Systemprompt Code OrchestratorCAUTION
[DEPRECATED] Superseded by systempromptio/systemprompt-template and systempromptio/systemprompt-core. MCP server for orchestrating AI coding agents (Claude Code CLI & Gemini CLI).
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
## ⚠️ Deprecated — no longer maintained This repository has been superseded. All new development and support lives in: - [systempromptio/systemprompt-template](https://github.com/systempromptio/systemprompt-template) — start here. Self-hosted evaluation of the full systemprompt.io AI governance infrastructure. - [systempromptio/systemprompt-core](https://github.com/systempromptio/systemprompt-core) — the underlying Rust library (MCP, A2A, OAuth 2.1, audit, compile-time extensions). Learn more at systemprompt.io. The original README is preserved below for historical reference.
Turn Your Workstation into a Remotely Accessible AI Coding Assistant
[](https://opensource.org/licenses/MIT) [](https://twitter.com/tyingshoelaces_) [](https://discord.com/invite/wkAbSuPWpr)
[Website](https://systemprompt.io) • [Documentation](https://docs.systemprompt.io/coding-agent) • [Watch Demo Video](https://www.loom.com/share/8e4b8631d1a149d9801f2b96235dcd0b)
💯 100% Free and Open Source
We appreciate your support! If you find this project useful, please consider:
⭐ Star this repo • 📢 Share with your network • 🐛 Report issues • 🤝 Contribute code
Every star, share, and contribution helps us improve this tool for the community!
📱 Works with Any MCP Client
This server is 100% free and open source and works with any MCP-compatible client.
We also offer a paid subscription native mobile app (SystemPrompt) designed for voice-first interactions with this server.
370d2935c1cbOBSERVED · 2026-10-07Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.
claude mcp add systemprompt-mcp-server --env FIREBASE_API_KEY=${FIREBASE_API_KEY} --env JWT_SECRET=${JWT_SECRET} --env PUSH_TOKEN=${PUSH_TOKEN} -- npx -y @systemprompt/[email protected]{
"mcpServers": {
"systemprompt-mcp-server": {
"command": "npx",
"args": [
"-y",
"@systemprompt/[email protected]"
],
"env": {
"FIREBASE_API_KEY": "${FIREBASE_API_KEY}",
"JWT_SECRET": "${JWT_SECRET}",
"PUSH_TOKEN": "${PUSH_TOKEN}"
}
}
}
}Exposed tools (31)
20 read · 11 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
CLAUDE_PATH | read | Path to Claude CLI executable |
GEMINI_PATH | read | Path to Gemini CLI executable |
JWT_SECRET | read | JWT secret for authentication (optional) |
PROJECT_ROOT | read | Project root directory for task execution |
PUSH_TOKEN | write | Device push token for notifications (for mobile app) |
affected_files | read | Files potentially related to the bug |
bug_description | read | Description of the bug or error |
check_status | read | Check the status of Claude Code SDK and Gemini CLI availability by attempting to initiate test sessions |
clean_state | read | Clean up system state by removing all tasks |
component_name | write | Name of the component to create |
component_type | read | Type of component (functional, class, hooks-based) |
coverage_target | read | Target code coverage percentage (default: 80) |
create_react_component | write | Create a new React component with specified functionality |
create_reddit_post | write | Write a playful Reddit post introducing the Systemprompt Coding Agent project |
create_task | write | Create a new task and start it immediately with Claude Code |
create_unit_tests | write | Create and run unit tests until achieving 100% pass rate |
description | read | Description of what the component should do |
end_task | read | End a task and clean up the AI model session |
error_message | read | Error message or stack trace if available |
file_path | read | Path to the file or module to test |
fix_bug | read | Diagnose and fix a bug in the code |
get_prompt | read | Get a specific prompt by ID or list all available prompts if no ID is provided |
include_tests | write | Whether to create tests alongside the component |
report | read | Generate a report on task status. Shows all tasks if no ID provided, or details for a specific task. |
reproduction_steps | read | Steps to reproduce the bug |
styling_approach | read | CSS approach (css-modules, styled-components, tailwind, etc) |
subreddit | write | Target subreddit for the post (e.g., r/programming, r/webdev) |
test_framework | read | Testing framework to use (e.g., jest, mocha, pytest, junit) |
tone | write | Tone of the post (playful, informative, excited) |
update_stats | write | Get current statistics on tasks and active sessions |
update_task | write | Send instructions to an active AI process (Claude Code or Gemini CLI) |
Trust audit
CAUTIONgrade B · trust 87/100 Install with care. The audit found things worth knowing before you trust its output.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | WARN |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- declared (6 observation(s))
- Network
- declared (9 observation(s))
- Shell
- declared (5 observation(s))
- Dependencies
- not all pinned
- Secrets in source
- none-found
Findings (20)
MCP_BASE_URL=http://127.0.0.1:3000
return `http://127.0.0.1:${process.env.PORT || '3000'}`;config({ path: '../../.env' });const tunnelFile = path.join(__dirname, '../../../daemon/logs/tunnel-url.txt');
import { TaskStore } from "../../services/task-store.js";import { ClaudeCodeService } from "../../services/claude-code/index.js";import { AgentManager } from "../../services/agent-manager/index.js";i️ 📍 http://192.168.1.100:3000
i️ 📡 MCP Endpoint: http://192.168.1.100:3000/mcp
| `MCP_BASE_URL` | MCP server endpoint | `http://127.0.0.1:3000` |
@types/node, typescript
@modelcontextprotocol/sdk, dotenv, @types/node, typescript
@modelcontextprotocol/sdk, dotenv, @types/node, tsx, typescript
@anthropic-ai/claude-code, @modelcontextprotocol/sdk, cors, dotenv, express, uuid, zod, @types/cookie-parser
PROJECT_ROOT=/path/to/your/code # ⚠️ AI agents have FULL access here
4. **File Access**: Daemon has full access to host filesystem
Run container with full privileges:
- Anyone with URL has full access
Read-only mount for Claude CLI credentials.
3. Verify environment: `cat .env`
Gates applied: no_behavioural_pass.
370d2935c1cbfull audit observations/trust-audit/mcp-server/systempromptio__systemprompt-code-orchestrator.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-07 | 370d2935c1cb | CAUTION | B | 87 | first audit |
Questions
What is the Systemprompt Code Orchestrator MCP server?
[DEPRECATED] Superseded by systempromptio/systemprompt-template and systempromptio/systemprompt-core. MCP server for orchestrating AI coding agents (Claude Code CLI & Gemini CLI).
What tools does Systemprompt Code Orchestrator expose?
31 in total: 20 read-only, 11 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is Systemprompt Code Orchestrator safe to connect to an agent?
With care. The audit graded it B (87/100) and found 20 things worth knowing before you trust this server, listed below with the exact line each was found on.
What credentials does Systemprompt Code Orchestrator need?
It reads FIREBASE_API_KEY, JWT_SECRET and PUSH_TOKEN from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.
How does Systemprompt Code Orchestrator run?
It speaks streamable-http, so it runs as a service you connect to over the network. It is published on npm as @systemprompt/systemprompt-mcp-server at 0.01.
How current is this page?
The grade is for one exact copy of the source (370d2935c1cb), read on 2026-10-07. The repository is watched and re-audited when it changes.