io.github.sairam0424/ag-bash

NPM · @AG-BASH/MCP-SERVER · SCANNED AUG 3

Sandboxed AI-native bash with 70 agentic tools: run_bash, code edit/diff, WASM Python/JS.

Available components

+13 this week 57 57 Trust /100

Trust breakdown (6 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score →

Supply Chain Security87

No malware found by supply-chain analysis.Pass
Only part of the dependency tree could be resolved (123 of 134), so this covers what we could see, not the whole tree.Partial
No install/post-install scripts declared.Pass
Only part of the dependency tree could be resolved (123 of 134), so this covers what we could see, not the whole tree. View diagnostics → Partial

Provenance & Transparency45

Source repository is publicly reachable at the declared URL. View diagnostics → Pass
Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
Clear OSI-approved license (Apache-2.0).Pass
Actively maintained (last published 48 days ago).Pass
Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail

Schema Quality & AI Usability45

2% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Partial
AI-judged instruction clarity (good).Pass
Tool/resource definitions use about 5396 tokens (~16/item across 328 items; 70 tools + 258 resources), lean.Pass
Usage-examples check failed: none of the tools include examples. See how to fix → Fail

Stability & Change Management0

Stability not yet verified: two runs of the same published version returned different tool surfaces, so we cannot tell a change in the package from a difference in our own sandbox run.Unverified

Tool Coverage100

100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
100% of tool parameters carry a description.Pass
Structured output schemas are declared (11% of tools); any adoption earns full credit.Pass

Capabilities60

Spec-recency check failed: implements MCP spec 2025-06-18; the latest is 2026-07-28. See how to fix → Fail

Unverified: 1 category

A category scored 0 because we could not verify it: a data source with nothing on this package, evidence we could not reach, or a check we could not run. We only credit what we can confirm.

Install

Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.

npm · @ag-bash/mcp-server

Claude Codex opencode OpenClaw Hermes Other

# add to Claude Code

claude mcp add sairam0424-ag-bash -- npx -y @ag-bash/mcp-server

# add to Codex CLI

codex mcp add sairam0424-ag-bash -- npx -y @ag-bash/mcp-server

// opencode.json

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "sairam0424-ag-bash": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "@ag-bash/mcp-server"
      ],
      "enabled": true
    }
  }
}

# add to OpenClaw

openclaw mcp add sairam0424-ag-bash --command npx --arg -y --arg @ag-bash/mcp-server

# ~/.hermes/config.yaml

mcp_servers:
  sairam0424-ag-bash:
    command: "npx"
    args: ["-y", "@ag-bash/mcp-server"]

// mcp.json

{
  "mcpServers": {
    "sairam0424-ag-bash": {
      "command": "npx",
      "args": [
        "-y",
        "@ag-bash/mcp-server"
      ]
    }
  }
}

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

2 Aug 26 +37
- Provenance: unverified → fail ▼ security
- Known CVEs: unverified → partial ▲ security
- Install scripts: unverified → pass ▲ security
- Stability: Stability not yet verified: two runs of the same published version returned different tool surfaces, so we cannot tell a change in the package from a difference in our own sandbox run. security
- MCP protocol: unverified → fail ▼ functional
- Tool coverage: unverified → 100 ▲ functional
- License: unverified → pass ▲ functional
- Dependency health: unverified → partial ▲ functional
- Maintenance: unverified → pass ▲ functional
- Schema quality: unverified → 2 ▲ functional
- Schema quality: unverified → good ▲ functional
- Licence: Apache-2.0 functional
1 Aug 26 +1
- Malware scan: unverified → pass ▲ security
- Schema quality: 2 → unverified ▼ functional
- Tool coverage: 100 → unverified ▼ functional
31 Jul 26 +13
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
30 Jul 26 −38
- Malware scan: pass → unverified ▼ security
- Schema quality: 2 → unverified ▼ functional
- Tool coverage: 100 → unverified ▼ functional
27 Jul 26 44

First indexed and scored.

Show 2 earlier entries Hide earlier entries

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 3 Aug 2026 · Analysed npm/@ag-bash/[email protected]

Provenance none

Ecosystem: npm · Outcome: none

Dependencies 123 packages

123 packages in the resolved dependency tree · 115 deprecated · 41 stale.

The dependency tree was only partially resolved, so these counts may be incomplete.

MCP tools — 70 exposed · ~3,444 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability.

Tool Tokens

add_todo ~34

Add a new todo item.

