← Back to search

io.github.cyanheads/shift-mcp-server

cyanheads Scanned 22d ago

Lightweight coordination layer for multiple AI agents working on the same codebase simultaneously.

B
87.1 / 100

Versions

0.1.3latest
first seen Jun 5, 2026
0.1.5
first seen May 19, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 2

shift_check_out
annotations: verified low

End your working session. Removes you from the active worker list so other agents no longer see you as active.

input object output object summary string workerId string
readOnlyHint false idempotentHint true
shift_check_in
annotations: verified low

This is a multi-agent workspace. Run this tool at the start of every working session to check in and receive coordination instructions. Provide a concise gist of what you're working on and the file paths you expect to modify (if known). If you already have a worker ID from a previous check-in, pass it to update your session.

gist string files array input object output object workerId string checkedInAt string activeWorkers array
readOnlyHint false idempotentHint false

Permissions 2

shell high
Server uses shell capabilities via: child_process, spawn(), spawnSync()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 13

info
Tool 'shift_check_out' annotations are consistent annotation_checker · 80%
info
Tool 'shift_check_in' annotations are consistent annotation_checker · 80%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
info
package.json metadata manifest_parser · 100%
info
Tool: shift_check_out manifest_parser · 75%
info
Tool: shift_check_in manifest_parser · 75%
info
Required env vars (4) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 13 components sbom_generator · 100%
high
Hardcoded Password found in cyanheads-shift-mcp-server-fa3fdad/framework-skills/api-utils/references/security.md secret_scanner · 65%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%