ติดตั้ง Pbuf Registry อย่างไร?

คัดลอกคอนฟิก stdio สำหรับ Cursor, Claude Desktop, Claude Code หรือ VS Code ได้ในหน้านี้ คอนฟิกนี้ใช้การติดตั้งของผู้เผยแพร่ ไม่ใช่พร็อกซีของ PlugMCP

Pbuf Registry ต้องใช้ API key ไหม?

ระเบียนนี้ไม่ได้ระบุตัวแปรสภาพแวดล้อมที่จำเป็น

Pbuf Registry ใช้ทรานสปอร์ตแบบใด?

Pbuf Registry ทำงานแบบโลคัลผ่าน stdio

Pbuf Registry ถูกตรวจสอบล่าสุดเมื่อใด?

ตรวจสอบล่าสุดเมื่อ 2026-10-27 Self-hosted Protobuf schema registry in Go — OIDC/RBAC, multi-source vendoring (pbuf, buf.build, Git), go_package patching, drift detection, Web UI & MCP server

เซิร์ฟเวอร์ MCP Pbuf Registry

Power your agent

เพิ่มเซิร์ฟเวอร์นี้

การติดตั้งจากผู้เผยแพร่ ไม่ใช่เอนด์พอยต์ของ PlugMCP

รันบน PlugMCP

Host a copy with our keys and logs.

ยังไม่มีรีลีสแบบแพ็กเกจในรีจิสทรี ทำตาม README ของรีโพซิทอรี.

รีโพซิทอรีการติดตั้งจากผู้เผยแพร่ทีละขั้นตอน: เพิ่มใน Claude

URL แบบรีโมตหรือคำสั่งบนเครื่องของคุณ? การติดตั้งสองแบบต่างกันอย่างไร

รันบน PlugMCP

Host a copy with our keys and logs.

A new server you create. It is not this listing's official endpoint. Use the publisher install when you want their URL and their credentials.

เปิด

ข้อมูลเซิร์ฟเวอร์

โลคัล

ทรานสปอร์ต: stdio
สัญญาอนุญาต: Apache-2.0
ตรวจสอบล่าสุด: 2026-10-27

จากผู้เผยแพร่

เอกสารประกอบ

Self-Hosted, Open-Source Protobuf Schema Registry (`pbuf-registry`)

Capability	`pbuf-registry` + `pbuf`	Buf Schema Registry (Free)	Buf BSR (Team / Enterprise)	Raw Git / `git submodule` / `protodep`
License & Self-Hosting	Apache-2.0 (Self-Hosted or Cloud)	SaaS only	Paid Enterprise self-hosted	DIY scripts
Private Schemas without Per-Seat Pricing	Yes (Unlimited users & bots)	Limited / public focus	Paid per-user seat tax	Yes
OIDC / OAuth2 SSO & Per-Module RBAC	Included	No	Paid / Enterprise tier	Relies on Git repo permissions
Hybrid Vendoring (`pbuf` + `buf.build` + Git)	Yes (All 3 in one `pbuf.yaml`)	BSR only	BSR only	Git only
Automatic `option go_package` Patching (`gen_out`)	Built-in (`go.mod`-aware)	Managed mode (compilation only)	Managed mode (compilation only)	Manual sed scripts
Transitive Dependency Drift & Breaking Alerts	Built-in (`pbuf drift` + UI)	Breaking lint only	Breaking lint + graph	None
Native MCP Server (`pbuf mcp`) for AI Agents	Built-in (`stdio`)	External	External	None

Component	Description	Path	Artifact
pbuf-registry	Registry server & background daemons (gRPC, REST, RBAC, OIDC SSO, drift detection)	`cmd/`, `internal/`	`ghcr.io/pbufio/registry`
pbuf (CLI)	Command-line interface for initializing, pushing, vendoring (`pbuf-registry`, `buf.build`, Git), and administering the registry	`cmd/pbuf/`, `internal/cli/`	GitHub Releases
pbuf-registry-ui	Developer-first Vue 3 Web UI for browsing modules, proto files, parsed AST metadata, and drift alerts	`ui/`	`ghcr.io/pbufio/pbuf-registry-ui`
Helm Chart	Kubernetes Helm chart for deploying the server, background workers, PostgreSQL, and Web UI	`charts/pbuf-registry/`	`oci://ghcr.io/pbufio/charts/pbuf-registry`

