AgentStack
Browse Sign in
Browse Why AgentStack Sell Docs
Sign in
MCP unreviewed MIT Self-run

Agent Lsp

mcp-blackwell-systems-agent-lsp · by blackwell-systems

MCP server that orchestrates language servers into agent-native workflows. 65 tools, 30 CI-verified languages.

No reviews yet
0 installs
36 views
0.0% view→install

Install

$ agentstack add mcp-blackwell-systems-agent-lsp

Open-source listing, not yet scanned by AgentStack. Follow the source repository for install instructions.

Security review

⚠ Flagged

1 finding(s); flagged for manual review. · v0.1.0 How review works →

  • Prompt-injection patterns
  • Secret / credential exfiltration
  • Dangerous shell & filesystem operations
  • Untrusted network calls
  • Known-malicious package signatures
  • high Pipes remote content directly into a shell (remote code execution).

What it can access

  • Network access Used
  • Filesystem access No
  • Shell / process execution No
  • Environment & secrets No
  • Dynamic code execution No

From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.

View the full security report →

Reliability & compatibility

Not yet reviewed
0 installs to date
no reviews yet
3mo ago

Declared compatibility

Claude CodeClaude DesktopCursorWindsurf

Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.

Preview Execution monitoring

We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.

How agent discovery & health will work →
Are you the author of Agent Lsp? Claim this listing to set pricing, connect Stripe payouts, and keep 70% of every sale.
Sign up to claim

About

Code intelligence infrastructure for AI agents. 65 tools, 30 CI-verified languages, 24 agent workflows. Single Go binary.

curl -fsSL https://raw.githubusercontent.com/blackwell-systems/agent-lsp/main/install.sh | sh && agent-lsp init

What is it?

agent-lsp is an MCP server that orchestrates existing LSP servers (gopls, rust-analyzer, jdtls, etc.) into agent-native workflows.

Not an LSP server — it's an orchestration layer that manages language servers and exposes batch operations, speculative editing, and multi-step workflows via MCP tools.

Architecture:

  • Language servers (gopls, rust-analyzer, etc.) → provide code intelligence
  • agent-lsp (MCP server) → orchestrates workflows, maintains warm runtime
  • AI agents → consume via MCP protocol

Why agent-lsp?

Persistent warm runtime Language servers stay indexed across agent sessions. First session: indexes workspace (~10s for typical projects). Subsequent sessions: instant. No cold-start penalty on each request.

Batch operations blast_radius → one call returns all exports + all callers (test vs non-test partitioned). Without orchestration: 20+ sequential LSP calls.

Speculative editing simulate_edit → preview changes in memory, check diagnostic delta, apply or discard. Test edits before touching disk.

Workflow orchestration 24 skills that chain LSP operations into complete pipelines:

  • /lsp-refactor → impact analysis → preview → apply → verify build → run tests
  • /lsp-safe-edit → preview → diagnostic diff → apply if safe
  • /lsp-verify → LSP diagnostics → build → test suite

Multi-language, single session One agent-lsp process routes .go to gopls, .ts to tsserver, .py to pyright. No reconfiguration between projects. Session persists across files and repositories.

> [!TIP] > Token-optimized output: Tool responses encoded in GCF instead of JSON. 30-84% fewer tokens depending on tool (up to 92.7% with session dedup). 100% LLM comprehension on every frontier model, 91.2% on complex code graphs where JSON averages 53.4%. See [below](#token-optimized-output-gcf) for measured savings per tool.

How the pieces fit together: LSP (Language Server Protocol) is how editors get code intelligence: completions, diagnostics, go-to-definition. MCP (Model Context Protocol) is the standard way AI tools like Claude Code discover and call external tools. agent-lsp bridges the two: language server intelligence, accessible to AI agents.

