Atlas / MCP servers / ada20204 / Antigravity Sync

Antigravity SyncBLOCK

Name: Antigravity Sync
Author: ada20204

mcp/ada20204/antigravity-sync

MCP server by ada20204 · Audited 2026-10-08

⚑ Report / re-scan Source ↗

Verdict

BLOCK

Grade

Trust score

69 /100

Exposed tools

12 7r · 4w · 1d

Transport

stdio

License

—

Stars

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

⚠️ 免责声明:此项目完全是 vibe coding 产物,代码由 AI 生成,未经严格审查。使用风险自己承担。

一个面向 Antigravity 的 MCP 集成项目,目标是让外部 AI 客户端(Claude/Cursor/其他 MCP 客户端)稳定调用 Antigravity 的对话能力。

Antigravity 现已拆分为三个产品形态,本项目对应两条独立可用的接入路径:

项目目标

提供可用的 CDP MCP Server(packages/server,对接 Antigravity IDE)
提供独立的 CLI MCP Server(packages/cli-server,对接 agy,与 IDE 路径零依赖)
提供 VS Code/Antigravity 侧 Sidecar(packages/sidecar)
通过统一 registry(~/.config/antigravity-mcp/registry.json)解耦运行环境
支持配额采集、模型选择、自动接受、安全控制、启动诊断

仓库结构

packages/core/:共享类型、schema 与平台工具
packages/server/:CDP MCP Server(TypeScript)
packages/cli-server/:CLI MCP Server(TypeScript,驱动 agy)
packages/sidecar/:Sidecar 扩展(JavaScript)
references/:参考实现(以 submodule 为主)
docs/plans/:设计与实现计划
openspec/:规格与变更管理
build/:本地打包产物(如 VSIX)

核心架构

Sidecar 负责发现/验证 CDP,并写入 registry。
Server 默认只读取本地 registry;当 CDP 不可用时会写入 __control__.cdp_prompt_requests 触发 Sidecar 端提示弹窗。
Server 通过 ask-antigravity / ping / launch-antigravity / antigravity-stop / quota-status / list-antigravity-models / list-workspaces 工具提供能力。
配额策略基于 Sidecar 快照 + Server 侧策略选择。
CLI Server 独立于上述链路:直接子进程驱动 agy -p,提供同步 ask、异步任务(start/poll/cancel/list)与动态模型列表。

快速开始

1) 构建 Server

npm install
npm --workspace packages/server run build

2) 安装 Sidecar(推荐 VSIX)

安装 packages/sidecar VSIX
在 Antigravity 命令面板执行 Install Bundled MCP Server Launcher

3) CLI Server(可选,独立使用)

npm --workspace packages/cli-server run build
# 全局安装

Read from source at commit 92dd0d1712abOBSERVED · 2026-10-08

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.

claude-code

claude mcp add antigravity-mcp-sidecar -- npx -y [email protected]

claude-desktop

{
  "mcpServers": {
    "antigravity-mcp-sidecar": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ]
    }
  }
}

Exposed tools (12)

7 read · 4 write · 1 destructive. Blast radius: 1 tool can delete or overwrite — an agent that can be talked into calling a tool can be talked into calling this one.

Tool	Risk	Description
`antigravity-stop`	write	Stop running ask-antigravity generation. With multiple active workspaces, provide
`ask-antigravity`	write	Send a prompt to Antigravity and wait for the AI to complete its response.
`ask-antigravity-cli`	write	Send a prompt to the Antigravity CLI (
`cancel-antigravity-task`	destructive	Cancel an async Antigravity task by runId (force-kills the agy process group if running).
`launch-antigravity`	read	Launch Antigravity with CDP debug ports enabled. Use this when Antigravity is not running and you need to start it before sending tasks.
`list-antigravity-models`	read	List the models the local Antigravity CLI can use (runs
`list-antigravity-tasks`	read	List Antigravity CLI tasks (running + recent finished, newest-bounded LRU).
`list-workspaces`	read	List schema-compatible Antigravity workspaces from local registry only.
`ping`	read	Test connectivity to the MCP server and check if Antigravity CDP is available.
`poll-antigravity-task`	read	Poll an async Antigravity task by runId. While running: returns status + a rolling tail of output.
`quota-status`	read	Query Antigravity model quota status. Prefer live LS query, with registry snapshot fallback.
`start-antigravity-task`	write	Start a long-running Antigravity CLI task asynchronously and return a runId immediately

Trust audit

BLOCKgrade D · trust 69/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.

Layer	What it checks	Result
L0	Provenance & inventory	WARN
L1	Static analysis of the code	FAIL
L2	Instruction surface (what it tells the agent)	PASS
L3	Class-specific surface	WARN
L4	Behavioural (sandbox)	SKIPPED

What the source does

Filesystem: declared (7 observation(s))
Network: declared (8 observation(s))
Shell: declared (5 observation(s))
Dependencies: not all pinned
Secrets in source: none-found

Findings (25)

HIGHNetwork egress · net.tls_off · CWE-200, CWE-319

packages/server/src/ls-client.ts:58

rejectUnauthorized: false,

Why it matters. certificate verification is disabled

Fix. leave verification on

HIGHNetwork egress · net.tls_off · CWE-200, CWE-319

packages/server/src/ls-client.ts:229

rejectUnauthorized: false,

Why it matters. certificate verification is disabled

Fix. leave verification on

HIGHNetwork egress · net.tls_off · CWE-200, CWE-319

packages/sidecar/src/services/quota-service.js:37

rejectUnauthorized: false,

Why it matters. certificate verification is disabled

Fix. leave verification on

MEDIUMInventory / provenance · inv.symlink · CWE-1104

.agent/skills/brainstorming

.agent/skills/brainstorming

Why it matters. link not followed

MEDIUMInventory / provenance · inv.symlink · CWE-1104

.agent/skills/dispatching-parallel-agents

.agent/skills/dispatching-parallel-agents

Why it matters. link not followed

MEDIUMInventory / provenance · inv.symlink · CWE-1104

.agent/skills/executing-plans

.agent/skills/executing-plans

Why it matters. link not followed

MEDIUMInventory / provenance · inv.symlink · CWE-1104

.agent/skills/finishing-a-development-branch

.agent/skills/finishing-a-development-branch

Why it matters. link not followed

MEDIUMInventory / provenance · inv.symlink · CWE-1104

.agent/skills/receiving-code-review

.agent/skills/receiving-code-review

Why it matters. link not followed

MEDIUMFilesystem / path · mcp.destructive_tools · CWE-22, CWE-59

cancel-antigravity-task

Why it matters. 1 tool(s) can delete or overwrite

Fix. prefer a read-only mode or scoped tokens; the page states the blast radius