Idun Agent Platform MCP Server
🟪 Open-source runtime that ships any LangGraph or Google ADK agent as a production-ready FastAPI service. Bundled , AG-UI copilotkit API, chat UI, 15+ guardrails, MCP, OpenTelemetry, OIDC. One pip install. Self-hosted, no vendor lock-in.
Idun Agent Platform is an open-source mcp server by Idun-Group, written mainly in Python, with 205 GitHub stars and the GPL-3.0 license. Its code was last updated Oct 30, 2026.
Scan summary: scanned Nov 5, 2026 at commit e643895. Seen able to connect to the internet. Scan policy
e643895 · Nov 5, 2026Findings (98)
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.black@26.3.1: 1 known vulnerabilityGHSA-cg8m-r9f2-5wm2
libs/idun_agent_engine/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.dnspython@2.8.0: 2 known vulnerabilitiesGHSA-45c3-73f7-pv4m, GHSA-45c3-73f7-pv4m
libs/idun_agent_engine/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.fsspec@2026.2.0: 2 known vulnerabilitiesPYSEC-2026-4217, PYSEC-2026-4217
libs/idun_agent_engine/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.graphql-core@3.2.7: 2 known vulnerabilitiesGHSA-r77w-qph3-7vf8, GHSA-vj8h-fx38-h3vc
libs/idun_agent_engine/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.httplib2@0.31.2: 2 known vulnerabilitiesPYSEC-2026-3444, PYSEC-2026-3444
libs/idun_agent_engine/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.langchain-core@1.2.9: 4 known vulnerabilitiesPYSEC-2026-2193, PYSEC-2026-2562, PYSEC-2026-2563, PYSEC-2026-2564
libs/idun_agent_engine/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.langgraph@1.0.8: 1 known vulnerabilityPYSEC-2026-83
libs/idun_agent_engine/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.langgraph-sdk@0.3.4: 2 known vulnerabilitiesPYSEC-2026-2575, PYSEC-2026-4240
libs/idun_agent_engine/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.langsmith@0.7.1: 3 known vulnerabilitiesPYSEC-2026-2582, PYSEC-2026-2583, GHSA-f4xh-w4cj-qxq8
libs/idun_agent_engine/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.lxml@6.0.2: 2 known vulnerabilitiesPYSEC-2026-87, PYSEC-2026-87
libs/idun_agent_engine/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.mako@1.3.10: 6 known vulnerabilitiesPYSEC-2026-2617, PYSEC-2026-4243, PYSEC-2026-88, PYSEC-2026-2617, PYSEC-2026-4243 +1 more
libs/idun_agent_engine/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.mcp@1.26.0: 14 known vulnerabilitiesPYSEC-2026-3481, PYSEC-2026-3482, PYSEC-2026-3483, GHSA-5h93-6whr-6q8j, GHSA-84m7-p3x7-pcfv +9 more
libs/idun_agent_engine/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.pip@26.0.1: 8 known vulnerabilitiesPYSEC-2026-196, PYSEC-2026-2875, PYSEC-2026-2876, PYSEC-2026-3721, PYSEC-2026-196 +3 more
libs/idun_agent_engine/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.pyarrow@22.0.0: 2 known vulnerabilitiesPYSEC-2026-113, PYSEC-2026-113
libs/idun_agent_engine/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.pyasn1@0.6.3: 14 known vulnerabilitiesPYSEC-2026-3455, PYSEC-2026-3456, PYSEC-2026-3457, GHSA-2qm8-x737-gmw5, GHSA-9m75-vc3g-4x39 +9 more
libs/idun_agent_engine/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.python-multipart@0.0.22: 12 known vulnerabilitiesPYSEC-2026-3036, PYSEC-2026-3037, PYSEC-2026-3038, PYSEC-2026-3039, PYSEC-2026-3040 +7 more
libs/idun_agent_engine/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.sqlparse@0.5.5: 10 known vulnerabilitiesPYSEC-2026-3696, PYSEC-2026-3697, PYSEC-2026-3698, PYSEC-2026-3699, PYSEC-2026-3923 +5 more
libs/idun_agent_engine/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.starlette@0.46.2: 14 known vulnerabilitiesPYSEC-2026-161, PYSEC-2026-1941, PYSEC-2026-1942, PYSEC-2026-2280, PYSEC-2026-2281 +9 more