Input Output Examples

Name	Type	Req	Description
status	string	—	Initial status.
task	string	yes	The task description.

No output schema declared.

No examples provided.

ag_convert ~150

Convert documents (PDF, Docx, Xlsx) and images to Markdown with AI-powered visual intelligence and OCR.

Input Output Examples

Name	Type	Req	Description
describeImages	boolean	—	Use AI to describe images (default: false).
engine	string	—	Engine override (default: auto).
filePath	string	yes	Path to the file to convert.
highFidelity	boolean	—	Favor precision over speed (default: false).
llmModel	string	—	Specific model for vision tasks.
llmProvider	string	—	LLM provider for vision tasks.
visionMode	string	—	Prompt template for image analysis.
visionPrompt	string	—	Custom vision prompt (overrides visionMode).

No output schema declared.

No examples provided.

ag_edit ~93

Advanced line-based file editor. Supports multiple non-contiguous edits in a single call and protects against stale writes using content hashes.

Input Output Examples

Name	Type	Req	Description
edits	string	yes	List of edits to apply sequentially.
expectedHash	string	—	The expected SHA-256 hash of the file content before applying edits. If it doesn't match, the edit will fail.
filePath	string	yes	Absolute path to the file to edit.

No output schema declared.

No examples provided.

ag_explain ~36

Parse and explain a shell command string, showing its structure and components.

Input Output Examples

Name	Type	Req	Description
command	string	yes	The shell command string to explain.

No output schema declared.

No examples provided.

ag_find_files ~51

Find files by name or glob pattern recursively.

Input Output Examples

Name	Type	Req	Description
path	string	—	The directory to start searching from (default: current directory).
pattern	string	yes	The filename or glob pattern to search for.

No output schema declared.

No examples provided.

ag_find_symbol ~51

Search for symbols (functions, variables, classes) by name or pattern across the workspace.

Input Output Examples

Name	Type	Req	Description
query	string	yes	The symbol name or search pattern.
type	string	—	Filter by symbol type.

No output schema declared.

No examples provided.

ag_grep ~64

High-performance recursive pattern search within files.

Input Output Examples

Name	Type	Req	Description
ignoreCase	boolean	—	Whether to ignore case when searching.
path	string	—	The directory or file to search in (default: current directory).
query	string	yes	The pattern or string to search for.

No output schema declared.

No examples provided.

ag_hover ~63

Get semantic information about a symbol at a specific line and character position.

Input Output Examples

Name	Type	Req	Description
character	number	yes	1-indexed character position.
filePath	string	yes	Path to the file containing the symbol.
line	number	yes	1-indexed line number.

No output schema declared.

No examples provided.

ag_lsp ~91

Advanced code intelligence: goToDefinition, findReferences, hover, etc.

Input Output Examples

Name	Type	Req	Description
character	number	—	1-based character position.
filePath	string	yes	Path to the file.
line	number	—	1-based line number.
operation	string	yes	The LSP operation to perform.
symbolName	string	—	Name of the symbol (optional if position is provided).

No output schema declared.

No examples provided.

ag_multi_edit ~49

Apply multiple non-contiguous text replacements to a file in a single operation.

Input Output Examples

Name	Type	Req	Description
chunks	string	yes	List of replacement chunks.
path	string	yes	Absolute path to the file to edit.

No output schema declared.

No examples provided.

ag_todo ~88

Manage project tasks and todos. Support for listing, adding, updating, and removing tasks.

Input Output Examples

Name	Type	Req	Description
id	string	—	The todo ID (required for 'update' and 'rm').
operation	string	yes	The operation to perform.
status	string	—	The status to set (required for 'update').
task	string	—	The task description (required for 'add').

No output schema declared.

No examples provided.

ag_web_fetch ~63

Fetch the content of a web page and convert it to clean markdown. Results are cached for 15 minutes.

Input Output Examples

Name	Type	Req	Description
noCache	boolean	—	If true, bypass the cache and fetch fresh content.
url	string	yes	The URL of the page to fetch.

No output schema declared.

No examples provided.

ag_web_search ~61

Search the web for current information, documentation, and answers.

Input Output Examples

Name	Type	Req	Description
allowed_domains	string	—	Restrict results to these domains.
blocked_domains	string	—	Exclude results from these domains.
query	string	yes	The search query to execute.

No output schema declared.

No examples provided.

agent_memory_read ~54

Read a memory entry for an agent type.

Input Output Examples

Name	Type	Req	Description
agentType	string	yes	Agent type identifier.
key	string	yes	Memory key.
scope	string	yes	Memory scope: user, project, or local.

