Is io.github.SarutobiSasuke8/agent-handoff-mcp safe to use?

io.github.SarutobiSasuke8/agent-handoff-mcp has no known CVEs as of the latest MCPpedia security scan. Authentication requirements were not detected automatically - check the project's documentation before connecting in a shared environment. Licensed under Apache-2.0.

How do I install io.github.SarutobiSasuke8/agent-handoff-mcp?

io.github.SarutobiSasuke8/agent-handoff-mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.

What can io.github.SarutobiSasuke8/agent-handoff-mcp do?

io.github.SarutobiSasuke8/agent-handoff-mcp provides 3 tools: restricted, Documentation, License. See the full tools list on the server page for descriptions and parameters.

What AI clients work with io.github.SarutobiSasuke8/agent-handoff-mcp?

io.github.SarutobiSasuke8/agent-handoff-mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.

Is io.github.SarutobiSasuke8/agent-handoff-mcp actively maintained?

io.github.SarutobiSasuke8/agent-handoff-mcp is actively maintained - last commit was 1 day ago. It has 2 GitHub stars.

io.github.SarutobiSasuke8/agent-handoff-mcp

@sarutobi-sasuke/agent-handoff-mcp

Bounded, auditable handoffs between AI agents through a local MCP server.

2 3 tools GitHub npm

No known CVEs

Apache-2.0 license

Actively maintained

Last commit 1d ago

Works with most clients

Transport: stdio, sse, http

3 tools

Grade F

MCPpedia last refreshed this data 1d ago

Edit this pageView history

io.github.SarutobiSasuke8/agent-handoff-mcp is an MCP server that bounded, auditable handoffs between AI agents through a local MCP server. Its tool list has not been published yet over stdio, sse and http, requires no API key, and scores 53/100 on MCPpedia's security, maintenance and efficiency rubric.

AI / ML

Step 1

Install in your client

Config is the same across clients - only the file and path differ.

Supported in Claude Desktopstdio, sse, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "io-github-sarutobisasuke8-agent-handoff-mcp": {
      "args": [
        "-y",
        "@sarutobi-sasuke/agent-handoff-mcp"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-sarutobisasuke8-agent-handoff-mcp)](https://mcppedia.org/s/io-github-sarutobisasuke8-agent-handoff-mcp)

Read me

What io.github.SarutobiSasuke8/agent-handoff-mcp does

Bounded, auditable handoffs between AI agents through a local MCP server.

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked - your result helps other developers.

npx -y '@sarutobi-sasuke/agent-handoff-mcp' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

Loading README…

Scored, not listed

Why this score

Five weighted categories - click any category to see the underlying evidence.

Score breakdown

53/100across 5 weighted dimensions

How we score →

0255075100

−47

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked @sarutobi-sasuke/agent-handoff-mcp against OSV.dev.

Inventory

Tools (3)

Click any tool to inspect its schema.

Community

Reviews

Be the first to review

Have you used this server?

Share your experience - it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.SarutobiSasuke8/agent-handoff-mcp safe to use?: io.github.SarutobiSasuke8/agent-handoff-mcp has no known CVEs as of the latest MCPpedia security scan. Authentication requirements were not detected automatically - check the project's documentation before connecting in a shared environment. Licensed under Apache-2.0.
How do I install io.github.SarutobiSasuke8/agent-handoff-mcp?: io.github.SarutobiSasuke8/agent-handoff-mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can io.github.SarutobiSasuke8/agent-handoff-mcp do?: io.github.SarutobiSasuke8/agent-handoff-mcp provides 3 tools: restricted, Documentation, License. See the full tools list on the server page for descriptions and parameters.
What AI clients work with io.github.SarutobiSasuke8/agent-handoff-mcp?: io.github.SarutobiSasuke8/agent-handoff-mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.
Is io.github.SarutobiSasuke8/agent-handoff-mcp actively maintained?: io.github.SarutobiSasuke8/agent-handoff-mcp is actively maintained - last commit was 1 day ago. It has 2 GitHub stars.

Similar servers

Others in ai-ml

View all →

io.github.callstack/agent-device96

MCP server for mobile app automation: verify, control, and debug iOS, Android, TV, and desktop apps

5.2k 5

io.github.mims-harvard/tooluniverse96

2,700+ scientific tools for AI scientists: life science, research, literature, and more.

1.8k 4

Idx95

Analyze the Indonesian stock market (IDX/IHSG) from web terminal, CLI, or any AI agents via MCP server. IHSG Prices, Fundamentals, and Screening. Free and No API keys required. Changelog: https://github.com/fzn0x/idx/blob/main/CHANGELOG.md

196 5

Gemini Cli95

An open-source AI agent that brings the power of Gemini directly into your terminal.

108.4k 8

MCP Security Weekly

Get CVE alerts and security updates for io.github.SarutobiSasuke8/agent-handoff-mcp and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

AI / ML

Step 1

Install in your client

Config is the same across clients - only the file and path differ.

Supported in Claude Desktopstdio, sse, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "io-github-sarutobisasuke8-agent-handoff-mcp": {
      "args": [
        "-y",
        "@sarutobi-sasuke/agent-handoff-mcp"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-sarutobisasuke8-agent-handoff-mcp)](https://mcppedia.org/s/io-github-sarutobisasuke8-agent-handoff-mcp)

Read me

What io.github.SarutobiSasuke8/agent-handoff-mcp does

Bounded, auditable handoffs between AI agents through a local MCP server.