libs/idun_agent_engine/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.strawberry-graphql@0.270.1: 5 known vulnerabilitiesPYSEC-2026-133, PYSEC-2026-134, PYSEC-2026-2283, PYSEC-2026-2284, PYSEC-2026-4303
libs/idun_agent_engine/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.tornado@6.5.5: 13 known vulnerabilitiesPYSEC-2026-3387, PYSEC-2026-3388, PYSEC-2026-3389, PYSEC-2026-3928, GHSA-3hv7-mjh2-fv65 +8 more
libs/idun_agent_engine/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.urllib3@2.6.3: 10 known vulnerabilitiesPYSEC-2026-141, PYSEC-2026-142, PYSEC-2026-4175, PYSEC-2026-4176, PYSEC-2026-4177 +5 more
libs/idun_agent_engine/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.vcrpy@8.1.1: 2 known vulnerabilitiesGHSA-rpj2-4hq8-938g, GHSA-rpj2-4hq8-938g
libs/idun_agent_engine/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.virtualenv@20.36.1: 19 known vulnerabilitiesPYSEC-2026-4011, PYSEC-2026-4012, PYSEC-2026-4013, PYSEC-2026-4014, GHSA-394h-qwmc-48pf +14 more
libs/idun_agent_engine/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.brace-expansion@1.1.14: 6 known vulnerabilitiesGHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr, GHSA-qhr7-859c-m2p7 +1 more
services/idun_agent_standalone_ui/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.brace-expansion@5.0.6: 6 known vulnerabilitiesGHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr, GHSA-qhr7-859c-m2p7 +1 more
services/idun_agent_standalone_ui/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.browserslist@4.28.2: 2 known vulnerabilitiesGHSA-73wf-gq98-2v4g, GHSA-c83g-rgw3-j3cx
services/idun_agent_standalone_ui/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.dompurify@3.2.7: 21 known vulnerabilitiesGHSA-39q2-94rc-95cp, GHSA-55q2-fjhq-7xh7, GHSA-6688-9rhm-gjv2, GHSA-76mc-f452-cxcm, GHSA-c2j3-45gr-mqc4 +16 more
services/idun_agent_standalone_ui/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.dompurify@3.4.2: 13 known vulnerabilitiesGHSA-55q2-fjhq-7xh7, GHSA-6688-9rhm-gjv2, GHSA-76mc-f452-cxcm, GHSA-c2j3-45gr-mqc4, GHSA-c6gr-qvv4-5v3f +8 more
services/idun_agent_standalone_ui/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.fflate@0.4.8: 1 known vulnerabilityGHSA-px8p-9vwx-vf98
services/idun_agent_standalone_ui/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.form-data@4.0.5: 1 known vulnerabilityGHSA-hmw2-7cc7-3qxx
services/idun_agent_standalone_ui/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.js-yaml@4.1.1: 4 known vulnerabilitiesGHSA-2883-xcg3-v3hh, GHSA-52cp-r559-cp3m, GHSA-5p4m-2wfm-xmqj, GHSA-h67p-54hq-rp68
services/idun_agent_standalone_ui/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.nanoid@3.3.11: 3 known vulnerabilitiesGHSA-28wg-ghj8-5hjv, GHSA-2v37-7h3g-55p8, GHSA-xwg4-73v4-xw9w
services/idun_agent_standalone_ui/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.postcss@8.4.31: 4 known vulnerabilitiesGHSA-6g55-p6wh-862q, GHSA-fxqj-rqcc-2cmp, GHSA-qx2v-qp2m-jg93, GHSA-r28c-9q8g-f849
services/idun_agent_standalone_ui/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.postcss@8.5.10: 3 known vulnerabilitiesGHSA-6g55-p6wh-862q, GHSA-fxqj-rqcc-2cmp, GHSA-r28c-9q8g-f849
services/idun_agent_standalone_ui/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.protobufjs@7.5.8: 3 known vulnerabilitiesGHSA-f38q-mgvj-vph7, GHSA-j3f2-48v5-ccww, GHSA-wcpc-wj8m-hjx6
services/idun_agent_standalone_ui/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.sharp@0.34.5: 3 known vulnerabilitiesGHSA-f88m-g3jw-g9cj, GHSA-rgj7-g3m4-5g8c, GHSA-wq5f-xc86-pv6w
services/idun_agent_standalone_ui/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.source-map-js@1.2.1: 1 known vulnerabilityGHSA-68fv-2mgg-jv7q