Use it when

  • Building agentic code generation systems
  • Automating refactors across large codebases
  • CI tooling that needs programmatic code intelligence
  • Any workflow where sequential LSP calls are too slow or complex

What agents say

We asked AI agents to evaluate agent-lsp across 10 coding tasks (find callers, rename safely, preview edits, detect dead code) and write an honest assessment. Four different models, four independent evaluations, same conclusion:

> Claude (Opus 4.6): "I would recommend agent-lsp for any workflow involving refactoring, impact analysis, or safe editing. The standout tools are blast_radius (blast radius in one call, with test/non-test partitioning that would take 5-10 grep commands to replicate), go_to_implementation (type-checked interface satisfaction that grep simply cannot do), and the simulation session workflow (speculative type-checking without touching disk, which has no grep/read equivalent at all)."

> Cursor (auto): "I would recommend agent-lsp for heavy refactors and code navigation because the rename, references, implementations, call hierarchy, and simulation tools remove a lot of brittle grep/manual-edit work and make changes safer."

> GPT-5.5 (via Codex): "I would recommend agent-lsp for symbol-aware work: references, implementations, rename previews, diagnostics, and large-file structure are materially faster and less error-prone than grep/read loops."

> Gemini 2.5 Pro (via Gemini CLI): "I would highly recommend agent-lsp because it provides a level of semantic awareness that standard text-searching tools simply cannot match. The ability to perform high-confidence renames, find interface implementations, and preview the diagnostic impact of edits without writing to disk significantly reduces the risk of introducing regressions."

Tested, not assumed

Every other MCP-LSP implementation lists supported languages in a config file. None of them run the actual language server in CI to verify it works.

agent-lsp CI runs 30 real language servers against real fixture codebases on every push: Go, Python, TypeScript, Rust, Java, C, C++, C#, Ruby, PHP, Kotlin, Swift, Scala, Zig, Lua, Elixir, Gleam, Clojure, Dart, Terraform, Nix, Prisma, SQL, MongoDB, and more. When we say "works with gopls," that's a verified, automated claim, not a hope.

Speculative execution

Simulate changes in memory before writing to disk. No other MCP-LSP implementation has this.

preview_edit previews the diagnostic impact of any edit. You see exactly what breaks before the file is touched. simulate_chain evaluates a sequence of dependent edits (rename a function, update all callers, change the return type) and reports which step first introduces an error.

8 speculative execution tools. See [docs/guide/speculative-execution.md](./docs/guide/speculative-execution.md) for the full workflow.

Token savings

Structured LSP responses use 5-34x fewer tokens than grep/read on the same tasks. On HashiCorp Consul (319K lines), a blast-radius analysis uses 17.7MB via grep vs 841KB via LSP, reducing 5,534 tool calls to 119. Savings scale with codebase size. See [docs/guide/token-savings.md](./docs/guide/token-savings.md) for the full experiment across five codebases.

Token-optimized output (GCF)

Tool responses are encoded in GCF (Graph Compact Format) instead of JSON. GCF eliminates field-name repetition, identifier repetition, and per-record structural overhead.

| Profile | Tools | Savings vs JSON | |---------|-------|----------------| | Tabular | All 66 tools | 30-51% | | Graph | blastradius, findcallers, exploresymbol, findreferences, typehierarchy, crossrepo, detectchanges, listsymbols | 79-84% | | Graph + session dedup | Same, via gcf-proxy --session | 92.7% (5th call) |

GCF is enabled by default. To revert to JSON:

export AGENT_LSP_OUTPUT_FORMAT=json

Benchmark: go run scripts/gcf-benchmark.go. See [docs/guide/gcf-integration.md](./docs/guide/gcf-integration.md) for architecture details.

GCF: gcformat.com · Spec · Go · Python · TypeScript · Playground

Why orchestration matters

AI agents make incorrect code changes because they can't see the full picture: who calls this function, what breaks if I rename it, does the build still pass. Language servers have the answers, but raw LSP tools require 20+ sequential calls and complex orchestration logic.

agent-lsp solves this by encoding correct multi-step operations into single calls and skills. blast_radius does what would take an agent 20+ calls in one. /lsp-refactor chains impact → preview → apply → verify → test without per-prompt orchestration.

