← Back to search

@agentworkforce/mcp-workforce

GitHub Actions Scanned 5d ago

An MCP server that exposes workforce primitives (workflows, memory, integration clients) to a harness running inside a workforce sandbox.

npm
C
70.2 / 100

Versions

4.1.37latest
Jul 25, 2026
4.1.36
Jul 24, 2026
4.1.35
Jul 24, 2026
4.1.34
Jul 19, 2026
4.1.33
Jul 18, 2026
+ show 89 moreshow less
4.1.32
Jul 17, 2026
4.1.31
Jul 17, 2026
4.1.30
Jul 17, 2026
4.1.29
Jul 17, 2026
4.1.27
Jul 17, 2026
4.1.26
Jul 16, 2026
4.1.25
Jul 16, 2026
4.1.24
Jul 16, 2026
4.1.23
Jul 15, 2026
4.1.22
Jul 15, 2026
4.1.21
Jul 15, 2026
4.1.20
Jul 15, 2026
4.1.19
Jul 15, 2026
4.1.18
Jul 15, 2026
4.1.17
Jul 15, 2026
4.1.16
Jul 14, 2026
4.1.15
Jul 13, 2026
4.1.14
Jun 25, 2026
4.1.13
Jun 25, 2026
4.1.12
Jun 24, 2026
4.1.11
Jun 24, 2026
4.1.10
Jun 23, 2026
4.1.9
Jun 23, 2026
4.1.8
Jun 21, 2026
4.1.7
Jun 21, 2026
4.1.6
Jun 18, 2026
4.1.5
Jun 18, 2026
4.1.4
Jun 17, 2026
4.1.3
Jun 16, 2026
4.1.2
Jun 16, 2026
4.1.1
Jun 16, 2026
4.1.0
Jun 15, 2026
4.0.6
Jun 15, 2026
4.0.5
Jun 14, 2026
4.0.4
Jun 14, 2026
4.0.3
Jun 11, 2026
4.0.2
Jun 11, 2026
4.0.1
Jun 10, 2026
4.0.0
Jun 10, 2026
3.0.52
Jun 9, 2026
3.0.51
Jun 8, 2026
3.0.50
Jun 6, 2026
3.0.49
Jun 5, 2026
3.0.47
Jun 4, 2026
3.0.46
Jun 4, 2026
3.0.45
Jun 4, 2026
3.0.44
Jun 4, 2026
3.0.43
Jun 4, 2026
3.0.42
Jun 3, 2026
3.0.41
Jun 2, 2026
3.0.40
Jun 2, 2026
3.0.39
Jun 1, 2026
3.0.38
Jun 1, 2026
3.0.37
Jun 1, 2026
3.0.36
Jun 1, 2026
3.0.35
May 31, 2026
3.0.33
May 29, 2026
3.0.32
May 28, 2026
3.0.31
May 28, 2026
3.0.30
May 28, 2026
3.0.29
May 28, 2026
3.0.28
May 28, 2026
3.0.27
May 27, 2026
3.0.26
May 27, 2026
3.0.25
May 26, 2026
3.0.24
May 26, 2026
3.0.23
May 26, 2026
3.0.22
May 24, 2026
3.0.21
May 23, 2026
3.0.20
May 23, 2026
3.0.19
May 23, 2026
3.0.18
May 22, 2026
3.0.17
May 22, 2026
3.0.16
May 22, 2026
3.0.15
May 20, 2026
3.0.14
May 20, 2026
3.0.13
May 19, 2026
3.0.12
May 18, 2026
3.0.11
May 14, 2026
3.0.10
May 13, 2026
3.0.9
May 13, 2026
3.0.8
May 13, 2026
3.0.7
May 13, 2026
3.0.6
May 13, 2026
3.0.5
May 13, 2026
3.0.4
May 13, 2026
3.0.3
May 13, 2026
3.0.2
May 13, 2026
0.0.0
May 13, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 11

workflow.run
annotations: none low

Invoke a named workflow against the active workspace and return the run id + initial status. Long-running workflows are polled via workflow.status.

args record name string
workflow.status
annotations: none low

Poll a previously-started workflow run for status, output, and error fields.