Field	Required	Description
`version`	Yes	Schema version (`v1`).
`name`	For `register` / `push`	Canonical module name in `pbuf-registry` (e.g., `myorg/payment-service`).
`registry.addr`	For registry commands	Hostname or `host:port` of the `pbuf-registry` gRPC server (e.g., `pbuf.cloud` or `localhost:6777`).
`registry.insecure`	No	When `true`, connects over plaintext gRPC without TLS (`false` by default).
`registry.oidc.issuer`	No	Default OIDC issuer URL used by `pbuf login` when `--issuer` and `PBUF_OIDC_ISSUER` are not set.
`registry.oidc.client_id`	No	Default OIDC client ID used by `pbuf login` when `--client-id` and `PBUF_OIDC_CLIENT_ID` are not set.
`export.paths`	For `push`	List of local directories to scan recursively for `.proto` files when pushing a module.
`modules`	For `vendor`	List of dependencies to vendor when running `pbuf vendor`.

Command	Description
`pbuf init [name] [registry-url]`	Initialize `pbuf.yaml` interactively or via arguments
`pbuf auth <token>`	Save registry token to `~/.netrc` (`0600` permissions)
`pbuf login [--issuer <url>] [--client-id <id>] [--scope <scopes>]`	Authenticate via OAuth 2.0 / OIDC Device Authorization Flow
`pbuf vendor`	Vendor all dependencies (`pbuf-registry`, `buf.build`, Git) configured in `pbuf.yaml`
`pbuf modules register`	Register the module defined in `pbuf.yaml`
`pbuf modules push <tag> [--draft]`	Push `.proto` files from `export.paths` with a version tag
`pbuf modules list`	List all registered modules in the registry
`pbuf modules get [module_name]`	Get module details, tags, draft tags, packages, and dependencies
`pbuf modules update`	Update `pbuf-registry` dependencies in `pbuf.yaml` to their latest published tags
`pbuf modules delete-tag <tag>`	Delete a specific tag of the current module
`pbuf modules delete`	Delete the current module and all its tags
`pbuf metadata get [module_name] [tag]`	Retrieve parsed AST metadata (packages, messages, services, enums) for a module tag
`pbuf drift diff [module_name] [--against <tag>] [--format table\|markdown\|json] [--fail-on critical\|warning\|info\|none]`	Compare local `.proto` files against a registry tag and fail on breaking changes
`pbuf drift list [--unacknowledged-only]`	List schema drift events across all modules
`pbuf drift module <module_name> [--tag <tag>]`	List schema drift events for a specific module
`pbuf drift dependencies <module_name> [--tag <tag>]`	Check dependency drift status and upgrade recommendations for a module
`pbuf drift acknowledge <event_id> --by <user>`	Acknowledge a schema drift event by ID
`pbuf mcp`	Start a Model Context Protocol (MCP) server over `stdio` for AI coding agents
`pbuf users create <name> [--type user\|bot]`	Create a user or bot and output its one-time token
`pbuf users list [--page-size 50] [--page 0]`	List users and bots
`pbuf users get <id>`	Get user or bot details by ID
`pbuf users update <id> [--name <n>] [--active\|--inactive]`	Update a user or bot's name or active status
`pbuf users delete <id>`	Delete a user or bot and revoke all permissions
`pbuf users regenerate-token <id>`	Rotate a user or bot's authentication token
`pbuf users grant-permission <user_id> <module> --permission read\|write\|admin`	Grant module-scoped or global (`*`) permission
`pbuf users revoke-permission <user_id> <module>`	Revoke permission for a module or `*`
`pbuf users list-permissions <user_id>`	List all permissions granted to a user or bot

Command

Description

pbuf init [name] [registry-url]

Initialize pbuf.yaml interactively or via arguments

pbuf auth <token>

Save registry token to ~/.netrc (0600 permissions)

pbuf login [--issuer <url>] [--client-id <id>] [--scope <scopes>]

