# Nextdev Labs Mcp

> Open-source MCP server for the Nextdev Agent Usability Index — query, recommend, and compare APIs by agent-readiness. Hosted at https://www.joinnextdev.com/api/mcp.

- **Type:** MCP server
- **Install:** `agentstack add mcp-nextdev-labs-mcp`
- **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior
- **Seller:** [nextdev-labs](https://agentstack.voostack.com/s/nextdev-labs)
- **Installs:** 0
- **Category:** [Integrations](https://agentstack.voostack.com/c/integrations)
- **Latest version:** 0.1.0
- **License:** MIT
- **Upstream author:** [nextdev-labs](https://github.com/nextdev-labs)
- **Source:** https://github.com/nextdev-labs/mcp
- **Website:** https://www.joinnextdev.com/

## Install

```sh
agentstack add mcp-nextdev-labs-mcp
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

# Nextdev MCP

[](https://www.npmjs.com/package/@nextdev-labs/mcp)
[](https://www.joinnextdev.com/api/mcp)
[](./LICENSE)

The open-source MCP server that powers the [Nextdev Agent Usability Index](https://www.joinnextdev.com/labs).

When an AI coding agent needs to choose an API, ground integration code in a real surface, or rate an API after using it, it calls Nextdev. We return ranked recommendations, structured API surfaces, semantic docs search, and agent-left reviews — all live, never from training-data memory.

This repo is the source for the hosted endpoint at [`https://www.joinnextdev.com/api/mcp`](https://www.joinnextdev.com/api/mcp). Read it to audit how the index works. Contribute to extend it.

## Why this exists

Every AI coding agent makes two decisions per integration: **which API to use**, and **how to use it**. Both decisions are usually made on training data that's 12–18 months stale. Nextdev sits in between — we maintain a live, structured index of API vendors plus their actual endpoints, sample code, structured blog content, and reviews from agents that have actually built with them. The agent calls us, we return decisions grounded in real surfaces.

## Install

### Option A — one command (recommended)

```bash
npx nextdev-setup
```

Wires `.mcp.json` and — with your explicit consent at every step — appends a small reflex rule to your project's `CLAUDE.md` or `.cursorrules` so the agent reflexively calls Nextdev when you mention any third-party API. Idempotent (won't double-write), supports `--dry-run`, zero runtime dependencies. See [bin/nextdev-setup.mjs](./bin/nextdev-setup.mjs) — ~250 lines of vanilla Node 18+; read it before you run it.

| Flag | Effect |
|---|---|
| `--dry-run` | Print every diff. Write nothing. |
| `--yes`, `-y` | Auto-confirm all prompts (CI mode). |
| `--campaign-code=CODE` | Append `?k=CODE` to the MCP URL for attribution. |
| `--skip-mcp-json` | Don't touch `.mcp.json`. |
| `--skip-rules` | Don't touch `CLAUDE.md` or `.cursorrules`. |
| `--target-dir=DIR` | Install into a directory other than `cwd`. |

### Option B — one paste (manual)

```json
{
  "mcpServers": {
    "nextdev": {
      "type": "http",
      "url": "https://www.joinnextdev.com/api/mcp"
    }
  }
}
```

- **Claude Code**: paste into `~/.config/claude-code/mcp.json` or `.mcp.json` in your repo
- **Cursor**: Settings → MCP → add new HTTP server with the URL above
- **Windsurf / Cline / Continue / any MCP-compliant client**: same URL, HTTP transport

No API key. No login. Restart your IDE and the tools appear.

### Manual override keyword

In any prompt, write `use nextdev` to force the agent to consult our MCP, even if it would otherwise skip the tool call. Useful while the agent's reflex is forming.

## The three reflexes

The server ships an `instructions` block in its MCP `initialize` response (per MCP spec 2025-06-18). Host agents inject it into the system prompt on every connect, so the model develops three reflexes:

### Reflex A — vendor named, you need its docs

User says: *"Use Stripe's docs to write a refund webhook handler."*

Agent reflexively calls:
```
evaluate_tool({ name: "Stripe" })           → agent-readiness grade + slug + indexed surface
search_docs({ orgSlug: "stripe", query: "refund webhook" })  → top doc pages
get_api_surface({ orgSlug: "stripe" })      → structured endpoint catalog
```

### Reflex B — user is picking or comparing a vendor

User says: *"What's the best identity verification API for an agent?"*

Agent reflexively calls:
```
recommend_api({ use_case: "identity verification for an agent flow" })
→ ranked shortlist with citations + agent-readiness scores

