Agent Teams AI MCP Server

by 777genius• 2.4k•• Scanned•Claim this listing•Request removal
Data Science & MLagent orchestrationagent teamsagent to agentai agentsclaude

You're the boss, agents are your team. They handle tasks on their own, message each other, and review each other's work. You just watch the kanban board and give high-level commands. Codex/Claude/OpenCode/Cursor/Grok/GitHub/Kiro/Z.AI/Xiaomi/MiniMax/Kimi(300+ models, 200+ LLM providers, free models no auth) Build your AI company with multiple teams

Agent Teams AI is an open-source mcp server by 777genius, written mainly in TypeScript, with 2,383 GitHub stars and the AGPL-3.0 license. Its code was last updated Nov 1, 2026.

Scan summary: scanned Nov 5, 2026 at commit 7ba6e41. Seen able to run shell commands, read environment and secrets, connect to the internet. Scan policy

aboutREADMEsecurityreviews
Scanned
Full scan at 7ba6e41 · Nov 5, 2026
Scanned
Static code scanwarn
Secrets scanpass
Dependency audit78 known vulnerabilitieswarn
Manifestnonewarn
Buildfail
Boot & handshaken/a
Network egresswarn
Reproducible (×3)n/a

Findings (59)

  • high
    dropper issue
    Details are available to the maintainer after claiming this listing.
  • high
    dropper issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    dropper issue
    Details are available to the maintainer after claiming this listing.
  • high
    dropper issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    electron.vite.config.ts:32
  • medium
    fflate@0.4.8: 1 known vulnerability
    GHSA-px8p-9vwx-vf98
    pnpm-lock.yaml
  • medium
    Install or build failed in a clean environment
    de_modules/.pnpm/zod@4.6.7/node_modules/zod/v4/core/regexes.js" contains an annotation that Rollup cannot interpret due to the position of the comment. The comment will be removed to avoid issues. ✓ 12155 modules transformed. rendering chunks... Killed [ELIFECYCLE] Command failed with exit code 137.
  • medium
    Install contacted hosts other than package registries
    artifacts.electronjs.org, www.electronjs.org
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    src/features/runtime-provider-management/core/domain/runtimeLocalProvider.test.ts:100
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    src/features/runtime-provider-management/core/domain/runtimeLocalProvider.test.ts:138
  • low
    In tests/examples/docs: Downloads a script and pipes it straight into a shell (often an installer command shown to users; check where it runs).
    src/features/runtime-provider-management/main/infrastructure/CursorAgentCompanionService.test.ts:38
  • low
    In tests/examples/docs: Downloads a script and pipes it straight into a shell (often an installer command shown to users; check where it runs).
    src/features/runtime-provider-management/main/infrastructure/KiroCliCompanionService.test.ts:94
  • low
    In tests/examples/docs: Downloads a script and pipes it straight into a shell (often an installer command shown to users; check where it runs).
    src/features/runtime-provider-management/main/infrastructure/KiroCliCompanionService.test.ts:473
  • low
    Possible example credential in docs/tests: generic-api-key
