Meta PromptSAFE
Turn any MCP Client into a "multi-agent" system (via prompting)
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
This project is an implementation of the Meta-Prompting technique from the paper "Meta-Prompting: Enhancing Language Models with Task-Agnostic Scaffolding".
At its core, this MCP transforms a standard Language Model (LM) into a dynamic, multi-agent system without the complex setup. It works by having the LM adopt two key roles:
- The Conductor: A high-level project manager that analyzes a complex problem, breaks it down into smaller, logical subtasks, and delegates them.
- The Expert: Specialized agents (e.g., "Python Programmer," "Code Reviewer," "Creative Writer") that are "consulted" by the Conductor to execute each subtask.
The magic is that this entire collaborative workflow is simulated within a single LM. The Conductor and Experts are different modes of operation guided by a sophisticated system prompt, allowing the model to reason, act, and self-critique its way to a more robust and accurate solution. It's like having an automated team of AI specialists at your disposal, all powered by one model.
Demo
[](https://youtu.be/KATOgaj2upI)
Getting Started
1. Clone the Repository
First, clone this repository to your local machine.
git clone https://github.com/tisu19021997/meta-prompt-mcp-server.git . cd meta-prompt-mcp-server
2. Install uv
This project uses uv, an extremely fast Python package manager from Astral. If you don't have it installed, you can do so with one of the following commands.
Note: use which uv to know the path of your uv installation.
macOS / Linux:
curl -LsSf https://astral.sh/uv/install.sh | sh
Windows (PowerShell):
powershell -c "ir
83c69a61a852OBSERVED · 2026-10-08Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.
claude mcp add meta-prompt-mcp -- uvx meta-prompt-mcp
{
"mcpServers": {
"meta-prompt-mcp": {
"command": "uvx",
"args": [
"meta-prompt-mcp"
]
}
}
}Exposed tools (2)
2 read · 0 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
expert_model | read | |
ready_to_answer | read |
Trust audit
SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | PASS |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- none-observed
- Shell
- none-observed
- Dependencies
- pinned
- Secrets in source
- none-found
Findings (1)
curl -LsSf https://astral.sh/uv/install.sh | sh
Gates applied: no_behavioural_pass.
83c69a61a852full audit observations/trust-audit/mcp-server/tisu19021997__meta-prompt.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-08 | 83c69a61a852 | SAFE | B | 89 | first audit |
Questions
What is the Meta Prompt MCP server?
Turn any MCP Client into a "multi-agent" system (via prompting)
What tools does Meta Prompt expose?
2 in total: 2 read-only, 0 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is Meta Prompt safe to connect to an agent?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.
What credentials does Meta Prompt need?
No credential environment variables were found in its source, so it appears to need none.
How current is this page?
The grade is for one exact copy of the source (83c69a61a852), read on 2026-10-08. The repository is watched and re-audited when it changes.