Atlas / MCP servers / sashabogi / trantor

trantorBLOCK

Name: trantor
Author: sashabogi

mcp/sashabogi/trantor

MCP server by sashabogi · agent crew · ai agents · claude code · Audited 2026-10-12

The hub-world for AI agent crews — orchestrate Claude Code, Codex, Gemini, Kimi & DeepSeek as live crews with a plan-aware Advisor, a Kanban/flow command center, a testing gate, and an economics brain (Scrooge).

Verdict

BLOCK

Grade

Trust score

45 /100

Exposed tools

27 19r · 8w · 0d

Transport

stdio

License

MIT

Stars

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

████████╗██████╗  █████╗ ███╗   ██╗████████╗ ██████╗ ██████╗
╚══██╔══╝██╔══██╗██╔══██╗████╗  ██║╚══██╔══╝██╔═══██╗██╔══██╗
██║   ██████╔╝███████║██╔██╗ ██║   ██║   ██║   ██║██████╔╝
██║   ██╔══██╗██╔══██║██║╚██╗██║   ██║   ██║   ██║██╔══██╗
██║   ██║  ██║██║  ██║██║ ╚████║   ██║   ╚██████╔╝██║  ██║
╚═╝   ╚═╝  ╚═╝╚═╝  ╚═╝╚═╝  ╚═══╝   ╚═╝    ╚═════╝ ╚═╝  ╚═╝

The hub-world for AI agent crews.

*One Advisor decides how your work runs — solo, cheap inline calls, or a live crew of Claude Code, Codex, GLM, Kimi, DeepSeek — or any model you bring — in their own terminal windows, routed by your actual plans, supervised on a live + historical board you can scroll back through, learning from every failure.*

[](./LICENSE)

Install

npm install -g trantor
trantor setup        # hub becomes an always-on service + config + wires your AI CLIs + doctor

Then give Claude Code (the orchestrator) the plugin:

claude plugin marketplace add sashabogi/trantor
claude plugin install trantor

Kimi Code CLI as orchestrator (same capabilities — the relay_* MCP tools, the crew/handoff/ research skills, and the full hook set: session registration, focus cards, todo mirroring, heartbeats, inbox delivery, handoff/baton pass, sub-agent cards):

{
"mcpServers": {
"relay": {
"command": "node",
"args": ["/mcp.mjs"],
"env": { "RELAY_AGENT": "kimi-orch" },
"startupTimeoutMs": 15000,
"toolTimeo

Read from source at commit 677084b994b1OBSERVED · 2026-10-12

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.

claude-code

claude mcp add trantor --env ANTHROPIC_API_KEY=${ANTHROPIC_API_KEY} --env CLAUDE_CODE_OAUTH_TOKEN=${CLAUDE_CODE_OAUTH_TOKEN} --env DEEPSEEK_API_KEY=${DEEPSEEK_API_KEY} --env GEMINI_API_KEY=${GEMINI_API_KEY} -- npx -y [email protected]

claude-desktop

{
  "mcpServers": {
    "trantor": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ],
      "env": {
        "ANTHROPIC_API_KEY": "${ANTHROPIC_API_KEY}",
        "CLAUDE_CODE_OAUTH_TOKEN": "${CLAUDE_CODE_OAUTH_TOKEN}",
        "DEEPSEEK_API_KEY": "${DEEPSEEK_API_KEY}",
        "GEMINI_API_KEY": "${GEMINI_API_KEY}"
      }
    }
  }
}

Exposed tools (27)

19 read · 8 write · 0 destructive.

