io.github.MadeByFYI/madeby
Disclose AI authorship of code per the ACO standard — tools for AI coding agents.
Installation
Ajoutez ceci à la configuration MCP de votre client (Claude Desktop : claude_desktop_config.json ; Cursor : .cursor/mcp.json ; VS Code et les autres utilisent la même forme « mcpServers »).
madebyclaude mcp add madeby -- npx -y madeby@0.3.12 mcp
{
"mcpServers": {
"madeby": {
"command": "npx",
"args": [
"-y",
"madeby@0.3.12",
"mcp"
]
}
}
}
Documentation
Tirée du README du projet sur GitHub, actualisée chaque semaine. Les liens ouvrent GitHub.
Sommaire
MadeBy
Who made this thing? — a verifiable content-provenance layer, starting with code.
This is the v2 build. The design lives in the spec docs at the repo root:
ARCHITECTURE.md— asker-pull spine, hash-as-join-key, attestation standard, invariantsTESTING.md— the trust/QA doctrine (publishable conformance; verify without open source)
The first attempt is archived under archive/v1/ — reference only.
The CLI — madeby
The product ships as a zero-infra CLI that runs against your local git history. Disclosure, not detection: it reports what contributors put on the record and never guesses whether code is AI.
npx madeby coverage # the scoreboard: how much of your repo's authorship is disclosed
npx madeby init # drop the ACO AGENTS.md convention + a CI disclosure check into your repo
npx madeby check # the gate: do commits meet .madeby/policy.json? (advisory by default)
npx madeby who # made by whom? what's on the record for a file or the whole repo
npx madeby ai # an AI agent discloses it authored HEAD (Authored-by-ai:)
npx madeby me # affirm you authored HEAD yourself (--with-ai [tool] for assisted)
madeby coverage is the maintainer's scoreboard — known (disclosed) vs unknown authorship, the
human/with_ai/ai mix of the known, and the asserted-vs-verified trust split, as a labeled estimate.
Built on ACO, the open Authorship Certificate of Origin standard. Full docs:
packages/cli · on npm: madeby.
Repo layout
apps/web/ Next.js web app (Vercel)
packages/core/ Shared deterministic trust logic — canonicalization,
fingerprinting, tier resolution + conformance vectors.
This is the publishable / open boundary (TESTING.md §4).
workers/badge/ Cloudflare Worker — live-served badge SVGs (stub)
services/ingestion/ Python (Modal) — public-git ingestion + compute (stub)
Develop
pnpm install
pnpm dev # runs apps/web at http://localhost:3000
pnpm typecheck # tsc across packages
pnpm build # build all packages
pnpm test # trust-gate suite (conformance vectors land in #17)
Requires Node ≥ 22 and pnpm 10.
Provisioning (handoff)
The skeleton builds with no external services. To run against real infrastructure, copy
.env.example → .env and fill in the values listed there.
Provenance (we dogfood)
This repo records its own provenance from commit zero — signed commits, Co-Authored-By: trailers,
and a .madeby/ span manifest. See PROVENANCE.md; verify with
pnpm provenance:verify-trailers.
Tickets
Work is tracked as GitHub issues, organized under epics (#1 dogfood, #4 foundations, #5 read-side, #6 producer-push, #16 trust-QA).
Questions fréquentes
Qu'est-ce que io.github.MadeByFYI/madeby ?
Disclose AI authorship of code per the ACO standard — tools for AI coding agents.
Comment installer io.github.MadeByFYI/madeby ?
Il s'exécute sur votre machine. Dans Claude Code : claude mcp add madeby -- npx -y madeby@0.3.12 mcp. Pour les autres clients, collez la configuration JSON de cette page dans leurs réglages MCP.
Faut-il une clé API pour io.github.MadeByFYI/madeby ?
Son entrée au registre n'indique aucune clé ni secret obligatoire. Certaines fonctions peuvent tout de même demander un compte auprès du service auquel il se connecte.
io.github.MadeByFYI/madeby est-il open source ?
Son code est public sur GitHub, mais le dépôt ne déclare pas de licence standard.
Qui maintient io.github.MadeByFYI/madeby ?
Il est publié par MadeByFYI. AI.tn le référence sans le maintenir ni le recommander.
Issu du registre MCP officiel. Être listé n'est pas une recommandation : vérifiez le code et les permissions d'un serveur avant de lui donner accès à vos données.