nod-mcp-server
Officialnod-mcp-server
Именно так ИИ-агенты будут взаимодействовать с компаниями — не через парсинг, а путем чтения структурированных манифестов. Этот эталонный MCP-сервер обучает любой MCP-совместимый клиент (Claude Desktop, агентские фреймворки, IDE) читать манифест nod.json компании по адресу https://{domain}/.well-known/nod.json и отвечать на реальные вопросы о том, что может делать бизнес: заказывать еду, записываться на прием, искать товары, проверять цены и многое другое.
Он предоставляет два инструмента — lookup_nod и check_capability — и включает четыре демонстрационных манифеста, работающих локально, поэтому демо работает «из коробки» без каких-либо внешних зависимостей.
Установка
git clone <this repo> nod-mcp-server
cd nod-mcp-server
npm install
npm run buildТребуется Node.js 20+.
Related MCP server: Vexi MCP Server
Запуск сервера демонстрационных манифестов
Поскольку почти ни один реальный сайт еще не публикует nod.json, этот репозиторий содержит четыре примера манифестов (ресторан, электронная коммерция, SaaS, здравоохранение) и обслуживает их локально.
npm run demo:manifestsВы должны увидеть:
NOD demo manifest server listening on http://localhost:3456
http://localhost:3456/demo-restaurant.localhost/nod.json
http://localhost:3456/demo-shop.localhost/nod.json
http://localhost:3456/demo-saas.localhost/nod.json
http://localhost:3456/demo-health.localhost/nod.jsonОставьте этот терминал запущенным во время демонстрации. MCP-сервер автоматически перенаправляет любой домен *.localhost на этот сервер.
Настройка Claude Desktop
Откройте (или создайте) ~/Library/Application Support/Claude/claude_desktop_config.json в macOS (или %APPDATA%\Claude\claude_desktop_config.json в Windows) и добавьте:
{
"mcpServers": {
"nod": {
"command": "node",
"args": ["/ABSOLUTE/PATH/TO/nod-mcp-server/dist/index.js"]
}
}
}Замените /ABSOLUTE/PATH/TO/nod-mcp-server на полный путь к этой папке (например, /Users/you/projects/nod-mcp-server). Перезапустите Claude Desktop. Теперь вы должны увидеть сервер nod в списке инструментов Claude с двумя инструментами: lookup_nod и check_capability.
60-секундный сценарий демонстрации
Когда сервер демонстрационных манифестов запущен в одном терминале, а Claude Desktop настроен, вставляйте эти запросы в Claude один за другим.
1. "Look up the NOD manifest for demo-restaurant.localhost"
Claude вызывает lookup_nod({ domain: "demo-restaurant.localhost" }) и возвращает что-то вроде:
# Pike Place Noodle House (restaurant)
Hand-pulled noodles, dumplings, and regional Chinese classics...
- URL: https://demo-restaurant.localhost
- Manifest: http://localhost:3456/demo-restaurant.localhost/nod.json
## Declared capabilities
- purchase
- booking
- view_menu
- order_food
- book_table
## Supported actions
- purchase → https://demo-restaurant.localhost/api/orders [auth: api_key]
- booking → https://demo-restaurant.localhost/api/reservations [auth: api_key]
- search → https://demo-restaurant.localhost/api/menu/search [auth: none]2. "Can I order food from demo-restaurant.localhost?"
Claude вызывает check_capability({ domain: "demo-restaurant.localhost", action: "order_food" }):
YES — demo-restaurant.localhost supports "order_food".
Manifest declares "order_food" under discovery.mcp_server.capabilities.
Endpoint: POST https://demo-restaurant.localhost/api/orders
Authentication: api_key
Matched via: discovery.mcp_server.capabilities
Constraints:
{ "require_human_confirmation": { "purchases_above": 150, ... },
"rate_limits": { "transactions": { "requests": 10, "period": "minute" } },
"allow_automated_purchases": true }3. "What actions does demo-shop.localhost support?"
Claude вызывает lookup_nod({ domain: "demo-shop.localhost" }) и подводит итог: поиск товаров, цены, проверка наличия и размещение заказа с защитой OAuth2 — с порогом подтверждения человеком в $500 и политикой возврата в течение 60 дней.