No output schema declared.

No examples provided.

agent_memory_write ~63

Write a memory entry for an agent type.

Input Output Examples

Name	Type	Req	Description
agentType	string	yes	Agent type identifier.
key	string	yes	Memory key.
scope	string	yes	Memory scope: user, project, or local.
value	string	yes	Memory value.

No output schema declared.

No examples provided.

analyze_code ~30

Perform semantic analysis on a source file.

Input Output Examples

Name	Type	Req	Description
path	string	yes	Absolute path to the file to analyze.

No output schema declared.

No examples provided.

apply_delta ~32

Apply a differential delta to the current shell state.

Input Output Examples

Name	Type	Req	Description
delta	string	yes	The base64 encoded delta to apply.

Name	Type	Req	Description
message	string	yes	Human-readable status message.
ok	boolean	yes	Whether the operation succeeded.

No examples provided.

check_destructive ~50

Check if a command contains destructive patterns (rm -rf, DROP TABLE, git reset --hard, etc.). Returns warning or null.

Input Output Examples

Name	Type	Req	Description
command	string	yes	The command to analyze for destructive patterns.

No output schema declared.

No examples provided.

check_environment ~16

Get diagnostics about the sandboxed environment.

Input Output Examples

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

close_session ~33

Terminate a persistent session and release its resources.

Input Output Examples

Name	Type	Req	Description
sessionId	string	yes	The ID of the session to close.

No output schema declared.

No examples provided.

create_delta ~37

Create a differential delta between a base snapshot and current state for efficient sync.

Input Output Examples

Name	Type	Req	Description
baseSnapshot	string	yes	The base64 encoded base snapshot.

Name	Type	Req	Description
encoded	string	yes	Base64-encoded opaque state blob.

No examples provided.

cron_create ~94

Schedule a recurring or one-shot prompt using a cron expression.

Input Output Examples

Name	Type	Req	Description
cron	string	yes	5-field cron expression (e.g., "/5 * * *").
durable	boolean	—	True = persisted, false = session-only (default).
prompt	string	yes	The prompt/command to run at each fire time.
recurring	boolean	—	True = repeating (default), false = one-shot.

No output schema declared.

No examples provided.

cron_delete ~27

Delete a scheduled cron job.

Input Output Examples

Name	Type	Req	Description
id	string	yes	The cron job ID to delete.

No output schema declared.

No examples provided.

cron_list ~14

List all scheduled cron jobs.

Input Output Examples

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

diff_files ~42

Generate a unified diff between two files.

Input Output Examples

Name	Type	Req	Description
file1	string	yes	Path to the first file.
file2	string	yes	Path to the second file.

No output schema declared.

No examples provided.

edit_file ~82

Apply a text patch to a file (simple find and replace).

Input Output Examples

Name	Type	Req	Description
path	string	yes	Absolute path to the file to edit.
replace_all	boolean	—	If true, replaces all occurrences instead of just the first one.
replacement	string	yes	The new text to insert instead.
target	string	yes	The exact text block to be replaced.

No output schema declared.

No examples provided.

enter_worktree ~48

Create and enter an isolated virtual worktree for independent development.

Input Output Examples

Name	Type	Req	Description
branch	string	—	Branch name (default: worktree/<name>).
name	string	yes	Worktree name.

No output schema declared.

No examples provided.

exit_worktree ~21

Exit the active worktree and restore the original working directory.

Input Output Examples

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

explain_command ~27

Parse and explain a shell command.

Input Output Examples

Name	Type	Req	Description
command	string	yes	The shell command to explain.

No output schema declared.

No examples provided.

find_files ~48

Search for files by name or glob pattern.

Input Output Examples

Name	Type	Req	Description
path	string	yes	The directory to start searching from.
pattern	string	yes	The filename pattern or glob (e.g., '*.ts').

No output schema declared.

No examples provided.

find_symbols ~32

Search for symbols (functions, variables) across the workspace.

Input Output Examples

Name	Type	Req	Description
query	string	—	Query to filter symbol names.

No output schema declared.

No examples provided.

fork_speculate ~160

Fork-speculation: copy-on-write branch the sandbox into N isolated children, run a candidate script sequence in each branch in parallel, and report each branch's output + exit code so you can pick a winner. Branch mutations (env, cwd, files) are invisible to the persistent shell and to each other. Optionally pass keepWinner to commit exactly one winning branch's scripts onto the persistent shell; otherwise the persistent shell is left untouched (all branches discarded).

