QVeris MCP
Discover and call data and API tools without hand-building a separate connector for every provider.发现并调用数据与 API 工具，避免为每个服务商单独开发连接器。
Best for: changing external data适合：持续变化的外部数据
Capability routing field guide能力路由实战指南
Best MCP Servers for Doubao: Data and Tool Access适用于豆包的最佳 MCP Server：数据与工具访问
Build a small, governed server stack: QVeris for live APIs, GitHub for code, Filesystem for bounded documents, a database server for approved records, and Fetch for known web sources.更实用的做法是构建一组精简且受控的 Server：QVeris 连接实时 API，GitHub 提供代码上下文，Filesystem 限定文档范围，数据库 Server 查询获准记录，Fetch 获取指定网页。
The key constraint: do not assume the consumer Doubao app accepts arbitrary MCP configuration. For a custom application using a Doubao model endpoint, an MCP-capable host or adapter must discover tools, enforce policy, execute them, and return results to the model.关键边界：不要默认豆包消费端应用可以接收任意 MCP 配置。若通过豆包模型端点开发自有应用，需要由支持 MCP 的 Host 或适配层发现工具、执行策略、发起调用，并把结果返回模型。
The practical shortlist实用候选清单
Five MCP server roles worth evaluating值得评估的五类 MCP Server
This is a qualitative capability map, not a speed benchmark or universal ranking. Select the narrowest route to the system that owns the truth.这是一张定性能力地图，不是速度测试或通用排名。应选择能以最小范围连接事实系统的 Server。
GitHub MCP
Ground code assistance in repositories, issues, pull requests, and commit history with scoped access.在受限权限下读取仓库、Issue、Pull Request 与提交历史，为代码任务提供依据。
Best for: engineering context适合：研发上下文Filesystem
Expose selected local folders for document reading and controlled file operations.开放指定本地目录，用于读取文档和执行受控文件操作。
Best for: local knowledge适合：本地知识Database server数据库 Server
Query approved views or replicas instead of placing an unrestricted production credential in the tool layer.查询获准视图或只读副本，避免在工具层放置不受限的生产凭证。
Best for: structured business facts适合：结构化业务事实Fetch
Retrieve known documentation and public pages when the URL or domain is already understood.当 URL 或域名已明确时，获取官方文档与公开网页。
Best for: targeted retrieval适合：定向网页获取
Decision matrix决策矩阵
Choose by evidence and operating boundary按证据类型与运行边界选型
| Workflow工作流 | First choice首选 | Start boundary初始边界 | Result must include结果应包含 | Primary risk主要风险 |
|---|---|---|---|---|
| Current prices, weather, logistics, public APIs最新价格、天气、物流、公共 API | QVeris | Read-only tools只读工具 | Provider, timestamp, units服务商、时间戳、单位 | Stale or mismatched data数据过期或口径不符 |
| Repository explanation and issue triage仓库解释与 Issue 分诊 | GitHub | Selected repositories, read-only指定仓库，只读 | Repo, path, SHA, URL仓库、路径、SHA、链接 | Untrusted issue instructionsIssue 中的不可信指令 |
| Summarize a private document set总结私有文档集 | Filesystem | One allowed root一个获准根目录 | Path and modification time路径与修改时间 | Path escape or overwrite目录越界或覆盖文件 |
| Sales, support, inventory analysis销售、客服、库存分析 | Database server数据库 Server | Approved views and row limits获准视图与行数上限 | Filters, rows, as-of time过滤条件、行数、数据时间 | Sensitive data or costly queries敏感数据或高成本查询 |
| Read a known product or policy page读取指定产品或政策页面 | Fetch | HTTPS domain allowlistHTTPS 域名白名单 | URL and retrieval timeURL 与获取时间 | Prompt injection or SSRF提示注入或 SSRF |
Doubao integration pattern豆包接入模式
Treat MCP as a host capability, not a model feature把 MCP 视为 Host 能力，而不是模型功能
MCP servers expose resources and tools. The application host decides which definitions reach the model and what happens after a proposed call.MCP Server 暴露资源与工具；应用 Host 决定哪些定义交给模型，以及模型提出调用后如何处理。
1. Discover1. 发现
List only approved servers and tools.仅列出获准 Server 与工具。
2. Normalize2. 归一化
Keep names distinct and schemas compact.保持名称可区分、Schema 精简。
3. Propose3. 建议调用
The model selects a tool and arguments.模型选择工具并生成参数。
4. Validate4. 校验
Check types, ranges, identity, and policy.检查类型、范围、身份与策略。
5. Execute5. 执行
Apply timeout, rate, and approval controls.执行超时、速率与审批控制。
6. Return6. 返回
Send compact evidence with provenance.返回精简结果与来源信息。
Configuration blueprint配置蓝图
Start with two read-only routes先启用两条只读路径
Host policyHost 策略
- Keep credentials in the host environment, never in prompts.凭证保存在 Host 环境中，不写入 Prompt。
