Is io.github.velsrocky/vtai-agent safe to use?

io.github.velsrocky/vtai-agent has no known CVEs as of the latest MCPpedia security scan. Authentication requirements were not detected automatically - check the project's documentation before connecting in a shared environment. Licensed under MIT.

How do I install io.github.velsrocky/vtai-agent?

io.github.velsrocky/vtai-agent supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.

What can io.github.velsrocky/vtai-agent do?

io.github.velsrocky/vtai-agent provides 11 tools: Audit, active_provider, Tools, Prerequisites, Use and 6 more. See the full tools list on the server page for descriptions and parameters.

What AI clients work with io.github.velsrocky/vtai-agent?

io.github.velsrocky/vtai-agent is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.

Is io.github.velsrocky/vtai-agent actively maintained?

io.github.velsrocky/vtai-agent is actively maintained - last commit was 4 days ago.

io.github.velsrocky/vtai-agent

vtai-agent

System-automation agent MCP server for opencode/claude/pi: guarded shell, dry-run-first, audited.

11 tools GitHub PyPI

No known CVEs

MIT license

Actively maintained

Last commit 4d ago

Works with most clients

Transport: stdio, sse, http

11 tools · ~326 tok

Grade A · 0.2% of 200K ctx

MCPpedia last refreshed this data 3h ago

Edit this pageView history

io.github.velsrocky/vtai-agent is an MCP server that system-automation agent MCP server for opencode/claude/pi: guarded shell, dry-run-first, audited. Its tool list has not been published yet over stdio, sse and http, requires no API key, and scores 86/100 on MCPpedia's security, maintenance and efficiency rubric.

AI / ML

Step 1

Install in your client

Config is the same across clients - only the file and path differ.

Supported in Claude Desktopstdio, sse, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "io-github-velsrocky-vtai-agent": {
      "args": [
        "vtai-agent"
      ],
      "command": "uvx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-velsrocky-vtai-agent)](https://mcppedia.org/s/io-github-velsrocky-vtai-agent)

Read me

What io.github.velsrocky/vtai-agent does

System-automation agent MCP server for opencode/claude/pi: guarded shell, dry-run-first, audited.

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked - your result helps other developers.

uvx 'vtai-agent' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

Loading README…

Scored, not listed

Why this score

Five weighted categories - click any category to see the underlying evidence.

Score breakdown

86/100across 5 weighted dimensions

How we score →

0255075100

−14

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked vtai-agent against OSV.dev.

Inventory

Tools (11)

Click any tool to inspect its schema.

~326 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience - it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.velsrocky/vtai-agent safe to use?: io.github.velsrocky/vtai-agent has no known CVEs as of the latest MCPpedia security scan. Authentication requirements were not detected automatically - check the project's documentation before connecting in a shared environment. Licensed under MIT.
How do I install io.github.velsrocky/vtai-agent?: io.github.velsrocky/vtai-agent supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can io.github.velsrocky/vtai-agent do?: io.github.velsrocky/vtai-agent provides 11 tools: Audit, active_provider, Tools, Prerequisites, Use and 6 more. See the full tools list on the server page for descriptions and parameters.
What AI clients work with io.github.velsrocky/vtai-agent?: io.github.velsrocky/vtai-agent is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.
Is io.github.velsrocky/vtai-agent actively maintained?: io.github.velsrocky/vtai-agent is actively maintained - last commit was 4 days ago.

Similar servers

Others in ai-ml

View all →

io.github.callstack/agent-device96

MCP server for mobile app automation: verify, control, and debug iOS, Android, TV, and desktop apps

5.2k 5

io.github.mims-harvard/tooluniverse96

2,700+ scientific tools for AI scientists: life science, research, literature, and more.

1.8k 4

Modelcontextprotocol95

The official MCP server implementation for the Perplexity API Platform

2.6k 4

Gemini Cli95

An open-source AI agent that brings the power of Gemini directly into your terminal.

108.6k 8

MCP Security Weekly

Get CVE alerts and security updates for io.github.velsrocky/vtai-agent and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

AI / ML

Step 1

Install in your client

Config is the same across clients - only the file and path differ.

Supported in Claude Desktopstdio, sse, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "io-github-velsrocky-vtai-agent": {
      "args": [
        "vtai-agent"
      ],
      "command": "uvx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-velsrocky-vtai-agent)](https://mcppedia.org/s/io-github-velsrocky-vtai-agent)

Read me

What io.github.velsrocky/vtai-agent does

System-automation agent MCP server for opencode/claude/pi: guarded shell, dry-run-first, audited.

