Openagent MCP Server by the-open-agent

by the-open-agent• 5.7k•• Scanned•Claim this listing•Request removal
Data Science & MLagentagenticagentic aiagichatbot

⚡️next-generation personal AI assistant powered by LLM, RAG and agent loops, supporting computer-use, browser-use and coding agent, demo: https://demo.openagentai.org

Openagent is an open-source mcp server by the-open-agent, written mainly in Go, with 5,729 GitHub stars and the Apache-2.0 license. Its code was last updated Oct 31, 2026.

Scan summary: scanned Nov 5, 2026 at commit ea55304. No capabilities flagged by our checks. Scan policy

Scanned
Full scan at ea55304 · Nov 5, 2026
Scanned
Static code scanpass
Secrets scanfail
Dependency audit426 known vulnerabilitiesfail
Manifestnonewarn
Buildn/a
Boot & handshaken/a
Network egressn/a
Reproducible (×3)n/a

Findings (119)

  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • medium
    python-multipart@0.0.29: 4 known vulnerabilities
    PYSEC-2026-3036, PYSEC-2026-3037, PYSEC-2026-3040, PYSEC-2026-3041
    deploy/ocr-service/requirements.txt
  • medium
    requests@2.9.2: 5 known vulnerabilities
    PYSEC-2018-28, PYSEC-2023-74, PYSEC-2026-1872, PYSEC-2026-1873, PYSEC-2026-2275
    deploy/ocr-service/requirements.txt
  • medium
    tqdm@4.9.0: 2 known vulnerabilities
    PYSEC-2017-74, PYSEC-2026-1976
    deploy/ocr-service/requirements.txt
  • medium
    github.com/consensys/gnark-crypto@0.18.0: 1 known vulnerability
    GO-2025-4087
    go.mod
  • medium
    github.com/ethereum/go-ethereum@1.16.1: 5 known vulnerabilities
    GO-2026-4314, GO-2026-4315, GO-2026-4507, GO-2026-4508, GO-2026-4511
    go.mod
  • medium
    github.com/go-git/go-billy/v5@5.5.0: 2 known vulnerabilities
    GO-2026-5490, GO-2026-5597
    go.mod
  • medium
    github.com/golang-jwt/jwt/v4@4.5.1: 1 known vulnerability
    GO-2025-3553
    go.mod
  • medium
    github.com/xuri/excelize/v2@2.10.1: 18 known vulnerabilities
    GO-2026-5960, GO-2026-6452, GO-2026-6453, GO-2026-6684, GO-2026-6685 +13 more
    go.mod
  • medium
    golang.org/x/image@0.38.0: 8 known vulnerabilities
    GO-2026-4961, GO-2026-4962, GO-2026-5031, GO-2026-5032, GO-2026-5061 +3 more
    go.mod
  • medium
    image-size@1.2.1: 2 known vulnerabilities
    GHSA-5p2g-fcmc-qvqq, GHSA-w3rx-r6r6-pgpr
    tool/pptx-worker/package-lock.json
  • medium
    @babel/plugin-transform-modules-systemjs@7.28.5: 1 known vulnerability
    GHSA-fv7c-fp4j-7gwp
    web-old/yarn.lock
  • medium
    @tiptap/core@3.27.1: 2 known vulnerabilities
    GHSA-cp6q-959q-f8rh, GHSA-j95f-988m-3j2f
    web-old/yarn.lock
  • medium
    body-parser@1.20.4: 2 known vulnerabilities
    GHSA-27r3-jxmh-p828, GHSA-v422-hmwv-36x6
    web-old/yarn.lock
  • medium
    brace-expansion@1.1.12: 7 known vulnerabilities
    GHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-f886-m6hf-6m8v, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr +2 more
    web-old/yarn.lock
  • medium
    brace-expansion@2.0.2: 7 known vulnerabilities
    GHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-f886-m6hf-6m8v, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr +2 more
    web-old/yarn.lock
  • medium
    browserslist@4.28.1: 2 known vulnerabilities
    GHSA-73wf-gq98-2v4g, GHSA-c83g-rgw3-j3cx
    web-old/yarn.lock
  • medium
    compression@1.8.1: 1 known vulnerability
    GHSA-vc2v-76pw-4v95
    web-old/yarn.lock
  • medium
    dompurify@3.3.1: 21 known vulnerabilities
    GHSA-39q2-94rc-95cp, GHSA-55q2-fjhq-7xh7, GHSA-6688-9rhm-gjv2, GHSA-76mc-f452-cxcm, GHSA-c2j3-45gr-mqc4 +16 more
    web-old/yarn.lock
  • medium
    dompurify@3.4.1: 13 known vulnerabilities
    GHSA-55q2-fjhq-7xh7, GHSA-6688-9rhm-gjv2, GHSA-76mc-f452-cxcm, GHSA-c2j3-45gr-mqc4, GHSA-c6gr-qvv4-5v3f +8 more
    web-old/yarn.lock
  • medium
    fast-uri@3.1.0: 12 known vulnerabilities
    GHSA-333x-w4r6-6crp, GHSA-4c8g-83qw-93j6, GHSA-7p8r-x3mc-p8w7, GHSA-f65p-4m7j-42xc, GHSA-hrr3-gc8f-f4qj +7 more
    web-old/yarn.lock
  • medium
    flatted@3.3.3: 2 known vulnerabilities
    GHSA-25h7-pfq9-p65f, GHSA-rf6f-7fwh-wjgh
    web-old/yarn.lock
  • medium
    form-data@3.0.4: 1 known vulnerability
    GHSA-hmw2-7cc7-3qxx
    web-old/yarn.lock
  • medium
    js-yaml@3.14.2: 4 known vulnerabilities
    GHSA-2883-xcg3-v3hh, GHSA-52cp-r559-cp3m, GHSA-5p4m-2wfm-xmqj, GHSA-h67p-54hq-rp68
    web-old/yarn.lock
  • medium
    js-yaml@4.1.1: 4 known vulnerabilities
    GHSA-2883-xcg3-v3hh, GHSA-52cp-r559-cp3m, GHSA-5p4m-2wfm-xmqj, GHSA-h67p-54hq-rp68
    web-old/yarn.lock
  • medium
    jszip@2.5.0: 2 known vulnerabilities
    GHSA-36fh-84j7-cv5h, GHSA-jg8v-48h5-wgxg
    web-old/yarn.lock
  • medium
    launch-editor@2.12.0: 4 known vulnerabilities
    GHSA-587h-7wmj-h5pm, GHSA-698v-4r3x-3vcv, GHSA-r825-w8mm-5pxw, GHSA-v6wh-96g9-6wx3
    web-old/yarn.lock
  • medium
    lodash@4.17.21: 2 known vulnerabilities
    GHSA-r5fr-rjxr-66jc, GHSA-xxjr-mmjv-4gpg
    web-old/yarn.lock
  • medium
    lodash-es@4.17.22: 2 known vulnerabilities
    GHSA-r5fr-rjxr-66jc, GHSA-xxjr-mmjv-4gpg
    web-old/yarn.lock
  • medium
    minimatch@3.1.2: 3 known vulnerabilities
    GHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26, GHSA-7r86-cg39-jmmj
    web-old/yarn.lock
  • medium
    minimatch@5.1.6: 3 known vulnerabilities
    GHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26, GHSA-7r86-cg39-jmmj
    web-old/yarn.lock
  • medium
    nanoid@3.3.11: 3 known vulnerabilities
    GHSA-28wg-ghj8-5hjv, GHSA-2v37-7h3g-55p8, GHSA-xwg4-73v4-xw9w
    web-old/yarn.lock
  • medium
    nanoid@5.1.7: 2 known vulnerabilities
    GHSA-28wg-ghj8-5hjv, GHSA-xwg4-73v4-xw9w
    web-old/yarn.lock
  • medium
    node-forge@1.3.3: 15 known vulnerabilities
    GHSA-2328-f5f3-gj25, GHSA-4487-j8r4-4g2f, GHSA-4642-5mcj-2rqw, GHSA-525v-9gp9-w22h, GHSA-5cwg-6vw7-rj6p +10 more
    web-old/yarn.lock
  • medium
    nth-check@1.0.2: 1 known vulnerability
    GHSA-rp65-9cf3-cjxr
    web-old/yarn.lock
  • medium