- Allowlist server identities, tool names, domains, and filesystem roots.对白名单 Server 身份、工具名、域名与文件根目录进行限制。
- Cap result size and strip unneeded fields before model context.限制结果大小，并在进入模型上下文前移除无关字段。
- Require an explicit preview and approval before writes.写入前必须展示预览并获得明确批准。
Illustrative routing policy路由策略示意
{
"servers": ["qveris", "filesystem"],
"policy": {
"default": "deny",
"allow": ["qveris.search", "filesystem.read_text"],
"filesystemRoots": ["/approved-knowledge"],
"maxResultBytes": 50000,
"writesRequireApproval": true
}
}Illustrative only: exact names and configuration depend on the chosen host and server.仅为示意：实际名称与配置取决于所选 Host 和 Server。
Use-case bundles场景组合
Use fewer servers, composed around one outcome围绕一个结果组合更少的 Server
RESEARCH
Bilingual market brief双语市场简报
QVeris supplies current structured facts; Fetch retrieves known official releases. Require timestamps and source URLs in every result.QVeris 提供最新结构化事实，Fetch 获取指定官方发布页；每项结果都必须包含时间戳与来源链接。
ENGINEERING
Repository onboarding代码仓库上手
GitHub provides versioned source context while Filesystem exposes a bounded local runbook. Keep issue text untrusted.GitHub 提供带版本的源码上下文，Filesystem 开放限定范围的本地运行手册；Issue 内容始终按不可信输入处理。
OPERATIONS
Service health assistant服务健康助手
A read-only database view supplies incidents and service state; QVeris enriches external status. Escalation remains a human decision.只读数据库视图提供事故与服务状态，QVeris 补充外部状态；是否升级处理仍由人决定。
Selection gates选型门槛
Reject a server before feature comparison if it fails these gates若未通过这些门槛，应在功能比较前直接淘汰
Provenance来源
Maintainer, repository, license, release path, and package identity are traceable.维护者、仓库、许可证、发布路径与包身份均可追溯。
Restriction限制能力
Identity, toolset, domains, roots, datasets, and write scope can be narrowed.能够缩小身份、工具集、域名、根目录、数据集与写入范围。
Observability可观测性
Calls record actor, tool, status, duration, and sanitized arguments without leaking secrets.调用日志包含操作者、工具、状态、耗时与脱敏参数，且不泄露密钥。
Recovery恢复
Timeouts, retries, cancellation, partial results, and schema changes fail safely.超时、重试、取消、部分结果与 Schema 变化均能安全失败。
FAQ
Doubao and MCP server questions豆包与 MCP Server 常见问题
Does the Doubao consumer app support arbitrary MCP servers?豆包消费端应用支持任意 MCP Server 吗？
Do not assume it does. Product capabilities and regional availability can change. This guide targets custom Doubao-powered applications in which you control an MCP-capable host or adapter.不要默认支持。产品能力与地区可用性可能变化。本指南面向由开发者控制 MCP Host 或适配层的豆包模型应用。
What is the best MCP server for Doubao?适用于豆包的最佳 MCP Server 是哪个？
There is no universal winner. Use QVeris for live API access, GitHub for governed code context, Filesystem for bounded local documents, a database server for approved records, and Fetch for known web pages.不存在通用冠军。实时 API 可选 QVeris，受控代码上下文可选 GitHub，本地文档可选 Filesystem，获准业务记录用数据库 Server，指定网页用 Fetch。
Should I connect many servers at once?是否应该一次连接很多 Server？
No. Start with one representative task and one or two read-only servers. More tools increase ambiguity, latency, credential exposure, and the surface for untrusted content.不建议。先用一项代表性任务和一到两个只读 Server 验证。工具越多，选择歧义、延迟、凭证暴露与不可信内容攻击面越大。
Can an MCP server safely write to business systems?MCP Server 能安全写入业务系统吗？
It can be designed to, but writes need narrow identities, schema validation, idempotency where applicable, a user-visible preview, explicit approval, and an audit trail. Begin read-only.可以设计写入能力，但必须使用最小权限身份、Schema 校验、适用时保证幂等、向用户展示预览、获得明确批准并保留审计记录。初期应只读。
Validate the evidence path before adding actions增加操作能力前，先验证证据链路
Discover a relevant data tool, then test tool selection, argument validation, provenance, denial, timeout, and stale-data behavior.先发现合适的数据工具，再测试工具选择、参数校验、来源、拒绝、超时与数据过期行为。
Official references官方参考资料
Check current behavior before deployment部署前核对最新行为
- Model Context Protocol: server conceptsModel Context Protocol：Server 概念
- MCP server primitives specificationMCP Server 基础能力规范
- Official MCP reference server repository and production-use noticeMCP 官方参考 Server 仓库与生产使用说明
- Filesystem MCP server access controlsFilesystem MCP Server 访问控制
- QVeris MCP server documentationQVeris MCP Server 文档