Server data from the Official MCP Registry
Evidence-backed open-source project search, recommendations, alternatives, and comparisons.
About
Evidence-backed open-source project search, recommendations, alternatives, and comparisons.
Remote endpoints: streamable-http: https://git.top/mcp/core
Security Report
Git.Top is a Cloudflare Worker-based knowledge graph server with appropriate authentication, reasonable permission scoping, and no malicious patterns detected. However, several code quality and architectural concerns warrant attention: broad exception handling without specific error logging, environment variable dependency without explicit validation, network calls to external APIs (GitHub) that require careful rate-limiting, and a large attack surface with 50+ API endpoints. The server's security posture is generally sound for its developer tools category, but error handling and input validation should be strengthened. Supply chain analysis found 1 known vulnerability in dependencies (0 critical, 1 high severity).
3 files analyzed · 9 issues found
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
Permissions Required
This plugin requests these system permissions. Most are normal for its category.
How to Install & Connect
Available as Local & Remote
This plugin can run on your machine or connect to a hosted endpoint. during install.
Documentation
View on GitHubFrom the project's GitHub README.
Git.Top
The Knowledge Graph of Open Source.
GitHub provides code. Git.Top provides knowledge.
Git.Top turns unstructured GitHub repository data into structured project knowledge that humans and AI agents can search, compare, recommend, score, and call through REST APIs or MCP tools.
The Cloudflare Worker is the only product surface. It serves the human HTML pages, REST APIs, MCP endpoint, GitHub sync, and D1-backed knowledge data.
Production: git.top
Repository: github.com/haocn-ops/git-top
What Git.Top Does
- Discover open-source AI projects by category, deployment target, and use case.
- Compare projects with decision summaries, ranking signals, and tradeoffs.
- Find alternatives with similarity signals and comparison-ready shortlists.
- Explore project relationships across alternatives, related projects, dependencies, deployments, and use cases.
- Explain Git.Top Score, Agent Score, quality signals, risk flags, and evidence.
- Serve agent-native REST, OpenAPI,
llms.txt,llms-full.txt, and MCP surfaces.
Product Surfaces
/discover- browse AI agents, MCP servers, RAG, browser automation, and AI IDE projects./recommend- turn use cases and constraints into explainable project shortlists./compare- compare project shortlists./alternativesand/alternatives/:project- find replacement candidates./graph/:project- inspect project knowledge graphs./score/:project- explain project score dimensions./atlas- explore ecosystem maps./api/*- consume structured knowledge./mcp- connect agents through MCP.
Architecture
GitHub API
-> Git.Top ETL
-> Cloudflare D1
-> Worker pages, REST APIs, MCP tools, sync jobs, and quality gates
The project intentionally does not ship a separate Next.js app. Keeping Worker-rendered pages, APIs, sync, D1 access, OpenAPI, and MCP in one runtime avoids split product behavior.
Documentation
- Coding agent guide
- Agent-native assessment and optimization plan
- Agent function test and improvement plan 2026-07-30
- Production freshness optimization plan 2026-07-14
- Site assessment and improvement plan 2026-07-12
- Automated operations and agent friendliness plan 2026-07-12
- Agent task evaluation
- Agent-native optimization implementation report
- Agent-native optimization PR summary
- Git.Top 2.0 product upgrade plan
- Next stage plan
- Agent friendliness optimization plan
- Deployment decision
- REST API guide
- MCP guide
- MCP tool behavior examples
- MCP conformance matrix
- SDK-oriented examples
- GRP examples
- Agent quickstart
- MailAgents agent workflow article
- Site assessment 2026-06-21
- Production runbook
- Operations and data governance plan
- Public trust benchmark:
/benchmarkand/api/benchmark - Data coverage report
- Seed live check report
- Eval quality report
- Local eval report
- Ranking experiments
- Quality hardening plan
- Post-V1 improvement plan
- Contributing
- Security
- License
Development
For maintenance agents, start with AGENTS.md. It summarizes the runtime, high-risk areas, generated data, and validation tiers.
Fast checks:
pnpm docs:validate
pnpm check
Agent surface checks:
pnpm api:validate
pnpm mcp:validate
pnpm eval:explanations
pnpm check
Data and local D1 checks:
pnpm db:execute
pnpm db:seed
pnpm db:integration
Release checks:
pnpm validate
pnpm release:check
Common development commands:
pnpm install
pnpm db:execute
pnpm db:seed
pnpm seed:validate
pnpm seed:coverage
pnpm seed:candidates
pnpm seed:live-check -- --limit 20
pnpm seed:live-check -- --offset 20 --limit 20
node scripts/run-governance-task.mjs daily-production-health
pnpm knowledge:validate
pnpm db:seed-sql
pnpm db:validate
pnpm db:integration
pnpm core:validate
pnpm api:validate
pnpm mcp:validate
pnpm eval:quality
pnpm eval:explanations
pnpm eval:local
pnpm eval:ranking
pnpm eval:agent-tasks
pnpm smoke:prod
pnpm release:check
pnpm check
pnpm validate
pnpm quality:check
pnpm dev
/api/health reports D1 availability and the current project count. Run pnpm db:execute and pnpm db:seed before local API checks when the D1 state is empty. pnpm db:execute prepares the local D1 schema and backfills optional columns that may be missing from older local databases. seed.sql is generated from hand-authored seed knowledge and generated eval fixtures; run pnpm db:seed-sql after changing those fixtures. pnpm db:integration seeds local D1, starts a temporary local Worker, and validates the D1-backed HTTP API path.
