Atlas / MCP servers / blackwell-systems / Agent LSP

Agent LSPCAUTION

Name: Agent LSP
Author: blackwell-systems

mcp/blackwell-systems/agent-lsp

MCP server by blackwell-systems · agentskills · ai agents · ai tooling · Audited 2026-10-07

⚑ Report / re-scan Source ↗

MCP server that orchestrates language servers into agent-native workflows. 65 tools, 30 CI-verified languages.

Verdict

CAUTION

Grade

Trust score

78 /100

Exposed tools

—

Transport

stdio · streamable-http

License

MIT

Stars

157

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

English · 简体中文 · Русский · हिन्दी · العربية

Code intelligence infrastructure for AI agents. 65 tools, 32 CI-verified languages, 24 agent workflows. Single Go binary.

curl -fsSL https://raw.githubusercontent.com/blackwell-systems/agent-lsp/main/install.sh | sh && agent-lsp init

What is it?

agent-lsp is an MCP server t

Read from source at commit d85f852c6b97OBSERVED · 2026-10-07

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.

claude-code (npm)

claude mcp add agent-lsp -- npx -y @blackwell-systems/[email protected]

Trust audit

CAUTIONgrade C · trust 78/100 Install with care. The audit found things worth knowing before you trust its output.

Layer	What it checks	Result
L0	Provenance & inventory	PASS
L1	Static analysis of the code	WARN
L2	Instruction surface (what it tells the agent)	PASS
L3	Class-specific surface	PASS
L4	Behavioural (sandbox)	SKIPPED

What the source does

Filesystem: declared (6 observation(s))
Network: declared (4 observation(s))
Shell: none-observed
Dependencies: not all pinned
Secrets in source: found

Findings (25)

MEDIUMHard-coded secrets · secret.db_uri · CWE-798, CWE-321

test/fixtures/prisma/schema.prisma:3

url      = "postgresql://postgres:postgres@localhost:5432/prismatest?schema=public"

MEDIUMHard-coded secrets · secret.generic · CWE-798, CWE-321

cmd/agent-lsp/http_test.go:114

const token = "testtoken-integration"

LOWInventory / provenance · inv.binary · CWE-1104

test/fixtures/cpp/.cache/clangd/index/greeter.cpp.9E8894AE24BDC63E.idx

greeter.cpp.9E8894AE24BDC63E.idx

Why it matters. a compiled or binary member cannot be reviewed from source

Fix. ship source, or explain the binary in the README

LOWInventory / provenance · inv.binary · CWE-1104

test/fixtures/cpp/.cache/clangd/index/person.cpp.B4A194926E14B7F4.idx

person.cpp.B4A194926E14B7F4.idx

Why it matters. a compiled or binary member cannot be reviewed from source

Fix. ship source, or explain the binary in the README

LOWInventory / provenance · inv.binary · CWE-1104

test/fixtures/cpp/.cache/clangd/index/person.h.A09FB4C76E6CAEB5.idx

person.h.A09FB4C76E6CAEB5.idx

Why it matters. a compiled or binary member cannot be reviewed from source

Fix. ship source, or explain the binary in the README

LOWInventory / provenance · inv.hidden_file · CWE-1104

.coderabbit.yaml

.coderabbit.yaml

Why it matters. hidden member outside the usual dotfiles

Fix. review its purpose

LOWInventory / provenance · inv.hidden_file · CWE-1104

.goreleaser.yml

.goreleaser.yml

Why it matters. hidden member outside the usual dotfiles

Fix. review its purpose

LOWInventory / provenance · inv.hidden_file · CWE-1104

.polywave-state/wave1/agent-A/.polywave-ownership.json

.polywave-ownership.json

Why it matters. hidden member outside the usual dotfiles

Fix. review its purpose

LOWInventory / provenance · inv.hidden_file · CWE-1104

.saw-agent-brief.md

.saw-agent-brief.md

Why it matters. hidden member outside the usual dotfiles

Fix. review its purpose

LOWInventory / provenance · inv.hidden_file · CWE-1104

.saw-worktree-env

.saw-worktree-env

Why it matters. hidden member outside the usual dotfiles

Fix. review its purpose

LOWInventory / provenance · inv.symlink · CWE-1104

docs/changelog.md

docs/changelog.md

Why it matters. link not followed

LOWCode injection · code.eval_exec · CWE-78, CWE-94, CWE-95

docs/IMPL/complete/IMPL-autodetect.yaml:173

- os/exec (for LookPath)

Why it matters. evaluates text as code

Fix. remove; use a parser or a dispatch table

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

internal/tools/coverage_round6_test.go:292

_, err := ValidateFilePath("/home/user/project/../../etc/passwd", "/home/user/project")

LOWNetwork egress · net.raw_ip · CWE-200, CWE-319

cmd/agent-lsp/http_test.go:116

baseURL := "http://127.0.0.1:" + strconv.Itoa(port)

LOWSupply chain · supply.unpinned · CWE-829, CWE-1357

test/fixtures/prisma/package.json

@prisma/client

Why it matters. 1 dependency range(s) float

Fix. pin exact versions or ship a lockfile

LOWPrompt injection · prompt.transfer_instruction · CWE-94, CWE-1427

CHANGELOG.md:68

> Note: npm skipped 0.19.2 (its publish was blocked by the token deprecation); 0.19.3 carries the 0.19.2 fixes forward, including the `detect_changes` argument-injection fix ([#23](https://github.com/