Authenticate via OAuth 2.0 / OIDC Device Authorization Flow

pbuf vendor

Vendor all dependencies (pbuf-registry, buf.build, Git) configured in pbuf.yaml

pbuf modules register

pbuf modules push <tag> [--draft]

Push .proto files from export.paths with a version tag

pbuf modules list

List all registered modules in the registry

pbuf modules get [module_name]

Get module details, tags, draft tags, packages, and dependencies

pbuf modules update

Update pbuf-registry dependencies in pbuf.yaml to their latest published tags

pbuf modules delete-tag <tag>

Delete a specific tag of the current module

pbuf modules delete

Delete the current module and all its tags

pbuf metadata get [module_name] [tag]

Retrieve parsed AST metadata (packages, messages, services, enums) for a module tag

Compare local .proto files against a registry tag and fail on breaking changes

pbuf drift list [--unacknowledged-only]

List schema drift events across all modules

pbuf drift module <module_name> [--tag <tag>]

List schema drift events for a specific module

pbuf drift dependencies <module_name> [--tag <tag>]

Check dependency drift status and upgrade recommendations for a module

pbuf drift acknowledge <event_id> --by <user>

Acknowledge a schema drift event by ID

pbuf mcp

Start a Model Context Protocol (MCP) server over stdio for AI coding agents

pbuf users create <name> [--type user|bot]

Create a user or bot and output its one-time token

pbuf users list [--page-size 50] [--page 0]

List users and bots

pbuf users get <id>

Get user or bot details by ID

pbuf users update <id> [--name <n>] [--active|--inactive]

Update a user or bot's name or active status

pbuf users delete <id>

Delete a user or bot and revoke all permissions

pbuf users regenerate-token <id>

Rotate a user or bot's authentication token

pbuf users grant-permission <user_id> <module> --permission read|write|admin

Grant module-scoped or global (*) permission

pbuf users revoke-permission <user_id> <module>

Revoke permission for a module or *

pbuf users list-permissions <user_id>

List all permissions granted to a user or bot

Tool Name	Description
`list_modules`	List registered protobuf modules with optional pagination (`page_size`, `page_token`).
`get_module`	Retrieve module details, published tags, draft tags, and packages (`name`).
`get_module_dependencies`	Get direct and transitive dependencies for a module tag (`name`, `tag`, `resolve_transitive`).
`get_module_metadata`	Retrieve parsed AST metadata (packages, messages, fields, enums, services, RPCs) for a module tag (`name`, `tag`).
`get_proto_files`	Pull raw `.proto` file contents for a module and tag (`name`, `tag`).
`list_drift_events`	List schema drift and breaking-change events across the registry (`unacknowledged_only`).
`get_module_drift_events`	List schema drift events for a specific module (`module_name`, `tag_name`).
`get_dependency_drift_status`	Evaluate dependency drift severities and upgrade recommendations for a module (`module_name`, `tag_name`).

Command	Description	Default Schedule
`pbuf-registry`	Runs the main registry server (gRPC `:6777`, HTTP `:8080`, Debug `:8082`) and applies SQL migrations on startup	Always running
`pbuf-registry compaction`	Runs the background compaction daemon that deletes expired draft tags (older than 7 days) and orphaned proto files	`0 * * * *` (hourly)
`pbuf-registry proto-parsing`	Runs the background proto-parsing and drift detection daemons that index `.proto` AST metadata and detect breaking changes	`/1 * * *` (every minute)

Level	Capabilities
Read	List modules, pull `.proto` files, view module metadata, view drift events
Write	Read + register new modules, push module tags
Admin	Write + delete modules, delete tags, manage users and permissions (when scoped to `*`)

