Tells an AI agent when another is already doing its work. Board, typed mail, directory claims.
MCPpedia last refreshed this data
io.github.Agenxy/dibs is an MCP server that tells an AI agent when another is already doing its work. Board, typed mail, directory claims. Its tool list has not been published yet over stdio, sse and http, requires no API key, and scores 87/100 on MCPpedia's security, maintenance and efficiency rubric.
Config is the same across clients — only the file and path differ.
{
"mcpServers": {
"io-github-agenxy-dibs": {
"args": [
"mlx"
],
"command": "uvx"
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
Keeps your agents in the loop about each other.
Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.
uvx 'mlx' 2>&1 | head -1 && echo "✓ Server started successfully"
After testing, let us know if it worked:
Five weighted categories — click any category to see the underlying evidence.
PYSEC-2025-139
MLX is an array framework for machine learning on Apple silicon. Prior to version 0.29.4, there is a segmentation fault in mlx::core::load_gguf() when loading malicious GGUF files. Untrusted pointer from external gguflib library is dereferenced without validation, causing application crash. This issue has been patched in version 0.29.4.
PYSEC-2025-138
MLX is an array framework for machine learning on Apple silicon. Prior to version 0.29.4, there is a heap buffer overflow in mlx::core::load() when parsing malicious NumPy .npy files. Attacker-controlled file causes 13-byte out-of-bounds read, leading to crash or information disclosure. This issue has been patched in version 0.29.4.
Click any tool to inspect its schema.
Be the first to review
Have you used this server?
Share your experience — it helps other developers decide.
Sign in to write a review.
Others in ai-ml
MCP client bridge: connects to MCP servers and registers their tools on ctx.tools
An autonomous agent that conducts deep research on any data using any LLM providers
The official MCP server implementation for the Perplexity API Platform
1000+ scientific tools for AI scientists: life science, reserach, literature, and more.
MCP Security Weekly
Get CVE alerts and security updates for io.github.Agenxy/dibs and similar servers.
Start a conversation
Ask a question, share a tip, or report an issue.
Sign in to join the discussion.
Keeps your agents in the loop about each other.
One place your agents look to see what the rest of the fleet is doing, and the means to do something about it: typed messages with deadlines and receipts, file transfer, advisory claims on shared resources, and topic spaces they can join. Dibs reports; it never acts.
You have three agents open. One is refactoring the session store. Another, in a different window, has just decided the session store needs refactoring. Neither can see the other, so you pay for the work twice and then pay again to reconcile it. Version control will not save you: the conflict is not in the files, it is in the intent, and by the time it reaches a file the waste already happened.
That is the failure Dibs was built for, and it is the smallest one. Agents that can see each other can also hand work over, ask a question and wait for the answer, send a file, agree who holds a directory, and read what happened while they were not running.
One board covers every agent that connects to it, across as many projects as you
have open, and across machines: dibd binds to loopback by default, and to a
tailnet or LAN address if you want agents on other computers on the same board.
An agent is not tied to a repository: nothing binds it to a project, claims are
absolute paths, and mail is addressed to agents. Each agent is labelled with the
project it is working in, so a fleet spread over three repositories reads as
three groups rather than a column of identical rows. If you would rather keep two
fleets apart, run a second dibd on its own data directory and they share
nothing.

Two agents, in different windows, set out to do the same thing. The second one declares its work and Dibs answers:
// codex-1 → declare
{ "text": "Fixing session reconnect handling",
"dirs": ["internal/session"], "refs": ["issue:1140"] }
{
"ok": true, // nothing was blocked
"slot_id": "s1",
"overlaps": [
{ "agent": "claude-1", "signal": "same-objective", "kind": "slot",
"text": "Reworking how the session store handles reconnects",
"refs": ["issue:1140"] }
],
"warning": "another agent is already pursuing the same objective: you are
probably about to duplicate its work. Read its slot, then message it
(question/handoff) to split or stand down. This is the measured failure;
do not just proceed."
}
ok is true. Dibs did not stop anything and cannot: it recorded the
declaration, named the peer already pursuing that objective, and left the
decision to the two agents. Tutorial.
Declaring work is one tool of 44. The rest is what agents do once they can see each other:
notify, question, request,
handoff), with delivery receipts, deadlines and attachments. A question
blocks nobody: it waits, and can be declined.shared or exclusive holds on absolute paths, with a
human override. Advisory means exactly that: nothing is enforced.