接入你的智能体
发布者自己的命令。不是 PlugMCP 端点。
用我们的密钥与日志托管一份副本。
npx -y @pipelex/[email protected]Claude Code 没有针对本地命令的安装链接。复制下方命令并在终端中运行。
claude mcp add pipelex-mcp -- npx -y @pipelex/mcp@0.28.0在终端中运行。
{ "mcpServers": { "pipelex-mcp": { "command": "npx", "args": [ "-y", "@pipelex/[email protected]" ] } }}claude_desktop_config.json
远程 URL 还是本机命令？ 两种安装方式的区别
来自发布者
Pipelex lets you build AI methods with your coding agent and run them anywhere: as an MCP for chatbots, as a webapp for people, or via API for your software. This repository holds the Pipelex tools, which your coding agent gets with the Pipelex plugin: they run your methods and also work with the method files in your project.
The MCP server inside the Pipelex plugin: validate, prepare and run AI methods on Pipelex from a coding agent.
1. Sign up at app.pipelex.com.
2. Install the Pipelex plugin in your coding agent. The plugin gives your agent the skills that build methods, run them and put them in your software, a hook that checks every edit, and the Pipelex tools.
claude plugin marketplace add Pipelex/pipelex-plugins
claude plugin install pipelex@pipelex-plugins
Claude Code asks for an API key when you enable the plugin, and stores it in your OS keychain — create one in your console at app.pipelex.com. The skills, the hook that checks every edit and the Pipelex tools load with it. The plugin's hook and the Pipelex tools run on Node.js, so you need Node.js on your PATH.
Claude Code also loads what you have added to your Claude account, so if you added the Pipelex MCP to Claude, Claude Code has it too. An agent with the plugin does not need the Pipelex MCP, and there is nothing to turn off: when both are present, the Pipelex MCP defers to the plugin's tools.
codex plugin marketplace add Pipelex/pipelex-plugins
export PIPELEX_API_KEY=plx_sk_... # create one in your console at app.pipelex.com
Restart Codex, run /plugins to install pipelex, and trust the plugin hook on first run. Requires Codex 0.141 or later. The plugin's hook and the Pipelex tools run on Node.js, so you need Node.js on your PATH.
3. Ask your agent for the method you want.
Design a method that reads an invoice PDF and returns the supplier, the total and the line items. Then run it on
~/Downloads/invoice.pdfand save it to my Pipelex account.
/pipelex-design writes the method, the hook checks it on every edit, /pipelex-run starts it and prints a run id you can come back to, and /pipelex-catalog saves it to your account, where your chatbot can run it too.
Chatbots — ChatGPT, Claude — take the Pipelex MCP instead, a connector for chatbots that this repository does not hold: add it in your chatbot's settings by its address, https://mcp.pipelex.com/mcp.
Other hosts, and the reference for developers, start at Which server, for which host.
Next: what Pipelex is · documentation · your console · Discord
A host needs one of two things, not both: the Pipelex plugin on a coding agent, the Pipelex MCP on a chatbot. The table applies that rule host by host. You don't need both says what happens when the Pipelex MCP added in Claude reaches Claude Code without anyone choosing it.
A host that spawns MCP servers but takes no plugin, such as Cursor, can run the plugin's MCP server by hand: Registering the workshop in a host gives its configuration.
This repository is the workshop, the MCP server inside the Pipelex plugin (server name pipelex-plugin): an npm-distributed stdio server (@pipelex/mcp, bin pipelex-mcp) that coding-agent hosts spawn via npx. It wraps the Pipelex API through the @pipelex/sdk PipelexApiClient. Its tools are mthds_*: they find a saved method and the files your organization holds, validate a method, template its inputs, generate typed code for it, prepare its files, run it, look up the model references it can name, save it to the catalog as a draft and pull it back, and publish the draft as a version when you ask. Its headline feature is reading methods from disk instead of having the model hand-copy their contents: a method's folder, given as method_dir, or its files, given as { path } items. It is tools-first and ships no views on any host, so it reports structured results and text summaries directly.
