SummitFlow MCP
Allows inspecting Git status, reviewing changes for risks, running quality gates, and preparing releases through controlled Git operations.
Click on "Install Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@SummitFlow MCP查看今天的报名汇总和论坛热度"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
SummitFlow MCP
SummitFlow MCP 是“2026 腾讯云粤港澳大湾区架构师峰会”官网的业务研发控制面。它把报名运营、代码质量和正式发布规则封装为有限、可审计的 MCP 工具,让 Cursor、Claude Code、Codex 或企业内部 Agent 能理解并操作真实峰会工作流。
一句话定位:让 AI 不只“看懂代码”,还能在最小权限和人工审批下理解峰会业务、执行质量检查并协助完成研发交付。
它不是另一个通用 GitHub MCP,也不向模型暴露任意 Shell 或任意 SQL:
SummitFlow MCP:峰会业务统计、站点健康、发布规则与受控研发动作。
GitHub 官方 MCP:仓库、Issue、Pull Request、Actions 与代码安全。
Playwright MCP:官网和报名后台的浏览器验收。
Sentry MCP(后续接入):错误、性能与发布后异常诊断。
flowchart LR
A[研发人员 / AI Agent] --> B[SummitFlow MCP]
A --> G[GitHub MCP]
A --> P[Playwright MCP]
B --> C[峰会聚合数据 API]
B --> D[本地 Git 工作区]
B --> E[固定质量门禁]
B --> F[原子发布脚本]
C --> H[(MariaDB)]
F --> I[正式站 + EdgeOne CDN]为什么值得做成 MCP
普通 Coding Agent 看到的通常只有文件;SummitFlow 额外提供稳定的业务语义和操作边界:
研发问题 | SummitFlow 提供的上下文 |
“今天报名增长怎么样?” | 累计、今日、最近一小时、主论坛与数据质量聚合指标 |
“哪个分论坛最热?” | 六大平行论坛和特色专场的统一统计口径 |
“这个渠道改动会漏掉哪里?” | 前端埋点、后端映射、后台筛选与测试的完整任务模板 |
“代码可以发布了吗?” | Git 状态、风险扫描、固定质量门禁、commit SHA 与正式站健康检查 |
“AI 会不会越权?” | 无任意 SQL/Shell、默认只读、敏感字段脱敏、写操作双重确认 |
Related MCP server: Broker
AI 阅读这个仓库后能理解什么
AI 可以从源码和测试中还原:
峰会官网、报名后台、数据层、Git 与发布系统之间的边界;
11 个工具的输入、输出、权限等级和失败方式;
报名、论坛、渠道、行业分布等聚合口径;
Git 代码审查、质量门禁和原子发布的控制思路;
为什么业务 MCP 应与 GitHub MCP、Playwright MCP、Sentry MCP 组合,而不是重复实现通用能力。
AI 无法从公开仓库获得真实报名明细、数据库凭证、短信密钥、SSH 权限、后台令牌或私有官网代码。没有系统所有者提供的令牌,受保护的业务工具会直接拒绝访问。
已实现能力
工具 | 作用 | 默认权限 |
| 技术栈、Git 状态、正式域名与发布约束 | 只读 |
| 累计、今日、主论坛和数据质量汇总 | 只读、仅聚合 |
| 六大平行论坛与特色专场热度 | 只读、仅聚合 |
| 推广渠道人数与占比 | 只读、仅聚合 |
| 各论坛行业分布 | 只读、仅聚合 |
| 首页、主 KV、讲师图、后台和 RELEASE 健康检查 | 只读 |
| 变更文件、疑似密钥、数据库和发布风险扫描 | 只读 |
| 运行固定的类型检查与测试,不接受任意命令 | 受控执行 |
| 生成可发布性报告 | 只读 |
| 只提交明确文件清单,不自动推送 | 默认关闭、双重确认 |
| 通过仓库原子发布脚本部署指定 SHA | 默认关闭、双重确认 |
同时提供两个资源:summit://project/architecture、summit://runbooks/release;以及“新增推广渠道”“排查报名转化异常”两个可复用 Prompt。
快速运行
要求 Node.js 22.13+、pnpm,并在仓库根目录执行:
pnpm install
pnpm run mcp:test
SUMMITFLOW_ADMIN_TOKEN='<后台只读令牌>' pnpm run mcp:start只进行代码与协议评审时不需要真实令牌:测试使用的是虚构聚合数据。连接真实峰会统计时,令牌必须由系统所有者通过 MCP 宿主的安全配置注入。
客户端配置示例:
{
"mcpServers": {
"summitflow": {
"command": "pnpm",
"args": ["--dir", "/absolute/path/summitflow-mcp-demo", "run", "mcp:start"],
"env": {
"SUMMITFLOW_ADMIN_TOKEN": "SET_IN_YOUR_MCP_HOST_SECRET_STORE"
}
}
}
}连接后可以直接向 Agent 提问:
查看今天的峰会报名增量、主论坛人数、六大平行论坛热度和推广渠道占比,只返回聚合结果。
审查当前代码改动,告诉我是否包含密钥风险、数据库风险或发布风险,然后执行 quick 质量门禁。不要把后台令牌写进源码、配置样例或 Git。对于 Codex/Claude Desktop 等宿主,可参考 client-config.example.json,把绝对路径和令牌改成宿主本地的安全配置。
可选 HTTP 模式默认只监听 127.0.0.1:8787:
SUMMITFLOW_ADMIN_TOKEN='<后台只读令牌>' \
SUMMITFLOW_HTTP_BEARER_TOKEN='<独立的MCP访问令牌>' \
pnpm run mcp:http健康检查为 GET /healthz,MCP 入口为 POST /mcp。若改变监听地址为非本机地址,程序会强制要求 Bearer Token;正式企业接入仍建议置于 HTTPS 网关、SSO/OAuth 和网络访问控制之后。
配置项
环境变量 | 默认值 | 说明 |
|
| 正式官网地址 |
| 空 | 访问报名聚合 API 的服务端令牌 |
| 当前目录 | Git 仓库根目录 |
|
| 官网 API 请求超时 |
|
| 是否允许运行固定质量门禁 |
|
| 是否开放受控 Git 提交 |
|
| 是否开放正式部署 |
|
| 脱敏审计日志位置 |
|
| HTTP 模式监听地址 |
|
| HTTP 模式监听端口 |
| 空 | HTTP 模式独立访问令牌 |
安全边界
报名工具只返回聚合结果,API 适配层会主动丢弃报名人员明细。
不提供任意 SQL、任意 Shell、删除数据、群发短信或查看验证码的工具。
Git 提交必须由服务端开关授权,同时要求调用方传入
CREATE_COMMIT;仅允许显式文件列表。正式部署必须由另一开关授权,要求完整 40 位 SHA 和
DEPLOY_PRODUCTION,且只能部署干净的main当前提交。所有工具调用写入本地 JSONL 审计日志;手机号、邮箱、微信、令牌、密码和密钥字段会自动脱敏。
提交前扫描密钥文件路径、疑似凭证和空白错误;正式部署只调用仓库已有的原子发布与回滚流程。
权限模型
默认状态 聚合查询 + 仓库只读审查
开启质量门禁 仅执行预定义检查,不接受任意命令
开启 Git 写入 + 确认词 仅提交显式文件清单,不自动推送
开启生产发布 + 完整 SHA 仅允许干净 main 的当前提交进入既有原子发布流程项目结构
server.ts 11 个工具、2 个资源和 2 个 Prompt
summit-api.ts 峰会后台聚合 API 适配与隐私裁剪
repository.ts Git 审查、质量门禁、受控提交和发布
audit.ts JSONL 审计与敏感字段脱敏
stdio.ts / http.ts stdio 与 Streamable HTTP 入口
tests/server.test.ts MCP 协议、安全边界与隐私测试
client-config.example.json 客户端接入样例
DEMO.md 5—8 分钟技术演示脚本
SECURITY.md 公开版本的安全策略与知名开源 MCP 的组合方式
本项目采用“业务自研、通用能力复用”的方式,不复制社区成熟轮子:
GitHub MCP Server:负责 PR、Issue、Actions、代码搜索与代码安全。
Playwright MCP:负责报名链路、移动端、后台页面的真实浏览器验收。
Sentry MCP:后续用于发布后错误与性能诊断。
MCP 官方 TypeScript SDK 2.0:SummitFlow 的协议实现基础。
推荐的企业权限分层是:开发环境启用质量门禁;评审环境只读;发布账号单独配置短时 Git/生产权限。不要在一个长期令牌上同时开放数据、提交和部署。
五分钟演示
完整演示脚本见 DEMO.md。推荐依次展示:
查询今日报名、论坛热度与渠道分布。
修改一个渠道映射后做代码审查,展示风险扫描。
运行固定质量门禁。
展示未授权提交/部署会被拒绝。
由 GitHub MCP 创建 PR,再由 Playwright MCP 完成页面验收。
公开演示版说明
这个仓库是从私有峰会官网中抽离出的安全公开版本,只包含 MCP 实现、协议测试和技术文档。它不包含官网前端、报名人员、数据库、生产环境变量、短信服务密钥、SSH 配置或私有 Git 历史。
