AgentStack
Browse Sign in
Browse Why AgentStack Sell Docs
Sign in
MCP unreviewed Apache-2.0 Self-run

Grimoire

mcp-grimoire-rs-grimoire · by grimoire-rs

Package manager for AI-agent config. grim installs, updates, and publishes skills, rules, agents, MCP servers, and bundles into Claude Code, Copilot, Cursor, Codex, Gemini, Zed, Amp, Kiro, Junie, and opencode — pinned by digest in a lockfile. Storage is any OCI registry; there is no service to run.

↗ Website ↗ Repository
— No reviews yet
0 installs
0 views
— view→install

Install

$ agentstack add mcp-grimoire-rs-grimoire

Open-source listing — not yet scanned by AgentStack. Follow the source repository for install instructions.

Security review

⚠ Flagged

1 finding(s); flagged for manual review. · v0.1.0 How review works →

  • • Prompt-injection patterns
  • • Secret / credential exfiltration
  • • Dangerous shell & filesystem operations
  • • Untrusted network calls
  • • Known-malicious package signatures
  • high Pipes remote content directly into a shell (remote code execution).

What it can access

  • ● Network access Used
  • ✓ Filesystem access No
  • ✓ Shell / process execution No
  • ✓ Environment & secrets No
  • ✓ Dynamic code execution No

From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.

View the full security report →

Reliability & compatibility

— Not yet reviewed
0 installs to date
— no reviews yet
● today

Declared compatibility

Claude CodeClaude DesktopCursorWindsurf

Compatibility is declared by the source manifest. End-to-end runtime verification is coming — see below.

Preview Execution monitoring

We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps — measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.

How agent discovery & health will work →
Are you the author of Grimoire? Claim this listing to set pricing, connect Stripe payouts, and keep 70% of every sale.
Sign up to claim

About

grimoire

An OCI-backed package manager for AI skills and rules

[![CI][ci-badge]][ci] [![Release][release-badge]][releases] [![Docs][docs-badge]][docs] [![License][license-badge]][license]

grim installs, maintains, and publishes AI agent skills and rules using OCI registries (GHCR, Docker Hub, private registries) as storage — the same way container images are distributed. It is a backend tool: a building block for keeping agent configuration versioned, shareable, and reproducible.

> Status: stabilizing toward 1.0 — released surfaces are frozen > contracts; pin a version when you depend on it.

Install

One-line installer (macOS / Linux) — detects your platform, verifies the SHA-256 checksum, and drops grim onto your PATH:

curl --proto '=https' --tlsv1.2 -LsSf https://setup.grimoire.rs/sh | sh

On Windows (PowerShell 7.4+):

irm https://setup.grimoire.rs/ps1 | iex

In GitHub Actions, use [grimoire-rs/setup-grimoire@v1][setup-grimoire]. Pre-built binaries for macOS, Linux, and Windows (aarch64 / x86_64) are on the [latest release][releases]; other methods (ocx, source build) are in the [installation docs][docs-install]. Or build from source:

cargo install --git https://github.com/grimoire-rs/grimoire grimoire

Quick Start

grim init                                        # create grimoire.toml
grim add ghcr.io/grimoire-rs/skills/grim-usage   # declare, lock, install
grim install                                     # re-materialize after a clone
grim tui                                         # browse the index

Full documentation: [grimoire docs][docs].

Development

See [CONTRIBUTING.md](CONTRIBUTING.md) for the full guide.

Prerequisites: Rust, task, uv (for the Python acceptance suite).

Community

  • [Code of Conduct](CODEOFCONDUCT.md)
  • [Security Policy](SECURITY.md)

License

Grimoire is licensed under the [Apache License, Version 2.0][license].

[ci]: https://github.com/grimoire-rs/grimoire/actions/workflows/verify-basic.yml [ci-badge]: https://github.com/grimoire-rs/grimoire/actions/workflows/verify-basic.yml/badge.svg [releases]: https://github.com/grimoire-rs/grimoire/releases [release-badge]: https://img.shields.io/github/v/release/grimoire-rs/grimoire [docs]: https://grimoire.rs/ [docs-badge]: https://img.shields.io/badge/docs-grimoire-blue [docs-install]: https://grimoire.rs/installation.html [setup-grimoire]: https://github.com/grimoire-rs/setup-grimoire [license]: LICENSE [license-badge]: https://img.shields.io/badge/license-Apache--2.0-blue.svg

Source & license

This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code.

Install and usage instructions live in the source repository linked above.

Reviews

No reviews yet — be the first.

Write a review

Versions

  • v0.1.0 Imported from the upstream source.

More in AI & ML