A self-hosted AI workspace unifying chat, code execution, parallel multi-agent orchestration, and project management. Each agent runs on a distinct provider — OpenAI-compatible APIs, Claude Code, or Codex CLI. MCP servers extend the toolbox. Built for 100+ tool-call sessions with context compression and checkpoint recovery.
Config is the same across clients — only the file and path differ.
{
"mcpServers": {
"tiger-cowork": {
"args": [
"-y",
"pm2"
],
"command": "npx"
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
A self-hosted AI workspace with chat, code execution, parallel multi-agent orchestration, cross-machine agent connection, and a skill marketplace. Mix different AI providers in the same agent team — OpenAI-compatible APIs, Claude Code CLI, and Codex CLI. Connect agents across machines on your network so distributed teams can collaborate in real time. Connect external MCP servers to extend the AI's toolbox. Built with 16 built-in tools and designed for long-running sessions with smart context com
Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.
npx -y 'pm2' 2>&1 | head -1 && echo "✓ Server started successfully"
After testing, let us know if it worked:
Five weighted categories — click any category to see the underlying evidence.
pm2 Regular Expression Denial of Service vulnerability
A vulnerability classified as problematic was found in Unitech pm2 prior to 7.0.0. This vulnerability affects unknown code of the file /lib/tools/Config.js. The manipulation leads to inefficient regular expression complexity. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Be the first to review
Have you used this server?
Share your experience — it helps other developers decide.
Sign in to write a review.
Others in ai-ml / productivity
Dynamic problem-solving through sequential thought chains
Workspace template + MCP server for Claude Code, Codex CLI, Cursor & Windsurf. Multi-agent knowledge engine (ag-refresh / ag-ask) that turns any codebase into a queryable AI assistant.
Persistent memory using a knowledge graph
Privacy-first. MCP is the protocol for tool access. We're the virtualization layer for context.
MCP Security Weekly
Get CVE alerts and security updates for Tiger_cowork and similar servers.
Start a conversation
Ask a question, share a tip, or report an issue.
Sign in to join the discussion.

A self-hosted AI workspace with chat, code execution, parallel multi-agent orchestration, cross-machine agent connection, and a skill marketplace. Mix different AI providers in the same agent team — OpenAI-compatible APIs, Claude Code CLI, and Codex CLI. Connect agents across machines on your network so distributed teams can collaborate in real time. Connect external MCP servers to extend the AI's toolbox. Built with 16 built-in tools and designed for long-running sessions with smart context compression and checkpoint recovery.
"chat content is empty (2013)" errors that surfaced as Context overflow after 3 compression retries in long pipeline runs. Emergency retries now bypass the 60-second compaction cooldown; trimConversationContext is tool-pair aware (assistant tool_calls and their matching tool results are dropped as a unit so nothing gets orphaned); a new truncateLargestToolResult helper targets the single biggest tool message on retries 2–3 instead of halving the whole transcript; and a structural validateMessageStructure pass runs after every compression/trim to drop any orphan that slipped through.{"proposals":[]}, the run summary previously showed created=0 updated=0 skipped=0 candidates=N with no indication of why nothing happened. Empty-proposal outcomes now surface in skillAutoUpdateLastRunSummary as LLM returned no proposals for N session(s), and the LLM's actual reply head is logged to the server console for debugging.looksEmpty Heuristic — the prose-fallback that coerces a refusal-shaped reply (e.g. "no skills worth capturing") into proposals=[] now requires the whole trimmed reply to be under 200 characters. Previously a long, malformed proposal that happened to contain "no skill" inside its rationale could be silently swallowed.SKILL.md workflows. The synthesiser proposes new skills or refines existing auto-generated ones; updates land as a side-by-side SKILL.md.proposed diff for review before going live. See Automatic Skill Generation for the full algorithm and settings.SKILL.md and enables it; the next user turn in any chat picks it up automatically (the system prompt is rebuilt per turn — no restart needed).data/chat_logs/<sessionId>.log to surface a per-agent workflow trace (task, tools used, skills loaded). For multi-agent chats this fixes a previous gap where only the orchestrator's merged reply was visible to the synthesiser; remediation can now identify and rewrite the exact auto-skill a sub-agent loaded, and synthesis can capture the agent topology in the SKILL.md body — not just the outcome.