Input Output Examples

Name	Type	Req	Description
branches	array	yes	Candidate branches to try. Each branch is an array of bash scripts run in order within its own isolated fork.
keepWinner	number	—	Optional 0-based index of the branch to commit onto the persistent shell. Omit to keep none (pure speculation).

Name	Type	Req	Description
branches	array	yes	Per-branch results.
committed	number	yes	—

No examples provided.

get_definition ~29

Find the definition of a symbol.

Input Output Examples

Name	Type	Req	Description
name	string	yes	The name of the symbol to find.

No output schema declared.

No examples provided.

get_references ~72

Find all references to a function or variable.

Input Output Examples

Name	Type	Req	Description
character	number	—	1-based character position
line	number	—	1-based line number
name	string	—	The name of the symbol to find
path	string	—	Path to the file where the symbol is referenced

No output schema declared.

No examples provided.

get_state ~22

Retrieve the current state of the shell (CWD and Environment Variables).

Input Output Examples

Input schema present but exposes no named parameters.

Name	Type	Req	Description
cwd	string	yes	Current working directory of the shell.
env	object	yes	Environment variables.

No examples provided.

git_audit_log ~39

Get the git operations audit log, optionally filtered to destructive operations only.

Input Output Examples

Name	Type	Req	Description
destructiveOnly	boolean	—	If true, return only destructive operations.

No output schema declared.

No examples provided.

git_track ~43

Record and classify a git operation. Returns classification (safe/mutating/destructive) and audit entry.

Input Output Examples

Name	Type	Req	Description
command	string	yes	The git command to classify and record.

No output schema declared.

No examples provided.

glob_files ~96

Fast glob pattern matching over the filesystem. Returns matching file paths sorted by name or mtime.

Input Output Examples

Name	Type	Req	Description
limit	number	—	Max results (default: 1000).
path	string	—	Root directory (default: cwd).
pattern	string	yes	Glob pattern (e.g., "*/.ts", "src/*/.{ts,tsx}").
sort	string	—	"alpha" (default) or "mtime".

No output schema declared.

No examples provided.

grep_search ~47

Search for a text pattern across multiple files.

Input Output Examples

Name	Type	Req	Description
path	string	yes	Absolute path to the directory to search in.
query	string	yes	The text or regex pattern to search for.

No output schema declared.

No examples provided.

help_builtin ~30

Get detailed help for a shell builtin command.

Input Output Examples

Name	Type	Req	Description
command	string	yes	The name of the builtin command.

No output schema declared.

No examples provided.

hover_info ~53

Get information about a symbol at a specific position.

Input Output Examples

Name	Type	Req	Description
character	number	yes	1-based character position
line	number	yes	1-based line number
path	string	yes	Path to the file

No output schema declared.

No examples provided.

index_workspace ~37

Trigger a full scan and indexing of all supported files in the workspace.

Input Output Examples

Name	Type	Req	Description
path	string	—	Root directory to scan. Defaults to /.

No output schema declared.

No examples provided.

list_dir ~28

List contents of a directory.

Input Output Examples

Name	Type	Req	Description
path	string	yes	Absolute path to the directory to list.

No output schema declared.

No examples provided.

list_mcp_tools ~19

List all tools available via connected MCP servers.

Input Output Examples

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

list_todos ~14

List all todo items.

Input Output Examples

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

plan_enter ~19

Enter plan mode to design an approach before making changes.

Input Output Examples

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

plan_exit ~17

Exit plan mode and return to execution mode.

Input Output Examples

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

query_json ~59

Run a jq query against a JSON file or string.

Input Output Examples

Name	Type	Req	Description
json	string	—	Optional JSON string to query directly.
path	string	—	Optional path to a JSON file to query.
query	string	yes	The jq filter/query string.

No output schema declared.

No examples provided.

read_file ~33

Read the contents of a file from the virtual filesystem.

Input Output Examples

Name	Type	Req	Description
path	string	yes	Absolute path to the file to read.

No output schema declared.

No examples provided.

restore ~34

Restore the shell to a previously captured state via a snapshot.

Input Output Examples

Name	Type	Req	Description
snapshot	string	yes	The base64 encoded snapshot state to restore.

Name	Type	Req	Description
message	string	yes	Human-readable status message.
ok	boolean	yes	Whether the operation succeeded.

No examples provided.

On this page

Handy links

Scoring key

80+ high trust
60–79 medium
below 60 low

How we score

Score history · last 30 days

27 Jul 3 Aug