services/idun_agent_standalone_ui/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.vite@5.4.21: 8 known vulnerabilitiesGHSA-4w7w-66w2-5vf9, GHSA-587h-7wmj-h5pm, GHSA-698v-4r3x-3vcv, GHSA-9jrq-w75r-8gcw, GHSA-fx2h-pf6j-xcff +3 more
services/idun_agent_standalone_ui/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.ws@8.20.0: 2 known vulnerabilitiesGHSA-58qx-3vcg-4xpx, GHSA-96hv-2xvq-fx4p
services/idun_agent_standalone_ui/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.zod@3.25.76: 1 known vulnerabilityGHSA-mrhx-c7xc-m3w5
services/idun_agent_standalone_ui/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.filelock@3.25.0: 9 known vulnerabilitiesGHSA-567q-5qvw-pf92, GHSA-69hj-f68j-2879, GHSA-8mx5-7m5m-r77g, GHSA-9vhv-jxww-xfm5, GHSA-cwqr-hh33-gh44 +4 more
uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.graphql-core@3.2.8: 2 known vulnerabilitiesGHSA-r77w-qph3-7vf8, GHSA-vj8h-fx38-h3vc
uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.langgraph-sdk@0.3.9: 2 known vulnerabilitiesPYSEC-2026-2575, PYSEC-2026-4240
uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.langsmith@0.7.14: 3 known vulnerabilitiesPYSEC-2026-2582, PYSEC-2026-2583, GHSA-f4xh-w4cj-qxq8
uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.oauthlib@3.3.1: 4 known vulnerabilitiesPYSEC-2026-4113, PYSEC-2026-4114, GHSA-3jp2-3mrg-2vxc, GHSA-7984-qgvg-3j9c
uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.strawberry-graphql@0.287.3: 5 known vulnerabilitiesPYSEC-2026-133, PYSEC-2026-134, PYSEC-2026-2283, PYSEC-2026-2284, PYSEC-2026-4303
uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.virtualenv@21.1.0: 19 known vulnerabilitiesPYSEC-2026-4011, PYSEC-2026-4012, PYSEC-2026-4013, PYSEC-2026-4014, GHSA-394h-qwmc-48pf +14 more
uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Install or build failed in a clean environmentship a directory named `foo` that resides within a `src` directory located at the root of your project, you can define the following: [tool.hatch.build.targets.wheel] packages = ["src/foo"] hint: Build failures usually indicate a problem with the package or the build environment
- mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Install contacted hosts other than package registriesreleases.astral.sh
- lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key
docs/docs.json:344 - lowLow. Minor, or common in normal tools. Shown for information.filelock@3.20.3: 2 known vulnerabilitiesGHSA-69hj-f68j-2879, GHSA-8mx5-7m5m-r77g
libs/idun_agent_engine/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.idna@3.11: 2 known vulnerabilitiesPYSEC-2026-215, PYSEC-2026-215
libs/idun_agent_engine/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.langchain@1.2.9: 1 known vulnerabilityPYSEC-2026-2192
libs/idun_agent_engine/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.langchain-anthropic@1.3.2: 1 known vulnerabilityPYSEC-2026-2556
libs/idun_agent_engine/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.langgraph-checkpoint@4.0.0: 1 known vulnerabilityPYSEC-2026-2573
libs/idun_agent_engine/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.langgraph-checkpoint-postgres@3.0.4: 4 known vulnerabilitiesPYSEC-2026-3635, GHSA-6hmw-9432-67qq, PYSEC-2026-3635, GHSA-6hmw-9432-67qq
libs/idun_agent_engine/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.langgraph-checkpoint-sqlite@3.0.3: 4 known vulnerabilitiesPYSEC-2026-3636, GHSA-6hmw-9432-67qq, PYSEC-2026-3636, GHSA-6hmw-9432-67qq
libs/idun_agent_engine/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.multidict@6.7.1: 2 known vulnerabilitiesPYSEC-2026-4244, PYSEC-2026-4244
libs/idun_agent_engine/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.opentelemetry-api@1.37.0: 2 known vulnerabilitiesGHSA-xcq7-p3pf-p88h, GHSA-xcq7-p3pf-p88h
