pi-subagent
This server turns the Pi CLI into a programmable coding sub-agent that any MCP host can use to delegate tasks, track sessions, harvest results, and abort runs.
Delegate tasks to isolated
pi -pchild processes, with default async mode to avoid tool-call timeouts.Harvest results with
pi_status, using long-polling to wait for a run to finish.Make scheduling decisions via
pi_plan: whether to delegate, how many sessions to fan out, and whether to run sync or async.Manage sessions: list sessions (optionally filtered by cwd), inspect a session snapshot, and fork a session to try an alternative path.
Kill/abort any running
pirun by run ID.Works as a standard MCP server over stdio, so it can be loaded by ZCode, Claude Code, Cursor, or any MCP client.
Click on "Install Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@pi-subagentDelegate implementing user authentication"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
pi-subagent
Turn the Pi CLI (
@earendil-works/pi-coding-agent) into a programmable coding sub-agent that any MCP host (ZCode, Claude Code, Cursor, …) can delegate tasks to, track sessions, and kill processes.
pi-subagent is a thin MCP server that wraps pi -p --mode json into 7 structured tools: delegate tasks, harvest results, make scheduling decisions, manage named sessions, and abort runs. Process-isolated, fully session-based, sync/async dual-mode.
Why
Pi is a minimal terminal coding agent. Rather than teaching Pi methodology, this project treats Pi as a delegatable worker: a host agent (ZCode / Claude Code) decides when to delegate, fires off a self-contained task, and harvests the result. One Pi process = one isolated sub-agent run.
Process isolation — each delegation spawns one
pi -pchild process. A Pi crash only affects that run.Fully session-based — every task binds to a named session (e.g.
feat-auth); subsequent calls auto-continue.Sync / async — defaults to
async(avoids host tool-call timeouts); harvest withpi_statuslong-poll.Schedulable —
pi_planis a pure 5-stage decision function (reject / capacity / reuse / modify / mode), fully unit-tested.Universal MCP — any standard MCP client can load it.
Related MCP server: cursor-agent-bridge
Architecture
┌─────────────────────────────────────────────────────────────┐
│ MCP Host (ZCode / Claude Code / Pi / Cursor …) │
└───────────────────────────┬─────────────────────────────────┘
│ MCP (JSON-RPC over stdio)
▼
┌─────────────────────────────────────────────────────────────┐
│ pi-subagent-server (Node/TS) │
│ ┌────────────┐ ┌──────────────┐ ┌────────────────────┐ │
│ │ Tool layer │ │ Session │ │ Pi runner │ │
│ │ (7 tools) │─▶│ registry │─▶│ (spawn pi -p) │ │
│ │ + plan() │ │ + persist │ │ parse agent_end │ │
│ └─────┬──────┘ │ + _snapshot │ │ + tool_execution │ │
│ │ └──────────────┘ └─────────┬──────────┘ │
│ │ ┌────────▼─────────┐ │
│ └───────────────────────────│ Run registry │ │
│ (kill) │ + process-table │ │
│ └──────────────────┘ │
└─────────────────────────────────────────────────────────────┘
│ child_process.spawn({ cwd })
▼
┌─────────────────────┐
│ pi CLI (0.77+) │
└─────────────────────┘Three layers with clear boundaries: Tool layer (MCP schema + plan() pure function) / Session registry (state + persistence + redaction) / Runner (spawn pi, parse NDJSON, process table).
Tools
Tool | Purpose |
| Decide: should-delegate, sync/async, how many sessions |
| Dispatch a task (default async; new sessions wait for handshake) |
| Harvest a run's result (long-poll) |
| List sessions (omit |
| Inspect one session |
| Branch a session to try another path |
| Abort a run |
| Create a multi-stage task (host writes |
| Dispatch a domain review of the plan (harvest via |
| Run one stage: sync (wait for outcome) or async (returns runId) |
| Harvest an async stage run; auto-judges and re-dispatches (max 3), else manual |
| List tasks (filter by taskId / status) |
Review loop: after
pi_task_plan, harvest withpi_status(runId). When the run finishes, the server detects it is a review run, parses_plan-reviewed.md, and storesplanVerdict/planReviewedPathon the task. Stage prompts automatically include the reviewed plan and the output files of passed dependency stages.
