io.github.octoryn/octopus-blackboard
NPM · OCTOPUS-BLACKBOARD
Shared memory & coordination for AI coding agents — a blackboard, not an orchestrator.
Available components
Last scanned (21 hours ago)
Scores higher than 97% of npm servers
Category Memory and Knowledge
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →
Supply Chain Security98
- No malware found by supply-chain analysis.Pass
- No known CVEs affecting this package version or its production dependencies.Pass
- No install/post-install scripts declared.Pass
- 55 of 142 dependencies flagged as unhealthy (1 deprecated). View diagnostics → Partial
Provenance & Transparency100
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Cryptographically verified build provenance (signed, bound to octoryn/octopus-blackboard). View diagnostics → Pass
- Clear OSI-approved license (Apache-2.0).Pass
- Actively maintained (last published 123 days ago).Pass
- Publishes a security disclosure policy (SECURITY.md).Pass
Schema Quality & AI Usability81
- AI-judged instruction clarity (excellent).Pass
- Tool/resource definitions use about 2255 tokens (~59/item across 38 items; 38 tools + 0 resources), lean.Pass
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management97
- Stability observed for 29 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage82
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 47% of tool parameters carry a description.Partial
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 38 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 38 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 3 Nov 26 −1
- Stability: pass → 0.93 functional
- 28 Oct 26 +1
- Stability: 0.97 → pass security
- 26 Oct 26 −1
- Stability: pass → 0.93 functional
- 20 Oct 26 +1
- Stability: 0.97 → pass security
- 19 Oct 26 −1
- Stability: pass → 0.97 functional
- 17 Oct 26 +2
- Stability: 0.87 → pass security
- 16 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 83 to 87. That category is still filling its 30-day observation window: 25 days of observed history at the previous scan, 26 at this one. The score rises as the window fills, whether or not the server changes.
- 14 Oct 26 −3
- Stability: pass → 0.80 functional
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 4 Nov 2026 · Analysed npm/octopus-blackboard@0.3.1
Provenance Verified
A signed build attestation was found and verified, binding this exact artifact to the source repository it claims to come from.
| Result | Verified |
|---|---|
| Ecosystem | npm |
| Reason | Verified |
| Discovered via | Registry attestation endpoint |
| Source repo | octoryn/octopus-blackboard |
| Certificate issuer | https://token.actions.githubusercontent.com |
| Certificate SAN | https://github.com/octoryn/octopus-blackboard/.github/workflows/release.yml@refs/tags/v0.3.1 |
| Rekor log index | 2059599747 |
| Predicate type | SLSA build provenance https://slsa.dev/provenance/v1 |
| Subject digest | sha512:ccdac79b4a94ff783f4304f0a403589794fdcbc90638fa1d83f979b88284fe6818e33faec7fb29ef001a7df1aa4d545aba5d6a07daa58e535312a6198 |
Background: How many MCP packages publish verified provenance →
Dependencies 142 packages
| Packages resolved | 142 |
|---|---|
| Deprecated | 1 |
| Stale | 54 |
| Tree resolution | Complete |
Background: SBOMs and build attestations, explained →
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
board_assign ~101
Assign a task to an agent and notify them — records the assignee AND leaves a 'please look at task #N' message in that agent's inbox. Passive: the board records the ask; the agent reads its inbox and decides to act. Never launches the agent.
| Name | Type | Req | Description |
|---|---|---|---|
| agent | string | – | acting agent identity (defaults to OCTOBOARD_AGENT) |
| ref | string | yes | task key or number |
| to | string | yes | agent to notify |
No output schema declared.
No examples provided.
board_attribute ~71
Record a single attribution (commit + optional file) to a human or AI actor.
| Name | Type | Req | Description |
|---|---|---|---|
| actorType | string | – | – |
| agent | string | – | acting agent identity (defaults to OCTOBOARD_AGENT) |
| file | string | – | – |
| name | string | – | – |
| rev | string | yes | – |
No output schema declared.
No examples provided.
board_blame ~53
Blame → narrative: trace a file line back to the session that introduced it and surface that session's other work, decisions, and handoffs.
| Name | Type | Req | Description |
|---|---|---|---|
| file | string | yes | – |
| line | number | yes | – |
No output schema declared.
