Idun Agent Platform MCP Server

by Idun-Group• 205•• Scanned•Claim this listing•Request removal
Design & Mediaa2a protocolag ui protocolagent platformagentic aiagents

🟪 Open-source runtime that ships any LangGraph or Google ADK agent as a production-ready FastAPI service. Bundled , AG-UI copilotkit API, chat UI, 15+ guardrails, MCP, OpenTelemetry, OIDC. One pip install. Self-hosted, no vendor lock-in.

Idun Agent Platform is an open-source mcp server by Idun-Group, written mainly in Python, with 205 GitHub stars and the GPL-3.0 license. Its code was last updated Oct 30, 2026.

Scan summary: scanned Nov 5, 2026 at commit e643895. Seen able to connect to the internet. Scan policy

Scanned
Full scan at e643895 · Nov 5, 2026
Scanned
Static code scanwarn
Secrets scanfail
Dependency audit628 known vulnerabilitiesfail
Manifestnonewarn
Buildfail
Boot & handshaken/a
Network egresswarn
Reproducible (×3)n/a

Findings (98)

  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • medium
    black@26.3.1: 1 known vulnerability
    GHSA-cg8m-r9f2-5wm2
    libs/idun_agent_engine/uv.lock
  • medium
    dnspython@2.8.0: 2 known vulnerabilities
    GHSA-45c3-73f7-pv4m, GHSA-45c3-73f7-pv4m
    libs/idun_agent_engine/uv.lock
  • medium
    fsspec@2026.2.0: 2 known vulnerabilities
    PYSEC-2026-4217, PYSEC-2026-4217
    libs/idun_agent_engine/uv.lock
  • medium
    graphql-core@3.2.7: 2 known vulnerabilities
    GHSA-r77w-qph3-7vf8, GHSA-vj8h-fx38-h3vc
    libs/idun_agent_engine/uv.lock
  • medium
    httplib2@0.31.2: 2 known vulnerabilities
    PYSEC-2026-3444, PYSEC-2026-3444
    libs/idun_agent_engine/uv.lock
  • medium
    langchain-core@1.2.9: 4 known vulnerabilities
    PYSEC-2026-2193, PYSEC-2026-2562, PYSEC-2026-2563, PYSEC-2026-2564
    libs/idun_agent_engine/uv.lock
  • medium
    langgraph@1.0.8: 1 known vulnerability
    PYSEC-2026-83
    libs/idun_agent_engine/uv.lock
  • medium
    langgraph-sdk@0.3.4: 2 known vulnerabilities
    PYSEC-2026-2575, PYSEC-2026-4240
    libs/idun_agent_engine/uv.lock
  • medium
    langsmith@0.7.1: 3 known vulnerabilities
    PYSEC-2026-2582, PYSEC-2026-2583, GHSA-f4xh-w4cj-qxq8
    libs/idun_agent_engine/uv.lock
  • medium
    lxml@6.0.2: 2 known vulnerabilities
    PYSEC-2026-87, PYSEC-2026-87
    libs/idun_agent_engine/uv.lock
  • medium
    mako@1.3.10: 6 known vulnerabilities
    PYSEC-2026-2617, PYSEC-2026-4243, PYSEC-2026-88, PYSEC-2026-2617, PYSEC-2026-4243 +1 more
    libs/idun_agent_engine/uv.lock
  • medium
    mcp@1.26.0: 14 known vulnerabilities
    PYSEC-2026-3481, PYSEC-2026-3482, PYSEC-2026-3483, GHSA-5h93-6whr-6q8j, GHSA-84m7-p3x7-pcfv +9 more
    libs/idun_agent_engine/uv.lock
  • medium
    pip@26.0.1: 8 known vulnerabilities
