Back to Browse

SpecPilot MCP Server

Developer ToolsUse Caution4.2MCP RegistryLocalRemote
Free

Server data from the Official MCP Registry

Generate and validate a .specs/ bundle for your repo, then hand it to your AI coding agent

About

Generate and validate a .specs/ bundle for your repo, then hand it to your AI coding agent

Remote endpoints: streamable-http: https://init.specpilot.dev/mcp

Security Report

4.2
Use Caution4.2High Risk

SpecPilot is a legitimate spec-driven development CLI and MCP server with clean architecture and proper security practices. The codebase demonstrates good input handling, no malicious patterns, and appropriate permission scoping. Minor code quality observations around broad exception handling and test file size do not materially impact security posture. Supply chain analysis found 10 known vulnerabilities in dependencies (0 critical, 6 high severity).

3 files analyzed ยท 14 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

File System Write

Writes or modifies files on your machine. Check that this is expected for the tool.

file_delete

Check that this permission is expected for this type of plugin.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Check that this permission is expected for this type of plugin.

How to Install & Connect

Available as Local & Remote

This plugin can run on your machine or connect to a hosted endpoint. during install.

Documentation

View on GitHub

From the project's GitHub README.

SpecPilot

npm version License: MIT smithery badge

SpecPilot is a spec-driven development (SDD) CLI for AI coding agents like Claude Code, Cursor, and ChatGPT. It initializes, validates, and syncs a .specs/ directory so AI-assisted coding stays grounded in living requirements, architecture, and task specs instead of drifting from the codebase.

SpecPilot CLI demo

MCP server

Prefer to stay inside your editor? SpecPilot also runs as a remote MCP server, so Claude Code, Cursor or Copilot can run the whole onboarding itself - answering what it can infer from your repo and asking you only the rest.

claude mcp add --transport http specpilot https://init.specpilot.dev/mcp

Then ask your agent: "Onboard this project with SpecPilot".

For Cursor, VS Code and other clients, add it as an HTTP (streamable) server:

{
  "mcpServers": {
    "specpilot": {
      "type": "http",
      "url": "https://init.specpilot.dev/mcp"
    }
  }
}

No install, no API key. Full setup notes: https://specpilot.dev/mcp-setup

Quick Start

# Install globally
npm install -g specpilot

# Create a new project
specpilot init my-project --lang typescript --framework react

# Add specs to existing project
cd existing-project
specpilot add-specs

# Validate specifications
specpilot validate

๐Ÿš€ Next Steps to Populate Your Specs with AI

After creating a project, follow these steps to populate your specifications using AI:

  1. Open the generated guide: Check .specs/README.md for full guidance
  2. Copy the onboarding prompt: Use the prompt from .specs/development/onboarding.md
  3. Paste into your AI agent: ChatGPT, Claude, or other AI assistants
  4. Review generated spec files: Examine the AI-generated requirements and architecture

This AI-assisted approach ensures comprehensive, high-quality specifications tailored to your project needs.

Commands

CommandDescription
init <name>Initialize new SDD project
init <name> --dry-runPreview files that would be created without writing
add-specsAdd specs to existing project
validateValidate specification files
archiveArchive oversized prompts.md / tasks.md entries
backfillBackfill missing mandates & slash commands into existing project files
listShow available templates
migrateConvert legacy .project-spec folder (rarely needed)
refine [desc]Refine project specifications

Tip โ€” command aliases: All commands have a short alias you can use instead of the full name. init โ†’ i ย ยทย  validate โ†’ v ย ยทย  migrate โ†’ m ย ยทย  list โ†’ ls ย ยทย  refine โ†’ ref ย ยทย  archive โ†’ ar ย ยทย  add-specs โ†’ add ย ยทย  backfill โ†’ bf Example: specpilot i my-app is identical to specpilot init my-app.

Per-Command Options

CommandOptions
init--lang ยท --framework ยท --dir ยท --specs-name ยท --no-prompts ยท --dry-run
validate--fix ยท --verbose
migrate--from ยท --to ยท --backup
list--lang ยท --verbose
refine--update ยท --no-prompts
archive--dry-run ยท --force
add-specs--no-analysis ยท --deep-analysis ยท --no-prompts
backfill--dir ยท --specs-name ยท --dry-run ยท --no-prompts

Run specpilot <command> --help for full flag descriptions and default values.

Examples

# Initialize with specific language/framework
specpilot init api --lang python --framework fastapi

# Preview files that would be created without writing anything
specpilot init api --dry-run

# Refine specifications
specpilot refine "REST API for user management" --update

# Validate with auto-fix
specpilot validate --fix

Supported Languages & Frameworks

TypeScript

  • React: SPA applications
  • Express: REST APIs
  • Next.js: Full-stack apps
  • Nest.js: Scalable server-side apps
  • Vue: Progressive UI framework
  • Angular: Enterprise SPA framework

JavaScript

  • React: SPA applications
  • Express: REST APIs

Note: no framework prompt is shown for JavaScript โ€” pass --framework explicitly if needed.