    src/features/token-usage/main/infrastructure/__tests__/OpenCodeUsageIntegration.test.ts:259
  • low
    Possible example credential in docs/tests: generic-api-key
    8 matches in this file
    test/fixtures/team/opencode/expected-behavior-fingerprint-v2.json:11
  • low
    Possible example credential in docs/tests: generic-api-key
    test/main/http/teams.test.ts:1824
  • low
    Possible example credential in docs/tests: generic-api-key
    2 matches in this file
    test/main/services/team/RuntimeDeliveryService.test.ts:1364
  • low
    @humanfs/node@0.16.7: 2 known vulnerabilities
    GHSA-p498-v437-472g, GHSA-p498-v437-472g
    landing/package-lock.json
  • low
    @nuxt/nitro-server@3.21.11: 2 known vulnerabilities
    GHSA-vjh5-4x84-xrqp, GHSA-vjh5-4x84-xrqp
    landing/package-lock.json
  • low
    @nuxt/vite-builder@3.21.11: 2 known vulnerabilities
    GHSA-648h-gw55-m2g7, GHSA-648h-gw55-m2g7
    landing/package-lock.json
  • low
    deepmerge@4.3.1: 2 known vulnerabilities
    GHSA-gcqx-w48m-w2h4, GHSA-gcqx-w48m-w2h4
    landing/package-lock.json
  • low
    glob@10.5.0: 2 known vulnerabilities
    GHSA-3g3m-2fjr-6pw4, GHSA-3g3m-2fjr-6pw4
    landing/package-lock.json
  • low
    glob@13.0.6: 2 known vulnerabilities
    GHSA-3g3m-2fjr-6pw4, GHSA-3g3m-2fjr-6pw4
    landing/package-lock.json
  • low
    minimatch@10.2.5: 1 known vulnerability
    GHSA-g3hv-75wg-m249
    landing/package-lock.json
  • low
    minimatch@10.2.6: 1 known vulnerability
    GHSA-g3hv-75wg-m249
    landing/package-lock.json
  • low
    minimatch@9.0.7: 2 known vulnerabilities
    GHSA-g3hv-75wg-m249, GHSA-g3hv-75wg-m249
    landing/package-lock.json
  • low
    nuxt@3.21.11: 6 known vulnerabilities
    GHSA-jjm6-p2m9-9w4x, GHSA-vjh5-4x84-xrqp, GHSA-xfq5-w38q-pc2x, GHSA-jjm6-p2m9-9w4x, GHSA-vjh5-4x84-xrqp +1 more
    landing/package-lock.json
  • low
    postcss-selector-parser@6.1.2: 4 known vulnerabilities
    GHSA-rj75-hqrm-r3gf, GHSA-w9m9-85wc-3x92, GHSA-rj75-hqrm-r3gf, GHSA-w9m9-85wc-3x92
    landing/package-lock.json
  • low
    postcss-selector-parser@7.1.1: 4 known vulnerabilities
    GHSA-rj75-hqrm-r3gf, GHSA-w9m9-85wc-3x92, GHSA-rj75-hqrm-r3gf, GHSA-w9m9-85wc-3x92
    landing/package-lock.json
  • low
    serialize-javascript@7.1.0: 1 known vulnerability
    GHSA-m5mm-p8h7-m29v
    landing/package-lock.json
  • low
    seroval@1.6.8: 4 known vulnerabilities
    GHSA-9wx9-5pv9-3349, GHSA-f86p-h4j2-7qgj, GHSA-9wx9-5pv9-3349, GHSA-f86p-h4j2-7qgj
    landing/package-lock.json
  • low
    @hono/node-server@1.19.13: 2 known vulnerabilities
    GHSA-frvp-7c67-39w9, GHSA-rmxm-3fg6-px4f
    pnpm-lock.yaml
  • low
    @opentelemetry/instrumentation-knex@0.55.0: 1 known vulnerability
    GHSA-qqmp-wf37-98f9
    pnpm-lock.yaml
  • low
    @opentelemetry/instrumentation-mongoose@0.57.0: 1 known vulnerability
    GHSA-qqmp-wf37-98f9
    pnpm-lock.yaml
  • low
    @opentelemetry/instrumentation-mysql@0.57.0: 1 known vulnerability
    GHSA-qqmp-wf37-98f9
    pnpm-lock.yaml
  • low
    @opentelemetry/instrumentation-mysql2@0.57.0: 1 known vulnerability
    GHSA-qqmp-wf37-98f9
    pnpm-lock.yaml
  • low
    @opentelemetry/instrumentation-pg@0.63.0: 1 known vulnerability