未提供 SUMMITFLOW_ADMIN_TOKEN 时,任何受保护的业务统计工具都会拒绝访问;Git 写入与正式部署也保持默认关闭。公开仓库主要用于代码审查、架构讨论和本地协议式演示,连接真实系统必须由系统所有者另行授予最小权限凭证。
当前成熟度
当前版本定位为“可运行的工程原型”,不是一键接管生产系统的超级管理员工具。已经具备协议实现、双传输、测试、聚合隐私裁剪、审计与写操作门禁;进入企业生产前仍建议增加 SSO/OAuth、角色权限、集中审计、指标告警与短时凭证。
Available Tools
11 toolssummit_create_commit创建受控Git提交A
仅提交明确列出的安全路径。默认禁用;需服务端启用写权限并传入CREATE_COMMIT确认词。不会自动推送。
| Name | Required | Description | Default |
|---|---|---|---|
| files | Yes | ||
| message | Yes | ||
| confirmation | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description discloses defaults and side-effect boundaries: default-disabled behavior, prerequisite server write permission, required confirmation token, and no automatic push. Since annotations are all false/empty, the description carries the full burden and does so clearly.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two dense sentences convey scope, prerequisites, confirmation, and no-push behavior with no wasted words. The most important constraint is front-loaded.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a 3-parameter mutation tool, the description covers the essential invocation conditions: what may be committed, required permission, required confirmation, and absence of auto-push. It lacks an explicit statement of return value/commit outcome, but this is not necessary for selecting and invoking the tool correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0% and the description only partially compensates: it implies files are safe paths and references the confirmation word, but it does not explain the message parameter or how file paths should be specified. The confirmation semantics are already visible in the schema const.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description names a specific action (commit) and a specific resource (explicitly listed safe paths), and the title identifies it as a controlled Git commit. It is distinguishable from all sibling tools, which are either read-only information getters or release lifecycle operations.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It provides clear usage context: only safe/path-limited commits, disabled by default, requires server-side write permission and the CREATE_COMMIT confirmation. It does not explicitly name an alternative tool or a when-not-to-use condition, so it stops short of full routing guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
summit_deploy_release发布指定提交到正式环境ADestructive
通过仓库原子发布脚本部署当前main提交。默认禁用;要求完整SHA、干净工作区和DEPLOY_PRODUCTION确认词。
| Name | Required | Description | Default |
|---|---|---|---|
| commit | Yes | ||
| confirmation | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the annotations, the description discloses that deployment is disabled by default, is atomic, and requires a clean working tree and a confirmation word. It does not detail production effects or irreversibility, but the destructiveHint and the release-script context cover the main safety profile.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single sentence packs the target, mechanism, and three safety preconditions with no filler. It is front-loaded and easy to parse.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a destructive production deployment with no output schema, the description covers what is deployed, how, and what guards exist. It is missing an explicit statement of post-call outcome or rollback behavior, and the current-main versus specified-commit wording leaves a small but real gap.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema already encodes commit as a 40-hex pattern and confirmation as the exact const DEPLOY_PRODUCTION; the description only restates these as 'full SHA' and 'DEPLOY_PRODUCTION confirmation word'. With 0% schema description coverage, the description partially compensates, but it adds little meaning beyond the schema and the phrase 'current main commit' slightly conflicts with the commit parameter.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly identifies a deployment action to production via an atomic release script, which separates it from read-only siblings like summit_get_site_health and from summit_prepare_release. However, the title says a specified commit is released while the description says the current main commit is deployed, creating minor ambiguity about whether the commit parameter is actually honored.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It states concrete preconditions: the tool is disabled by default, requires a full SHA, a clean working tree, and the DEPLOY_PRODUCTION confirmation word. This tells an agent what must be true before calling, though it does not explicitly name alternatives or state when not to use it.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
