AgentStack
MCP unreviewed Apache-2.0 Self-run

Hephaestus

mcp-agentlas-ai-hephaestus · by agentlas-ai

Agent OS: keep specialist agents in a hub, spin up a temporary orchestrator per task. Local-first, works with any model.

No reviews yet
0 installs
10 views
0.0% view→install

Install

$ agentstack add mcp-agentlas-ai-hephaestus

Open-source listing — not yet scanned by AgentStack. Follow the source repository for install instructions.

Security review

⚠ Flagged

1 finding(s); flagged for manual review. · v0.1.0 How review works →

  • Prompt-injection patterns
  • Secret / credential exfiltration
  • Dangerous shell & filesystem operations
  • Untrusted network calls
  • Known-malicious package signatures
  • high Pipes remote content directly into a shell (remote code execution).

What it can access

  • Network access Used
  • Filesystem access No
  • Shell / process execution No
  • Environment & secrets Used
  • Dynamic code execution No

From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.

Are you the author of Hephaestus? Claim this listing to set pricing, connect Stripe payouts, and keep 70% of every sale.
Sign up to claim

About

Hephaestus — Model-Agnostic Agent OS

Stop building and configuring a new agent for every task. Hephaestus keeps specialist agents in a hub and spins up a temporary orchestrator per task. Local-first, works with any model — Claude Code, Codex, Gemini, Cursor, and local models.

English · Korean · 中文 · 日本語 · हिन्दी

Specialists pulled from the hub, assembled into a temporary task force, and routed live over MCP — no per-task agent setup.

Quickstart

curl -fsSL https://raw.githubusercontent.com/agentlas-ai/Hephaestus/main/scripts/install-all-runtimes.sh | bash

This installs the neutral runner and registers command adapters for Claude Code, Codex, Gemini CLI, Antigravity, and Cursor. Prefer a plugin, a manual copy, or letting your AI install it for you? See [All Install Methods](#all-install-methods).

The Agent OS Era · Quickstart · All Install Methods · Command Surface · New in v1.1.0 · Subsystems · Enterprise Operations · System Packaging · Docs Registry · Desktop Shell


The Agent OS Era

The industry has evolved past stateless, ad-hoc "chatbots with tools". With Google and major AI labs reframing developer strategies around Agent Operating Systems (such as the Antigravity orchestration platform and Gemini Spark daemon processes), AI agents have officially become first-class operating-system primitives—long-lived, stateful processes with distinct identities, relational memory systems, security permissions, and native tool-calling environments.

This shifts the critical engineering question for teams: Whose operating system does your workforce run on?

If your agents are tightly coupled to a single model provider's proprietary API, your organizational memory, custom tools, and task-specific logic are effectively locked into that vendor's ecosystem.

Hephaestus is the independent, model-agnostic kernel. It is not an agent framework or an API wrapper. It is a local-first Agent Operating System—a unified execution substrate that compiles, schedules, and governs portable agent processes across any host runtime. Swap the underlying reasoning engine; preserve the entire workforce.

Hephaestus maps directly to classical operating system concepts:

| OS Abstraction | Implementation in Hephaestus | | :--- | :--- | | Kernel / Policy Gate | Deterministic router + security gates. Every routing action yields an auditable receipt; tool execution permissions are strictly sandboxed and enforced by the host runtime. | | Processes / Threads | Independent agents and multi-agent teams compiled as packages with explicit, typed contracts (Routing Cards, anti-scopes, memory boundaries, and verification shims). | | Process Scheduler | Network 2.0 routing (local-first, quality-gated, and benchmark-gated dispatch) combined with Stormbreaker's parallel execution fabric and append-only run journals. | | Memory Management (MMU) | Two-boundary governed memory: local project memory remains isolated on the machine, while durable promotions are gated by a local Memory Curator. | | Virtual File System | Production Ontology Runtime: local-first source ingestion, CJK trigram FTS5 search, hybrid Reciprocal Rank Fusion, and GraphRAG retrieval. | | Inter-Process Call (IPC) | A2A Agent Card Boundary (cryptographic import/export and caller-gating) + Model Context Protocol (MCP) tool registrations. | | Package Manager | Agentlas Hub & Cloud: compile, publish, version, and share agents with built-in quality gates. | | Shell Interface | A small, unified six-command CLI in external client runtimes; plain-language intent routing in native Agentlas shells. | | Process Initialization | Meta-Agent Factory with an integrated Briefing Interview Gate—specifying agent parameters before compiling code. |

