# Grimoire

> Package manager for AI-agent config. grim installs, updates, and publishes skills, rules, agents, MCP servers, and bundles into Claude Code, Copilot, Cursor, Codex, Gemini, Zed, Amp, Kiro, Junie, and opencode — pinned by digest in a lockfile. Storage is any OCI registry; there is no service to run.

- **Type:** MCP server
- **Install:** `agentstack add mcp-grimoire-rs-grimoire`
- **Verified:** Pending review
- **Seller:** [grimoire-rs](https://agentstack.voostack.com/s/grimoire-rs)
- **Installs:** 0
- **Category:** [AI & ML](https://agentstack.voostack.com/c/ai-and-ml)
- **Latest version:** 0.1.0
- **License:** Apache-2.0
- **Upstream author:** [grimoire-rs](https://github.com/grimoire-rs)
- **Source:** https://github.com/grimoire-rs/grimoire
- **Website:** https://grimoire.rs

## Install

```sh
agentstack add mcp-grimoire-rs-grimoire
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

# grimoire

**An OCI-backed package manager for AI skills and rules**

[![CI][ci-badge]][ci]
[![Release][release-badge]][releases]
[![Docs][docs-badge]][docs]
[![License][license-badge]][license]

`grim` installs, maintains, and publishes AI agent skills and rules using OCI
registries (GHCR, Docker Hub, private registries) as storage — the same way
container images are distributed. It is a backend tool: a building block for
keeping agent configuration versioned, shareable, and reproducible.

> **Status:** stabilizing toward 1.0 — released surfaces are frozen
> contracts; pin a version when you depend on it.

## Install

One-line installer (macOS / Linux) — detects your platform, verifies the
SHA-256 checksum, and drops `grim` onto your `PATH`:

```sh
curl --proto '=https' --tlsv1.2 -LsSf https://setup.grimoire.rs/sh | sh
```

On Windows (PowerShell 7.4+):

```powershell
irm https://setup.grimoire.rs/ps1 | iex
```

In GitHub Actions, use [`grimoire-rs/setup-grimoire@v1`][setup-grimoire].
Pre-built binaries for macOS, Linux, and Windows (aarch64 / x86_64) are on
the [latest release][releases]; other methods (ocx, source build) are in the
[installation docs][docs-install]. Or build from source:

```sh
cargo install --git https://github.com/grimoire-rs/grimoire grimoire
```

## Quick Start

```sh
grim init                                        # create grimoire.toml
grim add ghcr.io/grimoire-rs/skills/grim-usage   # declare, lock, install
grim install                                     # re-materialize after a clone
grim tui                                         # browse the index
```

Full documentation: **[grimoire docs][docs]**.

## Development

See [CONTRIBUTING.md](CONTRIBUTING.md) for the full guide.

**Prerequisites:** [Rust](https://rustup.rs), [task](https://taskfile.dev),
[uv](https://docs.astral.sh/uv/) (for the Python acceptance suite).

## Community

- [Code of Conduct](CODE_OF_CONDUCT.md)
- [Security Policy](SECURITY.md)

## License

Grimoire is licensed under the [Apache License, Version 2.0][license].

[ci]: https://github.com/grimoire-rs/grimoire/actions/workflows/verify-basic.yml
[ci-badge]: https://github.com/grimoire-rs/grimoire/actions/workflows/verify-basic.yml/badge.svg
[releases]: https://github.com/grimoire-rs/grimoire/releases
[release-badge]: https://img.shields.io/github/v/release/grimoire-rs/grimoire
[docs]: https://grimoire.rs/
[docs-badge]: https://img.shields.io/badge/docs-grimoire-blue
[docs-install]: https://grimoire.rs/installation.html
[setup-grimoire]: https://github.com/grimoire-rs/setup-grimoire
[license]: LICENSE
[license-badge]: https://img.shields.io/badge/license-Apache--2.0-blue.svg

## Source & license

This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [grimoire-rs](https://github.com/grimoire-rs)
- **Source:** [grimoire-rs/grimoire](https://github.com/grimoire-rs/grimoire)
- **License:** Apache-2.0
- **Homepage:** https://grimoire.rs

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.1.0 — what this tool can access:

- **Network access:** yes
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** no
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.1.0** — security scan: flagged — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/mcp-grimoire-rs-grimoire
- Seller: https://agentstack.voostack.com/s/grimoire-rs
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.