Visual
Audit Sebelum Edit
Jangan mulai dari “tool apa yang mau dibuat?”. Mulai dari “software ini sebenarnya sudah bisa melakukan apa, authority-nya ada di mana, dan siapa yang boleh melakukannya?”.
- Repo, branch, SHA, active agent/worktree.
- Framework, runtime, package manager, deployment.
- Backend/database dan service/domain functions.
- Auth/session, user/workspace/tenant, RBAC.
- Existing APIs, MCP, OAuth, skills, tests.
- Secrets, audit logging, rate limit, files/storage.
Capability Map
| User outcome | Existing function | MCP primitive | Name | Scope | Risk | Approval |
|---|---|---|---|---|---|---|
| Lihat project | projectService.list | Tool | projects_list | read | low | none |
| Publish post | postService.publish | Tool | posts_publish | write | high | contextual |
| Baca spec | specStore.get | Resource | project://id/spec | read | low | none |
Checklist Audit Siap Copy
Audit current state sebelum membuat MCP:
- canonical repo / branch / SHA
- active agents / worktrees
- framework / package manager / runtime
- deployment origin
- backend / database
- auth + session model
- tenant / workspace / organization model
- RBAC / permissions
- domain/service functions
- API routes
- existing MCP/OAuth
- tests
- secret store
- rate limits
- files/storage
- audit logging
- current production state
Lalu buat capability map:
User outcome | Existing function | MCP primitive | Tool name | Scope | Risk | Approval | Input | OutputAudit Project Kamu
Mau audit project kamu untuk dijadikan MCP?
Gunakan MCP Builder Kit sebagai starter/reference production-grade.