mlx-agent
Discover, verify, and operate local MLX models on Apple Silicon for your coding agent. mlx-agent ranks candidates for your memory budget, records local role checks, measures served models, and writes reviewed connection configurations.
The Python core uses the standard library. Model execution needs a separately installed runtime; optional backends have their own dependencies.
Current package version: 0.9.0. These docs describe the current checkout; published releases may contain earlier behavior.
Install
Choose your coding-agent host. Install its CLI first, then restart it after adding mlx-agent. See Installation for requirements and provider lifecycle for project scope, updates, removal, and recovery.
Claude Code
claude plugin marketplace add cavi-ai/mlx-agent
claude plugin install mlx-agent@mlx-agent
Run /mlx-scout after restarting.
Codex CLI
codex plugin marketplace add cavi-ai/mlx-agent --ref v0.9.0
codex plugin add mlx-agent@mlx-agent
Invoke $mlx-agent:mlx-scout after restarting. Codex does not support custom
slash commands.
Agy
git clone --depth 1 --branch v0.9.0 https://github.com/cavi-ai/mlx-agent.git
agy plugin validate ./mlx-agent/providers/agy
agy plugin install ./mlx-agent/providers/agy
Restart Agy, check /skills, and ask it to use mlx-scout.
OpenCode and portable skills
From a release checkout:
git clone --depth 1 --branch v0.9.0 https://github.com/cavi-ai/mlx-agent.git
cd mlx-agent
python3 scripts/mlx-agent install opencode --scope user --dry-run --json
# Review the plan; copy data.preview.preview_hash.
python3 scripts/mlx-agent install opencode --scope user --confirm --preview-hash <preview-hash> --json
python3 scripts/mlx-agent doctor opencode --scope user --json
Restart OpenCode and use /mlx-scout. For AgentSkills-compatible hosts, use
the same preview/confirm sequence with agentskills:
python3 scripts/mlx-agent install agentskills --scope user --dry-run --json
python3 scripts/mlx-agent install agentskills --scope user --confirm --preview-hash <preview-hash> --json
The installer copies a runtime into each installed portable skill. Move unowned
older mlx-* skill folders aside before the first managed install.
OpenClaw and Hermes Agent
From the same checkout, use the preview/confirm sequence with openclaw or
hermes:
python3 scripts/mlx-agent install openclaw --scope user --dry-run --json
python3 scripts/mlx-agent install openclaw --scope user --confirm --preview-hash <preview-hash> --json
Skills go to $OPENCLAW_STATE_DIR/skills (default ~/.openclaw/skills) or
$HERMES_HOME/skills (default ~/.hermes/skills). Start a new session and use
/mlx-scout.
Other MCP hosts
The mlx-agent package on PyPI carries the CLI and the MCP server. Add the
server to any MCP host's configuration:
{
"mcpServers": {
"mlx-agent": {"command": "uvx", "args": ["--from", "mlx-agent", "mlx-agent-mcp"]}
}
}
Install the CLI with uv tool install mlx-agent or pipx install mlx-agent.
Provider installation copies the plugin files, so mlx-agent install runs from
a checkout.
First local model
From a checkout, inspect the host and find candidates:
python3 scripts/mlx-agent inspect-host --json
python3 scripts/mlx-agent discover --role coding --limit 3 --json
Review size, license, gating, runtime compatibility, and evidence. Discovery does not download weights. Make the chosen model available with your runtime or an explicitly confirmed Intake download, then start its local server.
Intake can also list existing MLX conversions of a source model on the Hub. Review these candidates before downloading or converting weights.
Follow Your first local model to load weights, verify the shortlist, measure performance, and preview a configuration. Keep the returned receipts for inspection and rollback.
What you can do
| Goal | Guide |
|---|---|
| Find models that fit a role and context budget | Scout |
| Test candidates and retain evidence | Adopt |
| Apply or recover a connection configuration | Wire |
| Measure an already-served model | Bench |
| Research a domain or design a project | Research · Blueprint |
| Download, quantize, and run model tasks | Intake · Convert · Local inference |
| Serve models with JIT loading and memory policy | Serve |
| Run controlled experiments and retain training evaluations | Laboratory |
| Train or fuse an adapter | LoRA and fuse |
| Route roles and inspect model health or changes | Fleet · Doctor · Watch |
Understand the evidence
Models retain a primary role and may also have tool-use membership. For
tool-use, metadata is not verification: recommendation requires a
schema-valid synthetic runtime tool call. The bounded probe supports Ollama and local
OpenAI-compatible LM Studio, mlx_lm, and LiteLLM servers.