summit_get_channel_distribution查询渠道分布ARead-onlyIdempotent
返回各推广渠道报名数量和占比;不返回任何报名人员明细。
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint, idempotentHint, and destructiveHint, so the safety profile is established. The description adds a useful behavioral guarantee that no registrant details are returned and that results are aggregated counts and percentages, but it does not mention ordering, empty-data behavior, or data freshness.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, dense sentence that leads with the principal output and uses a semicolon to add a relevant exclusion. There is no filler, repetition, or unnecessary elaboration.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a no-parameter read-only query, the description conveys the essential return information: counts and proportions per channel, and the explicit absence of personal details. There is no output schema, so a bit more structure about the response fields could be added, but the description is still adequate for an agent to select and invoke the tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool has zero parameters, so there are no parameter semantics for the description to explain. Baseline for a no-parameter tool is 4, and the description focuses appropriately on output semantics instead.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb '返回' and names the exact resource: registration counts and proportions by promotion channel. The added clause '不返回任何报名人员明细' clarifies the level of aggregation and distinguishes it from detail-level queries, though it does not explicitly compare with sibling distribution tools.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is no guidance about when to use this tool instead of alternatives such as summit_get_forum_distribution, summit_get_forum_industry_distribution, or summit_get_registration_summary. The intended use is only implied by the output description, with no exclusions or selection criteria.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
summit_get_forum_distribution查询论坛报名分布ARead-onlyIdempotent
返回六大平行论坛、特色专场及未识别论坛的聚合报名数量。
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint, openWorldHint, idempotentHint, and destructiveHint, covering safety and side-effect expectations. The description adds no further behavioral details beyond confirming it returns data, which is consistent with the annotations. Given the annotations provide strong coverage, the description adds limited extra transparency.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, clear sentence that efficiently conveys the tool's output without unnecessary words or redundancy. It adheres to good structural practices for a simple getter.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description is sufficient for a simple no-parameter getter, clearly indicating what data is returned. It lacks details on the output format or any pagination, but these are not critical for such a basic tool and could be inferred from the context. Overall, it is complete enough for the tool's complexity.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool has no parameters (empty properties in schema). The description does not need to clarify parameter meanings because there are none, and it fully aligns with the schema. This is a trivial case where the description is perfectly adequate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool returns aggregated registration counts for forums, distinguishing it from other getter tools that focus on channels or industries. The specific mention of '六大平行论坛、特色专场及未识别论坛' makes its purpose unambiguous.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides no explicit guidance on when to use this tool versus the sibling tools (e.g., when to choose forum distribution over channel or industry distribution). The purpose is implied, but there is no direct comparison or alternative selection advice.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
