Install
$ agentstack add mcp-ribeirogab-zeno-agent Open-source listing — not yet scanned by AgentStack. Follow the source repository for install instructions.
Security review
⚠ Flagged1 finding(s); flagged for manual review. · v0.1.0 How review works →
- • Prompt-injection patterns
- • Secret / credential exfiltration
- • Dangerous shell & filesystem operations
- • Untrusted network calls
- • Known-malicious package signatures
- high Pipes remote content directly into a shell (remote code execution).
What it can access
- ● Network access Used
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
About
zeno-agent
> Personal agent that operates across the apps you use, by composing the connectors you install. Self-hosted. Single-user.
[](./LICENSE) [](./GOVERNANCE.md) [](https://github.com/ribeirogab)
> [!WARNING] > Early / experimental. Personal project, single-user, no SLA, no support guarantees. Breaking changes expected. Use at your own risk.
What it does
Zeno acts on your behalf inside the apps you already work in. Open a pull request after fixing a Sentry error. Triage your inbox. List the issues blocking the current sprint. Comment on a PR with the output of a code review. Anything that involves acting in an external app, Zeno can do — provided you have installed a connector for that app. Connectors are the heart of the product: each one is a small MCP server you install through the dashboard. Without connectors, Zeno is a talking statue.
Install
curl -fsSL https://zeno-agent.dev/install.sh | sh
The wrapper at zeno-agent.dev/install.sh forwards to the [install.sh](./install.sh) shipped at the most recent release tag; pass | sh -s -- --unstable to install from main instead. Full walkthrough — prerequisites, profile creation, first @zeno hello in Slack — at . Daily commands at .
What works today
- Channel: Slack via Socket Mode (mention the bot or DM it). Worker boots without Slack creds and falls back to a
NoopChannelso first install isn't blocked on the dashboard chicken-egg. - Connectors (live in the dashboard catalogue at ): GitHub App, GitHub Personal (PAT), Linear, Klaviyo, Sentry, Swarmia.
- Skills: Markdown SKILL.md playbooks installed via the dashboard, materialized into
~/.claude/skills/, auto-discovered by the Claude Agent SDK. Capabilities (Read/Edit/Write/Bash) are gated globally per profile. - Multi-profile isolation: the
zenoCLI manages N profiles via a host SQLite (~/.zeno/state.db); each profile is its own container, dashboard, master key, and credentials. - Per-tool capability gating: toggle individual connector tools allow/ask/off from
/connectors/. - Crons: scheduled agent runs configured in the dashboard at
/crons, persistent across restarts, with per-cron run history.
What is not here yet: no multi-user support (single operator only), no production-deployment recipe, no hosted instance.
Project layout
apps/ worker (agent runtime), api (REST), dashboard, docs (Fumadocs site), web (landing), cli
packages/ @zeno/db (host SQLite), @zeno/storage (runtime SQLite), @zeno/logger,
@zeno/ui, @zeno/github-app, @zeno/mcp-discover
agent/ SOUL.md, mcp.json, connectors-catalog.json (committed identity)
templates/ profile/ — read-only scaffolds the CLI uses on profile create
infra/ Dockerfile, entrypoint, slack-app-manifest.json
install.sh one-shot installer (curl-pipe target)
.vault/ constitution + specs + learnings + conventions + rules
~/.zeno/ (off-repo) zeno-agent clone, state.db, profiles//
AGENTS.md is the agent's working contract. .vault/_index/home.md is the project's knowledge map. .vault/constitution.md carries the non-negotiable design principles. The outsider documentation site lives at .
Contributing, security, license
- Roadmap: see [ROADMAP.md](./ROADMAP.md).
- Issues and pull requests: see [CONTRIBUTING.md](./CONTRIBUTING.md).
- Vulnerability reports: see [SECURITY.md](./SECURITY.md).
- Code of conduct: [CODEOFCONDUCT.md](./CODEOFCONDUCT.md).
- License: [MIT](./LICENSE).
Source & license
This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: ribeirogab
- Source: ribeirogab/zeno-agent
- License: MIT
- Homepage: https://zeno-agent.dev
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet — be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.