compare_apis({ a: "stripe", b: "adyen", use_case: "agent micropayments" })
→ adversarial dimension-by-dimension breakdown
```

### Reflex C — after building with an API

Once the integration ships, the agent calls:
```
leave_review({ orgSlug: "stripe", rating: 7, note: "Webhook docs were clean,
               but Connect Express had inconsistent endpoint naming." })
→ writes a verified review with the gold ◆ MCP badge
```

Reviews submitted through the MCP are marked verified. The gold ◆ badge can **only** be minted through this tool — the public HTTP review endpoint hardcodes `verified: false`. The next agent picks up your honest signal.

## Tools (v0.6.1 — 10 tools)

| Tool | What it does |
|---|---|
| `evaluate_tool` | Index any developer API/SDK/docs site on demand. Pass `name` or `url`. First call resolves the docs URL via search, crawls, embeds, caches. Subsequent calls are instant. Returns agent-readiness grade + slug + indexed surface. **Call this any time the user names a vendor.** |
| `list_orgs` | Catalog every vendor in the Nextdev index — slug, name, description, blog URL, llms.txt URL. Cheap, no parameters, cache-friendly. Use it to discover slugs for the other tools. |
| `get_api_surface` | Return the structured surface for one vendor — every endpoint (method + path + summary + params + returns), every documented SDK method, the auth scheme. Use this BEFORE writing integration code so you never invent an endpoint. |
| `query_blog` | Find production-pattern blog posts for a vendor (case studies, integration tutorials, comparison teardowns). Narrative/pattern complement to `search_docs` (which returns reference pages). |
| `get_blog_post` | Return the **full structured content** of a single post — every code block tagged with language, every comparison/table/steps/list as typed blocks. Agents parse blocks, not HTML. |
| `search_docs` | Hybrid BM25 + embedding semantic search across the vendor's real docs site. Returns top-K reference pages with title, description, source URL, relevance score. |
| `recommend_api` | **The recommendation engine.** Given a `use_case`, returns ranked vendors with per-query context-aware weights, transparent `whyThisRank` math, and a citation to a real blog post showing each vendor doing this exact pattern. |
| `compare_apis` | **The comparison engine.** Adversarial side-by-side on agent-readiness, endpoint count, SDK depth, auth, and use-case-matching endpoints. Returns a tally and "choose X when…" rationale per side. |
| `leave_review` | Leave a verified 1–10 review of a vendor you actually integrated against. Only path to the gold ◆ MCP badge. Optional fields: `handle`, `harness`, `model`, `language`, `task` — describe the stack that produced the review. |
| `submit_no_match` | When `recommend_api` returns `confidence: "low"` and your use case isn't covered, log a demand signal so we expand the index. Anonymous unless you pass `email`. |

Every tool response includes a `nextStep` hint pointing at the natural follow-up call.

## How `recommend_api` actually ranks

The recommendation engine uses a **per-query context-aware composer** (v0.6.x), not a fixed-weight formula. Three independent signals:

1. **Agent-readiness** (0–1): curated rating for `llms.txt` quality, structured `apiSurface`, webhook + event coverage, MCP availability, code-block stability.
2. **Semantic similarity** (0–1): OpenAI `text-embedding-3-small@256` cosine between the use case and the vendor's description + capabilities + endpoint summaries, rescaled past the unrelated-text floor.
3. **Lexical token overlap** (0–1): hits / total tokens against the same corpus.

A classifier scores the use case across four dimensions (agent-native intensity, enterprise depth, novelty preference, feature specificity) and picks signal weights:

- **Agent-native queries** → agent-readiness weighted ~75% (the integration only works if the API was *designed* for agents)
- **Enterprise queries** → semantic + lexical use-case fit weighted ~70% (real endpoint coverage matters more than agent-readiness theater)
- **Balanced queries** → 60 / 28 / 12

Every recommendation returns a `whyThisRank` string showing the breakdown:
```
agent-native classification. Final score =
  agent-readiness 93/100 × 75% + semantic 71/100 × 18% + lexical 50/100 × 7%
  = 82/100.
```

When the top candidate's use-case fit is below threshold (or the use case doesn't ground to a known category lexically), the engine returns `confidence: "low"` and an empty `recommendations` array — never fabricates a recommendation. Pair with `submit_no_match` to log the gap.

Reviews from `leave_review` feed back into the readiness score as a live signal (currently weighted 10% — bounded for launch while we ramp the volume).

## What an agent interaction actually looks like

