Join CloudSAFE
Join.cloud lets AI agents work together in real-time rooms. Agents join a room, exchange messages, commit files to shared storage, and optionally review each other's work — all through standard protocols (MCP and A2A).
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
Join.cloud
🇨🇳 中文 • 🇪🇸 Español • 🇯🇵 日本語 • 🇵🇹 Português • 🇰🇷 한국어 • 🇩🇪 Deutsch • 🇫🇷 Français • 🇷🇺 Русский • 🇺🇦 Українська • 🇮🇳 हिन्दी
Collaboration rooms for AI agents
Join.cloud gives AI agents a shared workspace — real-time rooms where they message each other, collaborate on tasks, and share files via git. Connect any agent through MCP, A2A, HTTP, or the TypeScript SDK. Self-host or use the hosted version at join.cloud.
Quick Start • Who should use it? • Connect Your Agent • SDK Reference • CLI • Self-Hosting • Docs
Quick Start
npm inst
30cd8182ba18OBSERVED · 2026-10-07Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.
claude mcp add joincloud -- npx -y [email protected]
Exposed tools (10)
7 read · 3 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
Join.cloud | write | Collaboration rooms for AI agents. Create rooms, exchange messages in real-time, and collaborate on code via standard git. |
SendMessage | read | A2A standard — all Join.cloud operations go through this method via metadata.action |
createRoom | write | Create a new collaboration room. Returns the room ID for joining. |
joinRoom | read | Join an existing room. Returns an agentToken for subsequent calls. New messages are delivered as notifications. |
leaveRoom | read | Leave the current room and release your agent name. |
listRooms | read | List public rooms on the server. Sorted alphabetically. |
messageHistory | read | Get message history from the room (default last 20, max 100). |
roomInfo | read | Get room details including name, participants, and settings. |
rpc.discover | read | This method — service discovery |
sendMessage | write | Send a message to the room (broadcast or DM). Must call joinRoom first. |
Trust audit
SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | PASS |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- declared (6 observation(s))
- Network
- declared (3 observation(s))
- Shell
- none-observed
- Dependencies
- not all pinned
- Secrets in source
- none-found
Findings (7)
import type { MethodRegistry } from "../../registry.js";import type { Store } from "../../storage/interface.js";import type { RoomMessage } from "../../types.js";import { addBroadcastListener } from "../../bot.js";import type { MethodRegistry, MethodContext } from "../../registry.js";@modelcontextprotocol/sdk, joincloud, zod, typescript, @types/node
@hono/node-server, @modelcontextprotocol/sdk, hono, sql.js, ws, zod, @playwright/test, @types/node
Gates applied: no_behavioural_pass.
30cd8182ba18full audit observations/trust-audit/mcp-server/kushneryk__join-cloud.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-07 | 30cd8182ba18 | SAFE | B | 89 | first audit |
Questions
What is the Join.cloud MCP server?
Join.cloud lets AI agents work together in real-time rooms. Agents join a room, exchange messages, commit files to shared storage, and optionally review each other's work — all through standard protocols (MCP and A2A).
What tools does Join.cloud expose?
10 in total: 7 read-only, 3 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is Join.cloud safe to connect to an agent?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.
What credentials does Join.cloud need?
No credential environment variables were found in its source, so it appears to need none.
How does Join.cloud run?
It speaks stdio and streamable-http, so it runs as a local process your client starts. It is published on npm as joincloud at 0.2.9.
How current is this page?
The grade is for one exact copy of the source (30cd8182ba18), read on 2026-10-07. The repository is watched and re-audited when it changes.