libs/idun_agent_engine/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.pydantic-settings@2.12.0: 1 known vulnerabilityGHSA-4xgf-cpjx-pc3j
libs/idun_agent_engine/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.pygments@2.19.2: 2 known vulnerabilitiesPYSEC-2026-2987, PYSEC-2026-2987
libs/idun_agent_engine/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.pytest@8.4.2: 2 known vulnerabilitiesPYSEC-2026-1845, PYSEC-2026-1845
libs/idun_agent_engine/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.python-dotenv@1.2.1: 1 known vulnerabilityPYSEC-2026-2270
libs/idun_agent_engine/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.requests@2.32.5: 2 known vulnerabilitiesPYSEC-2026-2275, PYSEC-2026-2275
libs/idun_agent_engine/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.python-dotenv@1.1.1: 1 known vulnerabilityPYSEC-2026-2270
libs/idun_agent_schema/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.@babel/core@7.29.0: 1 known vulnerabilityGHSA-4x5r-pxfx-6jf8
services/idun_agent_standalone_ui/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.@opentelemetry/core@2.2.0: 1 known vulnerabilityGHSA-8988-4f7v-96qf
services/idun_agent_standalone_ui/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.@opentelemetry/core@2.7.1: 1 known vulnerabilityGHSA-8988-4f7v-96qf
services/idun_agent_standalone_ui/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.@vitest/mocker@2.1.9: 2 known vulnerabilitiesGHSA-82fw-gwwq-j7x9, GHSA-qxg6-89mg-rqv8
services/idun_agent_standalone_ui/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.baseline-browser-mapping@2.10.21: 1 known vulnerabilityGHSA-w5vr-8v7q-w6rv
services/idun_agent_standalone_ui/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.esbuild@0.21.5: 1 known vulnerabilityGHSA-67mh-4wv8-2f99
services/idun_agent_standalone_ui/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.minimatch@10.2.5: 1 known vulnerabilityGHSA-g3hv-75wg-m249
services/idun_agent_standalone_ui/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.langchain@1.2.10: 1 known vulnerabilityPYSEC-2026-2192
uv.lock - lowLow. Minor, or common in normal tools. Shown for information.langchain-anthropic@1.3.4: 1 known vulnerabilityPYSEC-2026-2556
uv.lock - lowLow. Minor, or common in normal tools. Shown for information.langgraph-checkpoint@4.0.1: 1 known vulnerabilityPYSEC-2026-2573
uv.lock - lowLow. Minor, or common in normal tools. Shown for information.pydantic-settings@2.13.1: 1 known vulnerabilityGHSA-4xgf-cpjx-pc3j
uv.lock - lowLow. Minor, or common in normal tools. Shown for information.No manifest declaring network access and environment variables (agent.json)
- infoInfo. A note about the project, not a problem.Ignored the repo's scanner suppression config (1 file).gitleaksignore
Network activity
Automated result for the commit shown. See our scan policy. View the scan log
Maintainers can claim the listing to rescan, or dispute a result.
Idun Agent Platform alternatives
View more →Similar mcp servers in Design & Media, ranked by GitHub stars. Compare licence, recent activity and scan status before you choose.
| Name | Stars | Licence | Last updated | Scan |
|---|---|---|---|---|
| Idun Agent Platform (this page) Idun-Group | 205 | GPL-3.0 | Oct 30, 2026 | Scanned, no flagged issues |
| Next AI Draw Io DayuanJiang | 37k | Apache-2.0 | Nov 1, 2026 | Scanned, no flagged issues |
| MCP For Blender ahujasid | 33k | MIT | Oct 29, 2026 | Scanned, no flagged issues |
| Figma Context MCP GLips | 16k | MIT | Oct 27, 2026 | Scanned, no flagged issues |
| Nginx UI 0xJacky | 12k | AGPL-3.0 | Nov 1, 2026 | Scanned, no flagged issues |
| Lamda firerpa | 8.7k | MIT | Sep 27, 2026 | Scanned, no flagged issues |