Workfile MCP server
io.github.illodev/workfile·v0.13.2·3 starsRepository-native protocol and local MCP server for Work, Docs, History and durable project Memory.
3 stars663 downloads/wk
Reviews
Write oneNobody has reviewed Workfile yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Workfile tools (32, 10 write)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
project_agent_contextBuild a compact context bundle around a card from direct relations, active conventions, open incidents and active project context. Prefer this over reading records one by one before working on a card.
project_card_archiveMove a closed card to the canonical archive directory. Only done and discarded cards can be archived; the ID and the file survive, so project_card_reopen undoes this.
project_card_claimClaim a card for an actor, move it to doing and optionally declare the filesystem scope that will be changed. Claim before editing anything the card covers; another actor's claim is refused unless forced. Once the claim is written the card's verify entries run, and an entry whose verdict disagrees with the card — a criterion marked met that no longer holds, or one unchecked that already does — com
project_card_createwrite actionCreate one canonical Work card with a concurrency-safe stable ID. Search first: this mints a new record rather than finding an existing one.
project_card_listList cards filtered by status, area, type, priority, parent or claim. Use before starting work; use project_search for full-text.
project_card_noteAppend one timestamped line under a heading. Cheaper than rewriting the body and safe when two agents write at once.
project_card_patchwrite actionPatch allowed card metadata using optimistic concurrency. Use expectedRevision whenever the card was read earlier.
project_card_releaseRelease your claim on a card and move it out of doing. Call when work stops, finished or not.
project_card_reopenMove an archived card back out of the archive directory and into a live status. The ID never changes, so every existing reference to it keeps resolving.
project_card_transitionMove a card to another protocol status. Moving to doing claims the card for the actor; review means the implementation is finished but unverified, and done requires evidence it ran, not a commit.
project_card_writewrite actionReplace the Markdown body of a card under the protocol's lock and revision check. Use project_card_note to append instead.
project_changelog_addwrite actionCreate an atomic unreleased changelog fragment and relate it to cards, decisions or other records. One fragment per user-visible change, written when the change lands rather than when the release is cut.
project_changelog_listList unreleased change fragments and cut releases, filtered by type, area or visibility.
project_changelog_patchwrite actionPatch an unreleased changelog fragment using optimistic concurrency. Only works before a release consumes the fragment; afterwards the text belongs to that release.
project_changelog_previewRender selected unreleased fragments without mutating the repository. Use to read a release before project_changelog_release makes it permanent.
project_changelog_releaseConsume selected unreleased fragments and create a canonical release record. This moves fragment files into the release directory, so preview first: the fragments stop being separately editable.
project_doc_createwrite actionCreate a managed Markdown document with a stable DOC ID. Without an explicit folder the workspace docs.layout decides where it is written.
project_doc_listList indexed and managed documents, filtered by kind, status or freshness.
project_doc_moveMove a managed document to another folder below the managed docs root. The DOC ID never changes; use an empty folder for the root.
project_doc_noteAppend one timestamped line under a heading of a managed document, creating the heading if needed. Cheaper than rewriting the body and safe when two agents write at once.
project_doc_patchwrite actionPatch a managed document using optimistic concurrency. Indexed repository docs are intentionally read-only through this tool — edit those files directly.
project_doc_writewrite actionReplace the Markdown body of a managed document under the protocol's lock and revision check, leaving its frontmatter as it is. Use project_doc_note to append instead.
project_doctorValidate Work, Docs, History, Memory, agent instructions, CI templates and cross-record references. Run before declaring work finished.
project_get_recordRead one canonical project record by stable ID, including body, revision, outgoing references, backlinks and health signals. The revision it returns is what a later write passes as expectedRevision.
project_memory_addwrite actionCreate a typed learning, decision, incident, convention or temporary context record. For knowledge that should change future behaviour — not for narrating what happened this session.
project_memory_graduateMark a learning as graduated and link it to the convention, decision or documentation that now carries the durable rule. Create the target record first — graduating points at something that must already exist.
project_memory_listList learnings, decisions, incidents, conventions and context, filtered by collection or lifecycle status.
project_memory_patchwrite actionPatch a durable memory record using optimistic concurrency. To retire one in favour of another use project_memory_supersede, which updates both sides.
project_memory_supersedeSupersede one memory record with another and update both sides atomically. Create the replacement first; neither record is deleted, so the superseded one stays readable and its ID keeps resolving.
project_nextRank actionable cards: unblocked, unclaimed or claimed by you, highest priority first. Answers "what should I do now".
project_searchSearch cards, documentation, changelog entries, releases and durable memory. Uses deterministic lexical ranking and an injected semantic provider when available.
project_workspaceReturn the effective Workfile workspace, schema, enabled modules and mutation mode. Read this first when a vocabulary is project-declared: it reports the areas, axes, document kinds, changelog types and memory collections this project accepts, and under cards.verification which verification methods each area accepts at done.
