MCP Agent

Overview

From the repository's own README, as read at the audited commit.

<p align="center">  <a href="https://docs.mcp-agent.com"><img src="https://github.com/user-attachments/assets/c8d059e5-bd56-4ea2-a72d-807fb4897bde" alt="Logo" width="300" /></a></p><p align="center">  <em>Build effective agents with Model Context Protocol using simple, composable patterns.</em><p align="center">  <a href="https://github.com/lastmile-ai/mcp-agent/tree/main/examples" target="_blank"><strong>Examples</strong></a>  |  <a href="https://docs.mcp-agent.com/mcp-agent-sdk/effective-patterns/overview" target="_blank"><strong>Building Effective Agents</strong></a>  |  <a href="https://modelcontextprotocol.io/introduction" target="_blank"><strong>MCP</strong></a></p><p align="center"><a href="https://docs.mcp-agent.com"><img src="https://img.shields.io/badge/docs-8F?style=flat&link=https%3A%2F%2Fdocs.mcp-agent.com%2F" /><a/><a href="https://pypi.org/project/mcp-agent/"><img src="https://img.shields.io/pypi/v/mcp-agent?color=%2334D058&label=pypi" /></a><img alt="Pepy Total Downloads" src="https://img.shields.io/pepy/dt/mcp-agent?label=pypi%20%7C%20downloads"/><a href="https://github.com/lastmile-ai/mcp-agent/blob/main/LICENSE"><img src="https://img.shields.io/badge/License-Apache_2.0-blue.svg"/></a><a href="https://lmai.link/discord/mcp-agent"><img src="https://img.shields.io/badge/Discord-%235865F2.svg?logo=discord&logoColor=white" alt="discord"/></a></p><p align="center"><a href="https://trendshift.io/repositories/13216" target="_blank"><img src="https://trendshift.io/api/badge/repositories/13216" alt="lastmile-ai%2Fmcp-agent | Trendshift" style="width: 250px; height: 55px;" width="250" height="55"/></a></p>## Overview**`mcp-agent`** is a simple, composable framework to build effective agents using [Model Context Protocol](https://modelcontextprotocol.io/introduction).> [!Note]> mcp-agent's vision is that _MCP is all you need to build agents, and that simple patterns are more robust than complex architectures for shipping high-quality agents_.`mcp-agent` gives

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.

claude mcp add coinflip --env ANTHROPIC_API_KEY=${ANTHROPIC_API_KEY} --env AWS_ACCESS_KEY_ID=${AWS_ACCESS_KEY_ID} --env AWS_SECRET_ACCESS_KEY=${AWS_SECRET_ACCESS_KEY} --env AZURE_API_KEY=${AZURE_API_KEY} -- npx -y [email protected]

{
  "mcpServers": {
    "coinflip": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ],
      "env": {
        "ANTHROPIC_API_KEY": "${ANTHROPIC_API_KEY}",
        "AWS_ACCESS_KEY_ID": "${AWS_ACCESS_KEY_ID}",
        "AWS_SECRET_ACCESS_KEY": "${AWS_SECRET_ACCESS_KEY}",
        "AZURE_API_KEY": "${AZURE_API_KEY}"
      }
    }
  }
}

Exposed tools (51) 45 read · 6 write · 0 destructive

Details

Source

lastmile-ai/mcp-agent

npm

coinflip@0.1.0

PyPI

mcp-agent

Transports

sse · stdio · streamable-http

Credentials it reads

ANTHROPIC_API_KEYAWS_ACCESS_KEY_IDAWS_SECRET_ACCESS_KEYAZURE_API_KEYGITHUB_ACCESS_TOKENGITHUB_CLIENT_SECRETGOOGLE_API_KEYLOG_SECRETSMCP_GATEWAY_TOKENMY_SECRETNEXTAUTH_SECRETOAUTH_REDIS_URL

License

Apache-2.0

Stars

8,538 · pushed 230d ago

Trust audit

Do not install this without reading the findings. The audit found something that could harm you or your machine.

What the source does

Filesystem

declared (3 observation(s))

Network

none-observed

Shell

declared (7 observation(s))

Dependencies

not all pinned

Secrets in source

found

Findings (25)

return yaml.load(yaml_str, Loader=SecretYamlLoader)

exec(func_code, namespace)

module = importlib.import_module(module_name)

module = __import__(package)

importlib.import_module(module_name)

module = importlib.import_module(serialized["module"])

module = importlib.import_module(serialized["module"])

api_key: "sk-ant-api03-your-anthropic-api-key-here"

api_key: "your-anthropic-api-key"

api_key: "your-anthropic-api-key"

api_key="sk-my-openai-api-key",

api_key="sk-my-anthropic-api-key",

api_key: "sk-your-anthropic-key"

SLACK_BOT_TOKEN: "xoxb-your-bot-token"

#   SLACK_BOT_TOKEN: "xoxb-your-bot-token"

SLACK_BOT_TOKEN: "xoxb-your-bot-token"

SLACK_MCP_XOXP_TOKEN: "xoxp-oauth-token"

.pre-commit-config.yaml

.prettierignore

loaded = yaml.load(processed_yaml, Loader=SecretYamlLoader)

url_hash = hashlib.md5(url.encode()).hexdigest()[:8]

print(f"Generated test API key: {api_key[:15]}...{api_key[-5:]}")

print(f"API Key: {'*' * 6 + api_key[-4:] if api_key else 'Not set'}")

print(token)

$schema: ../../../schema/mcp-agent.config.schema.json

Gates applied: no_behavioural_pass.

Audited 2026-09-13 · audit v0.4.0 · source sha 86e936c23c81 · full audit: observations/trust-audit/mcp-server/lastmile-ai__mcp-agent.json · Report an issue or request a re-scan

Audit history

Alternatives

Other servers in the same categories, safer ones first.

Questions