Tool	Risk	Description
`alpha`	read	Build alpha
`beta`	read	Build beta
`gamma`	read	Explore gamma
`relay_advise`	write	THE ADVISOR — ask the brain how to execute a body of work before spending tokens. Give it your work packages (with difficulty); it weighs task shape x the user
`relay_ask`	read	Ask a BLOCKING question on your card without forfeiting the contract (#7756). This is the correct move when the contract omits a fact you cannot proceed without — never invent the value. Sends a kind:ask message to the card
`relay_board`	read	Show a project
`relay_contracts`	read
`relay_duty_failure`	read	Duty-seat only: record that a required cross-session socket nudge was skipped or that a relay send returned 403. The hub appends the failure to the target project
`relay_handoff`	write	Write a rich handoff for THIS session so a fresh session (any agent) can take over with a full context window instead of compacting. Provide a complete markdown summary (TASK / STATE / KEY DECISIONS / NEXT STEPS / KEY FILES). Universal — works in any agent, not just Claude
`relay_inbox`	read
`relay_lesson`	read	Record a LESSON learned from a failure so future crews avoid it — injected into agents
`relay_peers`	read	Find who you can talk to: the live agent sessions on the relay (online in last 5 min), including sessions in projects linked to yours. Call this BEFORE concluding you have no way to reach someone — the session ids it returns are what relay_send takes.
`relay_phase_goal`	write	Set what a PHASE is for — its goal — shown as the phase header in the Flow view (overrides the theme auto-derived from card titles). Capture this when you plan a phase so the board says what each milestone needs to do, not just
`relay_project_brief`	write	Set a one-paragraph brief for a project shown on the dashboard: what it is, why it matters, and the goal. Defaults to THIS project; pass
`relay_proposals`	read	List THIS session
`relay_propose`	read
`relay_scrooge`	read	Delegate a SMALL, SELF-CONTAINED piece of grunt work (draft a function, summarize, extract, classify, boilerplate) to a cheap external model via Scrooge — costs a fraction of a cent and keeps the result OUT of expensive context where possible. Returns the model
`relay_send`	write	Send a live message to another agent session (or
`relay_status`	write	Set this session
`relay_task_add`	write	Add a Kanban card to a project
`relay_task_check`	read	Tick (or untick) ONE acceptance item on a card
`relay_task_move`	write	Move a Kanban card as you progress: todo -> doing -> testing -> done. NEVER move straight to done: move to
`relay_verify_gate`	read	Record a VERIFICATION GATE — a claim that MUST be independently verified before the related work ships (e.g.
`relay_wait`	read	Block up to
`relay_whoami`	read	Show this session
`relay_withdraw_proposal`	read	Withdraw one of THIS session
`wflow`	read	WF step

Trust audit

BLOCKgrade F · trust 45/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.

Layer	What it checks	Result
L0	Provenance & inventory	FAIL
L1	Static analysis of the code	FAIL
L2	Instruction surface (what it tells the agent)	PASS
L3	Class-specific surface	PASS
L4	Behavioural (sandbox)	SKIPPED

What the source does

Filesystem: declared (11 observation(s))
Network: declared (10 observation(s))
Shell: declared (9 observation(s))
Dependencies: not all pinned
Secrets in source: found

Findings (25)

HIGHInventory / provenance · inv.suspicious_name · CWE-1104

bin/crew-payload.mjs

crew-payload.mjs

Why it matters. member named after an attack tool

Fix. remove or justify

HIGHCode injection · code.eval_exec · CWE-78, CWE-94, CWE-95

engine/test-routing.py:18

exec(compile(open(SCROOGE).read(), "scrooge", "exec"), g)

Why it matters. evaluates text as code

Fix. remove; use a parser or a dispatch table

HIGHCode injection · code.eval_exec · CWE-78, CWE-94, CWE-95

lib/docker-janitor.mjs:16

try { r = exec(["ps", "--format", "{{.ID}} {{.Names}}"]); } catch { return null; }

Why it matters. evaluates text as code

Fix. remove; use a parser or a dispatch table

HIGHCode injection · code.eval_exec · CWE-78, CWE-94, CWE-95

lib/docker-janitor.mjs:79

try { r = exec(["stop", ...ids]); } catch { return { unavailable: true, stopped: [], failed: [] }; }

Why it matters. evaluates text as code

Fix. remove; use a parser or a dispatch table

HIGHCode injection · code.eval_exec · CWE-78, CWE-94, CWE-95

lib/seats.mjs:87

const parsed = JSON.parse(exec(bin, ["agent", "list"], { encoding: "utf8", timeout: 4000, stdio: ["ignore", "pipe", "ignore"] }));

Why it matters. evaluates text as code

Fix. remove; use a parser or a dispatch table

HIGHHard-coded secrets · secret.db_uri · CWE-798, CWE-321

deploy/setup-netcup.sh:37

DATABASE_URL=postgresql://trantor:[email protected]:5432/trantor

MEDIUMInventory / provenance · inv.binary · CWE-1104

.DS_Store

.DS_Store

Why it matters. a compiled or binary member cannot be reviewed from source