Persistent daemon mode

Python and TypeScript projects need minutes of background indexing before find_references works. agent-lsp automatically spawns a persistent daemon broker that survives between sessions, so the workspace stays indexed. First session: daemon starts and indexes (~10s for FastAPI). Subsequent sessions: instant connection to the warm daemon. Auto-exits after 30 minutes of inactivity. Go, Rust, and other fast-indexing languages bypass this entirely (zero overhead).

Phase enforcement

Skills tell agents the correct order of operations. Phase enforcement makes the runtime block violations instead of trusting the agent to follow instructions.

When an agent activates a skill, every tool call is checked against the current phase's permissions. Calling apply_edit during blast-radius analysis doesn't silently proceed; it returns an error with specific recovery guidance ("complete the blastradius phase first, allowed tools: [blastradius, find_references]"). Phases advance automatically as the agent calls tools from later phases.

No other MCP tool provider enforces workflow ordering at runtime. See [docs/guide/phase-enforcement.md](./docs/guide/phase-enforcement.md).

Concurrency analysis

The inspector includes 4 concurrency checks that work across 25 languages in 4 concurrency families (goroutine, thread, async, actor):

  • Unrecovered concurrent entry: goroutines/threads/tasks without recovery
  • Unchecked shared state: bare type assertions on sync.Map, ConcurrentHashMap
  • Channel never closed: channels/queues created but never closed (goroutine leaks)
  • Shared field without sync: fields accessed from concurrent contexts without synchronization

blast_radius annotates symbols with sync_guarded: true when the parent type has a mutex. find_callers with cross_concurrent: true traces call chains through goroutine/thread boundaries. The /lsp-concurrency-audit skill produces a field-level safety report for any type.

Auto-diagnostics

Symbol edit tools (replace_symbol_body, insert_after_symbol, insert_before_symbol, safe_delete_symbol) automatically return errors_after and warnings_after counts. Agents know immediately whether an edit broke something without a separate get_diagnostics call.

safe_apply_edit combines preview + apply in one call: previews speculatively, applies to disk only if net_delta == 0 (no new errors). One tool call instead of three.

Works with

| AI Tool | Transport | Setup | |---------|-----------|-------| | Claude Code | stdio | agent-lsp init | | Cursor | stdio | agent-lsp init | | Windsurf | stdio | agent-lsp init | | Gemini CLI | stdio | agent-lsp init | | Continue | stdio | agent-lsp init | | Cline | stdio | agent-lsp init | | Any MCP client | HTTP+SSE | agent-lsp --http --port 8080 |

See [docs/getting-started/mcp-clients.md](./docs/getting-started/mcp-clients.md) for copy-paste configs.

Skills

Raw tools get ignored. Skills get used. Each skill encodes the correct tool sequence so workflows actually happen without per-prompt orchestration instructions. Skills are available as AgentSkills slash commands and as MCP prompts via prompts/list / prompts/get for any MCP client.

See [docs/guide/skills.md](./docs/guide/skills.md) for full descriptions and usage guidance.

Before you change anything

| Skill | Purpose | |-------|---------| | /lsp-impact | Blast-radius analysis before touching a symbol or file | | /lsp-implement | Find all concrete implementations of an interface | | /lsp-dead-code | Detect zero-reference exports before cleanup |

Editing safely

| Skill | Purpose | |-------|---------| | /lsp-safe-edit | Speculative preview before disk write; before/after diagnostic diff; surfaces code actions on errors | | /lsp-simulate | Test changes in-memory without touching the file | | /lsp-edit-symbol | Edit a named symbol without knowing its file or position | | /lsp-edit-export | Safe editing of exported symbols, finds all callers first | | /lsp-rename | prepare_rename safety gate, preview all sites, confirm, apply atomically |