The Pipelex MCP for chatbots, at mcp.pipelex.com, is the hosted Pipelex connector, a separate product with tools of its own, named pipelex_*: see Chat hosts use the Pipelex connector.
The tools reference gives each tool's input, result and behavior.
MCP tool arguments are generated token-by-token by the host LLM — there is no other channel from the conversation to the server. So submitting a bundle's .mthds contents inline means the model re-emits every file as output tokens (slow on large bundles, re-paid every repair-loop iteration and every tool in the chain, and not guaranteed byte-identical to what's on disk). The workshop sidesteps this: the host spawns it in your workspace, so it can read files from disk given only a path.
The workshop's files-taking tools accept two item forms — inline content or a file path:
type SubmittedFileInput = { content: string; uri?: string | null } | { path: string };
The workshop reads { path } items from disk before invoking the capability — near-constant token cost regardless of the method's size, byte-accurate reads, and real provenance (each file is sent under its path in the method's tree, so diagnostics locate to files you can open and edit). Inline { content, uri? } items stay accepted, for a .mthds file the agent holds only in the conversation. An item is one arm or the other; on a malformed item carrying both keys, content wins (first-match union semantics) and path is ignored.
A method's folder. For a method on disk, the method-taking tools take its folder as method_dir instead of a file list. The workshop sends the folder's whole tree, the same tree mthds_save_method saves: its .mthds files, its templates, its Python modules and its data, and lists every file it sent in the result. Which files belong to it is the MTHDS standard's rule: files whose path has a segment starting with a dot, __pycache__/ and node_modules/ directories, Python virtual environments, nested repositories and packages, and whatever a .gitignore inside the folder excludes are not part of it, nor is a run's inputs.json or inputs.toml, and a symbolic link is refused. The folder must sit inside the working directory and hold a .mthds file at its top, and its tree is held to the limits the Pipelex deployment announces. The tool reference has the rule.
A list of files is one tree too. The { path } items keep where they sit relative to one another: the tree is rooted at the deepest directory holding them all, or at the working directory when the list also holds inline contents, so a method whose PipeDocGen steps fill a template, an .html file for a PDF or the .xlsx, .docx or .pptx file itself, lists it beside its .mthds files where the step's template_file leads: [{ path: "invoice.mthds" }, { path: "templates/invoice.xlsx" }]. A template is read as bytes and never travels through the conversation. A method needing any other file is sent as its folder.
Secrets stay home. Every tool that sends a method's files, from a folder or a list, refuses one that looks like it holds a key, a key file or a well-known key format, before anything is sent, naming the file and never the key. The tool reference has the rule and its limits.
Path trust boundary. { path } values resolve relative to the server's working directory. The { path } items of files are contracted to a fixed list of extensions, .mthds and the template suffixes .html, .xlsx, .docx and .pptx, so any other extension is rejected before any filesystem access (a prompt-injected .env or key-file path is never opened), and the resolved target (symlinks followed) must live inside the working-directory subtree. A wrong extension and an escape come back as client.argument_invalid problems located at the item (files[i].path), and a missing file, a non-regular file and one that cannot be read as client.file_unreadable problems naming the path.
The workshop is published on npm as @pipelex/mcp. You do not install it: a host spawns it on demand in your project with the command below, and on Claude Code and Codex the Pipelex plugin does that for you. The @latest makes npx start the newest release rather than a copy it cached earlier. Run by hand, it prints nothing and waits for a host on its standard input.
npx -y @pipelex/mcp@latest
It needs Node.js 24.14.1 or later, and a plx_sk_ Pipelex API key, since every tool calls the hosted Pipelex API. Log in once in a terminal with npx -y @pipelex/mcp@latest login: it signs you in at app.pipelex.com in your browser, checks the key the app creates and saves it in ~/.pipelex/.env, which the workshop reads whenever its host passes no PIPELEX_API_KEY, from its next tool call. On a machine whose browser cannot reach the command, such as over SSH, npx -y @pipelex/mcp@latest login --paste takes a key you paste instead. Or create a key on the Developer page of app.pipelex.com and set it as PIPELEX_API_KEY in the host's configuration, which wins over the saved one. The directory the host starts it in is the boundary for everything it reads and writes on disk. Registering the workshop in a host gives the login's details, the configuration for each host, every environment variable the workshop reads, and the rules of that boundary.
