcp-go — a drop-in low-footprint alternative to Node.js (npx) and Python (uvx) MCP runtimes.

Layout

registry.json              # Aggregated index (health, tools, drift, artifacts)
schema/v1.json             # JSON Schema for scorp-mcp.json manifests
servers//            # One directory per server
  ├── main.go              # Fully auditable Go source (source-only policy)
  ├── manifest.json        # Attribution / health / security / drift metadata
  ├── go.mod / go.sum      # Pinned dependency graph
  └── README.md
scripts/                   # CI gates: manifest validation, injection lint, contract check
.github/workflows/         # security-audit, release-binaries, drift-livecheck

Security shield (enforced by CI)

Layer	Gate	Workflow
1. Source-only registry	No binaries ever committed	`security-audit.yml`
2. AST & prompt scan	gosec, govulncheck, injection linter	`security-audit.yml`
3. Hermetic builds	Official artifacts built only by GitHub Actions	`release-binaries.yml`
4. SHA-256 pinning	Verified client-side before execution (scorp-agent)	install flow
5. Runtime redaction	Outbound secret redaction (scorp-agent `tools/redact.go`)	host runtime

Server lifecycle

Install (client side): scorp /mcp install — offers prebuilt binary (SHA-256 pinned), local rebuild from source, or the upstream Node/Python runtime.
Contribute a port: PR with servers//main.go + manifest.json. All Layer 2 gates must pass again on every update.
Flavors/variants: declare variant in the manifest (name: sqlite-cipher, canonical base sqlite).
Native Go originals: origin: "native" — no upstream drift tracking.

Local development

# Validate everything the CI would:
python3 scripts/validate_manifests.py
python3 scripts/prompt_injection_lint.py
./scripts/contract_check.sh

# Release: tag a server to trigger hermetic multi-arch builds
git tag fetch-v1.1.0 && git push origin fetch-v1.1.0

License

MIT — each server directory carries upstream attribution in manifest.json. Ports are community-driven Go reimplementations and are not affiliated with the original upstream vendors.

在 GitHub 查看完整 README

安装

This server does not publish a one-line install command.

Open the repository installation guide 新手？先看 mcpskill.org 教程 →