# io.github.ConanMcN/fragments-mcp (npm · @fragments-sdk/mcp)

Design system MCP with 9 tools for component discovery, rendering, and a11y auditing

- Trust score: 69/100 (medium)
- Change this week: +31
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-08-03

## Components

- npm · `@fragments-sdk/mcp`: 69/100 (this document), [markdown](https://verifymcp.io/servers/conanmcn-fragments-mcp/fragments-sdk-mcp.md), [page](https://verifymcp.io/servers/conanmcn-fragments-mcp/fragments-sdk-mcp)

## Channel facts

- Registry: `npm`
- Package: `@fragments-sdk/mcp`
- Version: `0.5.7`
- Transport: `stdio`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-08-03.

- **Supply Chain Security**: 87/100
  - No malware found by supply-chain analysis.
  - Only part of the dependency tree could be resolved (95 of 99), so this covers what we could see, not the whole tree.
  - No install/post-install scripts declared.
  - Only part of the dependency tree could be resolved (95 of 99), so this covers what we could see, not the whole tree.
- **Provenance & Transparency**: 58/100
  - Repository check failed: the declared repository URL returned HTTP 404.
  - Cryptographically verified build provenance (signed, bound to ConanMcN/fragments).
  - License check failed: the license (FSL-1.1-MIT) isn't a recognized OSI-approved license.
  - Actively maintained (last published 25 days ago).
  - Security-disclosure policy not yet verified: we couldn't inspect the source repository.
- **Schema Quality & AI Usability**: 61/100
  - AI-judged instruction clarity (good).
  - Context-footprint check failed: tool/resource definitions use about 1131 tokens (~188/item across 6 items; 6 tools + 0 resources), over budget; trim descriptions and params.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 27/100
  - Stability observed for 8 of 30 days with no destabilising changes; credit accrues until the full window elapses.
- **Tool Coverage**: 100/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 100% of tool parameters carry a description.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

## Install

### Claude

```bash
claude mcp add conanmcn-fragments-mcp -- npx -y @fragments-sdk/mcp
```

### Codex

```bash
codex mcp add conanmcn-fragments-mcp -- npx -y @fragments-sdk/mcp
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "conanmcn-fragments-mcp": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "@fragments-sdk/mcp"
      ],
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add conanmcn-fragments-mcp --command npx --arg -y --arg @fragments-sdk/mcp
```

### Hermes

```yaml
mcp_servers:
  conanmcn-fragments-mcp:
    command: "npx"
    args: ["-y", "@fragments-sdk/mcp"]
```

### Other

```json
{
  "mcpServers": {
    "conanmcn-fragments-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@fragments-sdk/mcp"
      ]
    }
  }
}
```

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-08-03 (score 69, +54)

- [security improvement] Known CVEs: unverified → partial
- [security improvement] Provenance: unverified → pass
- [security improvement] Install scripts: unverified → pass
- [security] The attested source repository moved: ConanMcN/fragments
- [functional regression] License: unverified → fail
- [functional improvement] Stability: unverified → 0.27
- [functional improvement] MCP protocol: unverified → pass
- [functional improvement] Maintenance: unverified → pass
- [functional improvement] Dependency health: unverified → partial
- [functional improvement] Tool coverage: unverified → 100
- [functional] Licence: FSL-1.1-MIT

### 2026-08-02 (score 15, −16)

- [security regression] Provenance: pass → unverified
- [security regression] Install scripts: pass → unverified
- [security] The attested source repository moved: ConanMcN/fragments
- [functional regression] Maintenance: pass → unverified
- [functional regression] License: fail → unverified
- [functional] Licence: FSL-1.1-MIT

### 2026-08-01 (score 31, −22)

- [security regression] Known CVEs: partial → unverified
- [security improvement] Malware scan: unverified → pass
- [security] Stability: Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.
- [functional regression] Tool coverage: 100 → unverified
- [functional regression] Capabilities: pass → unverified
- [functional regression] Dependency health: partial → unverified

### 2026-07-31 (score 53, +31)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-30 (score 22, −57)

- [security regression] Malware scan: pass → unverified
- [security regression] Known CVEs: partial → unverified
- [functional regression] Tool coverage: 100 → unverified
- [functional] First check of Schema quality: unverified

### 2026-07-29 (score 79, +41)

- [security improvement] Known CVEs: unverified → partial
- [security improvement] Provenance: unverified → pass
- [security improvement] Install scripts: unverified → pass
- [security] The attested source repository moved: ConanMcN/fragments
- [functional regression] License: unverified → fail
- [functional improvement] Schema quality: unverified → good
- [functional improvement] Maintenance: unverified → pass
- [functional improvement] Dependency health: unverified → partial
- [functional] Licence: FSL-1.1-MIT

### 2026-07-27 (score 38)

First indexed and scored.

## MCP tools (6)

### `fragments_discover` (~277 tokens)

Discover components in the design system. Use with no params to list all components. Use 'useCase' for AI-powered suggestions. Use 'component' to find alternatives. Use 'compact' for a token-efficient overview.