Бонусные запросы
"Book an appointment at demo-health.localhost — what does that flow require?"→ возвращает эндпоинт для записи, обязательные поля (patient_name, DOB, reason, provider_id, preferred_date), области действия OAuth2 и политику отмены."Does demo-saas.localhost allow automated purchases?"→ возвращает НЕТ с URL-адресом для связи с человеком, так как в манифесте установленоallow_automated_purchases: false.
Справочник инструментов
lookup_nod
Входные данные | Тип | Описание |
| string | Только домен (без схемы, без пути). Домены |
Получает https://{domain}/.well-known/nod.json, с переходом на https://{domain}/nod.json в случае неудачи. Возвращает структурированную сводку: идентификационные данные компании, заявленные возможности, поддерживаемые действия (с эндпоинтами + аутентификацией), API-эндпоинты и способы связи. В случае ошибки возвращает четкое сообщение «манифест не найден».
check_capability
Входные данные | Тип | Описание |
| string | Только домен. |
| string | Распространенные значения: |
Получает манифест и проверяет действие по transactions.capabilities, discovery.mcp_server.capabilities, support.contact.mcp_server.capabilities и структурным эндпоинтам (transactions.purchase, discovery.search, information.pricing и т. д.). Возвращает вердикт «да/нет», URL эндпоинта, метод аутентификации и ограничения политики (лимиты запросов, пороги подтверждения человеком).
Как работает маршрутизация *.localhost
Когда MCP-сервер получает домен, заканчивающийся на .localhost, он выполняет запрос к http://localhost:3456/{domain}/nod.json вместо обычного well-known URL. Это делает демо автономным — вы можете направить Claude на demo-restaurant.localhost и получить реальные результаты без настройки DNS или HTTPS.
Переменные окружения:
NOD_LOCAL_PORT— порт, на котором слушает сервер демонстрационных манифестов (по умолчанию3456)NOD_LOCAL_MANIFEST_SERVER— базовый URL, который MCP-сервер использует для поиска.localhost(по умолчаниюhttp://localhost:3456)NOD_FORCE_LOCAL=1— направлять каждый домен через локальный сервер манифестов (полезно для участников, тестирующих новые примеры манифестов)
Что дальше
Опубликуйте nod.json для своего бизнеса, используя спецификацию протокола NOD на opennod.ai/protocol. Написание минимального валидного манифеста занимает около 30 минут — и как только он появится по адресу https://yourdomain.com/.well-known/nod.json, любой агент, использующий этот MCP-сервер (или любой другой клиент с поддержкой NOD), сможет найти ваш бизнес и воспользоваться его возможностями.
Лицензия
MIT
Available Tools
2 toolscheck_capabilityCheck a NOD capabilityA
Given a domain and an action (e.g. order_food, book_appointment, search_products, get_pricing, view_menu, book_table, check_status, create_account), fetches the business's NOD manifest and reports whether the action is supported, the endpoint URL, authentication requirements, and any policy constraints.
| Name | Required | Description | Default |
|---|---|---|---|
| domain | Yes | The domain to check (e.g. "demo-restaurant.localhost"). | |
| action | Yes | The action to check. Common values: order_food, place_order, view_menu, book_table, book_appointment, search_products, find_provider, get_pricing, check_inventory, check_status, create_account, get_docs, contact_support. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden and does well by disclosing key behavioral traits: it fetches a manifest, reports on support status, endpoint URL, authentication requirements, and policy constraints. This covers critical operational aspects like auth needs and constraints, though it could add details on rate limits or error handling.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is front-loaded and efficiently structured in a single sentence that covers purpose, inputs, and outputs without waste. Every element (e.g., action examples, reported details) serves to clarify the tool's function, making it concise and well-organized.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's moderate complexity (2 parameters, no output schema, no annotations), the description is largely complete: it explains what the tool does, what it returns, and key behavioral aspects. However, it could improve by mentioning the sibling tool 'lookup_nod' for better context or detailing output format, though the absence of an output schema makes this less critical.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema has 100% description coverage, providing clear definitions for 'domain' and 'action'. The description adds minimal value beyond the schema by listing example actions, but it doesn't elaborate on parameter interactions or constraints. Baseline score of 3 is appropriate as the schema does the heavy lifting.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's purpose with specific verbs ('fetches', 'reports') and resources ('business's NOD manifest'), and it distinguishes from the sibling tool 'lookup_nod' by focusing on capability checking rather than general lookup. It provides concrete examples of actions like 'order_food' and 'book_appointment' to illustrate scope.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies usage context by specifying it checks 'whether the action is supported' and lists common actions, but it does not explicitly state when to use this tool versus alternatives like 'lookup_nod' or provide exclusions. It offers some guidance through examples but lacks direct comparative instructions.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
lookup_nodLook up NOD manifestA
Fetches a business's NOD Protocol manifest from https://{domain}/.well-known/nod.json (or the local demo server for *.localhost domains) and returns a structured summary: business identity, declared capabilities, supported actions, API endpoints, and contact methods.
