MCP.Market

Universal Brute Workpack MCP server

by haoyun18881-beep·io.github.haoyun18881-beep/universal-brute-workpack·v0.1.4
No reviews yet

Stdio-first Agent MCP workpack for local tools, audit chains, search, memory, and pipelines.

B80/100grade B
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
B80/100

full report

Adoption
Growing

0 stars139 downloads/wk

Reviews

Write one

Nobody has reviewed Universal Brute Workpack yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Universal Brute Workpack tools (5)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • delegate.control

    Pause, resume, cancel, or instruct a delegated task. instruction is accepted only with instruct; budget is accepted only with resume.

  • delegate.inspect

    Inspect task state and renew its lease. A running task pauses if it is not inspected within limits.leaseMs. waitMs can wait briefly for a state change without blocking other control calls.

  • delegate.result

    Return the available report, evidence, and messages for a task, whether final or partial.

  • delegate.start

    Start a bounded delegated task using read-only local tools and optional public search.

  • public_search

    Search public web sources. Never send private file contents, secrets, or private identifiers. Requires explicit task network permission.

Public scan report

scanner v0.1.9 · 2026-09-26 · same rubric, same numbers if you re-run it

no findings
  • Code scan10 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitystatic API keys via environment variables6/15
  • Maintenancelast push 5 days ago15/15
  • Maintainer identityregistry namespace matches repository owner6/10
Overall 80/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Universal Brute Workpack compares

Against every graded AI and agents MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
80/100
higher than 60% of 4,460 AI and agents servers
Tools
5
the typical AI and agents server has 6
Tools that change things
0%
typical: 0%. Fewer write tools means less an agent can break
Downloads a week
139
more than 70% of 1,538 AI and agents servers with a package

What its tools let an agent do: 4 read · 1 run or deploy

Install Universal Brute Workpack in Claude Code, Cursor or VS Code

Runs npx -y universal-brute-workpack on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add universal-brute-workpack -- npx -y universal-brute-workpack
Add to Cursor

What the publisher says

From the Universal Brute Workpack repository's README, as published. We do not edit it. Read it on GitHub

Plus 不够用，Pro 又用不完？ 接上自己的模型 API，把 Codex 额度留给核心任务。

功能介绍 · 快速接入 · 配套 Skill · 反馈问题

读文件 · 查资料 · 审代码自选模型分担，Codex 复核交付。 如果用得上，欢迎点个 Star ⭐

UBW 是一个 MCP 服务。Codex 分配任务、限定目录，用户自主配置的大模型通过 API 只负责调用只读工具，返回报告与证据。联网搜索通过配置的搜索服务完成。

Plus 额度不够用，又用不完 Pro？UBW 支持接入自选模型 API，分担读取、搜索和代码审查等任务，让原本交给 Codex 子 Agent 的只读工作走自定义模型的 API 计费。Codex 负责判断、修改和交付，把订阅额度留给核心任务。

更多用法，欢迎探索，也欢迎提交 Issue 或 PR。

能做什么

  • 列目录、找文件、搜索文本、读取文件、查看 Git 差异。
  • 搜索公开网页，保留来源链接。
  • 查看进度、补充指令、暂停、恢复和取消任务。
  • 保存阶段结果；失联或预算耗尽时暂停。

不提供文件写入、Shell 执行或子 Agent 派生。

接入

需要 Node.js ≥ 20.3、DeepSeek API Key；读取 Git 差异需要 Git。

复制 配置示例，将 roots 设为允许读取的项目目录：

{
  "roots": ["D:/projects/example"],
  "search": { "backend": "deepseek" }
}

MCP 客户端配置：

{
  "mcpServers": {
    "ubw": {
      "command": "node",
      "args": ["D:/tools/ubw/src/bridge.js"],
      "env": {
        "UBW_CONFIG": "D:/config/ubw.json",
        "DEEPSEEK_API_KEY": "<API_KEY>"
      }
    }
  }
}

路径改为实际位置。密钥保存在本机配置或环境变量中，不提交到仓库。

配套 Skill

ubw：任务委派、进度跟进和结果复核。使用时将 skills/ubw 目录放入宿主的 Skill 目录。

工具

读取的文件内容会发送到 DeepSeek API。联网任务需设置 allowNetwork: true；官方搜索另计 API 用量。

默认租约为 120 秒，需在到期前调用 delegate.inspect。任务记录含文件摘录和报告，保存在 ~/.ubw/tasks；重启后保持暂停。Token 预算用于停止后续请求，不是账户金额上限。

开发

npm test
npm run doctor

已通过 Windows / Node.js 26 的本地模拟测试。真实 API 联调尚未完成。

许可证

Apache-2.0

欢迎按需修改和扩展，也欢迎提交 Issue 或 PR。

Nothing above is checked by us. What we check is on the safety report.

Universal Brute Workpack: common questions

Is Universal Brute Workpack MCP server safe?
Mostly: it is graded B (80/100). Read the Universal Brute Workpack safety report
How do I install Universal Brute Workpack?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Universal Brute Workpack need an API key?
Yes. The registry entry asks for TAVILY_API_KEY, EXA_API_KEY, LLM_API_KEY.
Is Universal Brute Workpack maintained?
The last commit was 43 days ago (2026-09-22). The latest release is v0.1.4.
What can I use instead of Universal Brute Workpack?
Servers from other publishers that do the same job: Basic Memory MCP server, HOL Guard MCP server and Agent Recall MCP server. Compare all Universal Brute Workpack alternatives.
How does Universal Brute Workpack compare with other AI and agents MCP servers?
safety score 80/100 (higher than 60% of 4,460 AI and agents servers); tools 5 (the typical AI and agents server has 6); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to Universal Brute Workpack

Same job from other publishers: the closest match first, then the best rated.

All Universal Brute Workpack alternatives →
  • Basic Memory
    Local-first knowledge management with bi-directional LLM sync via Markdown files.
    B
  • HOL Guard
    Local-first AI agent security evidence and approval workflows through HOL Guard's stdio MCP server.
    A
  • Agent Recall
    Correction-first agent memory. Precision KPI tracks if agents heed warnings. 5 layers, local-only.
    A
  • three.ws Provenance
    Append-only, signed, on-chain-verifiable agent action log — record and audit what agents did.
    More from nirholas →
    B
  • Agent-Native Chat
    Minimal chat-first app with durable threads, actions, and the app-agent loop
    A