Figure 1. Request shaping, three builders, generated package contracts, memory curation, skill lifecycle, runtime adapters, and sync boundaries.


New In v1.1.0 — The Briefing Interview Engine

Agents generated from vague, single-sentence prompts fail under real-world edge cases. Hephaestus v1.1.0 positions task specification as a first-class OS service through the Briefing Interview Engine:

  • Quantitative Ambiguity Gates: The compilation scheduler evaluates prompt clarity across four key vectors (Goal, Constraints, Scope, Context). The build process is strictly gated until the ambiguity score passes a numeric threshold (ambiguity score $\le 0.2$, with per-dimension safety floors). Clear prompts bypass the interview loop entirely via a budget system that caps questions for trivial tasks.
  • Lens-Driven System Analysis: Clarifying questions are dynamically sourced from a structured lens table (Scope, Intent, Challenge, System Architecture) focusing on critical routing indicators: anti-scope bounds (what the agent must NOT do), verifiable acceptance criteria, and exit conditions.
  • The Work Brief: Resolved details are frozen into .agentlas/work-brief.json—recording the validated goal, concrete constraints, an assumption ledger with source tags, and the metadata ambiguity score.
  • Contextual In-Flight Briefs: The CLI tool cards migrate automatically maps brief details directly to triggers and anti-triggers on the agent's routing card. Running route --brief propagates this brief to all Stormbreaker execution packets, ensuring constraints and exit conditions govern parallel subprocesses across the entire lifecycle.
  • Enhanced Routing Discrimination: Prevents same-topic/different-intent collision (e.g., a security agent intercepting a deployment prompt) via double-sided gating: interview-validated anti-triggers on the routing card, and low-confidence LLM re-ranking escalation inside the router.

All Install Methods

Paste to Boot (Let Your AI Do It)

Paste this into Claude Code, Codex, Gemini CLI, Antigravity, or Cursor:

Install Hephaestus Agentlas for this workspace from this GitHub repo:
https://github.com/agentlas-ai/Hephaestus

Use the latest release/instructions. If anything errors, diagnose and fix it,
retry, and confirm which command surface is active in this tool:
- Agentlas Terminal / Desktop route plain language natively.
- External LLM hosts expose exactly six commands: build, network, cloud,
  search, call, upload.

Fresh macOS Check

xcode-select --install   # Command line tools (skip if already installed)
git --version            # Confirm git is available

One Terminal Command for All Runtimes

curl -fsSL https://raw.githubusercontent.com/agentlas-ai/Hephaestus/main/scripts/install-all-runtimes.sh | bash

This installs the neutral runner at ~/.agentlas/runtime/current/bin/hephaestus and registers the command adapters for Claude Code, Codex, Gemini CLI, Antigravity, and Cursor. The installer verifies each runtime surface after registration.

Per-Runtime Plugin Drivers

Claude Code Plugin

From your OS terminal:

claude plugin marketplace add https://github.com/agentlas-ai/Hephaestus --sparse .claude-plugin claude/plugins
claude plugin install hephaestus@agentlas-core-engine

Note: Claude Code also supports claude plugins ... as an alias, but this README uses the singular claude plugin ... for consistency.

