# MCP External Sources
# ====================
# Fuentes confiables para MCP servers externos
#
# Version: 1.0.0
# Fecha: 2026-01-04

version: "1.0.0"
last_updated: "2026-01-04"

# ============================================================================
# FUENTES CONFIABLES
# ============================================================================
# Lista de repositorios/organizaciones confiables para MCP servers

trusted_sources:
  # Nivel 1: Oficial (maxima confianza)
  official:
    - name: "Anthropic Official"
      url: "https://github.com/anthropics"
      description: "MCP servers oficiales de Anthropic"
      trust_level: "official"
      auto_approve: true

    - name: "Model Context Protocol"
      url: "https://github.com/modelcontextprotocol"
      description: "Repositorio oficial del protocolo MCP"
      trust_level: "official"
      auto_approve: true

  # Nivel 2: Comunidad Verificada (alta confianza)
  community_verified:
    - name: "MCP Community Servers"
      url: "https://github.com/mcp-community"
      description: "Servidores MCP de la comunidad verificados"
      trust_level: "verified"
      auto_approve: false
      requires_review: true

  # Nivel 3: Terceros (requiere evaluacion completa)
  third_party: []

# ============================================================================
# PROCESO DE EVALUACION
# ============================================================================

evaluation_process:
  steps:
    1_identify:
      description: "Identificar MCP server de interes"
      actions:
        - Verificar fuente en trusted_sources
        - Revisar repositorio y documentacion
        - Verificar actividad y mantenimiento

    2_security_review:
      description: "Revision de seguridad"
      actions:
        - Revisar dependencias (npm audit)
        - Buscar vulnerabilidades conocidas
        - Verificar permisos requeridos
        - Revisar codigo fuente si es necesario

    3_functionality_test:
      description: "Prueba de funcionalidad"
      actions:
        - Instalar en ambiente de prueba
        - Ejecutar tests incluidos
        - Verificar herramientas funcionan
        - Documentar comportamiento

    4_approval:
      description: "Aprobacion final"
      actions:
        - Documentar en _registry.yml
        - Agregar a external/installed/
        - Actualizar documentacion

  criteria:
    mandatory:
      - "Codigo fuente disponible"
      - "Sin vulnerabilidades criticas"
      - "Documentacion adecuada"
      - "Tests incluidos"
    recommended:
      - "Mantenimiento activo (< 6 meses)"
      - "Mas de 10 estrellas en GitHub"
      - "Issues respondidos"

# ============================================================================
# MCP SERVERS EXTERNOS INSTALADOS
# ============================================================================

installed: []
  # Formato cuando se instale uno:
  # - name: "nombre-del-mcp"
  #   source: "url del repo"
  #   version: "1.0.0"
  #   installed_date: "2026-01-04"
  #   installed_by: "@PERFIL_MCP_INTEGRATOR"
  #   location: "external/installed/nombre-del-mcp"
  #   review_notes: "Notas de la evaluacion"

# ============================================================================
# MCP SERVERS PENDIENTES DE EVALUACION
# ============================================================================

pending_evaluation: []
  # Formato:
  # - name: "nombre"
  #   source: "url"
  #   requested_by: "quien lo solicito"
  #   requested_date: "fecha"
  #   reason: "por que se necesita"

# ============================================================================
# MCP SERVERS RECHAZADOS
# ============================================================================

rejected: []
  # Formato:
  # - name: "nombre"
  #   source: "url"
  #   rejected_date: "fecha"
  #   reason: "razon del rechazo"