Getting started

| Skill | Purpose | |-------|---------| | /lsp-onboard | First-session project onboarding: detect languages, map packages, find entry points and hotspots, check diagnostics |

Understanding unfamiliar code

| Skill | Purpose | |-------|---------| | /lsp-explore | "Tell me about this symbol": hover + implementations + call hierarchy + references in one pass | | /lsp-understand | Deep-dive Code Map for a symbol or file: type info, call hierarchy, references, source | | /lsp-docs | Three-tier documentation: hover → offline toolchain → source | | /lsp-cross-repo | Find all usages of a library symbol across consumer repos | | /lsp-local-symbols | File-scoped symbol list, usage search, and type info |

After editing

| Skill | Purpose | |-------|---------| | /lsp-verify | Diagnostics + build + tests after every edit | | /lsp-fix-all | Apply quick-fix code actions for all diagnostics in a file | | /lsp-test-correlation | Find and run only tests that cover an edited file | | /lsp-format-code | Format a file or selection via the language server formatter |

Generating code

| Skill | Purpose | |-------|---------| | /lsp-generate | Trigger server-side code generation (interface stubs, test skeletons, mocks) | | /lsp-extract-function | Extract a code block into a named function via code actions |

Full workflow

| Skill | Purpose | |-------|---------| | /lsp-refactor | End-to-end refactor: blast-radius → preview → apply → verify → test | | /lsp-inspect | Full code quality audit (12 checks): dead symbols, test coverage, error handling, doc drift, concurrency safety | | /lsp-concurrency-audit | Field-level concurrency safety audit for a type: traces concurrent access, flags unsynced fields |

Docker

Stdio mode (MCP client spawns the container directly):

# Go
docker run --rm -i -v /your/project:/workspace ghcr.io/blackwell-systems/agent-lsp:go go:gopls

# TypeScript
docker run --rm -i -v /your/project:/workspace ghcr.io/blackwell-systems/agent-lsp:typescript typescript:typescript-language-server,--stdio

# Python
docker run --rm -i -v /your/project:/workspace ghcr.io/blackwell-systems/agent-lsp:python python:pyright-langserver,--stdio

HTTP mode (persistent service, remote clients connect over HTTP+SSE):

docker run --rm \
  -p 8080:8080 \
  -v /your/project:/workspace \
  -e AGENT_LSP_TOKEN=your-secret-token \
  ghcr.io/blackwell-systems/agent-lsp:go \
  --http --port 8080 go:gopls

Images run as a non-root user (uid 65532) by default. Set AGENT_LSP_TOKEN via environment variable, never --token on the command line. Images are also mirrored to Docker Hub (blackwellsystems/agent-lsp). See [DOCKER.md](./DOCKER.md) for the full tag list, HTTP mode setup, and security hardening options.

Setup

Step 1: Install agent-lsp

curl -fsSL https://raw.githubusercontent.com/blackwell-systems/agent-lsp/main/install.sh | sh

Alternative install methods

macOS / Linux

brew install blackwell-systems/tap/agent-lsp

Windows

# PowerShell (no admin required)
iwr -useb https://raw.githubusercontent.com/blackwell-systems/agent-lsp/main/install.ps1 | iex

# Scoop
scoop bucket add blackwell-systems https://github.com/blackwell-systems/agent-lsp
scoop install blackwell-systems/agent-lsp

# Winget
winget install BlackwellSystems.agent-lsp

All platforms

# pip
pip install agent-lsp

# npm
npm install -g @blackwell-systems/agent-lsp

# Go install
go install github.com/blackwell-systems/agent-lsp/cmd/agent-lsp@latest

Step 2: Install language servers

Install the servers for your stack. Common ones:

| Language | Server | Install | |----------|--------|---------| | TypeScript / JavaScript | typescript-language-server | `npm i -g typescript-language-server typescr

Source & license

This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code.

Install and usage instructions live in the source repository linked above.

Reviews

No reviews yet, be the first.

Versions

  • v0.1.0 Imported from the upstream source.