Codex Plugin

From your OS terminal:

codex plugin marketplace add agentlas-ai/Hephaestus --ref v1.1.0
codex plugin add hephaestus@agentlas-core-engine

Note: Codex does not accept /plugin marketplace add inside the app — run the two commands above in your OS terminal. The OS-terminal CLI command is singular (codex plugin); inside the Codex app, the plugin browser slash command is plural (/plugins). After install, /prompts:hep-build is the in-app entry.

Copy Files into a Project (Manual Driver)

Clone the repo and copy AGENTS.md, agent.md, agents/, skills/, modes/, schemas/, templates/, and .agentlas/ into your workspace. Runtime folders (.claude/, codex/, .gemini/, .agents/) function as adapters over the same canonical core.

Just talk: After installation, speak in plain language within native Agentlas interfaces to auto-route tasks. In external host tools, use the six explicit commands listed below. When you don't know what agents exist, start with /hep-search.


The Command Surface

Inside native Agentlas environments, Hephaestus operates commandless. External LLM hosts utilize a deliberately small visible command set. System-level utilities like Stormbreaker, research loadouts, and configuration tables attach automatically from context:

| System Subsystem | Shell Command | Example | | :--- | :--- | :--- | | Process Builder | /hep-build | /hep-build create a customer support agent for Shopify refunds | | A2A Scheduler | /hep-network | /hep-network split this launch plan into research, copy, QA, and release agents | | Cloud State Sync | /hep-cloud | /hep-cloud use my saved finance analyst agent to review this report | | Directory Search | /hep-search | /hep-search find agents for a market report workflow | | Inter-Process Call (IPC) | /hep-call | /hep-call market-researcher, report-writer {draft a market report} | | Package Exporter | /hep-upload | /hep-upload ./agents/customer-support-hq |


The Desktop Shell — Agentlas Desktop

Agentlas Desktop is the graphical shell for this Agent OS — the same kernel, scheduler, and governance subsystems, operated visually. Desktop 0.6.0 ships with the Hephaestus v1.1.0 engine bundled and pinned; the app and its kernel version-lock together and auto-update as one unit.

| Shell Surface | What it operates | | :--- | :--- | | Chat Workspaces | Plain-language sessions bound to any runtime — Claude Code, Codex, Gemini CLI, Antigravity, BYOK APIs (DeepSeek, GLM, Kimi), or local Ollama — with live streaming, steering queues, and per-chat working folders. | | Build Menu | The Meta-Agent Factory behind a UI: interview-gated builds (batched briefing questions rendered as native question cards), then real package files on disk. | | Agent Library & Hub | Your compiled agents, teams, and borrowed Hub specialists — install, version, publish, and price them against the Agentlas Hub package registry. | | Task Forces & Swarm | Borrowed multi-agent task forces, parallel swarm execution with a machine-spec concurrency slider, and continuous live runs for long-horizon work. | | Automations | Cron/event/file-watch triggers compiled into parallel DAG workflows with a visual graph editor — scheduled agent processes, in OS terms. | | Memory & Evolution Panels | The governed-memory subsystem made visible: curator tickets, promoted playbooks, self-evolution proposals, and security re-scans. |

The Desktop shell enforces the same boundaries as the CLI: BYOC execution on your machine and your subscriptions, receipts for routing decisions, and local-first memory. Download: agentlas.cloud/desktop.


The OS Subsystems

Meta-Agent Factory — Process Creation

A unified compilation factory using three builders. Every generated package registers its global command (.agentlas/global-commands.json) and ships verification scripts—the user never has to infer how to run the compiled package:

| Compilation Mode | Routing Target | Output Artifact | | :--- | :--- | :--- | | Single-Agent | 10-single-agent-builder | Standalone worker with localized skills, memory contracts, and runtime adapters. | | Multi-Agent Team | 20-multi-agent-team-builder | Hierarchical team containing a PM Orchestrator, Memory Curator, Policy Gate, QA, and validation scripts. | | Workspace Packager | 30-agentlas-packager | Compiled bundle ready for desktop import, CLI execution, or GitHub distribution. |

Briefing Interview Gate: Builders initiate the process using the briefing interview gate ([docs/builder-interview-research-gate.md](docs/builder-interview-research-gate.md)): conducting lens-driven questions, evaluating the ambiguity threshold, searching primary sources, and outputting the work brief.