summit_get_forum_industry_distribution查询论坛行业分布ARead-onlyIdempotent
返回各平行论坛报名人的行业聚合分布,不返回报名人身份信息。
| Name | Required | Description | Default |
|---|---|---|---|
| forumId | No | Optional forum id; omit to return all forums. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already indicate read-only, non-destructive, and idempotent behavior. The description adds a meaningful behavioral guarantee that identity information is not returned, which goes beyond the annotations and confirms the tool's privacy-preserving nature.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, concise sentence with no redundant information. It efficiently conveys the core functionality and a key limitation.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
While the description clarifies the data aggregation (industry distribution per forum) and privacy aspect, it lacks details about the output format (e.g., list of industries with counts, percentages) and edge cases (e.g., empty result). Since there is no output schema, this missing information could leave an agent uncertain about the exact structure of the response.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The only parameter forumId is fully described: it is optional and omitting it returns all forums. The schema coverage is 100%, and the description aligns with the parameter's purpose without ambiguity.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description explicitly states the tool returns the industry aggregate distribution of registrants for each parallel forum, and adds a privacy guarantee that it does not return identity information. This clearly distinguishes it from other sibling tools like summit_get_forum_distribution which likely returns overall forum metrics.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies usage for obtaining industry breakdowns per forum and explicitly notes the privacy aspect, but it does not explicitly contrast with alternatives like summit_get_registration_summary or summit_get_forum_distribution, nor does it state when to prefer this tool over them.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
summit_get_project_context读取峰会项目上下文ARead-onlyIdempotent
返回官网技术栈、Git状态、正式域名、质量门禁和发布规则,不读取个人报名数据。
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare read-only, idempotent, non-destructive behavior, so the description only needs to add non-obvious scope. It adds meaningful context by listing the fixed data categories and stating that personal registration data is not accessed, which is valuable beyond the structured annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single sentence front-loads the action and content, then adds a scoping exclusion. Every word earns its place; there is no redundant or vague filler.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a parameterless, read-only tool with annotations covering safety, the description is complete: it lists all five content areas returned and what is deliberately excluded. An agent can invoke it confidently without additional documentation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
There are zero parameters, so there is no parameter syntax to clarify; the baseline of 4 applies. The description usefully defines what the parameterless call returns, fully covering the operation's input scope.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific action ('返回') and enumerates the exact returned content: official site tech stack, Git status, production domain, quality gates, and release rules. The explicit disclaimer that it does not read personal registration data distinguishes it from registration-related siblings.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It clearly indicates this tool provides project context and explicitly excludes personal registration data, giving a when-not signal. It does not name a sibling alternative outright, but the scope statement is enough for an agent to select it for context retrieval over registration or action tools.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
summit_get_registration_summary查询报名汇总ARead-onlyIdempotent
查询累计、今日、最近一小时、主论坛和数据质量统计。只返回聚合数据,不返回姓名、手机号、邮箱或微信号。
