Atlas / MCP servers / kyvjyf / KYVAutoResearch-v2

KYVAutoResearch-v2SAFE

mcp/kyvjyf/kyvautoresearch-v2

Project-based auto-research AI agent framework. Problem × Evidence Matrix, evidence grading, MCP Server. Python 3.10+. | 项目制自动研究 Agent 框架:问题 × 证据矩阵、证据分级。

Verdict
SAFE
Grade
B
Trust score
89 /100
Exposed tools
64 49r · 15w · 0d
Transport
stdio
License
MIT
Stars
1
01

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

项目制的自动研究 Agent 框架。让 AI 围绕研究主题把证据穷尽到可以下判断的程度;证据不足时,如实说出来。 Project-based Auto-Research AI Agent Framework. Exhausts evidence until a judgment can be made; honestly states "insufficient evidence" when there isn't enough.

English | 中文

[](https://github.com/kyvjyf/KYVAutoResearch-v2/releases) [](https://www.python.org/) [](https://github.com/kyvjyf/KYVAutoResearch-v2/blob/main/LICENSE) [](https://modelcontextprotocol.io/)

📖 目录 | Table of Contents

  • 项目简介 | Introduction
  • 核心概念 | Core Concepts
  • 快速开始 | Quick Start
  • 项目结构 | Project Structure
  • 设计文档 | Design Documentation
  • 边界说明 | Notes
  • 反馈 | Feedback

项目简介 | Introduction

KYVAutoResearch 是一个项目制的自动研究 Agent 框架。它不同于普通的对话式 AI,而是围绕研究主题建立问题树,用问题 × 证据矩阵追踪证据,按证据等级判定。它的核心承诺是:证据不足时,如实输出“无法判断”,绝不编造。

KYVAutoResearch is a project-based auto-research AI agent framework. Unlike standard conversational AI, it builds a problem tree around a research topic, tracks evidence using a Problem × Evidence Matrix, and makes judgments based on evidence levels. Its core promise: when evidence is insufficient, it honestly outputs "Unable to determine" instead of hallucinating.

核心概念 | Core Concepts

  • 问题 × 证据矩阵 | Problem × Evidence Matrix:追踪每一条证据与问题的对应关系,确保没有无证据的结论。
  • 双通道判定 | Dual-channel Judgment:确保证据充分且逻辑自洽。
  • 证据分级与缺口识别 | Evidence Grading & Gap Identification:自动识别证据不足的环节,拒绝在覆盖率未满 100% 时给出“已解决”的建议。
  • MCP Server + Dual Skill:包含 KYVAutoResearch2MCP,支持与 Claude Desktop 等客户端无缝集成,并配有双 Skill 设计。

快速开始 | Quick Start

Read from source at commit b2bab39557c6OBSERVED · 2026-10-11
02

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.

claude-code
claude mcp add kvy-autoresearch-v2-mcp -- uvx kvy-autoresearch-v2-mcp
claude-desktop
{
  "mcpServers": {
    "kvy-autoresearch-v2-mcp": {
      "command": "uvx",
      "args": [
        "kvy-autoresearch-v2-mcp"
      ]
    }
  }
}
03

Exposed tools (64)

49 read · 15 write · 0 destructive.

ToolRiskDescription
add_keywordswrite
add_question_dependencywrite
add_sub_questionwrite
approve_question_treeread
check_url_seenread
confirm_answeredread
create_human_requestwrite
create_projectwrite
decompose_questionsread
end_research_sessionread
exclude_documentread
exclude_evidence_itemread
export_datasetread
export_matrixread
export_question_treeread
export_reportread
get_coverageread
get_document_excerpt_by_keywordread
get_event_logread
get_evidence_itemread
get_followup_chainread
get_keyword_bankread
get_matrix_viewread
get_next_actionsread
get_pending_cellsread
get_pending_requestsread
get_project_inforead
get_question_detailread
get_question_treeread
get_questions_by_statusread
get_request_detailread
get_research_statusread
get_round_reportread
get_schema_inforead
get_search_historyread
get_search_statsread
get_storage_statsread
get_utilizationread
input_followup_questionread
input_root_questionread
list_documentsread
list_evidence_itemsread
list_projectsread
list_unanswered_questionsread
log_searchread
mark_needs_moreread
override_cellread
read_document_excerptread
register_documentread
resolve_requestread
review_root_decisionread
save_cell_verdictwrite
save_evidence_itemwrite
save_planner_actionwrite
search_documents_ftsread
search_evidence_ftsread
set_stage_sufficientwrite
start_research_sessionwrite
submit_request_batchwrite
suggest_answeredread
update_evidence_itemwrite
update_keyword_scorewrite
update_project_configwrite
update_questionwrite
04

Trust audit

SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.

LayerWhat it checksResult
L0Provenance & inventoryPASS
L1Static analysis of the codeWARN
L2Instruction surface (what it tells the agent)PASS
L3Class-specific surfacePASS
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
declared (1 observation(s))
Network
declared (2 observation(s))
Shell
declared (1 observation(s))
Dependencies
not all pinned
Secrets in source
none-found

Findings (2)

MEDIUMCode injection · code.dynamic_import · CWE-78, CWE-94, CWE-95
scripts/check.py:263
modules_cache[alias] = importlib.import_module(mod_name)
LOWSupply chain · supply.unpinned · CWE-829, CWE-1357
requirements.txt
fastmcp
Why it matters. 1 requirement(s) not pinned with ==
Fix. pin exact versions

Gates applied: no_behavioural_pass.

Audited 2026-10-11 · audit v0.4.1 · source sha b2bab39557c6full audit observations/trust-audit/mcp-server/kyvjyf__kyvautoresearch-v2.json · Report an issue / request a re-scan
05

Audit history

Every audit this server has had. A grade with a past is a grade somebody is still checking.

DateSourceVerdictGradeScoreChange
2026-10-11b2bab39557c6SAFEB89first audit
06

Questions

What is the KYVAutoResearch-v2 MCP server?

Project-based auto-research AI agent framework. Problem × Evidence Matrix, evidence grading, MCP Server. Python 3.10+. | 项目制自动研究 Agent 框架:问题 × 证据矩阵、证据分级。

What tools does KYVAutoResearch-v2 expose?

64 in total: 49 read-only, 15 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.

Is KYVAutoResearch-v2 safe to connect to an agent?

The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.

What credentials does KYVAutoResearch-v2 need?

No credential environment variables were found in its source, so it appears to need none.

How does KYVAutoResearch-v2 run?

It speaks stdio, so it runs as a local process your client starts. It is published on PyPI as kvy-autoresearch-v2-mcp.

How current is this page?

The grade is for one exact copy of the source (b2bab39557c6), read on 2026-10-11. The repository is watched and re-audited when it changes.

Advertisement