Network 2.0 — The Scheduler

Figure 2. A2A scheduling: host runtimes, local-first orchestrator, routing cards, local memory, and the Agentlas Hub A2A/MCP fallback.

  • Routing Cards: Every agent, team, and plugin ships a standardized card containing triggers, anti-triggers, capabilities, risk profiles, and memory parameters. Cards failing verification are excluded from routing.
  • Local-First Dispatch: Dispatch is resolved locally first (project overrides $\rightarrow$ local cards). Outer lookups via the Agentlas Hub are redacted to keywords; your raw prompts never leave your local environment.
  • Temporary Task Forces: Composite requests decompose into Hub/local Task Force plans, packing Stormbreaker envelopes, session hints, and ontology pathways. Named specialists are scheduled dynamically, and a temporary orchestrator manages task handoffs.
  • Receipt-Driven Execution: Every routing decision writes a receipt. The router determines only which agent or package to invoke; tool execution permissions remain strictly sandboxed and managed by the host runtime.
  • Bilingual Benchmarking: Auto-routing is gated by a bilingual (Korean + English) benchmark requiring top-3 recall $\ge 90\%$ and zero privacy leaks. Low-confidence paths escalate to host-level Router Agent re-ranking.

Details: [docs/hephaestus-network-2.0.md](docs/hephaestus-network-2.0.md) · Runtime support matrix: [docs/runtime-fallback-adapters.md](docs/runtime-fallback-adapters.md)


Stormbreaker — Disciplined Execution

Stormbreaker is the execution gating subsystem of the Agent OS. It ensures that agents do not report success or terminate until all outcomes have been verified by deterministic checks:

Kernel Gating Envelope:
[Scope Lock] -> [Decomposition] -> [Parallel Work Packets] -> [Verify Contracts] -> [Bounded Repair] -> [Final Gate]

A local run journal makes long executions resumable after interruption. Execution packets carry the Work Brief so that anti-scope rules and exit criteria govern all parallel subprocesses. Stormbreaker reports explicit completion states (verified / unverified / blocked) to prevent autonomous completion theater.

Execution protocol: [docs/robustness-protocol.md](docs/robustness-protocol.md) · Benchmarks & Evals: [docs/robustness-eval.md](docs/robustness-eval.md)


Ontology Runtime — The Knowledge Filesystem

For knowledge-intensive operations, bin/ontology acts as the semantic filesystem, converting unstructured local files into an agent-readable database stack:

Ingested Files -> [Parser Adapter] -> [CJK trigram/bigram tokenization] 
  -> [FTS5 + SQLite Storage] -> [Reciprocal Rank Fusion Ranking] -> [GraphRAG Search]

Features first-party Korean document parsing (HWPX and legacy HWP5) with zero GPL dependencies. Fully local and SQLite-backed; confidential and private chunks are isolated, preventing them from reaching external cloud hooks.

bin/ontology ingest ./corpus --scope internal
bin/ontology query "Project Helios Memory Curator" --agent verifier
bin/ontology memory candidates

Details: [docs/ontology-runtime.md](docs/ontology-runtime.md)


Governed Memory — Curated Promotion

  • Local Project Memory: Stored under ~/.agentlas/networking/ and isolated to the local machine. It cannot be exported without explicit authorization.
  • Workspace Personalization: Manages personalization logs (summaries, playbooks, plugin locks, and receipts) for borrowed Cloud/Hub agents without storing raw prompts, credential values, or private files.
  • Curator Gating: Skills and memory modifications are kept as candidates. They are promo

Source & license

This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code.

Install and usage instructions live in the source repository linked above.

Reviews

No reviews yet — be the first.

Versions

  • v0.1.0 Imported from the upstream source.