ChatGPT, claude.ai and Claude Desktop do not run this server. They add the Pipelex connector, the hosted Pipelex MCP, by its address:
https://mcp.pipelex.com/mcp
There is nothing to install and no key to paste: the host walks you through signing in with your Pipelex account, and your signed-in session authorizes every call the connector makes. If you have no Pipelex account yet, create one at app.pipelex.com before you add the connector, since signing up there also sets up the organization every call works in. The connector is a separate product with its own tools, and this repository does not hold it.
On a coding agent, prefer the workshop, which the Pipelex plugin brings — see Which server, for which host.
A chat host takes the connector, and a coding agent takes the workshop through the Pipelex plugin; no host needs both. The two share no tool name, so a host that has both can tell them apart, and the workshop's instructions tell the model to use its mthds_* tools for all method work whenever the connector's pipelex_* tools are also present, and never to mix the two. The connector runs on your sign-in and the workshop on an API key, and the two can select different organizations: a method saved from the workshop is visible from the connector only when both select the same one.
The way to end up with both without choosing it: the connector added in claude.ai syncs into Claude Code automatically. A user signed into claude.ai with the connector enabled gets its tools in coding sessions beside the workshop's. That is harmless, but it doubles the tool list for no added capability, so you can turn the connector off for those sessions:
/mcp is the entry point. A connector you haven't signed into is collapsed behind a "Show unused connectors" row (Claude Code v2.1.161+) — expand it to find Pipelex.deniedMcpServers in .claude/settings.json.Avoid disableClaudeAiConnectors: true for this. It turns off the Pipelex connector, but also every other connector on your Claude account, such as Gmail, Google Drive and Calendar, and those are what an agent uses to fetch a method's inputs from your mail or files and to deliver its results.
User-Agent every request to the Pipelex API carries, naming this server and the host behind it.The repository is one package at its root, @pipelex/mcp, whose sources are under src/: the server and, under src/capabilities/, the capability core it is built on. To work on it, clone it, then, from the root:
make install # install the dependencies
make check # lint, formatting, the text budgets, the build and typecheck
make test # the hermetic test suite, which never touches the network
A coding agent runs make agent-test instead of make test: the same suite, with its output shown only when a test fails. make dev-local runs the workshop from source. Developing pipelex-mcp covers the layout, the live test suites against the Pipelex API, and how the workshop is versioned and released.
@pipelex/mcp is licensed under the Elastic License 2.0 (ELv2), a source-available license. You may run it for your own team or company, on your own infrastructure or in your own cloud account. What the Elastic License 2.0 rules out is offering others a remote MCP server through which they run the methods of their choice, their own or a catalog's. See LICENSE for the full terms, including notices and redistribution, and the license page for how Pipelex reads them.
The MCP server inside the Pipelex plugin: validate, prepare and run AI methods on Pipelex from a coding agent.
{ "mcpServers": { "pipelex-mcp": { "command": "npx", "args": [ "-y", "@pipelex/[email protected]" ] } }}工具
暂无工具列表。远程服务器在首次健康检查后会获得工具列表。
常见问题
在本页复制适用于 Cursor、Claude Desktop、Claude Code 或 VS Code 的 stdio 配置。它使用发布者的安装方式，而不是 PlugMCP 代理。
此记录未列出必需的环境变量。
@pipelex/mcp 通过 stdio 在本地运行。
上次检查时间：2026-11-14。 The MCP server inside the Pipelex plugin: validate, prepare and run AI methods on Pipelex from a coding agent.