MCP.Market

Workfile MCP server

by illodev·io.github.illodev/workfile·v0.13.2·3 stars

Repository-native protocol and local MCP server for Work, Docs, History and durable project Memory.

A92/100grade A
What users say
No reviews yet
Be the first
Safety scan
A92/100

full report

Adoption
Growing

3 stars663 downloads/wk

Reviews

Write one

Nobody has reviewed Workfile yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Workfile tools (32, 10 write)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • project_agent_context

    Build a compact context bundle around a card from direct relations, active conventions, open incidents and active project context. Prefer this over reading records one by one before working on a card.

  • project_card_archive

    Move a closed card to the canonical archive directory. Only done and discarded cards can be archived; the ID and the file survive, so project_card_reopen undoes this.

  • project_card_claim

    Claim a card for an actor, move it to doing and optionally declare the filesystem scope that will be changed. Claim before editing anything the card covers; another actor's claim is refused unless forced. Once the claim is written the card's verify entries run, and an entry whose verdict disagrees with the card — a criterion marked met that no longer holds, or one unchecked that already does — com

  • project_card_createwrite action

    Create one canonical Work card with a concurrency-safe stable ID. Search first: this mints a new record rather than finding an existing one.

  • project_card_list

    List cards filtered by status, area, type, priority, parent or claim. Use before starting work; use project_search for full-text.

  • project_card_note

    Append one timestamped line under a heading. Cheaper than rewriting the body and safe when two agents write at once.

  • project_card_patchwrite action

    Patch allowed card metadata using optimistic concurrency. Use expectedRevision whenever the card was read earlier.

  • project_card_release

    Release your claim on a card and move it out of doing. Call when work stops, finished or not.

  • project_card_reopen

    Move an archived card back out of the archive directory and into a live status. The ID never changes, so every existing reference to it keeps resolving.

  • project_card_transition

    Move a card to another protocol status. Moving to doing claims the card for the actor; review means the implementation is finished but unverified, and done requires evidence it ran, not a commit.

  • project_card_writewrite action

    Replace the Markdown body of a card under the protocol's lock and revision check. Use project_card_note to append instead.

  • project_changelog_addwrite action

    Create an atomic unreleased changelog fragment and relate it to cards, decisions or other records. One fragment per user-visible change, written when the change lands rather than when the release is cut.

  • project_changelog_list

    List unreleased change fragments and cut releases, filtered by type, area or visibility.

  • project_changelog_patchwrite action

    Patch an unreleased changelog fragment using optimistic concurrency. Only works before a release consumes the fragment; afterwards the text belongs to that release.

  • project_changelog_preview

    Render selected unreleased fragments without mutating the repository. Use to read a release before project_changelog_release makes it permanent.

  • project_changelog_release

    Consume selected unreleased fragments and create a canonical release record. This moves fragment files into the release directory, so preview first: the fragments stop being separately editable.

  • project_doc_createwrite action

    Create a managed Markdown document with a stable DOC ID. Without an explicit folder the workspace docs.layout decides where it is written.

  • project_doc_list

    List indexed and managed documents, filtered by kind, status or freshness.

  • project_doc_move

    Move a managed document to another folder below the managed docs root. The DOC ID never changes; use an empty folder for the root.

  • project_doc_note

    Append one timestamped line under a heading of a managed document, creating the heading if needed. Cheaper than rewriting the body and safe when two agents write at once.

  • project_doc_patchwrite action

    Patch a managed document using optimistic concurrency. Indexed repository docs are intentionally read-only through this tool — edit those files directly.

  • project_doc_writewrite action

    Replace the Markdown body of a managed document under the protocol's lock and revision check, leaving its frontmatter as it is. Use project_doc_note to append instead.

  • project_doctor

    Validate Work, Docs, History, Memory, agent instructions, CI templates and cross-record references. Run before declaring work finished.

  • project_get_record

    Read one canonical project record by stable ID, including body, revision, outgoing references, backlinks and health signals. The revision it returns is what a later write passes as expectedRevision.

  • project_memory_addwrite action

    Create a typed learning, decision, incident, convention or temporary context record. For knowledge that should change future behaviour — not for narrating what happened this session.

  • project_memory_graduate

    Mark a learning as graduated and link it to the convention, decision or documentation that now carries the durable rule. Create the target record first — graduating points at something that must already exist.

  • project_memory_list

    List learnings, decisions, incidents, conventions and context, filtered by collection or lifecycle status.

  • project_memory_patchwrite action

    Patch a durable memory record using optimistic concurrency. To retire one in favour of another use project_memory_supersede, which updates both sides.

  • project_memory_supersede

    Supersede one memory record with another and update both sides atomically. Create the replacement first; neither record is deleted, so the superseded one stays readable and its ID keeps resolving.