Environment Variable	Config Key	Default	Description
`DATA_DATABASE_DSN`	`data.database.dsn`	`postgres://pbuf:pbuf@localhost:5432/pbuf_registry?sslmode=disable`	PostgreSQL connection string
`SERVER_STATIC_TOKEN`	—	(empty)	Static admin token for full registry access
`SERVER_HTTP_ADDR`	`server.http.addr`	`0.0.0.0:8080`	HTTP/REST server listen address
`SERVER_HTTP_TIMEOUT`	`server.http.timeout`	`30s`	HTTP request timeout
`SERVER_HTTP_AUTH_ENABLED`	`server.http.auth.enabled`	`false`	Enable authentication on the HTTP server
`SERVER_HTTP_AUTH_TYPE`	`server.http.auth.type`	`""`	Auth mode: `static-token`, `acl`, or `oidc`
`SERVER_HTTP_AUTH_OIDC_ISSUERURL`	`server.http.auth.oidc.issuerUrl`	`""`	OIDC Issuer URL
`SERVER_HTTP_AUTH_OIDC_CLIENTID`	`server.http.auth.oidc.clientId`	`""`	OIDC Client ID (audience)
`SERVER_HTTP_AUTH_OIDC_JWKSURL`	`server.http.auth.oidc.jwksUrl`	`""`	Optional explicit JWKS URL override
`SERVER_HTTP_AUTH_OIDC_USERNAMECLAIM`	`server.http.auth.oidc.usernameClaim`	`email`	JWT claim used as the username
`SERVER_HTTP_AUTH_OIDC_GROUPSCLAIM`	`server.http.auth.oidc.groupsClaim`	`groups`	JWT claim containing group memberships
`SERVER_HTTP_AUTH_OIDC_ADMINGROUPS`	`server.http.auth.oidc.adminGroups`	`[]`	Comma-separated or list of OIDC groups granted global admin
`SERVER_HTTP_AUTH_OIDC_AUTOPROVISION`	`server.http.auth.oidc.autoProvision`	`true`	Auto-create user records on first OIDC login
`SERVER_GRPC_ADDR`	`server.grpc.addr`	`0.0.0.0:6777`	gRPC server listen address
`SERVER_GRPC_TIMEOUT`	`server.grpc.timeout`	`30s`	gRPC request timeout
`SERVER_GRPC_TLS_ENABLED`	`server.grpc.tls.enabled`	`false`	Enable TLS on the gRPC server
`SERVER_GRPC_TLS_CERTFILE`	`server.grpc.tls.certFile`	`""`	Path to gRPC TLS server certificate
`SERVER_GRPC_TLS_KEYFILE`	`server.grpc.tls.keyFile`	`""`	Path to gRPC TLS private key
`SERVER_GRPC_AUTH_ENABLED`	`server.grpc.auth.enabled`	`false`	Enable authentication on the gRPC server
`SERVER_GRPC_AUTH_TYPE`	`server.grpc.auth.type`	`""`	Auth mode: `static-token`, `acl`, or `oidc`
`SERVER_GRPC_AUTH_OIDC_ISSUERURL`	`server.grpc.auth.oidc.issuerUrl`	`""`	OIDC Issuer URL for gRPC
`SERVER_GRPC_AUTH_OIDC_CLIENTID`	`server.grpc.auth.oidc.clientId`	`""`	OIDC Client ID for gRPC
`SERVER_GRPC_AUTH_OIDC_JWKSURL`	`server.grpc.auth.oidc.jwksUrl`	`""`	Optional explicit JWKS URL override for gRPC
`SERVER_GRPC_AUTH_OIDC_USERNAMECLAIM`	`server.grpc.auth.oidc.usernameClaim`	`email`	JWT claim used as the username
`SERVER_GRPC_AUTH_OIDC_GROUPSCLAIM`	`server.grpc.auth.oidc.groupsClaim`	`groups`	JWT claim containing group memberships
`SERVER_GRPC_AUTH_OIDC_ADMINGROUPS`	`server.grpc.auth.oidc.adminGroups`	`[]`	OIDC groups granted global admin
`SERVER_GRPC_AUTH_OIDC_AUTOPROVISION`	`server.grpc.auth.oidc.autoProvision`	`true`	Auto-create user records on first OIDC login
`SERVER_DEBUG_ADDR`	`server.debug.addr`	`0.0.0.0:8082`	Debug & Prometheus `/metrics` listen address
`DAEMONS_COMPACTION_CRON`	`daemons.compaction.cron`	`0 * * * *`	Cron schedule for draft tag compaction
`DAEMONS_PROTOPARSING_CRON`	`daemons.protoparsing.cron`	`/1 * * *`	Cron schedule for proto parsing & drift detection

