Server data from the Official MCP Registry
Recommend and inspect AI SaaS apps from the TrueAI catalog (1,600+ apps) by need, name or URL.
Recommend and inspect AI SaaS apps from the TrueAI catalog (1,600+ apps) by need, name or URL.
Remote endpoints: streamable-http: https://www.shiflowai.cloud/mcp sse: https://www.shiflowai.cloud/mcp-sse/sse
The MCP server implementation is generally well-structured with appropriate permission scoping for its purpose (catalog browsing, recommendations, tool lookup). However, there are notable security concerns: hardcoded default admin credentials in seed data, missing input validation on several MCP tool parameters, and potential SQL injection risks in URL-based tool lookup. The database password is exposed in documentation examples. While the code quality is reasonable, these issues require remediation before production use. Supply chain analysis found 17 known vulnerabilities in dependencies (0 critical, 7 high severity).
5 files analyzed · 26 issues found
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
This plugin requests these system permissions. Most are normal for its category.
Available as Local & Remote
This plugin can run on your machine or connect to a hosted endpoint. during install.
From the project's GitHub README.
我来帮你省钱,我来帮你省时间。 数据实时、人工评测、无广告。 没有最好的,只有最适合你的。
TrueAI 是一个面向 AI 工具的 智能体推荐 + 人工评测 + 对话式导航 平台 MVP。 用户可以:
TrueAI 1600+ 应用目录已封装成 MCP Server 和 单文件 Skill,让你的
agent 直接获得"挑 AI 工具"的能力。完整文档:skills/trueai/SKILL.md。
{ "mcpServers": { "trueai": { "url": "https://www.shiflowai.cloud/mcp" } } }
接入后 agent 立即获得 4 个工具:
| 工具 | 用途 |
|---|---|
recommend_ai_tools(description, top_k) | 用户自然语言需求 → 推荐合适应用 |
get_ai_tool(name_or_url, include_reviews) | 名称 / slug / 官网 URL → 应用完整信息 |
list_ai_tools(category, free_only, ...) | 按分类 / 形态 / 是否免费 浏览目录 |
list_categories() | 列出全部分类 |
把 skills/trueai/SKILL.md 复制到任意 agent 的 skills 目录,
agent 就会按文档里 curl 示例直接调 https://www.shiflowai.cloud/api/*。
每个 AI 应用 34 个结构化字段(评分 / 价格 / 形态 / 评论 / 链接 …),
完整 JSON Schema:docs/ai_tool_schema.json。
| 层 | 选型 |
|---|---|
| 后端 | Python 3.10+ / FastAPI 0.115 / SQLAlchemy 2 / Alembic / PyMySQL |
| 前端 | Next.js 14 (App Router, 纯 JavaScript) / Tailwind CSS / Framer Motion / Zustand |
| 数据库 | MySQL 8 (114.55.254.123:3306/trueai) |
| LLM | 阿里云 DashScope (qwen-plus),未配置 Key 时自动回退 Mock 文案 |
| 鉴权 | JWT (python-jose) + bcrypt |
TrueAI/
├── backend/ # FastAPI 服务
│ ├── app/
│ │ ├── core/ # 配置 / DB / 安全
│ │ ├── models/ # ORM 模型
│ │ ├── schemas/ # Pydantic
│ │ ├── api/routers/ # auth / categories / tools / reviews / rankings / stats / search
│ │ ├── services/llm/ # Qwen 与 Mock 两种 Provider
│ │ ├── services/recommend.py # 意图抽取 + MySQL 候选召回
│ │ └── seeds/seed_tools.py
│ ├── alembic/
│ └── requirements.txt
└── frontend/ # Next.js 14
├── app/ # layout / page / category / tool / search / rankings / compare / earn
├── components/ # NavBar / HeroTypewriter / Sidebar / ToolCard / CompareBar / ChatSearch ...
├── lib/ # api.js / compareStore.js / labels.js
└── tailwind.config.js
前提:已安装 Python 3.10+、Node 20+、能访问 MySQL
114.55.254.123:3306。
cd backend
python3 -m venv venv
source venv/bin/activate
pip install -r requirements.txt
cp .env.example .env # 按需改 JWT_SECRET / DASHSCOPE_API_KEY
# 首次:执行数据库迁移 + 种子数据
alembic upgrade head
python -m app.seeds.seed_tools
uvicorn app.main:app --host 0.0.0.0 --port 8000 --reload
# http://localhost:8000/docs 查看 OpenAPI
cd frontend
npm install
cp .env.local.example .env.local # 默认指向 http://127.0.0.1:8000
npm run dev
# 打开 http://localhost:3000
backend/.env| 变量 | 说明 |
|---|---|
DATABASE_URL | 形如 mysql+pymysql://user:pass@host:3306/trueai,密码中特殊字符需 URL 编码(@ → %40) |
JWT_SECRET | JWT 签名密钥,生产请替换为长随机串 |
JWT_EXPIRES_MINUTES | token 过期分钟数,默认 7 天 |
LLM_PROVIDER | qwen(默认)。为空或 Key 缺失时自动回退 Mock |
DASHSCOPE_API_KEY | 通义千问 Key,在 DashScope 控制台 创建 |
QWEN_MODEL | 默认 qwen-plus,可换成 qwen-turbo / qwen-max |
CORS_ORIGINS | 允许的前端 origin,逗号分隔 |
frontend/.env.local| 变量 | 说明 |
|---|---|
NEXT_PUBLIC_API_BASE | 后端 Base URL,开发默认 http://127.0.0.1:8000 |
前端所有
/api/*请求在 Next.js 端通过rewrites代理到后端,避免浏览器 CORS 问题。
| 接口 | 说明 |
|---|---|
GET /api/health | 健康检查 |
GET /api/stats | 首页横幅用:工具数 / 分类数 / 评测数 / 价值观文案 |
GET /api/categories | 全部分类 + 每类工具数 |
GET /api/tools | 列表 + 多维筛选 + 排序 + 分页 |
GET /api/tools/{id 或 slug} | 智能体详情 |
POST /api/tools/compare | 对比(body 为 id 列表) |
GET /api/rankings?dimension=&category=&top= | 排行榜 |
POST /api/reviews | 提交评测(需 Bearer token) |
GET /api/reviews?tool_id=&status_filter=approved | 评测列表 |
POST /api/search/chat | 对话搜索,SSE 流:event: meta + 多个 event: delta + event: done |
GET /api/search/chat?q=... | 非流式兜底:直接给候选和外部导航 |
POST /api/auth/register / /login / GET /api/auth/me | 注册 / 登录 / 查询当前用户 |
种子数据自带一个管理员账号:admin / admin123456(生产请删除或改密)。
POST 到 /api/search/chat。event: meta 推送给前端(前端马上渲染卡片)。event: delta。meta 中带 external 外部 AI 导航站清单,前端展示"去别家看看"。ValueError: invalid interpolation syntax:Alembic 读 % 会报错。alembic/env.py 已做 % → %% 转义。pymysql 连接慢 / 超时:pool_pre_ping=True、pool_recycle=3600 已打开;请确认 MySQL 白名单已允许你的出口 IP。next.config.js rewrites 代理,无需额外处理。部署时建议把后端放到同域 /api/* 路径下。/api/search/chat 会自动回退到 Mock Provider,候选卡片依然是真实数据,只是 AI 文案是占位。MIT License.
Be the first to review this server!
by Modelcontextprotocol · Developer Tools
Read, search, and manipulate Git repositories programmatically
by Toleno · Developer Tools
Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.
by mcp-marketplace · Developer Tools
Create, build, and publish Python MCP servers to PyPI — conversationally.