Fit estimates and synthetic role probes help choose what to evaluate; they do not establish production quality or reserve memory. See Evidence and sizing.
Configuration transactions and model job starts use reviewed preview hashes.
Explicit intake fetch downloads weights, and backend install installs
optional dependencies. Direct inference has a different execution contract.
Read the security model
for confirmation, network, ownership, and recovery boundaries.
Provider support
First-class adapters are included for each provider below. The universal installer supports both user and project scopes.
| Provider | Package | Invoke |
|---|---|---|
| Claude Code | Native plugin | /mlx-scout/mlx-adopt/mlx-wire/mlx-bench/mlx-doctor/mlx-watch/mlx-fleet |
| Codex CLI | Native plugin | $mlx-agent:mlx-scout$mlx-agent:mlx-adopt$mlx-agent:mlx-wire$mlx-agent:mlx-bench$mlx-agent:mlx-doctor$mlx-agent:mlx-watch$mlx-agent:mlx-fleet |
| Agy | Native plugin | mlx-scout skillmlx-adopt skillmlx-wire skillmlx-bench skillmlx-doctor skillmlx-watch skillmlx-fleet skill |
| OpenCode | Native plugin | /mlx-scout/mlx-adopt/mlx-wire/mlx-bench/mlx-doctor/mlx-watch/mlx-fleet |
| OpenClaw | Native skills | /mlx-scout/mlx-adopt/mlx-wire/mlx-bench/mlx-doctor/mlx-watch/mlx-fleet |
| Hermes Agent | Native skills | /mlx-scout/mlx-adopt/mlx-wire/mlx-bench/mlx-doctor/mlx-watch/mlx-fleet |
| AgentSkills-compatible hosts | Portable skills | mlx-scout skillmlx-adopt skillmlx-wire skillmlx-bench skillmlx-doctor skillmlx-watch skillmlx-fleet skill |
Documentation and contributing
The documentation index links onboarding, workflows, troubleshooting, references, and examples. Start with CLI, Runtimes, or Troubleshooting.
See Contributing for local checks and
Development for adapters and
documentation builds. The opt-in release live smoke selects only direct local
Ollama, LM Studio, or mlx_lm backends.
LiteLLM is excluded from automatic live selection because it can route to remote or paid backends.
Versioned documentation comes from docs/mlx-agent/source. The
consumer contract describes release artifacts;
editing source pages does not refresh an already published release.
Distributed under the MIT License.
Metadata
Release files for mlx-agent 0.9.0
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | Actions |
|---|---|---|---|---|
| mlx_agent-0.9.0.tar.gz | 1.0 MB | With provenance | Details for mlx_agent-0.9.0.tar.gz |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Actions Reset |
|---|---|---|---|---|
| mlx_agent-0.9.0-py3-none-any.whl | Python 3 | none | any | Details for mlx_agent-0.9.0-py3-none-any.whl |
Total release size: 2.2 MB
Release files / mlx_agent-0.9.0.tar.gz
| Download URL | mlx_agent-0.9.0.tar.gz |
|---|---|
| Size | 1.0 MB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
c3618d1ef0a02589db010da2f10cff7083083548de699b0c49a638168f043e46
|
|
BLAKE2b-256 checksum How to use checksums |
616228f460c0147bb9da33f57f354c3558d61d3f9ff63445569bb036b479f5fd
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.16
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Oct 21, 2026.
Transparency logRelease files / mlx_agent-0.9.0-py3-none-any.whl
| Download URL | mlx_agent-0.9.0-py3-none-any.whl |
|---|---|
| Size | 1.1 MB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
d40b413e6a6fef004ac1afac0bf14b8a3e3bf7b21864185acdf57aa102917dc6
|
|
BLAKE2b-256 checksum How to use checksums |
d5a18f32e785067539035772d99408487d3ece33cd6912b329c346f8624bb57e
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.16
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Oct 21, 2026.
Transparency logSecurity for mlx-agent 0.9.0
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
Full provenance
All 2 files in this release have been uploaded with provenance metadata.
Attestation for mlx_agent-0.9.0.tar.gz
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Oct 21, 2026.
Transparency logA note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.