Input parameters:

- `category` (string): Filter by category (e.g., "actions", "forms", "layout")
- `compact` (boolean): If true, returns minimal output (just component names and categories)
- `component` (string): Component name to find alternatives for (e.g., "Button")
- `format` (string): Output format for context mode (default: markdown)
- `includeCode` (boolean): If true, includes code examples for each variant
- `includeRelations` (boolean): If true, includes component relationships
- `limit` (number): Maximum number of results to return (default: 10 for useCase mode)
- `search` (string): Search term to filter by name, description, or tags
- `status` (string): Filter by component status
- `useCase` (string): Description of what you want to build — returns ranked suggestions (e.g., "form for user email input", "button to submit data")
- `verbosity` (string): Response detail level: "compact" (names only), "standard" (default), "full" (everything including code)

### `fragments_inspect` (~209 tokens)

Get detailed information about a specific component: props, usage guidelines, code examples, accessibility — all in one call. Use 'fields' to request only specific data for token efficiency.

Input parameters:

- `component` (string, required): Component name (e.g., "Button", "Input")
- `fields` (array): Specific fields to return (e.g., ["meta", "guidelines.when", "contract.propsSummary", "props", "examples"]). If omitted, returns everything. Supports dot notation. Aliases: "usage" → "guidelines".
- `maxExamples` (number): Maximum number of code examples to return (default: all)
- `maxLines` (number): Maximum lines per code example (truncates longer examples)
- `variant` (string): Filter examples to a specific variant name (e.g., "Default", "Primary")
- `verbosity` (string): Response detail level: "compact" (meta + prop names), "standard" (default), "full" (everything)

### `fragments_blocks` (~192 tokens)

Search and retrieve composition blocks — named patterns showing how design system components wire together for common use cases (e.g., "Login Form", "Settings Page"). Returns the block with its code pattern.

Input parameters:

- `category` (string): Filter by category (e.g., "authentication", "marketing", "dashboard", "settings", "ecommerce", "ai")
- `component` (string): Filter blocks that use a specific component (e.g., "Button")
- `limit` (number): Maximum number of blocks to return (default: all matching)
- `name` (string): Exact block name to retrieve (e.g., "Login Form")
- `search` (string): Free-text search across block names, descriptions, tags, and components
- `verbosity` (string): Response detail level: "compact" (no code), "standard" (default, code preview for long blocks), "full" (full code)

### `fragments_tokens` (~150 tokens)

List available CSS design tokens (custom properties) by category. Use this when you need to style custom elements or override defaults — no more guessing variable names. Filter by category or search by keyword.

Input parameters:

- `category` (string): Filter by category (e.g., "colors", "spacing", "typography", "surfaces", "shadows", "radius", "borders", "text", "focus", "layout", "code", "component-sizing")
- `limit` (number): Maximum number of tokens to return per category (default: 25 for search, unlimited for category browsing)
- `search` (string): Search token names (e.g., "accent", "hover", "padding")

### `fragments_implement` (~143 tokens)

One-shot implementation helper. Describe what you want to build and get everything needed in a single call: best-matching component(s) with full props and code examples, relevant composition blocks, and applicable CSS tokens. Saves multiple round-trips.

Input parameters:

- `limit` (number): Maximum number of components to return (default: 5)
- `useCase` (string, required): What you want to implement (e.g., "login form", "data table with sorting", "streaming chat messages")
- `verbosity` (string): Response detail level: "compact" (names only), "standard" (default), "full" (all props + examples + full block code)

### `fragments_graph` (~160 tokens)

Query the component relationship graph. Understand dependencies, impact analysis, composition trees, alternatives, and design system health. Use "health" for an overview, "dependencies"/"dependents" for composition and declared relationships (not code-level imports), "impact" for change analysis, "composition" for compound component trees.

Input parameters:

- `component` (string): Component name (required for most modes)
- `edgeTypes` (array): Filter by edge types (imports, hook-depends, renders, composes, parent-of, alternative-to, sibling-of)
- `maxDepth` (number): Max traversal depth for impact mode (default: 3)
- `mode` (string, required): Query mode
- `target` (string): Target component for "path" mode

## Diagnostics

Captured diagnostic sections: Provenance, Dependencies. The full working is on the page: https://verifymcp.io/servers/conanmcn-fragments-mcp/fragments-sdk-mcp#diagnostics

## Score history

- 2026-08-03: 69
- 2026-08-02: 15
- 2026-08-01: 31
- 2026-07-31: 53
- 2026-07-30: 22
- 2026-07-29: 79
- 2026-07-28: 38
- 2026-07-27: 38

## Links

- npm package: https://www.npmjs.com/package/@fragments-sdk/mcp
- Socket report: https://socket.dev/npm/package/@fragments-sdk/mcp
- Changelog RSS feed: https://verifymcp.io/servers/conanmcn-fragments-mcp/fragments-sdk-mcp/changelog.xml
- Changelog JSON feed: https://verifymcp.io/servers/conanmcn-fragments-mcp/fragments-sdk-mcp/changelog.json
- HTML version of this page: https://verifymcp.io/servers/conanmcn-fragments-mcp/fragments-sdk-mcp