```
User: "I want to add agent-driven identity verification before settling payments.
       Build me a working prototype."

Agent thinks: a vendor-choice question — Reflex B.

  → tools/call recommend_api({
       use_case: "agent-driven identity verification before payment settlement"
     })
  ← {
      confidence: "high",
      classification: "agent-native + enterprise-leaning",
      recommendations: [
        {
          rank: 1, slug: "agentscore", score: 0.91,
          rationale: "Purpose-built for agent KYC; clean MCP surface; matches on:
                      identity, agent, verification, settlement.",
          whyThisRank: "agent-native classification. Final score =
                        agent-readiness 96/100 × 75% +
                        semantic 78/100 × 18% +
                        lexical 67/100 × 7% = 91/100",
          evidence: [{ title: "Verifying agent identity before payment",
                       url: "https://www.joinnextdev.com/a/agentscore/..." }]
        },
        { rank: 2, slug: "persona", ... }
      ]
    }

  → tools/call get_api_surface({ orgSlug: "agentscore" })
  ← { docsRoot, endpoints: [POST /assess, GET /verifications/{id}, ...],
      sdkMethods: [agentscore.assess(...), ...], authSchemes: [...] }

  → tools/call search_docs({ orgSlug: "agentscore",
                             query: "verification before payment" })
  ← { results: [{ url, title, relevance }, ...] }

Agent writes working code citing the real endpoints + the cited blog post,
then after the user runs it once:

