lnwjud

Overview

From the repository's own README, as read at the audited commit.

<p align="center">  <img src="assets/logo/logo-256x256.png" width="160" alt="lnwjud logo" /></p><h1 align="center">lnwjud</h1><p align="center">  <strong>Cross-platform local AI-agent runtime and MCP gateway</strong><br />  <em>253 total tool definitions for local files, Git, processes, Windows automation, WSL, browser control, durable goal continuation, context capsules, indexing, observability, ECC integration, and extensibility; 241 are advertised by default and all 253 when Codex delegation plus Agent Swarm is enabled.</em></p><p align="center">  <em>อ่านที่เหลือใน Readme ได้เลยครับ ติดปัญหาทักมาได้ใน <a href="https://url.in.th/rEZiG"><strong>Line</strong></a> ได้ตลอดครับ / กําลังพัฒนาให้เรื่อยๆครับ ท่านที่ถามหาช่องสนับสนุนค่ากาแฟ แปะลิงก์ไว้ให้แล้วครับ ขอบคุณครับ — <a href="https://easydonate.app/abcz"><strong>Donate</strong></a></em></p><p align="center">  <a href="https://github.com/engasnm111/lnwjud/releases/latest"><img alt="GitHub Release" src="https://img.shields.io/github/v/release/engasnm111/lnwjud" /></a>  <a href="LICENSE"><img alt="License" src="https://img.shields.io/badge/license-MIT-blue.svg" /></a>  <img alt="Platform" src="https://img.shields.io/badge/platform-Windows%20%7C%20macOS%20%7C%20Linux-0078D4" />  <img alt="Node" src="https://img.shields.io/badge/Node.js-24.x-339933" />  <img alt="MCP" src="https://img.shields.io/badge/MCP-253%20tools-6f42c1" /></p><h2 align="center">Download lnwjud</h2><p align="center">Choose your platform and download the current v5.2.0 release directly.</p><table align="center">  <tr>    <td align="center" width="33%">      <a href="https://github.com/engasnm111/lnwjud/releases/latest/download/lnwjud-Setup-5.2.0.exe">        <img src="assets/download/download-windows.svg" width="300" alt="Download lnwjud for Windows" />      </a><br />      <sub><a href="https://github.com/engasnm111/lnwjud/releases/latest/download/lnwjud-Portable-5.2.0.exe">Portable x64</a></sub>    </td>    <td align="center" width="33%">      <a

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.

claude mcp add fixture-node-vite --env APPLE_API_KEY=${APPLE_API_KEY} --env CONTROL_PLANE_API_KEY=${CONTROL_PLANE_API_KEY} --env LNWJUD_CHECKPOINT_KEY_BASE64=${LNWJUD_CHECKPOINT_KEY_BASE64} --env LNWJUD_E2E_EPHEMERAL_SECRETS=${LNWJUD_E2E_EPHEMERAL_SECRETS} -- npx -y [email protected]

{
  "mcpServers": {
    "fixture-node-vite": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ],
      "env": {
        "APPLE_API_KEY": "${APPLE_API_KEY}",
        "CONTROL_PLANE_API_KEY": "${CONTROL_PLANE_API_KEY}",
        "LNWJUD_CHECKPOINT_KEY_BASE64": "${LNWJUD_CHECKPOINT_KEY_BASE64}",
        "LNWJUD_E2E_EPHEMERAL_SECRETS": "${LNWJUD_E2E_EPHEMERAL_SECRETS}"
      }
    }
  }
}

Exposed tools (84) 65 read · 17 write · 2 destructive

Blast radius: 2 tools can delete or overwrite. An agent that can be talked into calling a tool can be talked into calling this one.

Details

Source

engasnm111/lnwjud

npm

fixture-node-vite@1.1.1

Transports

stdio · streamable-http

Credentials it reads

APPLE_API_KEYCONTROL_PLANE_API_KEYLNWJUD_CHECKPOINT_KEY_BASE64LNWJUD_E2E_EPHEMERAL_SECRETSLNWJUD_STDIO_FULL_BYPASS_ALLLNWJUD_TEST_WINDOWS_SECRET_MIGRATORLNWJUD_WINDOWS_SECRET_MIGRATOR

License

MIT

Stars

166 · pushed 0d ago

Trust audit

Do not install this without reading the findings. The audit found something that could harm you or your machine.