Python

  • FastAPI: Modern REST APIs
  • Django: Full-stack applications
  • Flask: Lightweight REST APIs
  • Streamlit: Data Science / ML apps

Kotlin

  • Android: Native Android apps
  • Spring: Server-side REST APIs
  • Ktor: Async Kotlin web framework
  • Compose: Jetpack Compose UI

Swift

  • iOS: Native iOS apps
  • SwiftUI: Declarative Apple UI
  • Vapor: Swift server-side framework

Project Structure

SpecPilot generates a .specs/ folder with organized subdirectories:

.specs/
โ”œโ”€โ”€ architecture/
โ”‚   โ”œโ”€โ”€ api.yaml              # CLI / REST API / GraphQL interface spec
โ”‚   โ””โ”€โ”€ architecture.md       # System design decisions and patterns
โ”œโ”€โ”€ development/
โ”‚   โ”œโ”€โ”€ context.md            # Development memory, decisions, learnings
โ”‚   โ”œโ”€โ”€ onboarding.md         # One-time AI bootstrap prompt โ€” delete after first use
โ”‚   โ””โ”€โ”€ prompts.md            # AI interaction log โ€” MANDATED, update every session
โ”œโ”€โ”€ planning/
โ”‚   โ”œโ”€โ”€ roadmap.md            # Release milestones and objectives
โ”‚   โ””โ”€โ”€ tasks.md              # Sprint tracker (backlog / current / completed)
โ”œโ”€โ”€ project/
โ”‚   โ”œโ”€โ”€ project.yaml          # Project config, rules, and AI context (MANDATED)
โ”‚   โ””โ”€โ”€ requirements.md       # Functional & non-functional requirements
โ”œโ”€โ”€ quality/
โ”‚   โ””โ”€โ”€ tests.md              # Test strategy, coverage targets, acceptance criteria
โ””โ”€โ”€ security/
    โ”œโ”€โ”€ security-decisions.md # ADR-style security design decisions
    โ””โ”€โ”€ threat-model.md       # Threat inventory with impact/likelihood/mitigation

Also generated at project root: an AI context file (.github/copilot-instructions.md, CLAUDE.md, .cursor/rules/specpilot.mdc , .windsurfrules, .antigravity/rules.md etc.) based on your selected IDE/Agent

Configuration

SpecPilot requires no global configuration. Each project is self-contained with settings in project.yaml.

IDE & Agent Support

SpecPilot generates AI agent configuration files during project initialization. When you run specpilot init, you'll be prompted to select your AI IDE/Agent:

Desktop IDEs (Workspace Settings):

  • GitHub Copilot - Industry standard with Copilot integration
  • Cursor - AI-first code editor with enhanced AI context
  • Windsurf - Advanced AI coding assistant
  • Antigravity - AI-powered IDE with context awareness

Cloud-Based AI Agents (Instruction Files):

  • Claude Code - Anthropic Claude Code CLI agent (CLAUDE.md)
  • Codex - OpenAI Codex agent with instruction context

Generated Configuration Files:

Each IDE/Agent selection generates one AI context file at the project root:

IDE/AgentGenerated file
GitHub Copilot.github/copilot-instructions.md
Codex.github/copilot-instructions.md
Cursor.cursor/rules/specpilot.mdc
Windsurf.windsurfrules
Antigravity.antigravity/rules.md
Claude CodeCLAUDE.md

All context files contain: project name/stack, critical mandates, Code Philosophy, Code Rules, and a Re-Anchor Prompt.

For desktop IDEs: .vscode/settings.json (or .cursor/, .windsurf/, etc.)

  • IDE-specific workspace folder setup for code + .specs
  • Extensions recommendations for development
  • AI context configuration for better spec integration

Generated Slash Commands

Each IDE/Agent selection also generates 8 specpilot-* slash/workflow commands (status, reanchor, report, sync, refine, validate, archive, backfill) that mirror key CLI operations as in-editor commands โ€” e.g. .claude/commands/specpilot-status.md for Claude Code, .cursor/commands/ for Cursor, .github/prompts/ for GitHub Copilot. Running backfill on an existing project fills in any commands missing for your already-configured IDE(s). See the Full Guide for the complete list and per-IDE paths.

The generated settings/instructions automatically configure your AI agent to:

  • Include .specs/ folder in AI context
  • Understand project structure and requirements
  • Follow specification-driven development principles
  • Access development guidelines and onboarding prompts

Example:

# During init, you'll be prompted to select your IDE/Agent
specpilot init my-project --lang typescript --framework react
# Respond with your preferred IDE/Agent:
# - vscode, cursor, windsurf, antigravity (desktop)
# - claude-code, codex (cloud agents)

Troubleshooting

Common Issues

Permission Errors
sudo chown -R $USER ~/.npm-global
npm config set prefix '~/.npm-global'
Template Not Found
specpilot list --verbose
Validation Failures
specpilot validate --verbose --fix
Migration Issues

Error: "Source structure 'complex' not found"

# For NEW projects, use:
specpilot init my-project

# For EXISTING projects without specs:
specpilot add-specs

# Only use migrate if you have an old .project-spec folder
specpilot migrate --from complex --to simple --backup

Debug Mode

DEBUG=specpilot specpilot <command>

Why SpecPilot?

SpecPilot implements Specification-Driven Development (SDD) where specifications come first:

Specifications โ†’ Architecture โ†’ Code โ†’ Tests โ†’ Deployment

Benefits:

  • Clarity: Everyone understands what needs to be built
  • Consistency: Standardized structure across projects
  • Quality: Built-in validation and testing
  • AI-Ready: Clear context for AI assistants
  • Maintainable: Comprehensive documentation

Contributing

This project follows SDD principles. See .specs/ for contribution guidelines.

Development Setup

git clone https://github.com/girishr/SpecPilot.git
cd SpecPilot
npm install
npm run build
npm link  # For local testing

Quick Contribution Guide

  1. Review .specs/project/requirements.md
  2. Check .specs/planning/tasks.md
  3. Update specs when making changes
  4. Run specpilot validate before committing

Documentation

License

MIT License - see LICENSE file for details.


Built with specification-driven development principles for serious production projects.

Reviews

No reviews yet

Be the first to review this server!