    GHSA-qqmp-wf37-98f9
    pnpm-lock.yaml
  • low
    @opentelemetry/instrumentation-tedious@0.30.0: 1 known vulnerability
    GHSA-qqmp-wf37-98f9
    pnpm-lock.yaml
  • low
    @vitest/mocker@3.2.6: 2 known vulnerabilities
    GHSA-82fw-gwwq-j7x9, GHSA-qxg6-89mg-rqv8
    pnpm-lock.yaml
  • low
    fast-uri@3.1.7: 5 known vulnerabilities
    GHSA-333x-w4r6-6crp, GHSA-hrr3-gc8f-f4qj, GHSA-w74x-v6f9-j3xg, GHSA-wjr9-j795-jxcr, GHSA-xhq7-xmqj-769h
    pnpm-lock.yaml
  • low
    fastify@5.12.5: 1 known vulnerability
    GHSA-389g-gv7q-r4x8
    pnpm-lock.yaml
  • low
    hono@4.12.30: 9 known vulnerabilities
    GHSA-54fx-42gc-7vw4, GHSA-5r4p-p66f-jhc7, GHSA-79qm-7rj5-m7r9, GHSA-8j4g-w8fx-2239, GHSA-crvj-82cr-hjcx +4 more
    pnpm-lock.yaml
  • low
    ip-address@10.5.0: 5 known vulnerabilities
    GHSA-2vr4-cq9g-pvrc, GHSA-h3mg-xc3c-68pw, GHSA-j6r3-76f7-8jcv, GHSA-rpw4-54j3-4h4q, GHSA-rxp7-6hxx-x8q5
    pnpm-lock.yaml
  • low
    katex@0.16.33: 1 known vulnerability
    GHSA-238p-pmpm-9mq7
    pnpm-lock.yaml
  • low
    mermaid@11.15.0: 5 known vulnerabilities
    GHSA-2v8p-3f2j-5mp7, GHSA-3rrr-jr9j-h3q3, GHSA-6x64-9x62-f2gx, GHSA-c4c3-pg64-4m4v, GHSA-rhh3-jpg6-66xh
    pnpm-lock.yaml
  • low
    minimatch@10.2.3: 1 known vulnerability
    GHSA-g3hv-75wg-m249
    pnpm-lock.yaml
  • low
    postcss-selector-parser@6.0.10: 1 known vulnerability
    GHSA-rj75-hqrm-r3gf
    pnpm-lock.yaml
  • low
    serialize-javascript@7.0.5: 1 known vulnerability
    GHSA-m5mm-p8h7-m29v
    pnpm-lock.yaml
  • low
    smol-toml@1.8.0: 1 known vulnerability
    GHSA-r4xh-jqrq-34v2
    pnpm-lock.yaml
  • low
    vite@6.4.4: 1 known vulnerability
    GHSA-8g5g-mxqh-grgj
    pnpm-lock.yaml
  • low
    vitest@3.2.6: 1 known vulnerability
    GHSA-82fw-gwwq-j7x9
    pnpm-lock.yaml
  • low
    package.json has a preinstall script
    node ./scripts/ci/enforce-pnpm-install.mjs
    package.json
  • low
    package.json has a postinstall script
    node ./scripts/postinstall-electron.cjs
    package.json
  • low
    package.json has a prepare script
    husky
    package.json
  • low
    No manifest declaring network access and environment variables (agent.json)

Network activity

During install
artifacts.electronjs.orggithub.comnodejs.orgraw.githubusercontent.comregistry.npmjs.orgrelease-assets.githubusercontent.comwww.electronjs.org
While running
Not run — the code wasn't started in this scan

Automated result for the commit shown. See our scan policy. View the scan log

Maintainers can claim the listing to rescan, or dispute a result.

Agent Teams AI alternatives

View more →

Similar mcp servers in Data Science & ML, ranked by GitHub stars. Compare licence, recent activity and scan status before you choose.

NameStarsLicenceLast updatedScan
Agent Teams AI (this page)
777genius
2.4kAGPL-3.0Nov 1, 2026Scanned, no flagged issues
MaxKB
1Panel-dev
23kGPL-3.0Nov 1, 2026Scanned, no flagged issues
FunASR
modelscope
21kMITNov 1, 2026Scanned, no flagged issues
Ida Pro MCP
mrexodia
13kMITSep 26, 2026Scanned, no flagged issues
Pal MCP Server
BeehiveInnovations
12kNone foundDec 15, 2025Not scanned yet
Osaurus
osaurus-ai
8.1kMITNov 1, 2026Scanned, no flagged issues