Install
$ agentstack add mcp-gizclaw-opencraft ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
opencraft
A local-first work partner built on flowcraft.
opencraft is a work partner that runs on your machine: it reads and edits files, executes shell commands with approval, coordinates subagents, and persists and resumes sessions. Built on flowcraft's config-driven graph engine, it helps with coding and beyond — orchestrating any local workflow. A local execd sandbox, SQLite session store, and per-workspace approval policy keep everything inside a macOS / Linux / Windows desktop app (Wails v3 + React).
Features
- Chat & sessions — streaming reasoning, tool calls, and output blocks;
interrupt and cancel; session resume, rename, export, and delete; kanban view of subagent delegation; i18n (English / 中文).
- Inference — one or more instances per provider (OpenAI, Anthropic,
Azure, ByteDance, DeepSeek, Kimi, MiniMax, Qwen) with custom endpoints, router priority with retry fallback, and per-model usage trends.
- Tools & safety — file group, execcommand, execsession (PTY),
applypatch, webfetch, updateplan, requestpermissions, and skill tools, protected by a middleware chain: truncation cache, 32k result cap, secret redaction, and a JSONL audit trail.
- Runtime & sandbox — local execd (stdio + unix socket, self-fork,
parent-death cleanup), workspace-scoped SQLite store, buffer-fold memory summary, AGENTS.md worldstate, layered config, and seatbelt/bwrap sandbox with approvals kept outside the project (~/.opencraft/workspaces//approvals.yaml).
- Multi-agent & skills — persistent subagents with delegation kanban;
skill discovery, git-based install, and authoring tools.
- Workflow — JSONL session rollout stream,
external lifecycle hooks, configurable network policy with a web_fetch SSRF gate, and a diagnostics tab.
Installation
Homebrew (macOS):
brew tap GizClaw/opencraft https://github.com/GizClaw/opencraft.git
# Newer Homebrew versions require trusting the tap's cask once (security
# feature; run `brew trust gizclaw/opencraft` to trust the whole tap).
brew trust --cask gizclaw/opencraft/opencraft
brew install --cask opencraft
Or download the latest package from the Releases page:
opencraft--macos-universal.dmg— macOS (Apple Silicon + Intel)opencraft--linux-amd64.tar.gz— Linux (x86_64)opencraft--windows-amd64.zip— Windows (x86_64) portable buildopencraft--windows-amd64-installer.exe— Windows (x86_64)
NSIS installer
Windows binaries are not code-signed yet, so SmartScreen may warn on first launch (More info → Run anyway), for both the portable exe and the installer. Release binaries are built from tagged commits by the [release workflow](.github/workflows/release.yml); the Homebrew cask lives in this repository under [Casks/](Casks/). The macOS app is signed with a Developer ID and notarized by Apple, so Gatekeeper opens it without the manual "Open Anyway" step.
Build from source
Prerequisites: Go 1.25+, Node 22, and the Wails v3 prerequisites for your platform.
make fmt lint test # fmt + lint + go test
make gen-bindings # regenerate frontend/bindings (generated, not committed)
make build-macos # build the macOS production binary
wails3 task dev # run the desktop app (hot reload)
wails3 task package # package the current platform (.app / NSIS / Linux)
The desktop shell targets Wails v3 (module github.com/wailsapp/wails/v3, CLI wails3). Platform build/package tasks live in the root Taskfile.yml; metadata lives in build/config.yml.
frontend/bindings is generated by wails3 generate bindings and is not committed; a frontend-only build needs make gen-bindings first.
On first launch the desktop workbench guides you to the settings page when inference is not configured yet. Settings are written to ~/.opencraft/config/opencraft.yaml — the single user-editable document for inference instances, router policy, and MCP servers.
Changelog
Release history is tracked in [CHANGELOG.md](CHANGELOG.md).
Contributing
Contributions are welcome. Please open a pull request; the CI workflow (fmt, lint, build, race tests, macOS/Linux/Windows packaging) and a review are required before merging to main.
Maintainers release by tagging a version:
git tag v0.1.0
git push origin v0.1.0
The tag triggers the release workflow, which builds the packages, injects the version into the binary via -ldflags, and publishes the GitHub Release with notes from the changelog.
License
Released under the [MIT License](LICENSE).
Source & license
This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: GizClaw
- Source: GizClaw/opencraft
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.