Install
$ agentstack add mcp-reaatech-agent-mesh ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ● Network access Used
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ● Environment & secrets Used
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
agent-mesh
[](https://github.com/reaatech/agent-mesh/actions/workflows/ci.yml) [](LICENSE) [](https://www.typescriptlang.org/)
> Production-ready multi-agent orchestrator implementing MCP-based agent routing with confidence-gated dispatch, per-agent circuit breakers, and Firestore-backed session management.
This monorepo provides the full orchestrator stack for building multi-agent AI systems: canonical types, intent classification, confidence-gated routing, agent dispatch via the Model Context Protocol, session lifecycle management, and supporting observability infrastructure.
Features
- Confidence-gated routing — a 5-rule decision tree (route / clarify / fallback) with per-agent confidence thresholds. Pluggable classifier (
ClassifierProvider): Gemini Flash by default, or inject any model — including a host-resolved one. - Agent dispatch — StreamableHTTP MCP transport (connection pooling, retries, Zod-validated responses) or an in-process transport (
type: 'inprocess') for agents co-located with the orchestrator, with ametadatapassthrough for host context (e.g. a tenantorgId). - Per-agent circuit breakers — Three-state (CLOSED/OPEN/HALF_OPEN) with exponential backoff and cross-instance leader election. Pluggable persistence (
BreakerStore): Firestore by default, or Postgres/Redis. - Session management — multi-turn sessions with sliding TTL, turn history, workflow-state passthrough, and classification bypass. Pluggable persistence (
SessionStore): Firestore by default, or Postgres/Redis/in-memory. - Hot-reload agent registry — YAML-based agent configuration with
${ENV_VAR}expansion, SIGHUP reload, SSRF-safe URL validation, and cross-agent invariant enforcement - Express gateway — API key authentication (Secret Manager-backed), token bucket rate limiting, TLS enforcement with HSTS, and Slack profile resolution
- MCP server interface — Exposes the orchestrator as an MCP-compliant agent with JSON-RPC 2.0 routing, tool registration, and SSE transport
- Observability — Winston structured logging with PII redaction, OpenTelemetry tracing and metrics, and audit event logging for compliance
Installation
Using the packages
Packages are published under the @reaatech scope and can be installed individually:
# Core types, schemas, and configuration
pnpm add @reaatech/agent-mesh
# Agent registry loader with SIGHUP hot-reload
pnpm add @reaatech/agent-mesh-registry
# Firestore session management
pnpm add @reaatech/agent-mesh-session
# Gemini intent classifier
pnpm add @reaatech/agent-mesh-classifier
# Confidence-gated routing
pnpm add @reaatech/agent-mesh-confidence
# MCP agent dispatch
pnpm add @reaatech/agent-mesh-router
# Express gateway (auth, rate limiting, TLS)
pnpm add @reaatech/agent-mesh-gateway
# MCP server interface
pnpm add @reaatech/agent-mesh-mcp-server
# Circuit breaker with persistence
pnpm add @reaatech/agent-mesh-utils
# Observability (logging, metrics, tracing)
pnpm add @reaatech/agent-mesh-observability
Contributing
# Clone the repository
git clone https://github.com/reaatech/agent-mesh.git
cd agent-mesh
# Install dependencies
pnpm install
# Build all packages
pnpm build
# Run the test suite
pnpm test
# Run linting
pnpm lint
Quick Start
# Clone and install
git clone https://github.com/reaatech/agent-mesh.git && cd agent-mesh
pnpm install && pnpm build
# Configure environment
cp .env.example .env
# Edit .env with your GOOGLE_CLOUD_PROJECT and API_KEY
# Register agents (YAML files in ./agents/)
# agents/ already contains default.yaml, glean.yaml, and serval.yaml
# Start the orchestrator
pnpm --filter @reaatech/agent-mesh-orchestrator build
node examples/orchestrator/dist/index.js
# Or use the root dev command
pnpm build
GOOGLE_CLOUD_PROJECT=my-project API_KEY=dev-key node examples/orchestrator/dist/index.js
# Health check
curl http://localhost:8080/health
# Send a request
curl -X POST http://localhost:8080/v1/request \
-H "x-api-key: your-api-key" \
-H "Content-Type: application/json" \
-d '{"input": "Reset my password", "employee_id": "emp123"}'
See the [examples/orchestrator/](./examples/orchestrator/) directory for the complete reference deployment.
Packages
| Package | Description | | ------- | ----------- | | [@reaatech/agent-mesh](./packages/core) | Core domain types, Zod schemas, environment config, and shared constants | | [@reaatech/agent-mesh-registry](./packages/registry) | Agent YAML loader, SIGHUP hot-reload, SSRF-safe URL validation | | [@reaatech/agent-mesh-session](./packages/session) | Multi-turn session management with a pluggable SessionStore (Firestore default + in-memory) | | [@reaatech/agent-mesh-classifier](./packages/classifier) | Intent classification with a pluggable ClassifierProvider (Gemini Flash default + mock) | | [@reaatech/agent-mesh-confidence](./packages/confidence) | Confidence-gated routing decision tree and clarification cache | | [@reaatech/agent-mesh-router](./packages/router) | Agent dispatch — MCP (pooled) or in-process transport | | [@reaatech/agent-mesh-gateway](./packages/gateway) | Express middleware (auth, rate limiting, TLS) and request handler | | [@reaatech/agent-mesh-mcp-server](./packages/mcp-server) | MCP server exposing orchestrator with JSON-RPC 2.0 and SSE transport | | [@reaatech/agent-mesh-utils](./packages/utils) | Per-agent circuit breaker with a pluggable BreakerStore (Firestore default) + leader election | | [@reaatech/agent-mesh-postgres](./packages/postgres) | Postgres-backed SessionStore + BreakerStore adapters | | [@reaatech/agent-mesh-redis](./packages/redis) | Redis-backed SessionStore + BreakerStore adapters | | [@reaatech/agent-mesh-observability](./packages/observability) | Structured logging, OpenTelemetry tracing/metrics, and audit events |
Documentation
- [
ARCHITECTURE.md](./ARCHITECTURE.md) — System design, data flows, and component relationships - [
AGENTS.md](./AGENTS.md) — Agent development guide with MCP protocol contract and skill system - [
CONTRIBUTING.md](./CONTRIBUTING.md) — Contribution workflow and code standards
License
[MIT](LICENSE)
Source & license
This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: reaatech
- Source: reaatech/agent-mesh
- License: MIT
- Homepage: https://reaatech.com/products/orchestration-protocols/agent-mesh
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.