| Name | Required | Description | Default |
|---|---|---|---|
| domain | Yes | The domain to look up (e.g. "example.com" or "demo-restaurant.localhost"). Do not include scheme or path. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden. It discloses the HTTP fetch behavior, URL construction pattern, and return format. However, it doesn't mention error handling, timeout behavior, authentication requirements, rate limits, or whether this is a read-only operation (though implied by 'fetches').
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is efficiently structured in a single sentence that front-loads the core action and resource, followed by specific return details. Every element (source URL, localhost exception, return structure) serves a clear purpose with zero redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a single-parameter read operation with no output schema, the description provides good context about what gets fetched and returned. However, without annotations or output schema, it could benefit from more detail about error cases or response format specifics to be fully complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema has 100% description coverage, so the baseline is 3. The description doesn't add parameter-specific details beyond what the schema provides (domain format examples are already in schema). It mentions the URL construction but doesn't elaborate on parameter usage beyond the schema's documentation.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the specific action ('fetches'), resource ('business's NOD Protocol manifest'), source URL pattern, and structured return format. It distinguishes from the sibling tool 'check_capability' by focusing on manifest retrieval rather than capability verification.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides clear context about when to use this tool (to get a structured summary of business identity, capabilities, actions, endpoints, and contacts) and mentions the alternative server for localhost domains. However, it doesn't explicitly state when NOT to use it or directly compare with the sibling tool 'check_capability'.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections. Dates show when Glama detected each change.
2 tool updates
v0.1.0- First observed
check_capability - First observed
lookup_nod
TDQS
The two tools have clearly distinct purposes: check_capability validates a specific action against a business's manifest, while lookup_nod retrieves and summarizes the entire manifest. There is no overlap or ambiguity between them, as one is for targeted validation and the other for general information retrieval.
Both tools follow a consistent verb_noun pattern with snake_case naming: check_capability and lookup_nod. The verbs 'check' and 'lookup' are semantically appropriate and distinct, and the naming style is uniform throughout the set.
With only two tools, the server feels under-scoped for its apparent purpose of interacting with NOD Protocol manifests. While the tools cover basic retrieval and validation, the lack of tools for actions like updating manifests, managing policies, or executing supported actions suggests a thin surface that may limit agent functionality.
The tool set is significantly incomplete for the NOD Protocol domain. It provides read-only access to manifests but lacks tools for creating, updating, or deleting manifests, or for actually executing the supported actions (e.g., order_food, book_appointment). This creates dead ends where agents can inspect but not interact with the business capabilities.
Maintenance
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Related MCP Connectors
Discover what websites across the agentic web can do — query the capabilities.txt registry.
Find governed AI capabilities and verify signed receipts. Read-only, no account.
Directory of APIs, merchants, and tools AI agents can actually use.
MCP layer for local businesses: discover, query, book, and transact with verified SMB AI agents.
Related MCP Servers
- AlicenseAqualityDmaintenanceEnables AI agents to discover and interact with business capabilities by reading structured nod.json manifests from domains, supporting actions like ordering, booking, and searching.2MIT

Vexi MCP Serverofficial
AlicenseAqualityDmaintenanceEnables MCP clients to search and retrieve structured business data from the Vexi API, allowing AI agents to get clean, typed business objects with identity, offerings, and trust signals.414MIT- AlicenseAqualityDmaintenanceEnables agents to search, retrieve, and contribute business data from a directory of 11M+ businesses across 195 countries, returning markdown prose by default.221153MIT
- AlicenseAqualityCmaintenanceProvides AI agents with access to real, verifiable businesses with provenance and source URLs, enabling natural-language business search and profile retrieval.2MIT
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/nod-protocol/nod-mcp-server'
If you have feedback or need assistance with the MCP directory API, please join our Discord server