Antigravity LinkBLOCK
Mobile companion for Google's Antigravity IDE. Mirror AI sessions on your phone, send messages, stop generation, automate via 9 MCP tools or OpenAPI.
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
[](https://github.com/cafeTechne/antigravity-link-extension/actions/workflows/ci.yml) [](https://open-vsx.org/extension/cafetechne/antigravity-link-extension) [](https://open-vsx.org/extension/cafetechne/antigravity-link-extension) [](https://www.npmjs.com/package/antigravity-link-extension) [](https://www.npmjs.com/package/antigravity-link-extension) [](https://github.com/cafeTechne/antigravity-link-extension/stargazers) [](LICENSE)
Read this in your language: 日本語 · 中文(简体) · 中文(繁體) · 한국어 · Deutsch · Français · Español · Português · Русский · Italiano · Polski · Türkçe · Tiếng Việt · Bahasa Indonesia · العربية
What's new in v1.0.20 — Security: removed child_process dependency entirely; debug endpoints now require auth; localhost guard on all LS RPC calls. See CHANGELOG.Contents
- Demo
- What you get
- Installation
- Prerequisites
- Quick start
- Commands
- Settings
- For agent builders
- How it works
- [Account safety](
3f727d7da6b9OBSERVED · 2026-10-06Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.
claude mcp add antigravity-link-extension --env AG_BRIDGE_TOKEN=${AG_BRIDGE_TOKEN} -- npx -y [email protected]Exposed tools (9)
7 read · 2 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
click_element | read | Click a UI element in the active Antigravity window. Identify the element by |
get_instances | read | List all running Antigravity windows available for connection. |
get_plan | read | Read the current implementation plan from the Antigravity brain directory. |
get_snapshot | read | Get the current state of the active Antigravity chat session. Returns rendered HTML, |
get_task | read | Read the current task document from the Antigravity brain directory. |
get_walkthrough | read | Read the current walkthrough document from the Antigravity brain directory. |
send_message | write | Send a text message to the active Antigravity chat session. |
stop_generation | write | Stop the AI generation currently in progress. Uses Language Server RPC and a |
switch_instance | read | Switch the active connection to a different Antigravity window. |
Trust audit
BLOCKgrade D · trust 68/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | FAIL |
| L2 | Instruction surface (what it tells the agent) | FAIL |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- declared (11 observation(s))
- Shell
- none-observed
- Dependencies
- not all pinned
- Secrets in source
- none-found
Findings (15)
const agent = new https.Agent({ rejectUnauthorized: false });rejectUnauthorized: false, timeout: 5000,
rejectUnauthorized: false,
rejectUnauthorized: false,
- **Antigravity IDE** установлена и работает.
- **Antigravity uzaktan hata ayıklama bayrağıyla başlatıldı.** Uzantının oturumunuzu keşfedip ona bağlanması için bu gereklidir. Aşağıdaki Hızlı başlangıç bölümündeki başlatma komutuna bakın.
- 界面提供 16 种语言,具有自动检测和 ZXQPH0XZ 支持。
const BASE_URL = (process.env.AG_BRIDGE_URL || 'https://127.0.0.1:3000').replace(/\/$/, '');
const list = await getJson<CDPTarget[]>(`http://127.0.0.1:${port}/json/list`);.vscodeignore
try { new Function(script); return null; }path.join(__dirname, '../../src/services/antigravity.ts'),
const extensionPath = path.join(__dirname, '../../');
const workspaceRoot = path.join(__dirname, '../../../');
@types/multer, express, multer, qrcode, selfsigned, ws, @types/chai, @types/express
Gates applied: no_behavioural_pass.
3f727d7da6b9full audit observations/trust-audit/mcp-server/cafetechne__antigravity-link.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-06 | 3f727d7da6b9 | BLOCK | D | 68 | first audit |
Questions
What is the Antigravity Link MCP server?
Mobile companion for Google's Antigravity IDE. Mirror AI sessions on your phone, send messages, stop generation, automate via 9 MCP tools or OpenAPI.
What tools does Antigravity Link expose?
9 in total: 7 read-only, 2 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is Antigravity Link safe to connect to an agent?
No — not without reading the findings first. The audit graded it D (68/100) and found 7 critical or high issues in the source. Each one is listed on this page with the file and line it is on.
What credentials does Antigravity Link need?
It reads AG_BRIDGE_TOKEN and AUTH_TOKEN from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.
How does Antigravity Link run?
It speaks stdio, so it runs as a local process your client starts. It is published on npm as antigravity-link-extension at 1.0.20.
How current is this page?
The grade is for one exact copy of the source (3f727d7da6b9), read on 2026-10-06. The repository is watched and re-audited when it changes.