Install
$ agentstack add mcp-sumanthvarma798-agentfile ✓ scanned · ✓ verified — works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
About
Agentfile
A portable, declarative format for sharing AI agent setups.
Like Dockerfile, but for agents.
[](https://github.com/SumanthVarma798/agentfile/actions/workflows/ci.yml) [](https://pypi.org/project/agentfile/) [](https://opensource.org/licenses/MIT) [](https://www.python.org/downloads/) [](./SPEC.md)
[Spec](./SPEC.md) · [Motivation](./MOTIVATION.md) · [Examples](./examples) · [Contributing](./CONTRIBUTING.md)
Start with your agent
Agentfile is meant to be used from inside the agent environment where you already work. Connect the MCP server once, then ask your agent to author, validate, review, inspect, or compare agent manifests.
Claude Code / Claude Desktop
claude mcp add agentfile -- uvx agentfile-mcp
Cursor / Continue / Cline
Add this to your MCP client config:
{
"mcpServers": {
"agentfile": {
"command": "uvx",
"args": ["agentfile-mcp"]
}
}
}
Then paste:
> "Scaffold an Agentfile for a research agent that uses web search and writes Markdown briefs. Save it to ./agent.yaml and validate it."
Your agent can call scaffold(), write the file, then call validate_agentfile() without making you leave the conversation.
What your agent can do
| Ask your agent to... | MCP tool | |---|---| | Create a starter manifest | scaffold | | Validate a file on disk | validate_agentfile | | Validate pasted YAML | lint_inline | | Review whether a manifest is safe to share with a team | review_agentfile | | Compare two versions for a PR summary | compare_agentfiles | | Explain an existing manifest | show_agentfile | | Read bundled examples | list_examples, read_example | | Fetch the spec or schema | agentfile://spec, get_agentfile_schema |
Example prompts:
- "Author an Agentfile for an agent that monitors our Postgres database and answers questions about query performance."
- "Validate ./agent.yaml and explain any failures in plain English."
- "Review ./agent.yaml for team-shareability issues before I open a PR."
- "Compare ./agent.old.yaml against ./agent.yaml and summarize what changed."
- "What does the
data-pipelineexample demonstrate? Walk me through it." - "Convert this LangChain config into an Agentfile — here's the code: ..."
Why Agentfile exists
Sharing an agent today often sounds like: "clone this, copy these env vars, edit the hardcoded prompt, install the right tool server, then hope your local setup matches mine."
Agentfile gives your agent a portable contract:
# agent.yaml
apiVersion: agentfile/v1
kind: Agent
metadata:
name: research-agent
version: 0.1.0
spec:
model:
provider: anthropic
name: claude-sonnet-4-5
params: { temperature: 0.4 }
system_prompt:
file: ./prompts/system.md
tools:
- mcp: builtin/web_search
- mcp: https://docs.example.com/mcp
auth: { type: bearer, env: DOCS_TOKEN }
permissions:
network: { mode: allowlist, hosts: [api.anthropic.com, docs.example.com] }
env:
required: [ANTHROPIC_API_KEY, DOCS_TOKEN]
One file. Diffable. Reviewable. Secret-free. Runs anywhere a compliant runtime exists.
Agent workflow
Agentfile keeps the human review loop simple:
- Ask your agent to scaffold or update
agent.yaml. - Ask it to validate the manifest.
- Ask it to run the shareability review.
- Commit the manifest, prompts, and referenced config files together.
- Use
compare_agentfilesto summarize meaningful changes in PRs.
The MCP server exposes 9 tools and 3 resources over stdio MCP. See [SPEC.md §14](./SPEC.md#14-consumers) for the full consumer protocol.
Install options
Most users only need the MCP server:
claude mcp add agentfile -- uvx agentfile-mcp
claude mcp add agentfile -- pipx run agentfile-mcp
For CI, git hooks, and scripts, use the CLI:
pip install agentfile
# Validate one file or an entire examples directory
agent validate ./agent.yaml
agent validate examples # recurses one level
# Strict mode (warnings become errors — use in CI to catch secret leaks)
agent validate --strict ./agent.yaml
# Inspect a manifest
agent show examples/research-agent/agent.yaml
# Dump the JSON Schema
agent schema --pretty
GitHub Actions example:
- name: Validate Agentfiles
run: |
pip install agentfile
agent validate --strict ./agent.yaml
How it compares
| | Agentfile | OpenAI Custom GPTs | LangGraph configs | CrewAI YAML | |---|---|---|---|---| | Portable across runtimes | ✅ | ❌ (locked to OpenAI) | ❌ (LangGraph only) | ❌ (CrewAI only) | | Lives in version control | ✅ | ❌ | ✅ | ✅ | | Standardized tool layer | ✅ MCP | ✅ Actions | ❌ Framework-specific | ❌ Framework-specific | | Model-agnostic | ✅ | ❌ | ✅ | ✅ | | Secret-free by design | ✅ | n/a | ❌ | ❌ | | MCP-native access | ✅ | ❌ | ❌ | ❌ | | Has a registry | 🔜 v0.5 | ✅ | ❌ | ❌ |
Roadmap
| Version | What | Status | |---|---|---| | v0.1 | Spec + validator + CLI | ✅ shipped | | v0.2 | MCP server + Claude skill + agentic README | ✅ this release | | v0.3 | Reference runner as MCP run_agentfile tool | planned | | v0.4 | TypeScript port (validator + MCP server) | planned | | v0.5 | pack / publish / install + registry | planned | | v1.0 | Signing, stability, ecosystem | planned |
Install from source
git clone https://github.com/SumanthVarma798/agentfile.git
cd agentfile
pip install -e ".[dev,mcp]"
pytest
agent validate examples
FAQ
Q: Why MCP-first? MCP is now the standard protocol for agent tool access — every major agent IDE and runtime supports it. Shipping an MCP server means zero integration work: connect once, use everywhere. The CLI is still there for scripts and CI; it just isn't the primary UX anymore.
Q: Do I still need the CLI? For CI pipelines, Git hooks, and scripts — yes. For authoring and day-to-day use inside an agent environment — no. The MCP server does everything the CLI does and more.
Q: Is the skill Claude-only? The skills/agentfile/SKILL.md file follows a convention Claude Code understands. The underlying MCP server is protocol-standard and works with any MCP-capable client (Cursor, Continue, Cline, etc.). A skill file for other clients can be added in v0.3.
Q: Is this a framework? No. It's config — a manifest format. Use LangGraph, CrewAI, or the raw Anthropic SDK as your runtime.
Q: Why not just use Docker? Docker captures the environment. Agentfile captures the agent definition. They compose.
Q: How is this different from MCP? MCP is the protocol for tools. Agentfile is the manifest for an agent that uses MCP tools.
Q: Is the spec stable? agentfile/v1 is a draft. Backwards-compatible additions are allowed; breaking changes bump to v2.
Contributing
Code changes via PRs; spec changes via [RFCs](./CONTRIBUTING.md#rfc-process).
The most valuable thing right now: try it on a real agent and open a Discussion when the spec falls short.
License
[MIT](./LICENSE) — use it, fork it, ship it.
Built by @SumanthVarma798 and the community. The agent ecosystem deserves better than copy-paste.
Source & license
This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: SumanthVarma798
- Source: SumanthVarma798/agentfile
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet — be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.