agent-brain-mcp
Model Context Protocol server for Agent Brain.
Exposes the running Agent Brain instance as an MCP server consumable by Claude Desktop, Cursor, Windsurf, Claude Agent SDK, LangChain DeepAgents, and any other MCP-aware client.
Surface (v10.4)
- 16 Tools:
search_documents,query_count,explain_result,index_folder,add_documents,inject_documents,get_job,list_jobs,wait_for_job,cancel_job,list_folders,remove_folder,cache_status,clear_cache,list_file_types,server_health - 5 Resources (read-only):
corpus://config,corpus://status,corpus://health,corpus://providers,corpus://folders - 6 Prompts:
find-callers,find-implementation,explain-architecture,compare-search-modes,onboard-to-codebase,audit-indexed-folders - Listen transport: stdio (default) or Streamable HTTP (
--transport http) - Backend: UDS (preferred) or HTTP, selectable via
--backend {auto,uds,http} - Auth: OAuth 2.1 on the HTTP listen transport (
AGENT_BRAIN_AUTH=oauth), off by default
The full v1–v4 MCP roadmap shipped by Agent Brain 10.4.0; see CHANGELOG.md
and the MCP User Guide. Register for Claude Code with
agent-brain install-agent --agent claude --with-mcp.
Install
pip install agent-brain-ag-mcp
The PyPI distribution is agent-brain-ag-mcp; the installed console script is agent-brain-mcp.
Quick config
{
"mcpServers": {
"agent-brain": {
"command": "agent-brain-mcp",
"args": ["--backend", "auto"],
"env": { "AGENT_BRAIN_STATE_DIR": "/abs/path/.agent-brain" }
}
}
}
Transport selection (v10.2+)
agent-brain-mcp supports two listen transports for talking to MCP clients:
- stdio (default) — Claude Desktop, Claude Code, and most MCP CLI clients use this. No flags needed.
- http (Streamable HTTP, new in v10.2) — for IDE clients and framework adapters that prefer HTTP/SSE. Wraps the official MCP SDK's
StreamableHTTPSessionManagerover an in-process uvicorn server.
stdio (default)
agent-brain-mcp
No --transport flag needed. Existing Claude Desktop / Code installs keep working unchanged.
Streamable HTTP
agent-brain-mcp --transport http --host 127.0.0.1 --port 8765
Then connect from an MCP client using the official Python SDK:
from mcp import ClientSession
from mcp.client.streamable_http import streamablehttp_client
async with streamablehttp_client("http://127.0.0.1:8765/mcp") as (read, write, _):
async with ClientSession(read, write) as session:
await session.initialize()
tools = await session.list_tools()
Liveness probe (no MCP handshake required):
curl http://127.0.0.1:8765/healthz
# → {"status":"ok","transport":"http"}
Loopback bind + authentication
--host accepts only 127.0.0.1, localhost, or ::1 (no --allow-public-bind escape
hatch). For remote access, run the loopback HTTP listener behind a gateway / reverse proxy and
enable authentication rather than binding a public interface directly.
Authentication (v10.4): OAuth 2.1 on the HTTP listen transport is off by default
(AGENT_BRAIN_AUTH=none). Set AGENT_BRAIN_AUTH=oauth (+ AGENT_BRAIN_OAUTH_RESOURCE) to require
audience-bound Bearer tokens with per-tool scopes (agent-brain:read|index|admin|subscribe,
default-deny on writes). Co-located and split AS/RS topologies are supported. See the
MCP User Guide → Authentication.
Local trust model (no-auth mode): with AGENT_BRAIN_AUTH=none, any process running as the same
user on this host can reach the port and drive MCP tools (including destructive ones like
cancel_job). Do not run --transport http unauthenticated on a shared / multi-user host without
external sandboxing.
No silent fallback
Invalid --transport values, non-loopback --host values, and port-in-use errors fail loudly. There is no fallback from http to stdio (or vice versa). Exit codes are distinct:
| Failure mode | Exit code |
|---|---|
| Click usage error (bogus value, etc.) | 1 |
| Non-loopback host rejected | 1 |
| Port already in use (Plan 02 D-12) | 2 |
AGENT_BRAIN_MCP_TRANSPORT is reserved as an environment variable but not honored in v10.2 — explicit --transport is required to opt into HTTP (Phase 53 D-02).
Backend axis is independent
--backend {auto,uds,http} controls how agent-brain-mcp reaches agent-brain-serve (the indexing backend). It is orthogonal to --transport. See docs/MCP_USER_GUIDE.md for the two-axis transport model.
Full guide
For per-host configuration (Claude Desktop, Cursor / Windsurf, Claude Agent SDK, LangChain DeepAgents), the full tool/resource/prompt reference with schemas, worked end-to-end examples, error mapping, and troubleshooting, see docs/MCP_USER_GUIDE.md.
For internal design (UDS bind strategy, package layering, deferred work), see docs/plans/2026-05-28-mcp-uds-transport-design.md.
License
MIT
Metadata
Release files for agent-brain-ag-mcp 10.7.0
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | |
|---|---|---|---|---|
| agent_brain_ag_mcp-10.7.0.tar.gz | 144.7 kB | With provenance | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| agent_brain_ag_mcp-10.7.0-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 313.8 kB
Release files / agent_brain_ag_mcp-10.7.0.tar.gz
| Download URL | agent_brain_ag_mcp-10.7.0.tar.gz |
|---|---|
| Size | 144.7 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
07c07d84c64540aaa9040a8156f69667aa4fca7eeb15849f7ea19166f24a5bb6
|
|
BLAKE2b-256 checksum How to use checksums |
70ddc49add0e6406e2cc7d2f284512225541aca2a3515d41918350df83b80a0d
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Sep 3, 2026.
Transparency logRelease files / agent_brain_ag_mcp-10.7.0-py3-none-any.whl
| Download URL | agent_brain_ag_mcp-10.7.0-py3-none-any.whl |
|---|---|
| Size | 169.1 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
efc6570f5c7275a8ffc97818e03b0b2faa49b6ab4545612f1468b41964a14b5b
|
|
BLAKE2b-256 checksum How to use checksums |
9a38ef9363eeebc2bf88ccaa33024701b9e94c836fddaf86e7f8f9315aab0eed
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Sep 3, 2026.
Transparency logSecurity for agent-brain-ag-mcp 10.7.0
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
Full provenance
All 2 files in this release have been uploaded with provenance metadata.
Attestation for agent_brain_ag_mcp-10.7.0.tar.gz
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Sep 3, 2026.
Transparency logA note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.