    path-to-regexp@0.1.12: 1 known vulnerability
    GHSA-37ch-88jc-xwx2
    web-old/yarn.lock
  • medium
    pdfjs-dist@1.8.357: 2 known vulnerabilities
    GHSA-7jg2-jgv3-fmr4, GHSA-wgrm-67xf-hhpq
    web-old/yarn.lock
  • medium
    picomatch@2.3.1: 2 known vulnerabilities
    GHSA-3v7f-55p6-f55p, GHSA-c2c7-rcm5-vvqj
    web-old/yarn.lock
  • medium
    picomatch@4.0.3: 2 known vulnerabilities
    GHSA-3v7f-55p6-f55p, GHSA-c2c7-rcm5-vvqj
    web-old/yarn.lock
  • medium
    postcss@7.0.39: 5 known vulnerabilities
    GHSA-6g55-p6wh-862q, GHSA-7fh5-64p2-3v2j, GHSA-fxqj-rqcc-2cmp, GHSA-qx2v-qp2m-jg93, GHSA-r28c-9q8g-f849
    web-old/yarn.lock
  • medium
    postcss@8.4.49: 4 known vulnerabilities
    GHSA-6g55-p6wh-862q, GHSA-fxqj-rqcc-2cmp, GHSA-qx2v-qp2m-jg93, GHSA-r28c-9q8g-f849
    web-old/yarn.lock
  • medium
    postcss@8.5.6: 4 known vulnerabilities
    GHSA-6g55-p6wh-862q, GHSA-fxqj-rqcc-2cmp, GHSA-qx2v-qp2m-jg93, GHSA-r28c-9q8g-f849
    web-old/yarn.lock
  • medium
    prosemirror-view@1.42.0: 1 known vulnerability
    GHSA-c8x8-7fp4-3x9w
    web-old/yarn.lock
  • medium
    rollup@2.79.2: 1 known vulnerability
    GHSA-mw96-cpmx-2vgc
    web-old/yarn.lock
  • medium
    serialize-javascript@4.0.0: 2 known vulnerabilities
    GHSA-5c6j-r48x-rmvq, GHSA-m5mm-p8h7-m29v
    web-old/yarn.lock
  • medium
    serialize-javascript@6.0.2: 3 known vulnerabilities
    GHSA-5c6j-r48x-rmvq, GHSA-m5mm-p8h7-m29v, GHSA-qj8w-gfj5-8c6v
    web-old/yarn.lock
  • medium
    source-map-js@1.2.1: 2 known vulnerabilities
    GHSA-68fv-2mgg-jv7q, GHSA-68fv-2mgg-jv7q
    web-old/yarn.lock
  • medium
    svgo@1.3.2: 3 known vulnerabilities
    GHSA-2p49-hgcm-8545, GHSA-4vpr-x523-8j87, GHSA-w27v-7q3p-w38r
    web-old/yarn.lock
  • medium
    svgo@2.8.0: 4 known vulnerabilities
    GHSA-2p49-hgcm-8545, GHSA-4vpr-x523-8j87, GHSA-w27v-7q3p-w38r, GHSA-xpqw-6gx7-v673
    web-old/yarn.lock
  • medium
    three@0.85.2: 1 known vulnerability
    GHSA-fq6p-x6j3-cmmq
    web-old/yarn.lock
  • medium
    underscore@1.12.1: 1 known vulnerability
    GHSA-qpx9-hpmf-5gmw
    web-old/yarn.lock
  • medium
    underscore@1.13.7: 1 known vulnerability
    GHSA-qpx9-hpmf-5gmw
    web-old/yarn.lock
  • medium
    uuid@11.1.0: 1 known vulnerability
    GHSA-w5hq-g745-h8pq
    web-old/yarn.lock
  • medium
    uuid@8.3.2: 1 known vulnerability
    GHSA-w5hq-g745-h8pq
    web-old/yarn.lock
  • medium
    webpack-dev-middleware@5.3.4: 1 known vulnerability
    GHSA-g84c-rxfj-3j2c
    web-old/yarn.lock
  • medium
    ws@7.5.10: 1 known vulnerability
    GHSA-96hv-2xvq-fx4p
    web-old/yarn.lock
  • medium
    ws@8.19.0: 2 known vulnerabilities
    GHSA-58qx-3vcg-4xpx, GHSA-96hv-2xvq-fx4p
    web-old/yarn.lock
  • medium
    xlsx@0.10.9: 5 known vulnerabilities
    GHSA-3x9f-74h4-2fqr, GHSA-4r6h-8v6p-xvw6, GHSA-5pgg-2g8v-p4x9, GHSA-8vcr-vxm8-293m, GHSA-g973-978j-2c3p
    web-old/yarn.lock
  • medium
    xlsx@0.16.9: 5 known vulnerabilities
    GHSA-3x9f-74h4-2fqr, GHSA-4r6h-8v6p-xvw6, GHSA-5pgg-2g8v-p4x9, GHSA-8vcr-vxm8-293m, GHSA-g973-978j-2c3p