Environment Variable

Config Key

Default

Description

DATA_DATABASE_DSN

data.database.dsn

postgres://pbuf:pbuf@localhost:5432/pbuf_registry?sslmode=disable

PostgreSQL connection string

SERVER_STATIC_TOKEN

—

(empty)

Static admin token for full registry access

SERVER_HTTP_ADDR

server.http.addr

0.0.0.0:8080

HTTP/REST server listen address

SERVER_HTTP_TIMEOUT

server.http.timeout

30s

HTTP request timeout

SERVER_HTTP_AUTH_ENABLED

server.http.auth.enabled

false

Enable authentication on the HTTP server

SERVER_HTTP_AUTH_TYPE

server.http.auth.type

""

Auth mode: static-token, acl, or oidc

SERVER_HTTP_AUTH_OIDC_ISSUERURL

server.http.auth.oidc.issuerUrl

""

OIDC Issuer URL

SERVER_HTTP_AUTH_OIDC_CLIENTID

server.http.auth.oidc.clientId

""

OIDC Client ID (audience)

SERVER_HTTP_AUTH_OIDC_JWKSURL

server.http.auth.oidc.jwksUrl

""

Optional explicit JWKS URL override

SERVER_HTTP_AUTH_OIDC_USERNAMECLAIM

server.http.auth.oidc.usernameClaim

email

JWT claim used as the username

SERVER_HTTP_AUTH_OIDC_GROUPSCLAIM

server.http.auth.oidc.groupsClaim

groups

JWT claim containing group memberships

SERVER_HTTP_AUTH_OIDC_ADMINGROUPS

server.http.auth.oidc.adminGroups

[]

Comma-separated or list of OIDC groups granted global admin

SERVER_HTTP_AUTH_OIDC_AUTOPROVISION

server.http.auth.oidc.autoProvision

true

Auto-create user records on first OIDC login

SERVER_GRPC_ADDR

server.grpc.addr

0.0.0.0:6777

gRPC server listen address

SERVER_GRPC_TIMEOUT

server.grpc.timeout

30s

gRPC request timeout

SERVER_GRPC_TLS_ENABLED

server.grpc.tls.enabled

false

Enable TLS on the gRPC server

SERVER_GRPC_TLS_CERTFILE

server.grpc.tls.certFile

""

Path to gRPC TLS server certificate

SERVER_GRPC_TLS_KEYFILE

server.grpc.tls.keyFile

""

Path to gRPC TLS private key

SERVER_GRPC_AUTH_ENABLED

server.grpc.auth.enabled

false

Enable authentication on the gRPC server

SERVER_GRPC_AUTH_TYPE

server.grpc.auth.type

""

Auth mode: static-token, acl, or oidc

SERVER_GRPC_AUTH_OIDC_ISSUERURL

server.grpc.auth.oidc.issuerUrl

""

OIDC Issuer URL for gRPC

SERVER_GRPC_AUTH_OIDC_CLIENTID

server.grpc.auth.oidc.clientId

""

OIDC Client ID for gRPC

SERVER_GRPC_AUTH_OIDC_JWKSURL

server.grpc.auth.oidc.jwksUrl

""

Optional explicit JWKS URL override for gRPC

SERVER_GRPC_AUTH_OIDC_USERNAMECLAIM

server.grpc.auth.oidc.usernameClaim

email

JWT claim used as the username

SERVER_GRPC_AUTH_OIDC_GROUPSCLAIM

server.grpc.auth.oidc.groupsClaim

groups

JWT claim containing group memberships

SERVER_GRPC_AUTH_OIDC_ADMINGROUPS

server.grpc.auth.oidc.adminGroups

[]

OIDC groups granted global admin

SERVER_GRPC_AUTH_OIDC_AUTOPROVISION

server.grpc.auth.oidc.autoProvision

true

Auto-create user records on first OIDC login

SERVER_DEBUG_ADDR

server.debug.addr

0.0.0.0:8082

Debug & Prometheus /metrics listen address

DAEMONS_COMPACTION_CRON

daemons.compaction.cron

0 * * * *

Cron schedule for draft tag compaction

DAEMONS_PROTOPARSING_CRON

daemons.protoparsing.cron

*/1 * * * *

Cron schedule for proto parsing & drift detection

เพิ่มเซิร์ฟเวอร์นี้

Host a copy with our keys and logs.