Async stages: pass
mode: "async"topi_task_stage_runto avoid blocking a tool call for the full run (recommended when the MCP host enforces a short tool timeout). Harvest withpi_task_stage_collect(taskId, stageId). Failed attempts re-dispatch under a fresh session name to avoid history contamination; after 3 failures the stage goesmanualwith a decision panel (retry_with_new_hintis supported viapromptHintOverride).
Restart recovery: re-running
pi_task_createwith the sametaskIdmerges instead of conflicting. Stages whose output file already exists and passes validation are markedpassedautomatically, so interrupted tasks resume without hand-editingtasks.json.
Session model
Each session has a human-readable name + Pi's UUID +
cwd+goal.First
pi_delegatecreates the session (goalrequired); later calls auto-continue.The registry persists to
~/.pi-subagent/registry.json(atomic write; on restart, interruptedrunningrecords are corrected toerror).Concurrency cap: 4 running runs; a single session is never run concurrently.
Tasks persist to
~/.pi-subagent/tasks.json(atomic write; running stages are corrected tofailed(interrupted_by_restart)on restart).
Install
git clone <this-repo> && cd pi-subagent
npm installPrerequisite: the pi CLI is installed (npm i -g @earendil-works/pi-coding-agent) and on PATH.
Configure an MCP host
Add to your MCP client config:
{
"mcpServers": {
"pi-subagent": {
"command": "npx",
"args": ["tsx", "/abs/path/to/pi-subagent/src/server.ts"]
}
}
}Optional env vars:
PI_SUBAGENT_REGISTRY— registry path (default~/.pi-subagent/registry.json)PI_BIN— override the pi executable (used by tests)
Test
npm test # full suite (140 tests)
npm run test:fast # dot reporterTests use a fake pi (test/fixtures/fake-pi.sh) and cover: async/sync, timeout, kill, session-create-failure, multi-waiter, progress cap, scheduling rules (table-driven + 100-iteration property tests), registry persistence, redaction, etc.
Project layout
src/
├── types.ts # all shared types + error codes
├── errors.ts # ToolError helpers
├── runner/ # parse.ts, argv.ts, spawn.ts, process-table.ts
├── registry/ # session.ts, run.ts, persist.ts, redact.ts
├── scheduler/ # keywords.ts, plan.ts (5-stage pure function)
├── tools/ # delegate, status, plan-tool, session, kill
└── server.ts # MCP entry (stdio)
skills/pi-subagent/ # SKILL.md + delegation-patterns (strategy layer)
test/ # fixtures/ + *.test.ts
docs/ # design.md (spec) + implementation-plan.mdDesign & process
This project went through collaborative design + 4 rounds of external review before implementation. The spec and plan are committed under docs/:
docs/design.md— full design spec (architecture, tool contracts, error handling, scheduler rules, testing strategy). Every contract is traceable to a review note (R1–R4).docs/implementation-plan.md— 19 TDD tasks (write failing test → implement → pass → commit).
Key design decisions, all backed by real probing of pi -p output and external review:
cwd≠ session storage —spawn({ cwd })controls the working dir; Pi's session files use their default location (doesn't pollute the project).async default + handshake — new sessions wait for Pi's
sessionevent before returning (with asessionStartTimeoutMs), so the host always gets a realpiSessionId.Multi-stage scheduler —
plan()is reject → capacity → reuse → modify → mode, where modifiers stack rather than first-match (a lesson from review round 1).Progress redaction — tool results are truncated + scrubbed for tokens/keys before being stored.
Status
Working implementation, 140 passing tests. Not yet published to npm — run from source via tsx.