    web-old/yarn.lock
  • medium
    brace-expansion@1.1.18: 3 known vulnerabilities
    GHSA-6j4f-fj2g-mc7p, GHSA-q2hr-2g5m-vwhr, GHSA-qhr7-859c-m2p7
    web/yarn.lock
  • medium
    brace-expansion@5.0.9: 3 known vulnerabilities
    GHSA-6j4f-fj2g-mc7p, GHSA-q2hr-2g5m-vwhr, GHSA-qhr7-859c-m2p7
    web/yarn.lock
  • medium
    vite@5.4.21: 8 known vulnerabilities
    GHSA-4w7w-66w2-5vf9, GHSA-587h-7wmj-h5pm, GHSA-698v-4r3x-3vcv, GHSA-9jrq-w75r-8gcw, GHSA-fx2h-pf6j-xcff +3 more
    web/yarn.lock
  • medium
    xlsx@0.18.5: 2 known vulnerabilities
    GHSA-4r6h-8v6p-xvw6, GHSA-5pgg-2g8v-p4x9
    web/yarn.lock
  • low
    idna@3.9.0: 1 known vulnerability
    PYSEC-2026-215
    deploy/ocr-service/requirements.txt
  • low
    github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@1.6.3: 1 known vulnerability
    GO-2026-5764
    go.mod
  • low
    github.com/aws/aws-sdk-go-v2/service/bedrockruntime@1.8.0: 1 known vulnerability
    GO-2026-5764
    go.mod
  • low
    github.com/cloudflare/circl@1.3.3: 3 known vulnerabilities
    GO-2024-2453, GO-2025-3754, GO-2026-4550
    go.mod
  • low
    golang.org/x/mod@0.34.0: 2 known vulnerabilities
    GO-2026-6179, GO-2026-6180
    go.mod
  • low
    golang.org/x/net@0.52.0: 15 known vulnerabilities
    GO-2026-4918, GO-2026-5025, GO-2026-5026, GO-2026-5027, GO-2026-5028 +10 more
    go.mod
  • low
    golang.org/x/text@0.35.0: 2 known vulnerabilities
    GO-2026-5970, GO-2026-6629
    go.mod
  • low
    esbuild@0.28.0: 1 known vulnerability
    GHSA-g7r4-m6w7-qqqr
    tool/pptx-worker/package-lock.json
  • low
    @babel/core@7.28.5: 1 known vulnerability
    GHSA-4x5r-pxfx-6jf8
    web-old/yarn.lock
  • low
    @cyntler/react-doc-viewer@1.17.1: 1 known vulnerability
    GHSA-fvhg-p4hf-79x3
    web-old/yarn.lock
  • low
    @tootallnate/once@1.1.2: 1 known vulnerability
    GHSA-vpq2-c234-7xj6
    web-old/yarn.lock
  • low
    ajv@5.5.2: 2 known vulnerabilities
    GHSA-2g4f-4pwh-qvx6, GHSA-v88g-cgmw-v5xw
    web-old/yarn.lock
  • low
    ajv@6.12.6: 1 known vulnerability
    GHSA-2g4f-4pwh-qvx6
    web-old/yarn.lock
  • low
    ajv@7.2.4: 1 known vulnerability
    GHSA-2g4f-4pwh-qvx6
    web-old/yarn.lock
  • low
    ajv@8.17.1: 1 known vulnerability
    GHSA-2g4f-4pwh-qvx6
    web-old/yarn.lock
  • low
    baseline-browser-mapping@2.9.14: 1 known vulnerability
    GHSA-w5vr-8v7q-w6rv
    web-old/yarn.lock
  • low
    colord@2.9.3: 1 known vulnerability
    GHSA-2wm5-q62r-hmrv
    web-old/yarn.lock
  • low
    deepmerge@4.3.1: 1 known vulnerability
    GHSA-gcqx-w48m-w2h4
    web-old/yarn.lock
  • low
    diff@4.0.2: 1 known vulnerability
    GHSA-73rr-hh4g-fpgx
    web-old/yarn.lock
  • low
    diff@5.2.0: 1 known vulnerability
    GHSA-73rr-hh4g-fpgx
    web-old/yarn.lock
  • low
    echarts@5.6.0: 1 known vulnerability
    GHSA-fgmj-fm8m-jvvx
    web-old/yarn.lock
  • low
    follow-redirects@1.15.11: 1 known vulnerability
    GHSA-r4q5-vmmm-2653