No examples provided.
board_check ~119
Governance gate: assert policy over commits and report pass/fail plus violations. Read-only — reports, does not block. Use in CI to keep unreviewed AI work off a branch.
| Name | Type | Req | Description |
|---|---|---|---|
| range | string | – | commit range, e.g. main..HEAD (default: all attributed commits) |
| requireAttribution | boolean | – | fail if a scoped commit has no attribution |
| requireHumanReview | boolean | – | fail if an AI commit lacks a human review |
| verifyChain | boolean | – | fail if the timeline hash chain is broken |
No output schema declared.
No examples provided.
board_claim ~83
Claim a task by key so other agents know you own it. If another agent already holds it, the response reports the conflict (the board records but does not block).
| Name | Type | Req | Description |
|---|---|---|---|
| agent | string | – | acting agent identity (defaults to OCTOBOARD_AGENT) |
| key | string | yes | task key, e.g. trust-layer-policy-schema |
| title | string | – | – |
No output schema declared.
No examples provided.
board_decision ~56
Record a decision and its rationale so other agents see what was decided and why.
| Name | Type | Req | Description |
|---|---|---|---|
| agent | string | – | acting agent identity (defaults to OCTOBOARD_AGENT) |
| rationale | string | – | – |
| title | string | yes | – |
No output schema declared.
No examples provided.
board_evidence ~76
Attach evidence (file path, URL, log, test run) supporting some work.
| Name | Type | Req | Description |
|---|---|---|---|
| agent | string | – | acting agent identity (defaults to OCTOBOARD_AGENT) |
| note | string | – | – |
| ref | string | yes | – |
| target | string | – | what it supports, e.g. task:auth-mw |
No output schema declared.
No examples provided.
board_explain ~33
Explain a commit: its AI attribution, reviews, and related decisions.
| Name | Type | Req | Description |
|---|---|---|---|
| rev | string | – | defaults to HEAD |
No output schema declared.
No examples provided.
board_export ~56
Export a portable attribution bundle (attributions, reviews, sessions, decisions) for a commit range, so attribution survives push/PR into a team board or CI.
| Name | Type | Req | Description |
|---|---|---|---|
| range | string | – | commit range (default: all attributed commits) |
No output schema declared.
No examples provided.
board_file_changed ~77
Record that you touched a file. If a task key is given, the response reports files other agents already changed for that task (conflict awareness).
| Name | Type | Req | Description |
|---|---|---|---|
| agent | string | – | acting agent identity (defaults to OCTOBOARD_AGENT) |
| change | string | – | – |
| path | string | yes | – |
| task | string | – | – |
No output schema declared.
No examples provided.
board_handoff ~86
Hand off work to another agent with a summary of the state at handoff.
| Name | Type | Req | Description |
|---|---|---|---|
| agent | string | – | acting agent identity (defaults to OCTOBOARD_AGENT) |
| context | string | – | – |
| openQuestions | array | – | – |
| relatedFiles | array | – | – |
| summary | string | yes | – |
| task | string | – | – |
| to | string | yes | – |
No output schema declared.
No examples provided.
board_handoffs ~48
Handoffs left FOR you — the work another agent passed to you, with context and open questions.
| Name | Type | Req | Description |
|---|---|---|---|
| agent | string | – | acting agent identity (defaults to OCTOBOARD_AGENT) |
No output schema declared.
No examples provided.
board_heartbeat ~47
Stamp the active session as alive (real-time liveness, so other agents can tell active from stale).
| Name | Type | Req | Description |
|---|---|---|---|
| agent | string | – | acting agent identity (defaults to OCTOBOARD_AGENT) |
No output schema declared.
No examples provided.
board_import ~40
Import an attribution bundle (as produced by board_export) into this board. Idempotent.
| Name | Type | Req | Description |
|---|---|---|---|
| bundle | object | yes | the bundle object from board_export |
No output schema declared.