License
MIT
Available Tools
7 toolspi_delegateC
委派任务给 Pi 子代理(默认 async)
| Name | Required | Description | Default |
|---|---|---|---|
| cwd | No | ||
| goal | No | ||
| mode | No | ||
| prompt | Yes | ||
| session | Yes | ||
| constraints | No | ||
| runTimeoutMs | No | ||
| allowUnknownTools | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description must disclose behavioral traits but only mentions 'default async'. It does not explain side effects, how results are returned, or whether the tool is idempotent. Critical details are missing.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single concise sentence, but it is overly terse for a tool with 8 parameters. While front-loaded, it lacks structure and does not fully utilize the space to convey necessary information.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the complexity (8 parameters, nested objects, no output schema, no annotations), the description is severely incomplete. It fails to cover usage patterns, return values, or async/sync behavior beyond the default.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, and the description does not explain any of the 8 parameters, not even the required 'prompt' and 'session'. The enum for 'mode' is mentioned only implicitly as 'default async' but no details.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states that the tool delegates tasks to a Pi sub-agent with a default async mode. However, it does not differentiate from sibling tools like pi_plan or pi_session_fork, which could have overlapping functionality.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance is provided on when to use this tool versus alternatives, nor are there any preconditions or exclusions mentioned. The description is too brief to inform decision-making.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
pi_killC
中止 run
| Name | Required | Description | Default |
|---|---|---|---|
| runId | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations exist, so the description must fully disclose behavior, but it only states '中止 run' without detailing side effects, reversibility, or required permissions.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Extremely short but at the expense of clarity; it fails to provide necessary information, making it underspecified rather than appropriately concise.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
A kill operation with one parameter is simple, but the description omits return values, error cases, and prerequisites, rendering it incomplete for reliable agent invocation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The only parameter 'runId' has no description in the schema or in the text, leaving its purpose and format entirely unspecified.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description '中止 run' conveys the action (abort) and resource (run), but is in Chinese and does not differentiate from siblings like pi_delegate or pi_plan.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance provided on when to use this tool versus alternatives, nor any context about prerequisites or typical scenarios.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
pi_planC
调度决策:该不该委派、sync/async、开几个 session
| Name | Required | Description | Default |
|---|---|---|---|
| cwd | Yes | ||
| task | Yes | ||
| fanout | No | ||
| estComplexity | No | ||
| preferredMode | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations provided; the description does not disclose side effects, authorization needs, or whether the tool is read-only or modifies state. The term '决策' implies decision-making but no details on consequences.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is very concise (one line). It is front-loaded with the core idea, but at the cost of missing important details. It could be slightly expanded without being verbose.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given 5 parameters, no output schema, and no annotations, the description is insufficient. It does not explain return values, parameter usage, or behavioral traits, making it hard for an agent to use correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
0% schema description coverage; the description does not explain parameter semantics beyond their names (e.g., fanout, estComplexity). Field names give some clues but are insufficient for proper invocation.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description '调度决策:该不该委派、sync/async、开几个 session' indicates it is for scheduling decisions, but it is vague. It mentions delegation and session management, aligning with sibling tools like pi_delegate and pi_session_fork, but does not clearly state the tool's specific action or output.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance on when to use this tool versus alternatives. The description does not mention prerequisites, when to delegate or not, or how this relates to other tools like pi_delegate or pi_session_fork.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
pi_session_forkD
派生 session
| Name | Required | Description | Default |
|---|---|---|---|
| to | Yes | ||
| from | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations provided; description is too minimal to disclose behavioral traits like destructiveness, permissions, or lifecycle impact.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Extremely brief but at the expense of completeness. Not a model of efficiency; it omits essential information.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool with two required parameters and no output schema or annotations, the description provides zero contextual completeness.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 0%; description fails to explain what 'from' and 'to' represent, leaving all parameters underspecified.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Description is a single Japanese phrase '派生 session' meaning 'fork session'. It suggests duplication but lacks a clear verb-resource structure or differentiation from siblings.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance on when to fork vs using siblings like pi_session_list or pi_session_snapshot. No context provided.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
pi_session_listA
列 session(不传 cwd 取全量,供 pi_plan 用)
| Name | Required | Description | Default |
|---|---|---|---|