runId string
memory.save
annotations: none low

Persist a memory entry for the active workspace. Scope is one of workspace (default) / user / global, matching @agentworkforce/persona-kit\'s PersonaMemoryScope. Tags are deduped; workspace/scope tags are added automatically.

tags array content string
memory.recall
annotations: none low

Semantic search over the workspace memory bag. Returns up to `limit` items (default 5, max 50).

limit number query string
list_integrations
annotations: none low

Returns the same integration catalog/status JSON document as `agentworkforce integrations --json`. Use before authoring agent.triggers.

provider string includeTriggers boolean
get_agent_card
annotations: none low

Returns the same canonical card JSON as `agentworkforce agent-card --json`.

baseUrl string persona record version string inputModes array outputModes array documentationUrl string
integration.github.comment
annotations: none low

Posts a comment on the target issue/PR. Returns the comment URL.

body string
integration.github.createIssue
annotations: none low

Creates a new issue in the target repo. Returns { number, url }.

body string title string labels array
integration.github.upsertIssue
annotations: none low

Updates an open issue matching `matchTitle` if present, otherwise creates one. Returns { number, url, created }.

body string title string labels array matchTitle string
integration.github.getPr
annotations: none low

Returns title, body, head/base refs, author, and the full unified diff via the canonical API endpoint.

integration.github.postReview
annotations: none low

Posts a review with optional inline comments. `event` is one of COMMENT, APPROVE, REQUEST_CHANGES.

Permissions 4

network medium
Server uses network capabilities via: dgram, fetch(), http, https, net
filesystem low
Server uses filesystem capabilities via: fs, fs sync ops, fs/promises, path
shell high
Server uses shell capabilities via: child_process, spawn(), spawnSync()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 41

medium
Excessive dependency count: 53 direct dependencies dependency_analyzer · 90%
low
Tool 'workflow.run' has no annotations annotation_checker · 100%
low
Tool 'workflow.status' has no annotations annotation_checker · 100%
low
Tool 'memory.save' has no annotations annotation_checker · 100%
low
Tool 'memory.recall' has no annotations annotation_checker · 100%
low
Tool 'list_integrations' has no annotations annotation_checker · 100%
low
Tool 'get_agent_card' has no annotations annotation_checker · 100%
low
Tool 'integration.github.comment' has no annotations annotation_checker · 100%
low
Tool 'integration.github.createIssue' has no annotations annotation_checker · 100%
low
Tool 'integration.github.upsertIssue' has no annotations annotation_checker · 100%
low
Tool 'integration.github.getPr' has no annotations annotation_checker · 100%
low
Tool 'integration.github.postReview' has no annotations annotation_checker · 100%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.21.0 (GHSA-345p-7cg4-v4c7) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.21.0 (GHSA-8r9q-7v3j-jr4g) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.21.0 (GHSA-w48q-cv73-mx4w) dependency_analyzer · 95%
medium
Buffer.from base64 in AgentWorkforce-workforce-34b0c83/packages/deploy/src/modes/sandbox-client.test.ts:146 entropy_analyzer · 75%
medium
Buffer.from base64 in AgentWorkforce-workforce-34b0c83/packages/deploy/src/modes/sandbox-client.test.ts:151 entropy_analyzer · 75%
medium
Buffer.from base64 in AgentWorkforce-workforce-34b0c83/packages/runtime/src/local-preview-hooks.ts:388 entropy_analyzer · 75%
medium
Buffer.from base64 in AgentWorkforce-workforce-34b0c83/packages/runtime/src/local-preview.ts:495 entropy_analyzer · 75%
info
package.json metadata manifest_parser · 100%
info
Tool: workflow.run manifest_parser · 85%
info
Tool: workflow.status manifest_parser · 85%
info
Tool: memory.save manifest_parser · 85%
info
Tool: memory.recall manifest_parser · 85%
info
Tool: list_integrations manifest_parser · 85%
info
Tool: get_agent_card manifest_parser · 85%
info
Tool: integration.github.comment manifest_parser · 85%
info
Tool: integration.github.createIssue manifest_parser · 85%
info
Tool: integration.github.upsertIssue manifest_parser · 85%
info
Tool: integration.github.getPr manifest_parser · 85%
info
Tool: integration.github.postReview manifest_parser · 85%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (74) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 90%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 355 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%