    web-old/yarn.lock
  • low
    http-proxy-middleware@2.0.9: 1 known vulnerability
    GHSA-64mm-vxmg-q3vj
    web-old/yarn.lock
  • low
    katex@0.16.27: 1 known vulnerability
    GHSA-238p-pmpm-9mq7
    web-old/yarn.lock
  • low
    katex@0.16.28: 1 known vulnerability
    GHSA-238p-pmpm-9mq7
    web-old/yarn.lock
  • low
    katex@0.16.45: 1 known vulnerability
    GHSA-238p-pmpm-9mq7
    web-old/yarn.lock
  • low
    mermaid@11.14.0: 9 known vulnerabilities
    GHSA-2v8p-3f2j-5mp7, GHSA-3rrr-jr9j-h3q3, GHSA-6m6c-36f7-fhxh, GHSA-6x64-9x62-f2gx, GHSA-87f9-hvmw-gh4p +4 more
    web-old/yarn.lock
  • low
    micromatch@4.0.5: 1 known vulnerability
    GHSA-952p-6rrq-rcjv
    web-old/yarn.lock
  • low
    moment@2.30.1: 1 known vulnerability
    GHSA-4p3w-j4w9-5jqw
    web-old/yarn.lock
  • low
    postcss-selector-parser@6.1.2: 2 known vulnerabilities
    GHSA-rj75-hqrm-r3gf, GHSA-w9m9-85wc-3x92
    web-old/yarn.lock
  • low
    postcss-selector-parser@7.1.1: 2 known vulnerabilities
    GHSA-rj75-hqrm-r3gf, GHSA-w9m9-85wc-3x92
    web-old/yarn.lock
  • low
    qs@6.14.1: 4 known vulnerabilities
    GHSA-4mjr-xmp4-gh2g, GHSA-6pq8-jhm2-2vcw, GHSA-q8mj-m7cp-5q26, GHSA-w7fw-mjwx-w883
    web-old/yarn.lock
  • low
    webpack-dev-server@4.15.2: 6 known vulnerabilities
    GHSA-4v9v-hfq4-rm2v, GHSA-79cf-xcqc-c78w, GHSA-9jgg-88mc-972h, GHSA-f5vj-f2hx-8m93, GHSA-m28w-2pqf-7qgj +1 more
    web-old/yarn.lock
  • low
    yaml@1.10.2: 1 known vulnerability
    GHSA-48c2-rrv3-qjmp
    web-old/yarn.lock
  • low
    yaml@2.3.1: 1 known vulnerability
    GHSA-48c2-rrv3-qjmp
    web-old/yarn.lock
  • low
    esbuild@0.21.5: 1 known vulnerability
    GHSA-67mh-4wv8-2f99
    web/yarn.lock
  • low
    katex@0.16.47: 1 known vulnerability
    GHSA-238p-pmpm-9mq7
    web/yarn.lock
  • low
    minimatch@10.2.6: 1 known vulnerability
    GHSA-g3hv-75wg-m249
    web/yarn.lock
  • low
    postcss-selector-parser@6.1.4: 1 known vulnerability
    GHSA-rj75-hqrm-r3gf
    web/yarn.lock
  • low
    react-router@6.30.6: 2 known vulnerabilities
    GHSA-337j-9hxr-rhxg, GHSA-wrjc-x8rr-h8h6
    web/yarn.lock
  • low
    No manifest declaring network access and environment variables (agent.json)

Automated result for the commit shown. See our scan policy. View the scan log

Maintainers can claim the listing to rescan, or dispute a result.

Openagent alternatives

View more →

Similar mcp servers in Data Science & ML, ranked by GitHub stars. Compare licence, recent activity and scan status before you choose.

NameStarsLicenceLast updatedScan
Openagent (this page)
the-open-agent
5.7kApache-2.0Oct 31, 2026Scanned, no flagged issues
MaxKB
1Panel-dev
23kGPL-3.0Nov 1, 2026Scanned, no flagged issues
FunASR
modelscope
21kMITNov 1, 2026Scanned, no flagged issues
Ida Pro MCP
mrexodia
13kMITSep 26, 2026Scanned, no flagged issues
Pal MCP Server
BeehiveInnovations
12kNone foundDec 15, 2025Not scanned yet
Osaurus
osaurus-ai
8.1kMITNov 1, 2026Scanned, no flagged issues