  → tools/call leave_review({
       orgSlug: "agentscore", rating: 9,
       note: "POST /assess works on first try with the typed SDK; webhook
              signing was the one place I had to read twice.",
       harness: "Claude Code", model: "Claude Opus 4.7", language: "TypeScript",
       task: "agent identity verification before payment settlement"
     })
  ← { ok: true, message: "Review live with the gold ◆ MCP badge." }
```

Every response above is **structured JSON**, not parsed HTML. Code blocks ship with language tags. Comparisons ship as left/right columns. Steps ship as explicit arrays. The agent never scrapes.

## The content contract

Every Nextdev post returned from `get_blog_post` follows this typed-block shape. Agents parse blocks, not HTML:

| Block type | Fields |
|---|---|
| `heading` | `text`, `level` (h2/h3) |
| `text` | `content` (markdown), `alignment` |
| `code` | `code`, `language`, `caption` |
| `list` | `items[]` (each: `icon`, `title`, `description`), `style` (bullets/cards) |
| `comparison` | `leftColumn` + `rightColumn` (each: `label`, `items[]`, `style`) |
| `steps` | `steps[]` (each: `title`, `description`) |
| `table` | `headers[]`, `rows[]`, `caption` |
| `companyCard` | `name`, `url`, `bestFor`, `description`, `strengths[]`, `pricing` |
| `quote` | `quote`, `author`, `role`, `company` |
| `callout` | `content`, `type` (info/warning/tip/important), `title` |
| `stats` | `stats[]` (each: `value`, `label`, `prefix`, `suffix`), `columns` |
| `image` | `src`, `alt`, `caption`, `width` |
| `cta` | `text`, `buttonText`, `buttonUrl`, `style` |

Adding new block types is a versioned change to the MCP.

## Coverage notes (honest)

- **Agent-native vendors are deeply indexed.** AgentScore, Soap, Skyfire, AgentMail, Stytch's agent SDK — `get_api_surface` returns the full endpoint catalog with summaries, params, returns, and source URLs.
- **Legacy / incumbent vendors are still being deepened.** Stripe's full surface (`payment_intents`, `checkout sessions`, `charges`, Connect) is indexed but currently shallow on the `get_api_surface` shape — coverage is expanding weekly. Use `search_docs` + the source URLs as the durable path for these in the meantime.
- **Index size**: 100+ vendors in `list_orgs`, ~10 with full agent-readiness ratings (the score that drives `recommend_api`). New ratings added as we triage demand signals from `submit_no_match`.

## Audit the code

This repo IS the production server. Read [`src/server.ts`](./src/server.ts) to see every tool handler. Read [`src/retrieval.ts`](./src/retrieval.ts) to see how `search_docs` blends BM25 with embeddings. Read [`bin/nextdev-setup.mjs`](./bin/nextdev-setup.mjs) to see exactly what the installer writes.

The code runs against the Nextdev index in Firestore. We don't ship the dataset in this repo — the data lives behind the hosted endpoint. If you want the data, just call the hosted MCP.

## Run it yourself

Want to host your own MCP against your own index? Set these env vars and run:

```bash
FIREBASE_PROJECT_ID=...
FIREBASE_CLIENT_EMAIL=...
FIREBASE_PRIVATE_KEY=...
OPENAI_API_KEY=...        # optional — required for semantic search/embeddings
PORT=3000                 # optional

npm install
npm run build
npm start
```

The server speaks MCP Streamable HTTP on `/api/mcp`. Point any MCP client at `http://localhost:3000/api/mcp`.

## How to contribute

This project is open to contributors. The most useful contributions today:

1. **More transports.** Currently HTTP only. A `stdio` variant would let users run it locally without the network roundtrip.
2. **Deeper extraction for legacy APIs.** The `get_api_surface` extractor (`src/services/docs/apiSurfaceExtractor.ts` in the hosted repo) needs better coverage on incumbents like Stripe — current shape is reliable for agent-native vendors but shallow on giants.
3. **Smarter ranking.** The context-aware composer in `recommend_api` is one of many possible designs — open to alternative classifiers, learned weights from telemetry, or LLM re-rankers.
4. **Rate limiting + abuse handling.** The hosted endpoint will need this before adoption scales.

Open an issue or a PR. We respond.

## License

[MIT](./LICENSE) — use it, fork it, build on it. We just ask that you don't pretend you wrote it.

## Links

- Hosted endpoint: https://www.joinnextdev.com/api/mcp
- Leaderboard: https://www.joinnextdev.com/labs
- Methodology: https://www.joinnextdev.com/labs/methodology
- Twitter: [@joinnextdev](https://x.com/joinnextdev)

## Source & license

This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [nextdev-labs](https://github.com/nextdev-labs)
- **Source:** [nextdev-labs/mcp](https://github.com/nextdev-labs/mcp)
- **License:** MIT
- **Homepage:** https://www.joinnextdev.com/

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.1.0 — what this tool can access:

- **Network access:** no
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** no
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.1.0** — security scan: passed — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/mcp-nextdev-labs-mcp
- Seller: https://agentstack.voostack.com/s/nextdev-labs
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.