No examples provided.
board_inbox ~54
Read what's waiting for you: messages (addressed or broadcast) and handoffs left for you.
| Name | Type | Req | Description |
|---|---|---|---|
| agent | string | – | acting agent identity (defaults to OCTOBOARD_AGENT) |
| includeRead | boolean | – | – |
No output schema declared.
No examples provided.
board_ingest ~78
Ingest a CLI transcript's content into the active session (file edits, decisions, notes). Format is one of: generic, claude-code, codex, gemini, grok. Use 'generic' with our normalized event schema for any CLI.
| Name | Type | Req | Description |
|---|---|---|---|
| content | string | yes | raw transcript content |
| format | string | – | – |
No output schema declared.
No examples provided.
board_link ~98
Attribute a Git commit's files to the current session (who actually produced the code). Reads Git; never rewrites history. Optionally writes an additive git note.
| Name | Type | Req | Description |
|---|---|---|---|
| actorType | string | – | – |
| agent | string | – | acting agent identity (defaults to OCTOBOARD_AGENT) |
| name | string | – | explicit actor name |
| rev | string | – | commit/revision, defaults to HEAD |
| writeNote | boolean | – | – |
No output schema declared.
No examples provided.
board_message ~60
Leave a message for another agent (or broadcast with to='all').
| Name | Type | Req | Description |
|---|---|---|---|
| agent | string | – | acting agent identity (defaults to OCTOBOARD_AGENT) |
| body | string | yes | – |
| to | string | yes | recipient agent name, or 'all' |
No output schema declared.
No examples provided.
board_note ~42
Broadcast a free-form status note to the board.
| Name | Type | Req | Description |
|---|---|---|---|
| agent | string | – | acting agent identity (defaults to OCTOBOARD_AGENT) |
| text | string | yes | – |
No output schema declared.
No examples provided.
board_progress ~83
Report task progress 0–100 (moves it to in-progress, or done at 100). Use this from an agent as it works a task so the kanban shows a live progress bar.
| Name | Type | Req | Description |
|---|---|---|---|
| agent | string | – | acting agent identity (defaults to OCTOBOARD_AGENT) |
| percent | number | yes | – |
| ref | string | yes | task key or number |
No output schema declared.
No examples provided.
board_prune ~42
Retention: delete messages/evidence/file-change rows created before an ISO time. The audit timeline is never pruned.
| Name | Type | Req | Description |
|---|---|---|---|
| before | string | yes | ISO timestamp |
No output schema declared.
No examples provided.
board_redact ~48
Hide a timeline entry's content at the read layer (the hash chain stays valid — this is not cryptographic erasure).
| Name | Type | Req | Description |
|---|---|---|---|
| reason | string | – | – |
| seq | number | yes | – |
No output schema declared.
No examples provided.
board_report ~29
Accountability scorecard: review coverage, AI/human ratio, per-agent breakdown, session and risk counts.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
board_review ~75
Record who reviewed a commit and the outcome (human or AI reviewer).
| Name | Type | Req | Description |
|---|---|---|---|
| agent | string | – | acting agent identity (defaults to OCTOBOARD_AGENT) |
| name | string | – | – |
| note | string | – | – |
| outcome | string | – | – |
| rev | string | yes | – |
| reviewerType | string | – | – |
No output schema declared.
No examples provided.
board_risk ~52
Flag an open risk the next agent should know before acting.
| Name | Type | Req | Description |
|---|---|---|---|
| agent | string | – | acting agent identity (defaults to OCTOBOARD_AGENT) |
| severity | string | – | – |
| title | string | yes | – |
No output schema declared.
No examples provided.
board_sign ~46
Sign the current timeline head with the active session's key (attests board state through the head seq).
| Name | Type | Req | Description |
|---|---|---|---|
| agent | string | – | acting agent identity (defaults to OCTOBOARD_AGENT) |
No output schema declared.
No examples provided.
board_since ~82
Subscribe primitive: poll for timeline events after a given seq. Returns the new head seq and events (optionally filtered to those relevant to an agent). Call board_status first to get a starting seq.
| Name | Type | Req | Description |
|---|---|---|---|
| afterSeq | number | yes | return events with seq greater than this |
| forAgent | string | – | filter to messages/handoffs/conflicts for this agent |
No output schema declared.