pnpm eval:quality is the CI-safe recommendation and classification regression gate. pnpm eval:explanations checks that agent-facing responses include source metadata, classification evidence, quality signal confidence, recommendation reasons/tradeoffs, health count semantics, and GRP reasoning. pnpm eval:agent-tasks gates complete trust, fallback, pagination, evidence, comparison, change-feed, feedback, multilingual, typo, and alias workflows and writes docs/AGENT_TASK_EVAL.md. pnpm eval:local runs broader generated category and deployment probes across the fixture-backed project set and writes docs/EVAL_LOCAL.md; use it before tuning ranking heuristics, but keep it out of the default validation path. pnpm eval:ranking compares offline ranking strategies in docs/RANKING_EXPERIMENTS.md. Runtime search keeps exact-intent ranking by default; broad scoped discovery can opt into ranking=browse.
pnpm seed:candidates discovers seed expansion candidates from live GitHub organization metadata and writes docs/SEED_CANDIDATES.md. Treat it as a review queue, not an automatic append step; candidates still need live-check and category review before entering data/seed-repositories.json.
pnpm smoke:prod validates the deployed Worker at https://git.top and requires D1-backed responses. Use pnpm smoke:prod -- --base-url http://localhost:8787 for a local or preview Worker, or add --allow-seed only when intentionally checking seed fallback behavior.
pnpm quality:check validates the production /api/quality endpoint at https://git.top by default, requires D1-backed metadata, and uses a default minimum score of 90. Use --base-url, --target, --min-score, or --allow-seed for preview and fallback checks.
Operations and data governance are exposed through /operations, /api/governance/summary, and /api/governance/runs. The Cloudflare Worker cron runs hourly maintenance plus daily, weekly, biweekly, and monthly governance checks, then records results in governance_runs.
pnpm release:check runs the public V1 release gate: local validation, local D1 integration, production quality, and production smoke. Use pnpm release:check -- --skip-prod-smoke only when validating a build before the production deployment exists; it skips production-only checks. Use pnpm release:check -- --base-url <origin> to run the same gate against a Worker preview or local origin.
When updating an existing D1 database, apply SQL files in migrations before deploying code that reads the new columns.
Sync
Git.Top can sync real repository data from the GitHub API into D1.
Required production secrets:
wrangler secret put GITHUB_TOKEN
wrangler secret put SYNC_SECRET
For local development, copy .dev.vars.example to .dev.vars and fill in real values.
Trigger a protected local or production sync:
curl -X POST http://localhost:8787/api/admin/sync \
-H "authorization: Bearer $SYNC_SECRET" \
-H "content-type: application/json" \
-d '{"limit": 40, "offset": 0, "signal_depth": "lite"}'
Use {"limit":40,"signal_depth":"lite"} for manual catch-up syncs after checking recent /api/sync/status runs. Cron uses a smaller lightweight batch size to stay under Worker subrequest limits, while manual catch-up remains capped at 50.
Run repeated production catch-up rounds:
SYNC_SECRET=... pnpm sync:prod:catchup --rounds 13 --limit 40
Omit offset to use the stored seed cursor. Cron syncs use this cursor and advance through the seed list in bounded batches.
Add --refresh-cycle when all seed repositories have been indexed but freshness recovery requires revisiting the full seed cursor despite remaining_count=0.
API
GET /api/project/:owner/:nameGET /api/healthGET /api/qualityGET /api/benchmarkGET /api/governance/summaryGET /api/governance/runsGET /api/sync/statusGET /api/schema/agent-card.v1GET /api/schema/project-knowledge.v1GET /api/searchGET /api/trendingGET /api/category/:nameGET /api/recommendGET /api/compareGET /api/alternatives/:owner/:namePOST /api/grp/queryPOST /api/admin/syncPOST /api/admin/alternativesPOST /api/admin/governance/runs
See git_top_v1.md for the V1 development spec and git_top_grp_v1.md for the GRP v1 reasoning protocol implementation spec.
License
MIT
Reviews
No reviews yet
Be the first to review this server!
More Developer Tools MCP Servers
Git
Freeby Modelcontextprotocol · Developer Tools
Read, search, and manipulate Git repositories programmatically
Toleno
Freeby Toleno · Developer Tools
Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.
mcp-creator-python
Freeby mcp-marketplace · Developer Tools
Create, build, and publish Python MCP servers to PyPI — conversationally.
MarkItDown
Freeby Microsoft · Content & Media
Convert files (PDF, Word, Excel, images, audio) to Markdown for LLM consumption
MCP Marketplace
Freeby mcp-marketplace · Developer Tools
Search and install MCP servers from inside your AI client.
FinAgent
Freeby mcp-marketplace · Finance
Free stock data and market news for any MCP-compatible AI assistant.