    PYSEC-2026-196, PYSEC-2026-2875, PYSEC-2026-2876, PYSEC-2026-3721, PYSEC-2026-196 +3 more
    libs/idun_agent_engine/uv.lock
  • medium
    pyarrow@22.0.0: 2 known vulnerabilities
    PYSEC-2026-113, PYSEC-2026-113
    libs/idun_agent_engine/uv.lock
  • medium
    pyasn1@0.6.3: 14 known vulnerabilities
    PYSEC-2026-3455, PYSEC-2026-3456, PYSEC-2026-3457, GHSA-2qm8-x737-gmw5, GHSA-9m75-vc3g-4x39 +9 more
    libs/idun_agent_engine/uv.lock
  • medium
    python-multipart@0.0.22: 12 known vulnerabilities
    PYSEC-2026-3036, PYSEC-2026-3037, PYSEC-2026-3038, PYSEC-2026-3039, PYSEC-2026-3040 +7 more
    libs/idun_agent_engine/uv.lock
  • medium
    sqlparse@0.5.5: 10 known vulnerabilities
    PYSEC-2026-3696, PYSEC-2026-3697, PYSEC-2026-3698, PYSEC-2026-3699, PYSEC-2026-3923 +5 more
    libs/idun_agent_engine/uv.lock
  • medium
    starlette@0.46.2: 14 known vulnerabilities
    PYSEC-2026-161, PYSEC-2026-1941, PYSEC-2026-1942, PYSEC-2026-2280, PYSEC-2026-2281 +9 more
    libs/idun_agent_engine/uv.lock
  • medium
    strawberry-graphql@0.270.1: 5 known vulnerabilities
    PYSEC-2026-133, PYSEC-2026-134, PYSEC-2026-2283, PYSEC-2026-2284, PYSEC-2026-4303
    libs/idun_agent_engine/uv.lock
  • medium
    tornado@6.5.5: 13 known vulnerabilities
    PYSEC-2026-3387, PYSEC-2026-3388, PYSEC-2026-3389, PYSEC-2026-3928, GHSA-3hv7-mjh2-fv65 +8 more
    libs/idun_agent_engine/uv.lock
  • medium
    urllib3@2.6.3: 10 known vulnerabilities
    PYSEC-2026-141, PYSEC-2026-142, PYSEC-2026-4175, PYSEC-2026-4176, PYSEC-2026-4177 +5 more
    libs/idun_agent_engine/uv.lock
  • medium
    vcrpy@8.1.1: 2 known vulnerabilities
    GHSA-rpj2-4hq8-938g, GHSA-rpj2-4hq8-938g
    libs/idun_agent_engine/uv.lock
  • medium
    virtualenv@20.36.1: 19 known vulnerabilities
    PYSEC-2026-4011, PYSEC-2026-4012, PYSEC-2026-4013, PYSEC-2026-4014, GHSA-394h-qwmc-48pf +14 more
    libs/idun_agent_engine/uv.lock
  • medium
    brace-expansion@1.1.14: 6 known vulnerabilities
    GHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr, GHSA-qhr7-859c-m2p7 +1 more
    services/idun_agent_standalone_ui/pnpm-lock.yaml
  • medium
    brace-expansion@5.0.6: 6 known vulnerabilities
    GHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr, GHSA-qhr7-859c-m2p7 +1 more
    services/idun_agent_standalone_ui/pnpm-lock.yaml
  • medium
    browserslist@4.28.2: 2 known vulnerabilities
    GHSA-73wf-gq98-2v4g, GHSA-c83g-rgw3-j3cx
    services/idun_agent_standalone_ui/pnpm-lock.yaml
  • medium
    dompurify@3.2.7: 21 known vulnerabilities
    GHSA-39q2-94rc-95cp, GHSA-55q2-fjhq-7xh7, GHSA-6688-9rhm-gjv2, GHSA-76mc-f452-cxcm, GHSA-c2j3-45gr-mqc4 +16 more
    services/idun_agent_standalone_ui/pnpm-lock.yaml