| Name | Required | Description | Default |
|---|---|---|---|
| dateTo | No | Exclusive ISO-8601 end time. | |
| dateFrom | No | Inclusive ISO-8601 start time. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already provide readOnlyHint, idempotentHint, and destructiveHint, so the description doesn't need to repeat those. It adds meaningful behavioral constraints beyond annotations: the output is aggregate-only and explicitly excludes names, phone numbers, emails, and WeChat IDs.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two short sentences with no wasted words: the first states what statistics are returned, and the second sets the privacy boundary. Information is front-loaded and schema details are not repeated.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description covers the scope and privacy characteristics well, but it doesn't state the default behavior when both optional date parameters are omitted, and with no output schema, the exact response structure is left unspecified. Overall it is adequate but has minor gaps.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, with both dateFrom and dateTo clearly described as inclusive/exclusive ISO-8601 timestamps. The tool description adds no further parameter detail, which is acceptable since the schema already carries the semantic load.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific verb ('查询') and resource ('报名汇总'), and enumerates the exact statistic families returned: cumulative, today, last hour, main forum, and data quality. It also clarifies aggregate-only output, which differentiates it from sibling distribution tools.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Usage context is implied by '只返回聚合数据' — the agent can infer this tool is for aggregate registration statistics, not raw records or distributions. However, no explicit when-to-use guidance or alternatives are named, so selection relies on inference.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
summit_get_site_health检查官网健康状态ARead-onlyIdempotent
检查正式首页、主KV、讲师图片、报名后台和RELEASE标记。
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, idempotentHint=true, and destructiveHint=false, so the safety profile is clear. The description adds useful detail about what components are checked, but it does not explain return format, failure behavior, thresholds, or whether live network checks are performed.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, focused sentence that front-loads the action and enumerates all checked items without filler. Every word contributes meaning.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description is adequate for selecting and invoking a parameterless read-only health check, and the annotations cover safety. However, since there is no output schema, the description would benefit from stating what the result looks like, such as a pass/fail status per component or an overall health verdict.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool has zero parameters and the schema confirms this with an empty properties object, so there is no parameter ambiguity. According to the baseline for zero-parameter tools, a score of 4 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb '检查' (check) with concrete targets: official homepage, main KV, lecturer images, registration backend, and RELEASE flag. This clearly distinguishes it from sibling tools that handle context, distributions, reviews, or release actions.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies this is a health-check tool, likely used before release or deployment, but it gives no explicit when-to-use guidance or exclusions. It does not name alternatives or contrast with sibling tools, so selection depends on inference.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
summit_prepare_release生成发布准备报告ARead-onlyIdempotent
确认分支、提交、工作区和规则扫描结果,只生成报告,不会提交或部署。
