Fast Agent

Overview

From the repository's own README, as read at the audited commit.

<p align="center"><a href="https://pypi.org/project/fast-agent-mcp/"><img src="https://img.shields.io/pypi/v/fast-agent-mcp?color=%2334D058&label=pypi" /></a><a href="#"><img src="https://github.com/evalstate/fast-agent/actions/workflows/main-checks.yml/badge.svg" /></a><a href="https://github.com/evalstate/fast-agent/issues"><img src="https://img.shields.io/github/issues-raw/evalstate/fast-agent" /></a><a href="https://discord.gg/xg5cJ7ndN6"><img src="https://img.shields.io/discord/1358470293990936787" alt="discord" /></a><img alt="Pepy Total Downloads" src="https://img.shields.io/pepy/dt/fast-agent-mcp?label=pypi%20%7C%20downloads"/><a href="https://github.com/evalstate/fast-agent-mcp/blob/main/LICENSE"><img src="https://img.shields.io/pypi/l/fast-agent-mcp" /></a></p>## Start Here> [!TIP]> Please see https://fast-agent.ai for latest documentation.**`fast-agent`** is a flexible way to interact with LLMs, excellent for use as a Coding Agent, Development Toolkit, Evaluation or Workflow platform.To start an interactive session with shell support, install [uv](https://astral.sh/uv) and run```bashuvx fast-agent-mcp@latest -x```To start coding with Hugging Face inference providers or use your OpenAI Codex plan:```bash# Code with Hugging Face Inference Providersuvx fast-agent-mcp@latest --pack hf-dev# Code with Codex (agents optimized for OpenAI)uvx fast-agent-mcp@latest --pack codex```Enter a shell with `!`, or run shell commands e.g. `! cd web && npm run build`.Manage skills with the `/skills` command, and connect to MCP Servers with `/connect`. The default **`fast-agent`** registry contains skills to let you set up LSP, Agent and Tool Hooks, Compaction strategies, Automation and more.```bash# /connect supports stdio or streamable http (with OAuth)# Start a STDIO server/connect @modelcontextprotocol/server-everything# Connect to a Streamable HTTP Server/connect https://huggingface.co/mcp```It's recommended to install **`fast-agent`** to set up the shell aliases and oth

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.

claude mcp add fast-agent-mcp --env ANTHROPIC_API_KEY=${ANTHROPIC_API_KEY} --env CODEX_API_KEY=${CODEX_API_KEY} --env CODEX_AUTH_JSON_PATH=${CODEX_AUTH_JSON_PATH} --env DEEPSEEK_API_KEY=${DEEPSEEK_API_KEY} -- uvx fast-agent-mcp

{
  "mcpServers": {
    "fast-agent-mcp": {
      "command": "uvx",
      "args": [
        "fast-agent-mcp"
      ],
      "env": {
        "ANTHROPIC_API_KEY": "${ANTHROPIC_API_KEY}",
        "CODEX_API_KEY": "${CODEX_API_KEY}",
        "CODEX_AUTH_JSON_PATH": "${CODEX_AUTH_JSON_PATH}",
        "DEEPSEEK_API_KEY": "${DEEPSEEK_API_KEY}"
      }
    }
  }
}

Exposed tools (85) 75 read · 10 write · 0 destructive

Details

Source

evalstate/fast-agent

PyPI

fast-agent-mcp

Transports

sse · stdio · streamable-http

Credentials it reads

ANTHROPIC_API_KEYCODEX_API_KEYCODEX_AUTH_JSON_PATHDEEPSEEK_API_KEYDEMO_TOKENFAST_AGENT_HF_TOKEN_SOURCEFAST_AGENT_OAUTH_CLIENT_METADATA_URLFAST_AGENT_OAUTH_RESOURCE_URLFAST_AGENT_OAUTH_SCOPESFAST_AGENT_PRIVACY_FILTER_MAX_WINDOW_TOKENSFAST_AGENT_PRIVACY_FILTER_WINDOW_OVERLAP_TOKENSFAST_AGENT_RESEARCH_HF_TOKEN

License

Apache-2.0

Stars

3,918 · pushed 0d ago

Trust audit

Install with care. The audit found things worth knowing before you trust its output.

What the source does

Filesystem

declared (5 observation(s))

Network

declared (6 observation(s))

Shell

declared (3 observation(s))

Dependencies

pinned

Secrets in source

found

Findings (25)

module = importlib.import_module(module_path)

module = importlib.import_module(module_name.strip())

def _extract_oauth_callback_params(callback_url: str) -> AuthorizationCodeResult:

params = parse_qs(urlparse(callback_url).query)

callback_url = (

result = _extract_oauth_callback_params(callback_url)

"id_token": "eyJhbGciOiJSUzI1NiIsImtpZCI6ImFlNjc5NWRjLTRiYWUtNDE4YS04NjVkLTA4YTY0MzllZWRhNiIsInR5cCI6IkpXVCJ9.eyJhbXIiOlsib3RwIiwidXJuOm9wZW5haTphbXI6b3RwX2VtYWlsIl0sImF1ZCI6WyJhcHBfRU1vYW1FRVo3M2YwQ2

api_key="programmatic-api-key",        # specify the API KEY programmatically, it will override which provided in config file or env var

api_key="programmatic-api-key",        # specify the API KEY programmatically, it will override which provided in config file or env var

api_key="programmatic-api-key",

api_key="programmatic-api-key",

api_key="programmatic-api-key",

.gitmodules

.pre-commit-config.yaml

.prettierignore

.env.sample

url_hash = hashlib.md5(url.encode()).hexdigest()[:8]

"../../docs/assets/brand/fast-agent-lockup-light.svg"

"../../docs/assets/brand/fast-agent-lockup-light.svg"

"../../docs/assets/brand/fast-agent-lockup-light.svg"

'data-fa-asciinema-cast="../../assets/a2a/a2a-client-input-required.cast"',

'data-fa-asciinema-cast="../../assets/a2a/a2a-server-card.cast"',

callback_url = (

# Run the dev server (http://127.0.0.1:8000)

url="http://127.0.0.1:41242",

Gates applied: no_behavioural_pass.

Audited 2026-09-14 · audit v0.4.0 · source sha 5a70690438f9 · full audit: observations/trust-audit/mcp-server/evalstate__fast-agent.json · Report an issue or request a re-scan

Audit history

Alternatives

Other servers in the same categories, safer ones first.

Questions