  • medium
    dompurify@3.4.2: 13 known vulnerabilities
    GHSA-55q2-fjhq-7xh7, GHSA-6688-9rhm-gjv2, GHSA-76mc-f452-cxcm, GHSA-c2j3-45gr-mqc4, GHSA-c6gr-qvv4-5v3f +8 more
    services/idun_agent_standalone_ui/pnpm-lock.yaml
  • medium
    fflate@0.4.8: 1 known vulnerability
    GHSA-px8p-9vwx-vf98
    services/idun_agent_standalone_ui/pnpm-lock.yaml
  • medium
    form-data@4.0.5: 1 known vulnerability
    GHSA-hmw2-7cc7-3qxx
    services/idun_agent_standalone_ui/pnpm-lock.yaml
  • medium
    js-yaml@4.1.1: 4 known vulnerabilities
    GHSA-2883-xcg3-v3hh, GHSA-52cp-r559-cp3m, GHSA-5p4m-2wfm-xmqj, GHSA-h67p-54hq-rp68
    services/idun_agent_standalone_ui/pnpm-lock.yaml
  • medium
    nanoid@3.3.11: 3 known vulnerabilities
    GHSA-28wg-ghj8-5hjv, GHSA-2v37-7h3g-55p8, GHSA-xwg4-73v4-xw9w
    services/idun_agent_standalone_ui/pnpm-lock.yaml
  • medium
    postcss@8.4.31: 4 known vulnerabilities
    GHSA-6g55-p6wh-862q, GHSA-fxqj-rqcc-2cmp, GHSA-qx2v-qp2m-jg93, GHSA-r28c-9q8g-f849
    services/idun_agent_standalone_ui/pnpm-lock.yaml
  • medium
    postcss@8.5.10: 3 known vulnerabilities
    GHSA-6g55-p6wh-862q, GHSA-fxqj-rqcc-2cmp, GHSA-r28c-9q8g-f849
    services/idun_agent_standalone_ui/pnpm-lock.yaml
  • medium
    protobufjs@7.5.8: 3 known vulnerabilities
    GHSA-f38q-mgvj-vph7, GHSA-j3f2-48v5-ccww, GHSA-wcpc-wj8m-hjx6
    services/idun_agent_standalone_ui/pnpm-lock.yaml
  • medium
    sharp@0.34.5: 3 known vulnerabilities
    GHSA-f88m-g3jw-g9cj, GHSA-rgj7-g3m4-5g8c, GHSA-wq5f-xc86-pv6w
    services/idun_agent_standalone_ui/pnpm-lock.yaml
  • medium
    source-map-js@1.2.1: 1 known vulnerability
    GHSA-68fv-2mgg-jv7q
    services/idun_agent_standalone_ui/pnpm-lock.yaml
  • medium
    vite@5.4.21: 8 known vulnerabilities
    GHSA-4w7w-66w2-5vf9, GHSA-587h-7wmj-h5pm, GHSA-698v-4r3x-3vcv, GHSA-9jrq-w75r-8gcw, GHSA-fx2h-pf6j-xcff +3 more
    services/idun_agent_standalone_ui/pnpm-lock.yaml
  • medium
    ws@8.20.0: 2 known vulnerabilities
    GHSA-58qx-3vcg-4xpx, GHSA-96hv-2xvq-fx4p
    services/idun_agent_standalone_ui/pnpm-lock.yaml
  • medium
    zod@3.25.76: 1 known vulnerability
    GHSA-mrhx-c7xc-m3w5
    services/idun_agent_standalone_ui/pnpm-lock.yaml
  • medium
    filelock@3.25.0: 9 known vulnerabilities
    GHSA-567q-5qvw-pf92, GHSA-69hj-f68j-2879, GHSA-8mx5-7m5m-r77g, GHSA-9vhv-jxww-xfm5, GHSA-cwqr-hh33-gh44 +4 more
    uv.lock
  • medium
    graphql-core@3.2.8: 2 known vulnerabilities
    GHSA-r77w-qph3-7vf8, GHSA-vj8h-fx38-h3vc
    uv.lock
  • medium
    langgraph-sdk@0.3.9: 2 known vulnerabilities
    PYSEC-2026-2575, PYSEC-2026-4240
    uv.lock
  • medium
    langsmith@0.7.14: 3 known vulnerabilities
    PYSEC-2026-2582, PYSEC-2026-2583, GHSA-f4xh-w4cj-qxq8
