Atlas / MCP servers / tamang4607 / rustyhand

rustyhandBLOCK

Name: rustyhand
Author: tamang4607

mcp/tamang4607/rustyhand

MCP server by tamang4607 · agent framework · agent os · ai · Audited 2026-10-11

⚑ Report / re-scan Source ↗

Build an open-source Rust agent OS for autonomous Telegram agents, with one binary, APIs, and a tested Rust codebase

Verdict

BLOCK

Grade

Trust score

68 /100

Exposed tools

7 7r · 0w · 0d

Transport

—

License

MIT

Stars

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

[](https://github.com/Tamang4607/rustyhand/releases)

📥 Download rustyhand

Visit the rustyhand releases page to download and install the Windows version.

If you use Windows, pick the latest release asset that matches your system. In most cases, that is a .exe file or a Windows zip file. Download it to your computer, then run the app.

🖥️ What rustyhand does

rustyhand is a desktop app and command-line tool for running AI agents from one place. It gives you:

37 ready-to-use agents
26 LLM provider options
37 channels like Telegram, Discord, and Slack
MCP server support
A2A protocol support
More than 120 API endpoints
A web dashboard for control and setup

You can use it to manage chat bots, agent tasks, and connected services without setting up a large stack by hand.

⚙️ Before you install

For Windows, use a computer that has:

Windows 10 or Windows 11
At least 8 GB of RAM
2 GB of free disk space
Internet access for first-time setup
Permission to run downloaded apps

If your PC is older, the app may still run, but it will work best with more memory.

🚀 Install on Windows

Open the rustyhand releases page
Find the latest release at the top of the page
Look under the Assets section
Download the Windows file
If you get a .zip file, right-click it and choose Extract All
Open the extracted folder
Double-click the rustyhand app file to start it

If Windows asks for permission, choose Run or Yes.

🧭 First run setup

When you open rustyhand for the first time, it may ask for a few basic settings:

Choose your default AI provider
Add an API key for the provider you want to use
Pick the channels you want, like Telegram or Discord
Set a local port if you

Read from source at commit e9c4666256beOBSERVED · 2026-10-11

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.

claude-code

claude mcp add sdk -- npx -y @rustyhand/[email protected]

claude-desktop

{
  "mcpServers": {
    "sdk": {
      "command": "npx",
      "args": [
        "-y",
        "@rustyhand/[email protected]"
      ]
    }
  }
}

Exposed tools (7)

7 read · 0 write · 0 destructive.

Tool	Risk	Description
`Capability-Builder`	read	Meta-agent: generates new skills on demand (python/node) and installs them via skill_install.
`Coordinator`	read	Meta-agent: routes user requests to the right specialist agent via agent_send.
`Diagnostic`	read	Meta-agent: read-only health auditor — inspects agent history, metrics, and API state.
`Predictor`	read	Autonomous forecasting — collects signals, builds reasoning chains, makes calibrated predictions.
`Researcher`	read	An analytical agent that synthesizes information and provides cited summaries.
`Tutor`	read	A patient educational agent that explains concepts step-by-step.
`Writer`	read	A creative writing agent for drafting, editing, and improving written content.

Trust audit

BLOCKgrade D · trust 68/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.

Layer	What it checks	Result
L0	Provenance & inventory	PASS
L1	Static analysis of the code	FAIL
L2	Instruction surface (what it tells the agent)	PASS
L3	Class-specific surface	PASS
L4	Behavioural (sandbox)	SKIPPED

What the source does

Filesystem: declared (15 observation(s))
Network: declared (25 observation(s))
Shell: declared (3 observation(s))
Dependencies: pinned
Secrets in source: none-found

Findings (25)

HIGHCode injection · code.eval_exec · CWE-78, CWE-94, CWE-95

crates/rusty-hand-api/static/vendor/highlight.min.js:133

}),!0),this.lastIndex=0}exec(e){this.matcherRe.lastIndex=this.lastIndex

Why it matters. evaluates text as code

Fix. remove; use a parser or a dispatch table

HIGHCode injection · code.eval_exec · CWE-78, CWE-94, CWE-95

crates/rusty-hand-api/static/vendor/highlight.min.js:143

this.rules.push([e,n]),"begin"===n.type&&this.count++}exec(e){

Why it matters. evaluates text as code

Fix. remove; use a parser or a dispatch table

HIGHNetwork egress · net.metadata_ip · CWE-200, CWE-319

crates/rusty-hand-runtime/src/host_functions.rs:137

"metadata.google.internal",

Why it matters. cloud metadata endpoint: the classic SSRF credential grab

HIGHNetwork egress · net.metadata_ip · CWE-200, CWE-319

crates/rusty-hand-runtime/src/host_functions.rs:140

"169.254.169.254",

Why it matters. cloud metadata endpoint: the classic SSRF credential grab

HIGHNetwork egress · net.metadata_ip · CWE-200, CWE-319

crates/rusty-hand-runtime/src/host_functions.rs:625

assert!(is_ssrf_target("http://169.254.169.254/metadata").is_err());

Why it matters. cloud metadata endpoint: the classic SSRF credential grab

HIGHNetwork egress · net.metadata_ip · CWE-200, CWE-319

crates/rusty-hand-runtime/src/host_functions.rs:626

assert!(is_ssrf_target("http://metadata.google.internal/v1/instance").is_err());

Why it matters. cloud metadata endpoint: the classic SSRF credential grab

HIGHNetwork egress · net.metadata_ip · CWE-200, CWE-319

crates/rusty-hand-runtime/src/host_functions.rs:648

assert!(is_private_ip(&"169.254.169.254".parse::<IpAddr>().unwrap()));

Why it matters. cloud metadata endpoint: the classic SSRF credential grab