
Security News
GitHub Actions Checkout Now Blocks Risky pull_request_target Checkouts
GitHub Actions checkout now blocks risky pull_request_target checkouts by default to help prevent pwn request supply chain attacks.
@deppon/deppon-prd-mcp
Advanced tools
私有化 PRD 生成 + 交互原型 MCP 服务,基于仓库内 deppon-prd-generator skill 模板。
http://127.0.0.1:3847):填写 PRD 要素(标题、背景、筛选字段、列表列等)→ 生成标准化 prd.mdprototype.html(含 PRD § 标注弹框)?design=1 下可 拖拽 区块/筛选项/列表列/工具栏按钮排序,改文案,移除不合适项,保存后写入 project.config.json 并同步 PRDgenerate_prd、generate_prototype、open_prd_studio 等npm install -g @deppon/deppon-prd-mcp
# 或无需全局安装,直接在 MCP 配置里用 npx
# 仅 Web 控制台
npx @deppon/deppon-prd-mcp --web-only
# MCP + Web(供 AI 工具 stdio 调用时自动拉起 Web)
npx @deppon/deppon-prd-mcp
浏览器打开 Web 控制台:http://127.0.0.1:3847
?design=1project.config.json,并重新生成 prd.md + prototype.html{
"mcpServers": {
"deppon-prd": {
"command": "npx",
"args": ["-y", "@deppon/deppon-prd-mcp@latest"],
"env": {
"DEPPON_PRD_WORKSPACE": "/绝对路径/到你的项目根目录",
"DEPPON_PRD_HTTP_PORT": "3847"
}
}
}
}
monorepo 内开发时可改用本地路径:
"command": "node", "args": ["packages/deppon-prd-mcp/dist/cli.js"]
cd packages/deppon-prd-mcp
npm run build
npm run publish:auto # npm @deppon/deppon-prd-mcp
npm run publish:registry # MCP 官方 Registry(需先 mcp-publisher login github)
mcp-publisher formula,须从 GitHub Releases 下载):# Apple Silicon Mac
curl -fL "https://github.com/modelcontextprotocol/registry/releases/latest/download/mcp-publisher_darwin_arm64.tar.gz" \
| tar xz mcp-publisher
sudo mv mcp-publisher /usr/local/bin/
# 若无 sudo,可放到 ~/.local/bin 并确保在 PATH 中
mcp-publisher --help
mcp-publisher login github(须用 GitHub 账号 chriswong1103)cd packages/deppon-prd-mcp && mcp-publisher publishRegistry 名称:io.github.chriswong1103/deppon-prd-mcp(与 package.json 的 mcpName 一致,须用 GitHub 账号 chriswong1103 登录)
src/prototypes/<slug>/
├── project.config.json # 结构化配置(可 round-trip 编辑)
├── prd.md # 标准化 PRD(默认 DP-IT 标题)
└── prototype.html # 可交互原型
| 工具 | 说明 |
|---|---|
generate_prd | 从 pageName 等要素生成 PRD 并落盘 |
generate_prototype | 从已有 slug 重新生成 prototype.html |
list_prd_projects | 列出已生成项目 |
get_prd_project | 读取项目配置与 PRD 摘要 |
open_prd_studio | 返回 Web 控制台 URL |
export_canvas_handoff | 导出 Penpot/Reframe/tldraw handoff(含 wireframe.tldr) |
| 变量 | 默认 | 说明 |
|---|---|---|
DEPPON_PRD_WORKSPACE | process.cwd() | 仓库根目录 |
DEPPON_PRD_HTTP_PORT | 3847 | Web 控制台端口 |
DEPPON_PRD_HTTP_HOST | 127.0.0.1 | 绑定地址 |
| 文档 | 说明 |
|---|---|
| Cursor + MCP 使用指南 | Agent 生成 PRD/原型、设计模式、常见问题 |
| Penpot/Reframe 画布联调 | PRD 走 deppon-prd,原型交 Penpot/Reframe MCP |
| 墨刀分析 & 演进路线图 | 墨刀 Proto2 技术反推、scene.json 规划、Phase 1 ~ 3 |
FAQs
私有化 PRD 生成 + 交互原型 MCP 服务(基于 deppon-prd-generator skill)
We found that @deppon/deppon-prd-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
GitHub Actions checkout now blocks risky pull_request_target checkouts by default to help prevent pwn request supply chain attacks.

Product
Socket now supports Custom Roles and Repository Access Permissions so organizations can control who can access specific repositories and actions.

Product
Socket MCP now lets AI assistants review org alerts, investigate threats using the Socket threat feed, and inspect package files in addition to dependency scoring.