  • project_next

    Rank actionable cards: unblocked, unclaimed or claimed by you, highest priority first. Answers "what should I do now".

  • project_search

    Search cards, documentation, changelog entries, releases and durable memory. Uses deterministic lexical ranking and an injected semantic provider when available.

  • project_workspace

    Return the effective Workfile workspace, schema, enabled modules and mutation mode. Read this first when a vocabulary is project-declared: it reports the areas, axes, document kinds, changelog types and memory collections this project accepts, and under cards.verification which verification methods each area accepts at done.

Public scan report

scanner v0.1.10 · 2026-10-03 · same rubric, same numbers if you re-run it

no findings
  • Code scan184 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 2 days ago15/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Overall 92/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Workfile compares

Against every graded Productivity MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
92/100
higher than 90% of 1,299 Productivity servers
Tools
32
the typical Productivity server has 7
Tools that change things
31%
typical: 0%. Fewer write tools means less an agent can break
GitHub stars
3
more than 65% of 854 Productivity servers
Downloads a week
663
more than 87% of 427 Productivity servers with a package

What its tools let an agent do: 22 read · 10 change

Install Workfile in Claude Code, Cursor or VS Code

Runs npx -y @illodev/workfile on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add workfile -- npx -y @illodev/workfile
Add to Cursor

What the publisher says

From the Workfile repository's README, as published. We do not edit it. Read it on GitHub

The repository is the database.

@illodev/workfile is a repository-native protocol for coordinating Work, Docs, History and durable project Memory between humans and software agents.

Markdown files in the repository are canonical. The CLI, HTTP API and local UI use the same core services, collection registry, index and validation rules. No exclusive state is kept in the browser or in a database.

Work, Docs, History and Memory share the common

ProjectRecord index. The core, CLI, HTTP server and MCP runtime are authored in

TypeScript and distributed as compiled ESM with public declarations. The local UI is

precompiled and included in the package, and semantic search runs on-device through

the optional @illodev/workfile-search-local workspace package.

Try the live demo — it replays this repository's own workspace: the real cards, releases, incidents and learnings of Workfile's development. Mutations work per browser session and reset on reload.

https://github.com/user-attachments/assets/c9cd3035-6729-4cda-9172-984829ab5dbc

Used by

In production Workfile — dogfooding: every release is planned and recorded in this repo's own .project/

Boundaries

Workfile records work. It does not configure agents.

The two get confused because both live next to the same repository. Ecosystem configurators — gentle-ai is a good example — install a persona, curated skills, model routing, MCP servers and review gates into the agents you already use, across many agents at once. Their question is how your agent works. Workfile's question is what was done, who holds it and on what evidence, and its answer is Markdown files that outlive the agent, the session and this package.

They compose. A well-configured agent still needs somewhere durable to write down what it did.

What is here, and is not a configurator's job:

the diff, reported by workfile doctor when malformed. No exclusive state in a browser, a database or ~/.config. Remove the package and the records stay readable.

  • The repository is canonical. A card is a file in the pull request: reviewed in

card another actor holds refuses your transition with CARDCLAIMOWNER_MISMATCH instead of quietly accepting it — a guarantee no sentence in a prompt can make.

  • Claims are enforced, not agreed. Ownership is checked at the mutation, so a

actually ran. A merge is not evidence.

  • review is not done. done requires evidence from somewhere the code

are derived from exactly what the agent writes; there is no machine view and human view to keep in sync.

  • Humans read the same records. The UI, the rendered changelog and the releases

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Workfile: common questions

Is Workfile MCP server safe?
Yes, by our scan: it is graded A (92/100). Read the Workfile safety report
How do I install Workfile?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Workfile need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Workfile maintained?
The last commit was 33 days ago (2026-10-01). The latest release is v0.13.2.
What can I use instead of Workfile?
Servers from other publishers that do the same job: Agent-Native Dispatch MCP server, loci MCP server and Obsidian Turbocharged MCP server. Compare all Workfile alternatives.
How does Workfile compare with other Productivity MCP servers?
safety score 92/100 (higher than 90% of 1,299 Productivity servers); tools 32 (the typical Productivity server has 7); tools that change things 31% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to Workfile

Same job from other publishers: the closest match first, then the best rated.

All Workfile alternatives →
  • Agent-Native Dispatch
    Central Slack/Telegram router with jobs, memory, approvals, and A2A delegation
    A
  • loci
    Cross-session memory and hybrid RAG over your notes and docs. Local-first, with cited answers.
    A
  • Obsidian Turbocharged
    Governed Obsidian vault access: hybrid retrieval, Markdown-native memory, HITL confirmations.
    B
  • Orbit
    Task management for people and AI agents, with scoped OAuth access to issues, projects, and docs.
    A
  • Context7
    Up-to-date docs for AI agents
    A