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint, idempotentHint, and destructiveHint, so the safety profile is covered. The description adds meaningful behavioral context: it only generates a report and explicitly does not commit or deploy, reinforcing no-side-effect behavior beyond what annotations alone state.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, front-loaded sentence with no filler. Every clause carries meaning: what is checked, what is produced, and what is not done.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a zero-parameter, read-only, report-generating tool with rich annotations, the description fully covers what it does, what it checks, and what it avoids. No output schema is present, but the phrase 'generates a report' sufficiently sets expectations for return behavior.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool has zero parameters and schema description coverage is 100%, so there is nothing for the description to clarify about parameters. The description compensates by explaining what the report covers, which is sufficient context for a parameterless tool.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states a specific verb and resource: it confirms branch, commits, workspace, and rule-scan results, and generates a release preparation report. It explicitly differentiates itself from commit/deploy tools by saying it will not commit or deploy, making its purpose distinct among siblings.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives clear context: this tool is for checking release readiness and generating a report. It explicitly excludes commmit and deployment actions, which helps route away from create_commit and deploy_release, though it does not name alternative tools or specify when to choose this over review_changes or quality_gate.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
summit_review_changes审查待提交改动ARead-onlyIdempotent
检查改动文件、空白错误、疑似密钥、数据库/发布风险,并给出应执行的质量门禁。不会修改文件或Git状态。
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, idempotentHint=true, destructiveHint=false. The description adds concrete behavioral boundaries by explicitly stating it will not modify files or Git state, and it enumerates what it checks. This goes beyond the annotations, clarifying the exact scope of the read-only behavior.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single compact sentence front-loads the review targets and the output, then adds the crucial negative guarantee (no file/Git modifications). Every phrase earns its place and there is no redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a zero-parameter, well-annotated read-only tool, the description adequately specifies what it checks and what it returns. The only gap is the implicit relationship to summit_run_quality_gate: the agent must infer that this tool only recommends gates while the sibling executes them.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool has zero parameters and the schema covers 100% of nothing. Since there are no parameters to explain, baseline 4 applies; the description adds no parameter details because none are needed.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description names a specific action ('检查' / review) and concrete resources: changed files, whitespace errors, suspected secrets, database/release risks, plus the deliverable (quality gates to run). This clearly distinguishes it from sibling tools like summit_run_quality_gate, which actually executes gates, while this one only reviews and recommends.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies the tool is for pre-commit review by stating it inspects pending changes and suggests quality gates. However, it never explicitly states when to use this instead of summit_run_quality_gate, summit_prepare_release, or other siblings, nor does it mention any exclusion conditions.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
summit_run_quality_gate执行质量门禁AIdempotent
只执行仓库内固定的类型检查、MCP测试和应用测试命令;不接受任意Shell命令。
| Name | Required | Description | Default |
|---|---|---|---|
| profile | No | quick |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already convey idempotence and non-destructiveness. The description adds meaningful behavioral context by stating that only fixed commands are executed and arbitrary Shell input is rejected, which is important safety-relevant information beyond the annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is one tightly worded sentence with two clauses. The scope is front-loaded and the safety boundary is stated directly after, with no filler or repetition.