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked - your result helps other developers.

npx -y '@sarutobi-sasuke/agent-handoff-mcp' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

README

Agent Handoff MCP

A local-first Model Context Protocol server for bounded, auditable handoffs between AI agents.

Agent Handoff MCP gives Claude, Codex, local agents, and other MCP clients a shared inbox without giving one model control over another. Agents can send structured work, acknowledge it, report a blocker, complete it, or cancel work they originally queued. Every transition is attributable and retained in SQLite.

Why this exists

Multi-agent systems often pass work through chat transcripts, ad hoc files, or vendor-specific orchestration. That loses ownership, lifecycle state, authorization boundaries, and a durable audit trail. This server turns a handoff into a small protocol object:

sender -> queued -> accepted -> completed
                   |             ^
                   v             |
                 blocked --------+

sender may cancel only while queued

The server coordinates work; it does not execute agents, fetch references, read arbitrary files, or create autonomous agent loops.

MCP tools

Tool	Purpose
`handoff_whoami`	Show the authenticated identity, boundaries, and policy revision.
`handoff_send`	Send a structured handoff to an authorized recipient.
`handoff_inbox`	List handoffs addressed to the current identity.
`handoff_get`	Read a handoff and its append-only event history.
`handoff_acknowledge`	Accept queued or blocked work.
`handoff_update_status`	Mark work blocked/completed, or cancel it while queued.

Design properties

SQLite shared state with WAL mode and parameterized queries
Streamable HTTP and stdio transports
Opaque UUID handoff, event, and thread identifiers
Explicit send_to and receive_from authorization with no permissive defaults
Per-agent disclosure ceilings: public-safe, internal, or restricted
Strict registry validation: unknown keys, duplicates, and unsupported versions are rejected
Immutable policy snapshots: every operation is checked against the current registry, so disabling an identity, rotating a token, or narrowing a relationship takes effect on live sessions without a restart
Hashed, expiring bearer-token bindings for HTTP
Idempotency keys for safe retries
Maximum reply-chain depth to limit automated ping-pong
Strict message, array, reference, and request-size limits
Sender/recipient-only reads, re-authorized against current policy
Append-only lifecycle events; no MCP delete tool
References are stored as inert strings and never dereferenced

Command line

The package installs one dispatcher binary, agent-handoff-mcp, whose name matches the package so npx @sarutobi-sasuke/agent-handoff-mcp <command> resolves directly once the package is published to npm. (It is not published yet; use a source checkout until then.)

Command	Purpose
`http`	Start the shared Streamable HTTP server.
`stdio`	Start a stdio server bound to `HANDOFF_AGENT_ID`.
`init --registry <path>`	Create a starter registry with disabled synthetic identities.
`validate --registry <path>`	Validate a registry without reading tokens or the database.
`issue --registry <path> --agent <id> --expires <iso8601>`	Issue an expiring token, printed once to stdout.
`rotate ...`	Replace an existing token; the old one stops working immediately.
`disable` / `enable`	Toggle an identity across all transports.
`revoke`	Remove an identity's token binding.
`token`	Generate a token and digest without touching a registry.

agent-handoff-http, agent-handoff-stdio, agent-handoff-token, and agent-handoff-validate are also installed as direct aliases.

Quick start

Requirements: Node.js 22.13 or newer.

For a source checkout:

git clone https://github.com/SarutobiSasuke8/agent-handoff-mcp.git
cd agent-handoff-mcp
npm ci
npm run build
cp .env.example .env
node dist/src/cli.js init --registry ./config/agents.yaml
node dist/src/cli.

... [View full README on GitHub](https://github.com/sarutobisasuke8/agent-handoff-mcp#readme)

Loading README…

Scored, not listed

Why this score

Five weighted categories - click any category to see the underlying evidence.

Score breakdown

53/100across 5 weighted dimensions

How we score →

0255075100

−47

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked @sarutobi-sasuke/agent-handoff-mcp against OSV.dev.

Inventory

Tools (3)

Click any tool to inspect its schema.

Community

Reviews

Be the first to review

Have you used this server?

Share your experience - it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.SarutobiSasuke8/agent-handoff-mcp safe to use?: io.github.SarutobiSasuke8/agent-handoff-mcp has no known CVEs as of the latest MCPpedia security scan. Authentication requirements were not detected automatically - check the project's documentation before connecting in a shared environment. Licensed under Apache-2.0.
How do I install io.github.SarutobiSasuke8/agent-handoff-mcp?: io.github.SarutobiSasuke8/agent-handoff-mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can io.github.SarutobiSasuke8/agent-handoff-mcp do?: io.github.SarutobiSasuke8/agent-handoff-mcp provides 3 tools: restricted, Documentation, License. See the full tools list on the server page for descriptions and parameters.
What AI clients work with io.github.SarutobiSasuke8/agent-handoff-mcp?: io.github.SarutobiSasuke8/agent-handoff-mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.
Is io.github.SarutobiSasuke8/agent-handoff-mcp actively maintained?: io.github.SarutobiSasuke8/agent-handoff-mcp is actively maintained - last commit was 1 day ago. It has 2 GitHub stars.