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked - your result helps other developers.

uvx 'vtai-agent' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

README

VT-AIAgent

System-automation agent for your machine, exposed as an MCP server for opencode / Claude Code / pi — and drivable directly via the vtai CLI.

Tools

Tool	What it does
`system_info`	Read-only machine snapshot (CPU, RAM, disks, load, GPU) plus the config and guardrails in effect
`run_shell`	Allowlisted shell commands, sandboxed (see below)
`organize_files`	Content-aware directory cleanup inside writable roots
`backup_sync`	rsync incremental backup with verification; `--delete` is opt-in
`transcode_media`	VAAPI-accelerated batch video transcode; never touches originals
`disk_audit`	Read-only scan for reclaimable disk space
`delegate_coding`	Hand tasks to opencode/claude/pi; git snapshot + verify + rollback; require human approval by default
`auto_mode`	Autonomous loop: hand a goal to a coding CLI, review the reply, iterate until it matches
`inspect_application`	REA-powered static analysis of an app under guardrails: deny-glob check → quarantine copy → minimal-env run → evidence digest in the audit trail → optional judge pass (off until enabled in config)

Safety model

Dry-run by default (guardrails.dry_run_default) — previews never touch disk.
Path containment: writes only inside paths.writable_roots, resolved paths defeat ../symlink escapes; guardrails.deny_globs protect secrets.
Fail-closed shell sandbox: the binary must be a bare allowlisted name with an explicit read/write policy, resolve inside trusted_bin_dirs, carry no exec-enabling flags, and every path argument passes the same checks.
Kill switch: drop a KILL file in data_dir to abort executing tools.
Echo-loop breaker: N identical denials in a window escalate the refusal into a CIRCUIT BREAKER instruction the looping model can't miss.
Budget cap: budget_usd_per_run aborts an orchestrated run when accrued token cost exceeds it; spend is recorded per run.
Audit: every allow and deny is logged to SQLite in data_dir, each invocation (orchestrated, MCP, or CLI) attributed to a run row.

Quick start

Prerequisites

	Requirement	Notes
OS	Linux, macOS, or Windows	all three run in CI (blocking since 0.6.0)
Python	3.14+	pinned by `.python-version`; `uv` fetches it for you
uv	>= 0.13.1	`curl -LsSf https://astral.sh/uv/install.sh \| sh`
Planner LLM	one of: Ollama, any OpenAI-compatible endpoint, or a cloud key	see Choosing a model
rsync	optional	required by `backup_sync`; without it the tool fails closed
ffmpeg	optional	required by `transcode_media` and the voice helpers
Lemonade Server	optional	speech in/out for `agent-listen` / `agent-speak`

1. Install

git clone https://github.com/velsrocky/vtai-agent.git
cd vtai-agent
uv sync --dev

uv sync needs uv >= 0.13.1 (the lockfile is revision = 5; the floor is declared as [tool.uv] required-version, so an older uv says so plainly instead of failing on a lockfile parse).

2. Configure

The agent reads one TOML file. Which one is resolved in this order:

$VT_CONFIG — explicit override
config/settings.toml next to the package (i.e. the clone you just made)
~/.vtaiagent/settings.toml — the per-user file

A machine with no config file anywhere fails loudly on first use — the built-in defaults leave nothing protected (shell_allowlist empty) so nothing runs, and vtai info says so plainly ("no config file there"). vtai init writes a starter config; vtai init --doctor runs the full preflight right after it.

A fresh clo

... View full README on GitHub

Loading README…

Scored, not listed

Why this score

Five weighted categories - click any category to see the underlying evidence.

Score breakdown

86/100across 5 weighted dimensions

How we score →

0255075100

−14

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked vtai-agent against OSV.dev.

Inventory

Tools (11)

Click any tool to inspect its schema.

~326 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience - it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.velsrocky/vtai-agent safe to use?: io.github.velsrocky/vtai-agent has no known CVEs as of the latest MCPpedia security scan. Authentication requirements were not detected automatically - check the project's documentation before connecting in a shared environment. Licensed under MIT.
How do I install io.github.velsrocky/vtai-agent?: io.github.velsrocky/vtai-agent supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can io.github.velsrocky/vtai-agent do?: io.github.velsrocky/vtai-agent provides 11 tools: Audit, active_provider, Tools, Prerequisites, Use and 6 more. See the full tools list on the server page for descriptions and parameters.
What AI clients work with io.github.velsrocky/vtai-agent?: io.github.velsrocky/vtai-agent is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.
Is io.github.velsrocky/vtai-agent actively maintained?: io.github.velsrocky/vtai-agent is actively maintained - last commit was 4 days ago.