# io.github.ejfkdev/zread-mcp (npm · zread-mcp)

Zread.ai MCP Server - 连接 zread.ai 文档平台的 MCP 服务器，让 AI 助手能够阅读 GitHub 仓库文档、搜索代码、与仓库 AI 对话。

- Trust score: 59/100 (low)
- Change this week: +15
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-08-03

## Components

- npm · `zread-mcp`: 59/100 (this document), [markdown](https://verifymcp.io/servers/ejfkdev-zread-mcp/zread-mcp.md), [page](https://verifymcp.io/servers/ejfkdev-zread-mcp/zread-mcp)

## Channel facts

- Registry: `npm`
- Package: `zread-mcp`
- Version: `1.0.1`
- Transport: `stdio`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-08-03.

- **Supply Chain Security**: 87/100
  - No malware found by supply-chain analysis.
  - Only part of the dependency tree could be resolved (122 of 124), so this covers what we could see, not the whole tree.
  - No install/post-install scripts declared.
  - Only part of the dependency tree could be resolved (122 of 124), so this covers what we could see, not the whole tree.
- **Provenance & Transparency**: 45/100
  - Source repository is publicly reachable at the declared URL.
  - Provenance check failed: no build-provenance attestation is published.
  - Clear OSI-approved license (MIT).
  - Actively maintained (last published 142 days ago).
  - Disclosure check failed: no security disclosure policy was found in the source repository.
- **Schema Quality & AI Usability**: 45/100
  - 0% of prompts and resources have a non-trivial description (not blank, and not just the item's name).
  - AI-judged instruction clarity (good).
  - Tool/resource definitions use about 790 tokens (~98/item across 8 items; 7 tools + 1 resources), lean.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 0/100
  - Stability not yet verified: not enough scan history yet (needs a 30-day window).
- **Tool Coverage**: 100/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 100% of tool parameters carry a description.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

**Unverified: 1 category.** A category scored 0 because we could not verify it: a data source with nothing on this package, evidence we could not reach, or a check we could not run. We only credit what we can confirm.

## Install

### Claude

```bash
claude mcp add ejfkdev-zread-mcp -- npx -y zread-mcp
```

### Codex

```bash
codex mcp add ejfkdev-zread-mcp -- npx -y zread-mcp
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "ejfkdev-zread-mcp": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "zread-mcp"
      ],
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add ejfkdev-zread-mcp --command npx --arg -y --arg zread-mcp
```

### Hermes

```yaml
mcp_servers:
  ejfkdev-zread-mcp:
    command: "npx"
    args: ["-y", "zread-mcp"]
```

### Other

```json
{
  "mcpServers": {
    "ejfkdev-zread-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "zread-mcp"
      ]
    }
  }
}
```

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-08-02 (score 59, +40)

- [security regression] Provenance: unverified → fail
- [security improvement] Known CVEs: unverified → partial
- [security improvement] Install scripts: unverified → pass
- [security improvement] Malware scan: unverified → pass
- [security] Stability: Stability not yet verified: not enough scan history yet (needs a 30-day window).
- [functional improvement] Schema quality: unverified → good
- [functional improvement] Maintenance: unverified → pass
- [functional improvement] Dependency health: unverified → partial
- [functional improvement] License: unverified → pass
- [functional improvement] MCP protocol: unverified → pass
- [functional] Licence: MIT

### 2026-08-01 (score 19, −7)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-31 (score 26, −18)

- [security regression] Malware scan: pass → unverified

### 2026-07-29 (score 44, +19)

- [functional regression] Dependency health: partial → unverified
- [functional improvement] Schema quality: unverified → 0
- [functional improvement] Tool coverage: unverified → 100

### 2026-07-28 (score 25, −19)

- [functional regression] Tool coverage: 100 → unverified
- [functional regression] Schema quality: 0 → unverified
- [functional improvement] Dependency health: unverified → partial

### 2026-07-27 (score 44)

First indexed and scored.