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple tool with one optional enum parameter and safety annotations, the description is mostly complete: it specifies which command categories run and explicitly rejects arbitrary input. The remaining gap is the lack of profile semantics and expected output behavior, but this is minor.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The only parameter, profile, is not mentioned in the description at all, and schema description coverage is 0%. The enum values quick/full are self-descriptive, but the description does not explain what each profile includes or how it changes the run.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific verb and resource: it executes only the repository's fixed type-check, MCP test, and application test commands. It also explicitly excludes arbitrary Shell commands, which clearly distinguishes it from generic command-execution tools.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies the tool is for running the repository's predefined quality gates, but it does not say when to prefer it over alternatives or mention sibling tools. It provides a constraint rather than active usage guidance or explicit exclusions.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections. Dates show when Glama detected each change.
11 tool updates
v0.1.0- First observed
summit_create_commit - First observed
summit_deploy_release - First observed
summit_get_channel_distribution - First observed
summit_get_forum_distribution - First observed
summit_get_forum_industry_distribution - First observed
summit_get_project_context - First observed
summit_get_registration_summary - First observed
summit_get_site_health - First observed
summit_prepare_release - First observed
summit_review_changes - First observed
summit_run_quality_gate
TDQS
Every tool maps to a distinct resource or stage: analytics queries are split by aggregation dimension, health checks target production, and change review, quality gate, prepare, commit, and deploy are clearly separated release actions. Descriptions reinforce the boundaries, so an agent should not confuse them.
All names follow the same summit_verb_noun snake_case pattern, e.g., get_registration_summary, run_quality_gate, and deploy_release. The prefix and consistent verb style make the action and target immediately predictable.
11 tools is well-scoped for a summit operations and release server. Each tool covers a distinct analytical or release workflow step without redundant wrappers or excessive granularity.
The set covers the full release lifecycle from project context and registration analytics through change review, quality gates, release preparation, commit creation, deployment, and site health verification. Privacy-limited registration data is handled consistently with aggregate-only tools, leaving no obvious dead ends.
Maintenance
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Related MCP Connectors
Security gateway for AI agents: policy, approval, and audited execution, no secrets shared.
Read-only AI coding tools for change verification, release readiness, capacity, and guidance.
Security reviews for coding agents: diffs checked against your org policy and live infrastructure.
- mcpOAuthcom.vibgrate
Query your team's drift, vulnerability, and upgrade data from any AI assistant. OAuth 2.1, 51 tools.
Related MCP Servers
- AlicenseAqualityAmaintenanceEnables AI coding agents to orchestrate the full software development lifecycle on GitHub, including planning, issue creation, code review, security triage, and release readiness checks.131151MIT
- AlicenseNot gradedqualityCmaintenanceEnables AI agents to securely perform privileged actions like creating GitHub issues by minting short-lived, single-purpose tokens on demand, with policy enforcement and audit logging.MIT
- FlicenseNot gradedqualityCmaintenanceEnables controlled AI-agent access to enterprise-shaped tools with a deny-by-default gated write path, human approval, dry-run execution, and append-only audit logging.1-
- AlicenseAqualityBmaintenanceEnables AI agents to safely inspect and execute version-controlled operational runbooks with policy checks, dry-run planning, and out-of-band approvals.3MIT
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/zrzqbr/summitflow-mcp-demo'
If you have feedback or need assistance with the MCP directory API, please join our Discord server