Public scan report
scanner v0.1.10 · 2026-10-03 · same rubric, same numbers if you re-run it
- Code scan184 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 2 days ago15/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
How Workfile compares
Against every graded Productivity MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 92/100
- higher than 90% of 1,299 Productivity servers
- Tools
- 32
- the typical Productivity server has 7
- Tools that change things
- 31%
- typical: 0%. Fewer write tools means less an agent can break
- GitHub stars
- 3
- more than 65% of 854 Productivity servers
- Downloads a week
- 663
- more than 87% of 427 Productivity servers with a package
What its tools let an agent do: 22 read · 10 change
Install Workfile in Claude Code, Cursor or VS Code
Runs npx -y @illodev/workfile on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add workfile -- npx -y @illodev/workfile
What the publisher says
From the Workfile repository's README, as published. We do not edit it. Read it on GitHub
The repository is the database.
@illodev/workfile is a repository-native protocol for coordinating Work, Docs, History and durable project Memory between humans and software agents.
Markdown files in the repository are canonical. The CLI, HTTP API and local UI use the same core services, collection registry, index and validation rules. No exclusive state is kept in the browser or in a database.
Work, Docs, History and Memory share the common
ProjectRecord index. The core, CLI, HTTP server and MCP runtime are authored in
TypeScript and distributed as compiled ESM with public declarations. The local UI is
precompiled and included in the package, and semantic search runs on-device through
the optional @illodev/workfile-search-local workspace package.
Try the live demo — it replays this repository's own workspace: the real cards, releases, incidents and learnings of Workfile's development. Mutations work per browser session and reset on reload.
https://github.com/user-attachments/assets/c9cd3035-6729-4cda-9172-984829ab5dbc
Used by
In production Workfile — dogfooding: every release is planned and recorded in this repo's own .project/
Boundaries
Workfile records work. It does not configure agents.
The two get confused because both live next to the same repository. Ecosystem configurators — gentle-ai is a good example — install a persona, curated skills, model routing, MCP servers and review gates into the agents you already use, across many agents at once. Their question is how your agent works. Workfile's question is what was done, who holds it and on what evidence, and its answer is Markdown files that outlive the agent, the session and this package.
They compose. A well-configured agent still needs somewhere durable to write down what it did.
What is here, and is not a configurator's job:
the diff, reported by workfile doctor when malformed. No exclusive state in a browser, a database or ~/.config. Remove the package and the records stay readable.
- The repository is canonical. A card is a file in the pull request: reviewed in
card another actor holds refuses your transition with CARDCLAIMOWNER_MISMATCH instead of quietly accepting it — a guarantee no sentence in a prompt can make.
- Claims are enforced, not agreed. Ownership is checked at the mutation, so a
actually ran. A merge is not evidence.
- review is not done. done requires evidence from somewhere the code
are derived from exactly what the agent writes; there is no machine view and human view to keep in sync.
- Humans read the same records. The UI, the rendered changelog and the releases
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
Workfile: common questions
- Is Workfile MCP server safe?
- Yes, by our scan: it is graded A (92/100). Read the Workfile safety report
- How do I install Workfile?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Workfile need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is Workfile maintained?
- The last commit was 33 days ago (2026-10-01). The latest release is v0.13.2.
- What can I use instead of Workfile?
- Servers from other publishers that do the same job: Agent-Native Dispatch MCP server, loci MCP server and Obsidian Turbocharged MCP server. Compare all Workfile alternatives.
- How does Workfile compare with other Productivity MCP servers?
- safety score 92/100 (higher than 90% of 1,299 Productivity servers); tools 32 (the typical Productivity server has 7); tools that change things 31% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.
Alternatives to Workfile
Same job from other publishers: the closest match first, then the best rated.
- Agent-Native DispatchCentral Slack/Telegram router with jobs, memory, approvals, and A2A delegationnot reviewedEstablishedA
- lociCross-session memory and hybrid RAG over your notes and docs. Local-first, with cited answers.not reviewedEstablishedA
- Obsidian TurbochargedGoverned Obsidian vault access: hybrid retrieval, Markdown-native memory, HITL confirmations.not reviewedGrowingB
OrbitTask management for people and AI agents, with scoped OAuth access to issues, projects, and docs.not reviewedGrowingA
Context7Up-to-date docs for AI agentsnot reviewedWidely usedA