## MCP tools (7)

### `fetch_documentation_page` (~300 tokens)

获取仓库文档的指定页面内容。

根据页面 slug（URL 标识符）获取该页面的完整 Markdown 文档内容。
适用于读取特定章节或页面的详细内容。

返回的 Markdown 页面内容中可能包含两种链接格式：

1\. **仓库文件链接** - 格式: `[文件名](文件路径#L开始行号-L结束行号)`
   例如: `[index.ts](index.ts#L1-L28)` `[package.json](package.json#L1-L77)`
   这类链接指向仓库内的源代码文件，可提取文件路径和行号范围，
   使用 `fetch_repository_file(repo_path, file_path, start_line, end_line)` 获取具体内容。

2\. **文档导航链接** - 格式: `[标题](页面slug)`
   例如: `[概述](1-overview)` `[快速开始](2-quick-start)`
   这类链接指向文档的其他页面，使用 `fetch_documentation_page(repo_path, 页面slug)`
   获取该页文档内容。

Input parameters:

- `language` (string): 文档语言，可选 "zh"(中文) 或 "en"(英文)
- `page_slug` (string, required): 页面 slug，如 "1-overview", "quick-start"
- `repo_path` (string, required): 仓库路径，格式: owner/repo 或完整 URL

### `search_documentation` (~105 tokens)

在仓库文档中搜索关键词。

全文搜索仓库文档，返回包含关键词的页面和相关内容片段。
适用于快速定位文档中的特定信息。

Input parameters:

- `keyword` (string, required): 搜索关键词，如 "installation", "API", "config"
- `language` (string): 搜索语言，可选 "zh" 或 "en"
- `repo_path` (string, required): 仓库路径，格式: owner/repo 或完整 URL

### `get_documentation_outline` (~100 tokens)

获取仓库文档的完整目录结构。

返回仓库的文档目录树，包含所有页面的标题、slug 和层级关系。
首次调用会自动提交索引请求，如果仓库未被索引会返回等待状态。

Input parameters:

- `language` (string): 文档语言，可选 "zh" 或 "en"
- `repo_path` (string, required): 仓库路径，格式: owner/repo 或完整 URL

### `discover_repositories` (~71 tokens)

发现推荐的代码仓库。

获取 Zread.ai 推荐的优质代码仓库，可按技术主题筛选。
适用于发现新工具、学习优秀项目。

Input parameters:

- `topic` (string): 技术主题筛选，如 "ai", "python", "web"，空字符串表示全部

### `find_repositories` (~80 tokens)

搜索代码仓库。

根据关键词模糊搜索已索引的代码仓库。
支持仓库名称、描述、主题等字段的模糊匹配。

Input parameters:

- `language` (string): 返回语言，可选 "zh" 或 "en"
- `query` (string, required): 搜索关键词，如 "react", "machine learning"

### `get_trending_repositories` (~48 tokens)

获取本周热门仓库榜单。

获取 GitHub 本周最受欢迎的代码仓库列表，按热度排序。
适用于了解技术趋势和热门项目。

### `check_repository_status` (~72 tokens)

检查仓库索引状态。

查询指定仓库在 Zread.ai 的索引状态和基本信息。
返回的 status 字段: "success"(已索引), "progress"(索引中)

Input parameters:

- `repo_path` (string, required): 仓库路径，格式: owner/repo

## Diagnostics

Captured diagnostic sections: Provenance, Dependencies. The full working is on the page: https://verifymcp.io/servers/ejfkdev-zread-mcp/zread-mcp#diagnostics

## Score history

- 2026-08-03: 59
- 2026-08-02: 59
- 2026-08-01: 19
- 2026-07-31: 26
- 2026-07-29: 44
- 2026-07-28: 25
- 2026-07-27: 44

## Links

- npm package: https://www.npmjs.com/package/zread-mcp
- Socket report: https://socket.dev/npm/package/zread-mcp
- Repository: https://github.com/ejfkdev/zread-mcp
- Changelog RSS feed: https://verifymcp.io/servers/ejfkdev-zread-mcp/zread-mcp/changelog.xml
- Changelog JSON feed: https://verifymcp.io/servers/ejfkdev-zread-mcp/zread-mcp/changelog.json
- HTML version of this page: https://verifymcp.io/servers/ejfkdev-zread-mcp/zread-mcp