将 ChatGPT 和 MCP Client 安全连接到本地 Git 工作区的可控 MCP Bridge
Server has 16 tools with mostly complete schemas and descriptions. Naming follows verb_noun convention (change_context, git_status, write_file). Descriptions are present but vary in quality, some are concise (git_status, workspace_info) while others lack actionable detail (git_compare, apply_patch, execute_command). Input schemas are visible and properly typed via Zod. However, several tools have incomplete parameter documentation, and error handling lacks recovery guidance. Tool composition is sound (single responsibility per tool), but some descriptions are too brief (<50 chars) to guide LLM selection effectively.
应用 patch 到工作区文件。
Code Review 第一入口:返回 Git 工作区改动统计、文件摘要和项目指令文件,不返回完整 patch。
执行配置允许的命令。
列出 staged、unstaged、untracked、冲突、重命名、复制和删除文件及安全状态。
创建 Git 提交。
Git 分支/提交比较
分页读取 unstaged、staged 或相对 HEAD 的安全 patch;不包含 untracked 正文和二进制正文。
推送 Git 提交到远程仓库。
git_compare, apply_patch, and git_push have minimal descriptions (<50 chars) and incomplete input schemas (type: 'object' with no properties visible). LLMs cannot determine when to use these tools or what parameters they accept.
execute_command accepts only a commandId parameter but lacks documentation of valid command IDs, their effects, and prerequisites. This is an IRREVERSIBLE operation that needs explicit recovery guidance and confirmation patterns.
search_files accepts a 'pattern' parameter with no description of supported syntax (regex, glob, literal?), character limits, or performance constraints. LLMs will guess at format.
Error responses in tool-catalog.ts return JSON with 'error.code' and 'error.message' but lack actionable recovery guidance. E.g., 'INVALID_INPUT' does not tell the LLM what to try next.
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | C | 64 | 2025-06-18+ | v2 |
结构化返回 staged、unstaged、untracked、冲突、重命名和删除状态。
列出目录内容,支持递归和过滤。
读取工作区文件内容,支持分页和编码检测。
从 URL 下载并保存附件到工作区。
在工作区中搜索文件内容。
返回项目技术栈、Git、远程仓库脱敏摘要与顶层结构;不读取文件正文。
按优先级读取根目录 AGENTS.override.md、AGENTS.md、agents.md,支持分页。
写入或创建工作区文件。
write_file and apply_patch are WRITE operations but lack confirmation/dry-run patterns. Agents can accidentally overwrite or corrupt files without a safety gate.