| cwd | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries full transparency burden. It implies a read-only operation ('list') and explains cwd filtering behavior, but does not disclose potential side effects, auth requirements, or other safety guarantees. Adequate but minimal.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single sentence, front-loaded with the action, and contains no superfluous information. Every word adds value.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's simplicity (one optional param, no output schema), the description covers purpose, parameter behavior, and intended usage context. It does not explain return format, but for a list operation this is acceptable. Slightly more detail would improve completeness.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the description must compensate. It explains that omitting cwd returns all sessions, adding meaningful semantics beyond the bare schema. This provides sufficient guidance for a single optional parameter.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the verb 'list' and resource 'session', with additional detail on behavior when cwd is omitted. It also specifies use for pi_plan, distinguishing it from sibling tools like pi_session_fork or pi_session_snapshot.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides context on when to use the tool (for pi_plan) and the effect of omitting cwd. It does not explicitly state when not to use it or mention alternatives, but the guidance is clear enough for an AI agent.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
pi_session_snapshotC
取 session 详情
| Name | Required | Description | Default |
|---|---|---|---|
| session | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations provided. The description implies a read operation but does not explicitly state it is non-destructive or disclose any behavioral traits.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Very concise but under-specified. A single phrase with no additional structure or front-loading of key information.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the simplicity (1 param, no nested objects, no output schema), the description is incomplete. No information on return value, behavior, or context.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%. The parameter 'session' lacks any description in both schema and tool description, leaving its meaning ambiguous.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description '取 session 详情' clearly indicates fetching session details. It distinguishes from siblings like pi_session_list (listing) and pi_session_fork (forking) but does not specify the snapshot aspect.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance on when to use this tool versus siblings. No context on prerequisites or alternatives.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
pi_statusC
取 run 结果(long-poll)
| Name | Required | Description | Default |
|---|---|---|---|
| runId | Yes | ||
| waitTimeoutMs | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries full burden. It mentions 'long-poll' implying blocking behavior, but does not disclose idempotency, destructiveness, authentication needs, or error handling. The transparency is minimal.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is extremely short (one phrase), which is concise but lacks structure. It front-loads the core purpose but does not provide enough detail to be fully helpful.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool has two parameters and no output schema, the description is insufficient. It omits details on return format, long-poll behavior nuances, timeout semantics, and relationship to sibling tools.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0% and the description does not explain any parameters. 'runId' and 'waitTimeoutMs' remain undocumented in meaning. The description adds no value beyond the schema's structural definition.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the verb '取' (get) and resource 'run result' with 'long-poll' qualifier. However, it does not distinguish this tool from siblings like pi_kill or pi_plan, which are distinct actions but no explicit differentiation is provided.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is no guidance on when to use this tool versus alternatives. It does not mention prerequisites, context, or conditions for use. The description is purely functional.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections. Dates show when Glama detected each change.
7 tool updates
v0.1.0- First observed
pi_delegate - First observed
pi_kill - First observed
pi_plan - First observed
pi_session_fork - First observed
pi_session_list - First observed
pi_session_snapshot - First observed
pi_status
TDQS
Each tool targets a distinct operation: delegation, kill, planning, session management, and status. No overlap in purpose.
All tools share the 'pi_' prefix, but the structure varies: some are verbs (pi_delegate, pi_kill), others are noun_verb (pi_session_fork). Overall readable and consistent prefix helps.
7 tools is appropriate for a subagent manager covering delegation, planning, session lifecycle, and status retrieval.
Core operations are covered, though missing explicit session creation or update tools. Forking may serve creation, and kill provides termination.
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Related MCP Connectors
Remote MCP server for AI.TV creators — delegate account operations to your AI agent over MCP.
Persistent memory and cross-session learning for AI coding assistants (hosted remote MCP).
Develop, manage, and debug Railway projects, services, and deployments from within agents.
Personal assistant MCP server with search, execute, packages, jobs, secrets, and integrations.
Related MCP Servers
- AlicenseNot gradedqualityDmaintenanceEnables MCP clients to spawn and control Codex CLI and Claude Code sessions on the host machine, with session management and filesystem access.4MIT
- AlicenseNot gradedqualityBmaintenanceEnables MCP clients like Claude Code to delegate coding tasks to the local Cursor Agent CLI, with persistent per-workspace sessions that resume across calls.12MIT
- AlicenseNot gradedqualityBmaintenanceDelegates bounded coding tasks from MCP clients to the Pi Coding Agent over stdio. Supports review, verification, implementation, and batch operations with long-running task polling.MIT
- AlicenseNot gradedqualityBmaintenanceEnables ChatGPT (or any MCP client) to delegate coding tasks to a local Hermes-backed agent with async job management, supporting read-only investigation, implementation, and continuation of sessions via secure MCP tunnel.1MIT
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/guyiicn/pi-subagent'
If you have feedback or need assistance with the MCP directory API, please join our Discord server