What the source does

Filesystem

declared (6 observation(s))

Network

none-observed

Shell

none-observed

Dependencies

not all pinned

Secrets in source

found

Findings (25)

if (['id_rsa', 'id_ed25519', 'credentials', 'credentials.json', 'secrets.json', 'service-account.json'].includes(basename)) return true;

const PRIVATE_KEY_PREFIXES = ['id_rsa', 'id_ed25519'];

($normalized -match '(^|/)(.+\.(pem|key)|id_rsa.*|id_ed25519.*|\.ssh/.*|\.aws/.*|credentials\.json)$')

import { appendFileSync, closeSync, mkdirSync, openSync, readFileSync, readSync, statSync, writeFileSync } from 'node:fs';

import type { UiLocale, UpdateStatus } from '@lnwjud/ipc-contracts';

const secret = 'sk-fixture-raw-secret-must-not-render';

'  api_key: "sk-plaintext-must-not-remain"',

api_key: 'literal-must-not-remain',

password: 'super-secret-password',

nested: { apiKey: 'super-secret-api-key', a: 1 },

await expect(vault.save({ workspaceRoot, scope: 'project', title: 'credential', body: 'ghp_123456789012345678901234567890' }))

delete_file, web_fetch

await exec(powershell, ['-NoProfile', '-NonInteractive', '-ExecutionPolicy', 'Bypass', '-File', path.join(repositoryRoot, 'scripts/build-windows-secret-migrator.ps1')], { windowsHide: true, timeout: p

const fixture = await exec(powershell, ['-NoProfile', '-NonInteractive', '-Command',

const gitBlobSha = createHash('sha1').update(`blob ${content.byteLength}\0`).update(content).digest('hex');

it.each(['.env', '.env.local', 'server.pem', 'private.key', 'id_ed25519', '.ssh\\id_ed25519', '.aws\\credentials', 'credentials.json'])('denies %s', (relativePath) => {

const sourceHelper = path.join(desktopRoot, '../../native/windows-secret-migrator/bin/win-x64/lnwjud-windows-secret-migrator.exe');

await promisify(execFile)(powershell, ['-NoProfile', '-NonInteractive', '-ExecutionPolicy', 'Bypass', '-File', path.join(desktopRoot, '../../scripts/build-windows-secret-migrator.ps1')], { windowsHide

LNWJUD_WINDOWS_SECRET_MIGRATOR: path.join(desktopRoot, '../../native/windows-secret-migrator/bin/win-x64/lnwjud-windows-secret-migrator.exe'),

- from: ../../.agents/skills/lnwjud-scheduled-continuation

- from: ../../.agents/skills/ponytail

- Adds **Remote MCP via ngrok + OAuth** as the recommended easy ChatGPT connection path: lnwjud keeps its local Streamable HTTP MCP on loopback (normally `http://127.0.0.1:18765/mcp`), runs a separate

| Local MCP client / dashboard diagnostics | Loopback Streamable HTTP | lnwjud Desktop | Defaults to `http://127.0.0.1:18765/mcp`; actual URL is shown in the UI |

5. **Member connection:** open the published custom lnwjud app in ChatGPT and press **Connect**. For the exact supported ChatGPT OAuth callback paths, the browser is handed once to a random short-live

The public ngrok URL is not the raw loopback MCP endpoint: requests must pass OAuth and bearer-token validation at the separate gateway. Do not publish `http://127.0.0.1:<port>/mcp` directly through a

Gates applied: no_behavioural_pass.

Audited 2026-09-17 · audit v0.4.0 · source sha b218af0638c4 · full audit: observations/trust-audit/mcp-server/engasnm111__lnwjud.json · Report an issue or request a re-scan

Audit history

Alternatives

Other servers in the same categories, safer ones first.

Questions