AgeniteSAFE
🤖 Build powerful AI agents with TypeScript. Agenite makes it easy to create, compose, and control AI agents with first-class support for tools, streaming, and multi-agent architectures. Switch seamlessly between providers like OpenAI, Anthropic, AWS Bedrock, and Ollama.
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
A modern, modular, and type-safe framework for building AI agents using typescript
[](https://github.com/subeshb1/agenite/blob/main/LICENSE) [](https://www.npmjs.com/package/@agenite/agent) [](https://www.typescriptlang.org/) [](https://github.com/subeshb1/agenite/pulls)
What is Agenite?
Agenite is a powerful TypeScript framework designed for building sophisticated AI agents. It provides a modular, type-safe, and flexible architecture that makes it easy to create, compose, and control AI agents with advanced capabilities.
✨ Key features
- Type safety and developer experience
- Built from the ground up with TypeScript
- Robust type checking for tools and agent configurations
- Excellent IDE support and autocompletion
- Tool integration
- First-class support for function calling
- Built-in JSON Schema validation
- Structured error handling
- Easy API integration
- Provider agnostic
- Support for OpenAI, Anthropic, AWS Bedrock, and Ollama
- Consistent interface across providers
- Easy extension for new providers
- Advanced architecture
- Bidirectional flow using JavaScript generators
- Step-based execution model
- Built-in state management with reducers
- Flexible middleware system
- Model context protocol (MCP)
- Standardized protocol for connecting LLMs to data sources
- Client implementation for interacting with MCP servers
- Access to web content, filesystem, databases, and more
📦 Available packages
3637ef8072c7OBSERVED · 2026-10-07Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.
claude mcp add ui --env OPENAI_API_KEY=${OPENAI_API_KEY} -- npx -y @repo/[email protected]{
"mcpServers": {
"ui": {
"command": "npx",
"args": [
"-y",
"@repo/[email protected]"
],
"env": {
"OPENAI_API_KEY": "${OPENAI_API_KEY}"
}
}
}
}Exposed tools (16)
14 read · 2 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
CodingAgent | read | An AI agent specialized in coding tasks |
askCalculator | read | Ask the calculator specialist for help with math |
askWeather | read | Ask the weather specialist about weather conditions |
calculator | read | Perform basic math operations |
command_runner | read | Executes shell commands on the system. Use with caution as improper commands can cause unintended behavior. |
deep_research | read | Creates well-researched blog posts by combining topic discovery, source analysis, and content writing |
file_manager | write | Read or write research data to files in the appropriate directories |
file_system | write | Read, write, and check files in the project. Can create both files and directories |
getCurrentTime | read | Get the current time |
getWeather | read | Get the current weather |
nested-weather | read | nested weather agent |
superVisor | read | superVisor agent |
test | read | test |
weather | read | weather agent |
web_scraper | read | Extracts title and content from web pages |
web_search | read | Simple DuckDuckGo search that returns top results |
Trust audit
SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | PASS |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- none-observed
- Shell
- none-observed
- Dependencies
- not all pinned
- Secrets in source
- none-found
Findings (7)
const result = new Function('return ' + input.expression)();@eslint/js, @next/eslint-plugin-next, eslint, eslint-config-prettier, eslint-plugin-only-warn, eslint-plugin-react, eslint-plugin-react-hooks, eslint-plugin-turbo
tsup, typescript
@modelcontextprotocol/sdk, axios, chalk, cli-table3, puppeteer, puppeteer-extra, puppeteer-extra-plugin-stealth, tsx
@types/node, ts-node, typescript
chalk, @types/node, tsup, tsx
assets/agenite.png
Gates applied: no_behavioural_pass.
3637ef8072c7full audit observations/trust-audit/mcp-server/subeshb1__agenite.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-07 | 3637ef8072c7 | SAFE | B | 89 | first audit |
Questions
What is the Agenite MCP server?
🤖 Build powerful AI agents with TypeScript. Agenite makes it easy to create, compose, and control AI agents with first-class support for tools, streaming, and multi-agent architectures. Switch seamlessly between providers like OpenAI, Anthropic, AWS Bedrock, and Ollama.
What tools does Agenite expose?
16 in total: 14 read-only, 2 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is Agenite safe to connect to an agent?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.
What credentials does Agenite need?
It reads OPENAI_API_KEY from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.
How current is this page?
The grade is for one exact copy of the source (3637ef8072c7), read on 2026-10-07. The repository is watched and re-audited when it changes.