Saucebox Registry
← Browse

@hunmer/server

B

MCP server package @agent-spaces/server

mcp_servermcp

Install

agr install @hunmer/server --target claude

This artifact does not publish files for Claude.

Document

{ "name": "@agent-spaces/server", "version": "0.4.8", "type": "module", "bin": { "agent-spaces-server": "./dist/app.js" }, "files": [ "dist", "public", "!dist/**/.map", "!dist/shared", "!public/uploads", "!public/avatars" ], "publishConfig": { "access": "public" }, "scripts": { "dev": "tsx watch src/app.ts", "dev:plugin": "tsx src/dev/plugin-test-runner.ts", "build": "tsc", "start": "node dist/app.js", "prepublishOnly": "pnpm build", "postinstall": "node -e "try{require('node-pty')}catch(e){if(!require('fs').existsSync('node_modules/node-pty/prebuilds')){process.exit(1)}}"" }, "dependencies": { "@agent-spaces/shared": "workspace:", "@colyseus/command": "^0.1.7", "@colyseus/monitor": "^0.14.0", "@colyseus/schema": "^2.0.4", "@colyseus/ws-transport": "^0.15.0", "@dagrejs/dagre": "^3.0.0", "@earendil-works/pi-coding-agent": "0.74.2", "@langchain/anthropic": "^1.3.29", "@langchain/google-genai": "^2.1.30", "@langchain/langgraph": "^1.3.0", "@langchain/mcp-adapters": "^1.1.3", "@langchain/openai": "^1.4.5", "@larksuiteoapi/node-sdk": "^1.62.1", "@modelcontextprotocol/sdk": "1.29.0", "adm-zip": "^0.5.14", "archiver": "^7.0.0", "better-sqlite3": "^12.10.0", "colyseus": "^0.15.0", "cors": "^2.8.5", "cron-parser": "^5.5.0", "dotenv": "^17.4.2", "eventemitter2": "^6.4.9", "express": "^5.1.0", "langchain": "^1.4.0", "minimatch": "^10.2.5", "multer": "^1.4.5-lts.2", "node-cron": "^4.2.1", "node-pty": "^1.1.0", "reflect-metadata": "^0.2.2", "regenerator-runtime": "^0.13.7", "simple-git": "^3.36.0", "uuid": "^11.1.0", "ws": "^8.18.2", "yauzl": "^3.4.0", "zod": "^4.0.0" }, "optionalDependencies": { "@anthropic-ai/claude-agent-sdk": "^0.2.126", "@codeany/open-agent-sdk": "^0.2.1", "@openai/codex-sdk": "^0.142.5" }, "devDependencies": { "@types/adm-zip": "^0.5.6", "@types/archiver": "^6.0.3", "@types/better-sqlite3": "^7.6.13", "@types/cors": "^2.8.17", "@types/express": "^5.0.2", "@types/minimatch": "^6.0.0", "@types/multer": "^2.1.0", "@types/node": "^20.19.39", "@types/node-cron": "^3.0.11", "@types/uuid": "^10.0.0", "@types/ws": "^8.18.1", "@types/yauzl": "^3.3.0", "tsx": "^4.19.4", "typescript": "^5.8.3" } }

Trustgrade B

  • passBody integrity

    Whether the stored document is plausibly the kind of file the artifact declares, rather than something fetched by mistake.

  • warnType matchbest-effort: server code not analyzed

    Whether the artifact is really the kind of thing its metadata claims it is.

  • passFreshness

    How long since the source repository was last pushed to.

  • passPrompt injection

    Scans the artifact's own text for instructions aimed at your agent rather than at you.

  • warnLicenseno SPDX license detected

    Whether the source repository declares an SPDX license permissive enough to redistribute.

How the grade is calculated

Each check contributes 0 points when it passes, 1 when it warns, and 2 when it fails. The total maps to a letter:

  • Aevery check passed
  • Bone warning
  • Ctwo warnings
  • Dprompt injection or body integrity failed, or three warnings
  • Fone of those failed, and something else is wrong

These are automated hygiene checks, not a security audit, and not a dependency or vulnerability scan. A grade of A means nothing was flagged — not that the artifact is safe.

Versions

  • git-281c12dd66182026-08-06