    uv.lock
  • medium
    oauthlib@3.3.1: 4 known vulnerabilities
    PYSEC-2026-4113, PYSEC-2026-4114, GHSA-3jp2-3mrg-2vxc, GHSA-7984-qgvg-3j9c
    uv.lock
  • medium
    strawberry-graphql@0.287.3: 5 known vulnerabilities
    PYSEC-2026-133, PYSEC-2026-134, PYSEC-2026-2283, PYSEC-2026-2284, PYSEC-2026-4303
    uv.lock
  • medium
    virtualenv@21.1.0: 19 known vulnerabilities
    PYSEC-2026-4011, PYSEC-2026-4012, PYSEC-2026-4013, PYSEC-2026-4014, GHSA-394h-qwmc-48pf +14 more
    uv.lock
  • medium
    Install or build failed in a clean environment
    ship a directory named `foo` that resides within a `src` directory located at the root of your project, you can define the following: [tool.hatch.build.targets.wheel] packages = ["src/foo"] hint: Build failures usually indicate a problem with the package or the build environment
  • medium
    Install contacted hosts other than package registries
    releases.astral.sh
  • low
    Possible example credential in docs/tests: generic-api-key
    docs/docs.json:344
  • low
    filelock@3.20.3: 2 known vulnerabilities
    GHSA-69hj-f68j-2879, GHSA-8mx5-7m5m-r77g
    libs/idun_agent_engine/uv.lock
  • low
    idna@3.11: 2 known vulnerabilities
    PYSEC-2026-215, PYSEC-2026-215
    libs/idun_agent_engine/uv.lock
  • low
    langchain@1.2.9: 1 known vulnerability
    PYSEC-2026-2192
    libs/idun_agent_engine/uv.lock
  • low
    langchain-anthropic@1.3.2: 1 known vulnerability
    PYSEC-2026-2556
    libs/idun_agent_engine/uv.lock
  • low
    langgraph-checkpoint@4.0.0: 1 known vulnerability
    PYSEC-2026-2573
    libs/idun_agent_engine/uv.lock
  • low
    langgraph-checkpoint-postgres@3.0.4: 4 known vulnerabilities
    PYSEC-2026-3635, GHSA-6hmw-9432-67qq, PYSEC-2026-3635, GHSA-6hmw-9432-67qq
    libs/idun_agent_engine/uv.lock
  • low
    langgraph-checkpoint-sqlite@3.0.3: 4 known vulnerabilities
    PYSEC-2026-3636, GHSA-6hmw-9432-67qq, PYSEC-2026-3636, GHSA-6hmw-9432-67qq
    libs/idun_agent_engine/uv.lock
  • low
    multidict@6.7.1: 2 known vulnerabilities
    PYSEC-2026-4244, PYSEC-2026-4244
    libs/idun_agent_engine/uv.lock
  • low
    opentelemetry-api@1.37.0: 2 known vulnerabilities
    GHSA-xcq7-p3pf-p88h, GHSA-xcq7-p3pf-p88h
    libs/idun_agent_engine/uv.lock
  • low
    pydantic-settings@2.12.0: 1 known vulnerability
    GHSA-4xgf-cpjx-pc3j
    libs/idun_agent_engine/uv.lock
  • low
    pygments@2.19.2: 2 known vulnerabilities
    PYSEC-2026-2987, PYSEC-2026-2987
    libs/idun_agent_engine/uv.lock
  • low
    pytest@8.4.2: 2 known vulnerabilities
    PYSEC-2026-1845, PYSEC-2026-1845
    libs/idun_agent_engine/uv.lock
  • low
    python-dotenv@1.2.1: 1 known vulnerability
    PYSEC-2026-2270