ข้อมูลเซิร์ฟเวอร์

เอกสารประกอบ

Self-Hosted, Open-Source Protobuf Schema Registry (pbuf-registry)

Table of Contents

Why pbuf-registry?

The Ecosystem

Key Features

Automatic option go_package Rewriting (gen_out)

Multi-Source Vendoring (pbuf-registry, buf.build, and Git)

Schema Drift & Breaking Change Detection

Native MCP Server for AI Coding Agents (pbuf mcp)

Immutable Versioned Tags & Ephemeral Draft Tags

Per-Module RBAC & OIDC / OAuth2 SSO

Web UI for Browsing & Incident Investigation

The dark-mode Vue 3 Web UI lets engineers browse registered modules, inspect .proto source files at any tag, explore parsed messages/services/enums/fields, and review dependency drift alerts — either in public read-only mode or authenticated via Bearer token or OIDC SSO.

Quick Start (2 Minutes)

Step 1 — Start the Registry Stack

Step 2 — Install the pbuf CLI

Step 3 — Initialize, Authenticate & Push a Module

Step 4 — Vendor Dependencies

CLI Installation (pbuf)

Homebrew (macOS & Linux)

Linux & macOS (Install Script)

Using Go (go install)

Windows

Build from Source

Configuration (pbuf.yaml)

Full pbuf.yaml Schema

Field Reference

1. Vendoring from pbuf-registry

2. Vendoring from Buf Schema Registry (buf.build)

3. Vendoring from Git Repositories

Automatic go_package Patching (gen_out)

CLI Reference

Summary Table

Project & Authentication Commands

pbuf init

pbuf auth

pbuf login

pbuf vendor

Module Commands (pbuf modules)

Metadata Commands (pbuf metadata)

Drift Detection Commands (pbuf drift)

AI Coding Assistants (pbuf mcp)

Configure in Claude Code / Cursor / Antigravity (mcp.json)

Available MCP Tools

User, Bot & Permission Commands (pbuf users)

Deploying pbuf-registry

Docker Compose

Helm (Kubernetes)

Web UI (pbuf-registry-ui)

Server CLI & Background Daemons

Authentication & Access Control (RBAC & OIDC SSO)

Authentication Modes

Permission Levels

Server Configuration Reference

CI/CD Integration

GitHub Actions

GitLab CI

API Reference

Development & Contributing

Common make Targets

เครื่องมือ

คำถาม

ติดตั้ง Pbuf Registry อย่างไร?

Pbuf Registry ต้องใช้ API key ไหม?

Pbuf Registry ใช้ทรานสปอร์ตแบบใด?

Pbuf Registry ถูกตรวจสอบล่าสุดเมื่อใด?

Self-Hosted, Open-Source Protobuf Schema Registry (`pbuf-registry`)

Why `pbuf-registry`?

Automatic `option go_package` Rewriting (`gen_out`)

Multi-Source Vendoring (`pbuf-registry`, `buf.build`, and Git)

Native MCP Server for AI Coding Agents (`pbuf mcp`)

The dark-mode Vue 3 Web UI lets engineers browse registered modules, inspect `.proto` source files at any tag, explore parsed messages/services/enums/fields, and review dependency drift alerts — either in public read-only mode or authenticated via Bearer token or OIDC SSO.

Step 2 — Install the `pbuf` CLI

CLI Installation (`pbuf`)

Using Go (`go install`)

Configuration (`pbuf.yaml`)

Full `pbuf.yaml` Schema

1. Vendoring from `pbuf-registry`

2. Vendoring from Buf Schema Registry (`buf.build`)

Automatic `go_package` Patching (`gen_out`)

`pbuf init`

`pbuf auth`

`pbuf login`

`pbuf vendor`

Module Commands (`pbuf modules`)

Metadata Commands (`pbuf metadata`)

Drift Detection Commands (`pbuf drift`)

AI Coding Assistants (`pbuf mcp`)

Configure in Claude Code / Cursor / Antigravity (`mcp.json`)

User, Bot & Permission Commands (`pbuf users`)

Deploying `pbuf-registry`

Web UI (`pbuf-registry-ui`)

Common `make` Targets