No examples provided.
board_status ~61
Read the board: active agents, open tasks and who holds them, unread messages, open risks, recent history. Call this before starting work to see what other agents are doing.
| Name | Type | Req | Description |
|---|---|---|---|
| agent | string | – | acting agent identity (defaults to OCTOBOARD_AGENT) |
No output schema declared.
No examples provided.
board_task ~53
Get a task's full kanban card (status, progress, assignees, active-agent count, impacted files, linked risks) by key or number (#145).
| Name | Type | Req | Description |
|---|---|---|---|
| ref | string | yes | task key or number |
No output schema declared.
No examples provided.
board_task_define ~106
Create or update a task's kanban fields: title, description (what it is), project, impact (change surface), and risk level. New keys get a stable task number.
| Name | Type | Req | Description |
|---|---|---|---|
| agent | string | – | acting agent identity (defaults to OCTOBOARD_AGENT) |
| description | string | – | – |
| impact | string | – | – |
| key | string | yes | – |
| project | string | – | – |
| riskLevel | string | – | – |
| title | string | – | – |
No output schema declared.
No examples provided.
board_tasks ~24
List all tasks as kanban cards (for a board/kanban view).
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
board_timeline ~33
Read the append-only, hash-chained history of everything that happened on the board.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | number | – | – |
No output schema declared.
No examples provided.
board_trailers ~36
Git trailer lines encoding a commit's attribution, for embedding in a commit message.
| Name | Type | Req | Description |
|---|---|---|---|
| rev | string | – | defaults to HEAD |
No output schema declared.
No examples provided.
board_trust ~29
Show signature trust: which sessions have signed the timeline and whether each signature is valid and still current.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
board_unreviewed ~23
List AI-produced commits that have never been reviewed by a human.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
board_who ~54
Who changed a file: Git authors, AI sessions that touched it, and commit attributions. Pass a line number to trace which session introduced that line.
| Name | Type | Req | Description |
|---|---|---|---|
| file | string | yes | – |
| line | number | – | – |
No output schema declared.
No examples provided.
session_start ~59
Start an execution session. Subsequent writes and links attribute to it. Captures machine, working directory, git branch, and repository.
| Name | Type | Req | Description |
|---|---|---|---|
| agent | string | – | acting agent identity (defaults to OCTOBOARD_AGENT) |
| label | string | – | – |
No output schema declared.
No examples provided.
session_stop ~42
Close the active session (or a specific one).
| Name | Type | Req | Description |
|---|---|---|---|
| agent | string | – | acting agent identity (defaults to OCTOBOARD_AGENT) |
| session | string | – | – |
No output schema declared.
No examples provided.
How do I install the io.github.octoryn/octopus-blackboard MCP server?
io.github.octoryn/octopus-blackboard runs locally as an npm package, launched with npx -y octopus-blackboard. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
npm · octopus-blackboard
claude mcp add octoryn-octopus-blackboard -- npx -y octopus-blackboard
What is the io.github.octoryn/octopus-blackboard MCP server?
io.github.octoryn/octopus-blackboard is an MCP server listed in the public MCP registry as io.github.octoryn/octopus-blackboard. Shared memory & coordination for AI coding agents, a blackboard, not an orchestrator. This page covers its npm package (octopus-blackboard).
Is the io.github.octoryn/octopus-blackboard MCP server safe to use?
io.github.octoryn/octopus-blackboard scores 94 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 4 November 2026. It declares no install or post-install scripts. Its build provenance is signed and verified. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the io.github.octoryn/octopus-blackboard MCP server expose?
io.github.octoryn/octopus-blackboard exposes 38 tools: board_status, board_timeline, board_note, board_claim, board_task_define, and 33 more. Their descriptions and schemas cost roughly 2,255 tokens of context every time the server is loaded.
Is the io.github.octoryn/octopus-blackboard MCP server still maintained?
io.github.octoryn/octopus-blackboard is still listed as active in the MCP registry. We last reached this channel on 4 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.
What licence is the io.github.octoryn/octopus-blackboard MCP server under?
io.github.octoryn/octopus-blackboard declares the Apache-2.0 licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.