P2P runtime for A2A protocol. Encrypted agent communication with zero-config NAT traversal.
Config is the same across clients — only the file and path differ.
{
"mcpServers": {
"io-github-agentanycast-agentanycast": {
"args": [
"-y",
"@modelcontextprotocol/server-filesystem"
],
"command": "npx"
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
The core daemon powering AgentAnycast's P2P agent network.
Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.
npx -y '@modelcontextprotocol/server-filesystem' 2>&1 | head -1 && echo "✓ Server started successfully"
After testing, let us know if it worked:
Five weighted categories — click any category to see the underlying evidence.
@modelcontextprotocol/server-filesystem vulnerability allows for path validation bypass via colliding path prefix
Versions of Filesystem prior to 0.6.3 & 2025.7.1 could allow access to unintended files in cases where the prefix matches an allowed directory. Users are advised to upgrade to 2025.7.1 to resolve the issue. Thank you to Elad Beber (Cymulate) for reporting these issues.
>= 0source →@modelcontextprotocol/server-filesystem allows for path validation bypass via prefix matching and symlink handling
Versions of Filesystem prior to 0.6.3 & 2025.7.1 could allow access to unintended files via symlinks within allowed directories. Users are advised to upgrade to 2025.7.1 to resolve. Thank you to Elad Beber (Cymulate) for reporting these issues.
>= 0source →Click any tool to inspect its schema.
Be the first to review
Have you used this server?
Share your experience — it helps other developers decide.
Sign in to write a review.
Others in ai-ml / communication
Persistent memory using a knowledge graph
Dynamic problem-solving through sequential thought chains
Asynchronous coordination layer for AI coding agents: identities, inboxes, searchable threads, and advisory file leases over FastMCP + Git + SQLite
Workspace template + MCP server for Claude Code, Codex CLI, Cursor & Windsurf. Multi-agent knowledge engine (ag-refresh / ag-ask) that turns any codebase into a queryable AI assistant.
MCP Security Weekly
Get CVE alerts and security updates for io.github.AgentAnycast/agentanycast and similar servers.
Start a conversation
Ask a question, share a tip, or report an issue.
Sign in to join the discussion.
The core daemon powering AgentAnycast's P2P agent network.
AgentAnycast Node (agentanycastd) is a sidecar daemon that runs on each machine, providing P2P networking, end-to-end encryption, and A2A protocol routing. Language SDKs (Python, TypeScript) communicate with it over gRPC.
Fully decentralized. On a local network, agents discover each other via mDNS with zero configuration. For cross-network communication, deploy your own relay with a single command.
| Category | Capabilities |
|---|---|
| Networking | libp2p (TCP, QUIC, WebTransport), NATS transport, mDNS auto-discovery, NAT traversal (AutoNAT + DCUtR + Circuit Relay v2) |
| Security | E2E NaCl box encryption (X25519 + XSalsa20-Poly1305), W3C DID identity (did:key, did:web, did:dns), skill-based ACL, per-peer rate limiting |
| A2A Protocol | Task state machine, 3 addressing modes (direct / anycast / HTTP bridge), streaming artifacts, offline message queue |
| Interop | HTTP Bridge (P2P ↔ HTTP A2A), ANP Bridge (Agent Network Protocol), MCP Server (stdio + Streamable HTTP) |
| Enterprise | Audit logging (JSON Lines), Prometheus metrics, OpenTelemetry tracing (W3C Trace Context, OTLP) |
| AI Tools | MCP Server for 13+ AI platforms, MCP Remote Proxy to wrap any MCP Server as a P2P agent |
go build -o agentanycastd ./cmd/agentanycastd
./agentanycastd
# Agents on the same LAN discover each other automatically via mDNS
pip install agentanycast
from agentanycast import Node
async with Node(skills=["translate"]) as node:
# The daemon starts automatically — no manual setup needed
result = await node.send_task("summarize", "Hello world")
# stdio mode (Claude Desktop, Cursor, VS Code, Gemini CLI)
./agentanycastd -mcp
# Streamable HTTP mode (ChatGPT, remote clients)
./agentanycastd -mcp-listen :3000
# On any VPS with a public IP
git clone https://github.com/AgentAnycast/agentanycast-relay && cd agentanycast-relay
docker-compose up -d
# Note the RELAY_ADDR from the logs, then:
./agentanycastd -bootstrap-peers "/ip4/<RELAY_IP>/tcp/4001/p2p/12D3KooW..."
Priority: CLI flags > environment variables > config file > defaults
| Flag | Description |
|---|---|
-key | Path to identity key file |
-grpc-listen | gRPC listen address (unix:// or tcp://) |
-log-level | Log level (debug, info, warn, error) |
-bootstrap-peers | Comma-separated bootstrap multiaddrs |
-bridge-listen | HTTP bridge listen address (e.g., :8080) |
-enable-webtransport | Enable WebTransport (QUIC-based, browser-compatible) |
-mcp | Run as MCP server over stdio |
-mcp-listen | MCP Streamable HTTP listen address (e.g., :3000) |
-mcp-proxy | Wrap an MCP Server command as a P2P-accessible agent |
-anp-listen | ANP bridge listen address (e.g., :8090) |
-nats-broker | NATS broker URL (e.g., nats://broker.example.com:4222) |
-otlp-endpoint | OTLP collector endpoint for distributed tracing |
-metrics-listen | Prometheus metrics listen address (e.g., :9090) |
-config | Path to TOML config file |
-version | Print version and exit |
| Variable | Default |
|---|---|
AGENTANYCAST_KEY_PATH | ~/.agentanycast/key |
AGENTANYCAST_GRPC_LISTEN | unix://~/.agentanycast/daemon.sock |
AGENTANYCAST_LOG_LEVEL | info |
| `AGENTANY |