tirithCAUTION
The tower of guard for parallel coding agents. Keeps parallel coding agents from stepping on each other. Claims, contracts and change notices over MCP.
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
Tirith
Coordination server for parallel coding agents. Claims, a task board, interface contracts, change notices, a decisions log, path-scoped memory notes, and agent messages, over MCP.
Run five or ten coding agents on one repository and they edit the same files, rename things others depend on, and build both sides of an interface to different shapes. Tirith is a small daemon they all talk to: an agent claims files before editing, gets the notices, contracts, decisions, and notes for those files back with the claim, and publishes the shape of an interface before either side implements it.
It works with anything that speaks MCP, over stdio or HTTP: Claude Code, Cursor, Codex, LangGraph, CrewAI, or a plain script.
It also remembers. Agents leave notes scoped to repository paths, so what one agent learned about a file reaches the next agent that claims it. Tirith stores no conversation history and no embeddings.
Status: v1 shipped. Every primitive, the CLI, persistence, and the dashboard are built and tested, against the definition in ADR-0013; tool schemas follow semantic versioning.
Install
macOS and Linux:
curl -LsSf https://eabz.github.io/tirith/
1382ef824c0fOBSERVED · 2026-10-12Trust audit
CAUTIONgrade B · trust 89/100 Install with care. The audit found things worth knowing before you trust its output.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | WARN |
| L1 | Static analysis of the code | WARN |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- declared (3 observation(s))
- Network
- declared (6 observation(s))
- Shell
- none-observed
- Dependencies
- pinned
- Secrets in source
- none-found
Findings (15)
.claude/skills
`.mcp.json` registers `tirith stdio`, which starts the repository's daemon at `http://127.0.0.1:7477` (dashboard at `/`) when none runs. If the MCP server shows as unavailable, the binary is not on PA
.graphifyignore
.nojekyll
`.mcp.json` registers `tirith stdio`, which starts this repository's daemon (`http://127.0.0.1:7477`, dashboard at `/`). If the server is unavailable, the binary is missing from PATH: `cargo install -
The daemon serves MCP at `http://127.0.0.1:7477/mcp` and a live dashboard
at `http://127.0.0.1:7477/`. State is written to `.tirith/` in your
LangGraph ─────── HTTP ────────┤ │ http://127.0.0.1:7477 │
`.mcp.json` registers `tirith stdio`, which starts this repository's daemon (`http://127.0.0.1:7477`, dashboard at `/`). If the server is unavailable, the binary is missing from PATH: `cargo install -
curl -LsSf https://eabz.github.io/tirith/install.sh | sh
curl -LsSf https://eabz.github.io/tirith/install.sh | sh
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/eabz/tirith/releases/latest/download/tirith-mcp-installer.sh | sh
curl -LsSf https://eabz.github.io/tirith/install.sh | sh</pre>
<button class="copy" type="button" data-copy="curl -LsSf https://eabz.github.io/tirith/install.sh | sh">Copy</button>
Gates applied: no_behavioural_pass.
1382ef824c0ffull audit observations/trust-audit/mcp-server/eabz__tirith.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-12 | 1382ef824c0f | CAUTION | B | 89 | first audit |
Questions
What is the tirith MCP server?
The tower of guard for parallel coding agents. Keeps parallel coding agents from stepping on each other. Claims, contracts and change notices over MCP.
Is tirith safe to connect to an agent?
With care. The audit graded it B (89/100) and found 15 things worth knowing before you trust this server, listed below with the exact line each was found on.
What credentials does tirith need?
No credential environment variables were found in its source, so it appears to need none.
How does tirith run?
It speaks stdio and streamable-http, so it runs as a local process your client starts.
How current is this page?
The grade is for one exact copy of the source (1382ef824c0f), read on 2026-10-12. The repository is watched and re-audited when it changes.