    libs/idun_agent_engine/uv.lock
  • low
    requests@2.32.5: 2 known vulnerabilities
    PYSEC-2026-2275, PYSEC-2026-2275
    libs/idun_agent_engine/uv.lock
  • low
    python-dotenv@1.1.1: 1 known vulnerability
    PYSEC-2026-2270
    libs/idun_agent_schema/uv.lock
  • low
    @babel/core@7.29.0: 1 known vulnerability
    GHSA-4x5r-pxfx-6jf8
    services/idun_agent_standalone_ui/pnpm-lock.yaml
  • low
    @opentelemetry/core@2.2.0: 1 known vulnerability
    GHSA-8988-4f7v-96qf
    services/idun_agent_standalone_ui/pnpm-lock.yaml
  • low
    @opentelemetry/core@2.7.1: 1 known vulnerability
    GHSA-8988-4f7v-96qf
    services/idun_agent_standalone_ui/pnpm-lock.yaml
  • low
    @vitest/mocker@2.1.9: 2 known vulnerabilities
    GHSA-82fw-gwwq-j7x9, GHSA-qxg6-89mg-rqv8
    services/idun_agent_standalone_ui/pnpm-lock.yaml
  • low
    baseline-browser-mapping@2.10.21: 1 known vulnerability
    GHSA-w5vr-8v7q-w6rv
    services/idun_agent_standalone_ui/pnpm-lock.yaml
  • low
    esbuild@0.21.5: 1 known vulnerability
    GHSA-67mh-4wv8-2f99
    services/idun_agent_standalone_ui/pnpm-lock.yaml
  • low
    minimatch@10.2.5: 1 known vulnerability
    GHSA-g3hv-75wg-m249
    services/idun_agent_standalone_ui/pnpm-lock.yaml
  • low
    langchain@1.2.10: 1 known vulnerability
    PYSEC-2026-2192
    uv.lock
  • low
    langchain-anthropic@1.3.4: 1 known vulnerability
    PYSEC-2026-2556
    uv.lock
  • low
    langgraph-checkpoint@4.0.1: 1 known vulnerability
    PYSEC-2026-2573
    uv.lock
  • low
    pydantic-settings@2.13.1: 1 known vulnerability
    GHSA-4xgf-cpjx-pc3j
    uv.lock
  • low
    No manifest declaring network access and environment variables (agent.json)
  • info
    Ignored the repo's scanner suppression config (1 file)
    .gitleaksignore

Network activity

During install
files.pythonhosted.orgpypi.orgreleases.astral.sh
While running
Not run — the code wasn't started in this scan

Automated result for the commit shown. See our scan policy. View the scan log

Maintainers can claim the listing to rescan, or dispute a result.

Idun Agent Platform alternatives

View more →

Similar mcp servers in Design & Media, ranked by GitHub stars. Compare licence, recent activity and scan status before you choose.

NameStarsLicenceLast updatedScan
Idun Agent Platform (this page)
Idun-Group
205GPL-3.0Oct 30, 2026Scanned, no flagged issues
Next AI Draw Io
DayuanJiang
37kApache-2.0Nov 1, 2026Scanned, no flagged issues
MCP For Blender
ahujasid
33kMITOct 29, 2026Scanned, no flagged issues
Figma Context MCP
GLips
16kMITOct 27, 2026Scanned, no flagged issues
Nginx UI
0xJacky
12kAGPL-3.0Nov 1, 2026Scanned, no flagged issues
Lamda
firerpa
8.7kMITSep 27, 2026Scanned, no flagged issues