Back to Browse

Server OS MCP Server

Developer ToolsUse Caution3.2MCP RegistryLocal
Free

Server data from the Official MCP Registry

Fail-closed agentic OS MCP: agents as processes with cost, governance, observability, skills.

About

Fail-closed agentic OS MCP: agents as processes with cost, governance, observability, skills.

Security Report

3.2
Use Caution3.2High Risk

Server OS is a legitimate agentic operating system framework with thoughtful governance, cost control, and capability-based access. However, several security concerns lower the score: the `code_exec` tool uses eval() without meaningful sandboxing, file operations lack sufficient path validation robustness, MCP and REST API endpoints lack authentication entirely, and sensitive operational data (cost ledger, audit logs, agent state) is exposed without access control. The mock LLM and deterministic design are appropriate for a demo/framework, but production use would require authentication and stricter sandboxing. Supply chain analysis found 9 known vulnerabilities in dependencies (0 critical, 3 high severity).

8 files analyzed · 20 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

File System Write

Writes or modifies files on your machine. Check that this is expected for the tool.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Check that this permission is expected for this type of plugin.

process_spawn

Check that this permission is expected for this type of plugin.

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-anamized-server-os": {
      "args": [
        "server-os"
      ],
      "command": "uvx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

Server OS

CI License Python 3.11+ MCP SDK CLI API

Autonomous Agentic Operating System — agents as first-class processes with cost control, governance, observability, MCP, SDK, CLI, and skills. Fail-closed. Verified end-to-end.

A senior engineer who has never seen this repository can, using only the source code and this README.md:

  1. Deploy the entire system (single command)
  2. Exercise every major feature
  3. Verify end-to-end correctness via automated checks

No prior context or tribal knowledge required.

Support Agentic OS Kernels ($99) · Agentic OS Cycle ($0.75) · Public Goods Support

Non-custodial USDC (preferred for agents)

NetworkAddressExplorer
Base0xD3d0E9eDAe3Ac7bb199a8EAA761BdA423b878438basescan
Ethereum0xD3d0E9eDAe3Ac7bb199a8EAA761BdA423b878438etherscan
SolanaETQwWf19axArsY493UfC6bxe2BmEzmzvCb58PPnC38Asolscan

Related: rui · LRSI · openmesha · OpenGOS · agenticarb · x402-cloudflare-starter


🚀 Web Control Plane (Hero Demo — Zero Install)

Canonical file: web/server-os.html (~82 KB)

Open locally:

python -m http.server 8088 --directory web
# http://127.0.0.1:8088/server-os.html

Or Chrome → File → Open File…web/server-os.html.

Acceptance: open the file → OS tab → Golden evals → run12/12 passed.

Offline mock provider, policy, budgets, graph, terminal, and 12 golden evals. The HTML engine is DOM-free below the UI so the eval suite exercises the same path as interactive use.


Quick Start (Production Runtime)

docker compose up --build
# another terminal
bash scripts/verify.sh

Default mode is offline mock LLM (deterministic, free). Set SERVER_OS_LLM_MODE=openai + OPENAI_API_KEY for real models.


Surfaces

SurfaceEntry
Web control planeweb/server-os.html (offline, self-verifying)
REST APIpython -c "from server_os.main import run; run()"
CLIserver-os status / server-os agents ...
MCP Serverserver-os-mcp
SDKfrom server_os.sdk import ServerOSClient
Multi-agent workflowsskills/multi-agent-workflow/
Skillsskills/*/SKILL.md
AGENTS.mdCoding-agent contract at repo root
CI.github/workflows/ci.yml

Verify contract

bash scripts/verify.sh

Covers API, cost, governance, multi-agent workflows, SDK, CLI, MCP, skills, and AGENTS.md. 16 checks. All must pass.

Web parity check (manual, ~30s): open full web/server-os.html → run Golden evals → 12/12.

Design principles

  1. Least privilege by construction (capabilities from intent)
  2. Cost is a first-class resource
  3. Observable by default
  4. Fail closed
  5. Deployable with zero tribal knowledge

License

Apache-2.0

Reviews

No reviews yet

Be the first to review this server!