Install
$ agentstack add mcp-taurus42119-stack-godkiller-mcp ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
GODKILLER MCP
Phase kernel for Google Antigravity. Plan. Gate. Prove on disk. Then claim done — or get blocked.
[](https://pypi.org/project/godkiller-mcp/) [](https://python.org) [](LICENSE) [](tests/)
pip install godkiller-mcp
Contact: Facebook · Instagram @Kayvin.th
Mission
Antigravity skips phases. GODKILLER does not allow that.
| Failure mode | Kernel response | | --- | --- | | No /plan | plan / phase gates | | Multi-file rush | /ultradeep one-file think → plan → edit | | Fake “done” | verify_bundle + claim_done block (server-authored evidence only) | | Session amnesia | marathon + memory graph | | Weak review | LLM council — Coder / Hacker / Optimizer, multi-round debate |
goal → mode → evidence/plan → gated edit → disk verify → claim_done
Arena — Antigravity A/B (the real proof)
Pre-solved twins that both pass 516 prove nothing. The honest protocol:
- Reset arms to sealed buggy
1_ORIGINAL - You open Antigravity on
3_WITHOUT_MCPwith MCP off → agent tries → we score - Reset / open
2_WITH_MCPwith MCP on → agent tries → we score - Compare 11 dimensions (fail-closed on missing evidence)
| Control | Value | | --- | --- | | Arena root | GODKILLER_ISOLATED_ARENA / GODKILLER_ARENA_ROOT | | Baseline | 1_ORIGINAL (never edit mid-run) | | Bare | 3_WITHOUT_MCP | | GODKILLER | 2_WITH_MCP | | Oracle | sealed hidden_oracle/ | | Protocol | [benchmarks/ANTIGRAVITY_AB_PROTOCOL.md](benchmarks/ANTIGRAVITYABPROTOCOL.md) |
11 dimensions
| # | Dimension | | ---: | --- | | 1 | Code correctness (oracle pass %) | | 2 | Oracle volume (≥516 collected) | | 3 | Output integrity (full pytest body) | | 4 | Delta from baseline (files actually changed) | | 5 | Reconnaissance / exhaustive read artifacts | | 6 | Phase discipline (task / plan / marathon) | | 7 | Blast radius + edit-safe | | 8 | Verify bundle + claim_done | | 9 | Council (Coder / Hacker / Optimizer) | | 10 | Security hardening signals | | 11 | UI visual gate (critic / screenshots) |
$env:GODKILLER_ARENA_ROOT="C:\Users\ASUS\Desktop\GODKILLER_ISOLATED_ARENA"
python -m benchmarks.reset_arena
# → open Antigravity bare, then:
python -m benchmarks.score_11 --arm 3_WITHOUT_MCP
# → open Antigravity + MCP, then:
python -m benchmarks.score_11 --arm 2_WITH_MCP
python -m benchmarks.score_11 --compare
Scorecard lands in GODKILLER_ISOLATED_ARENA\logs\11_dimension_scorecard.md after your runs — not a fake pre-fill.
Engine gauntlet (in-package kernel proof)
| Gate | Load | | --- | --- | | Kernel forge/skip | adversarial + volume matrix | | Phase illegal jumps | full forward-skip matrix | | Verify allowlist | allow + deny command grids | | Council host tally | all 8 vote combinations | | Exhaustive read | 120 size variants (incl. >3000 chars) | | Closed-task immutability | 80 variants | | Package suite | 331 passed (pytest -q) |
python -m benchmarks.run_arena --mode engine
pytest -q
Kernel
| Layer | Enforcement | | --- | --- | | Phase machine | assert_phase / claim_done | | Plan OS | 9-step validate before fix edits | | Edit safety | blast radius + path-safe check_edit_safe | | /ultradeep | one phase/turn · one file/edit cycle | | Verify | disk commands · result_digest · faultprobe kills weak suites | | Hollow surface | unfinished bodies blocked before claim_done | | Plan lock | write-through-plan — 9-step validate before edit/claim | | Session ledger | hash chain under .godkiller/session_ledger.jsonl | | Strict mode | GODKILLER_STRICT=1 — privileged tools need task_id | | Council | host debate (default) · optional API | | Visual critic | pixels required — regex alone cannot GREEN | | Recovery | selfheal = traceback parse → one fallback tool run |
goal → mode → evidence/plan → gated edit → disk verify → hollow → claim_done
/ultradeep
queue → think (≥3 hypotheses) → plan → edit_safe (1 path) → verify → advance
Council
Host mode (default): MCP ส่งบท Coder / Hacker / Optimizer ให้โมเดลใน IDE → council_submit → council_finalize
API mode (optional): GODKILLER_LLM_API_KEY / OPENAI_API_KEY + mode=api
Install
pip install godkiller-mcp
# pip install 'godkiller-mcp[browser]' && playwright install chromium
# pip install 'godkiller-mcp[scrape]'
# optional OCR: pip install pytesseract (+ Tesseract binary)
{
"mcpServers": {
"godkiller": { "command": "godkiller-mcp" }
}
}
Alternate: python -m godkiller_mcp.server Optional: GODKILLER_HOME · GODKILLER_TOOLS_DIR · GODKILLER_LLM_API_KEY
Tools — Kernel vs recovery vs experimental
Kernel (the product): gk_route · gk_mode · gk_task · gk_phase · gk_evidence · gk_verify (bundle / hollow / probe / ledger) · gk_memory · gk_code (map / search / read_full / council*) · gk_meta (plan)
Recovery: gk_code.self_heal · gk_code.pipeline
Optional / experimental: gk_browser · gk_scan · gk_handoff · scrape · skillify · confidence · auto_fix · soak / competitor
Env: GODKILLER_PLAN_LOCK=1 (default) · GODKILLER_FAULT_PROBE=1 (default) · GODKILLER_STRICT=1 (opt-in) · GODKILLER_DEV_RELAX=1 (local soft bypass only)
Modes
| Mode | Contract | | --- | --- | | /ask | no application edits | | /plan | 9-step before build | | /debug | repro + hypothesis before fix | | /ultradeep | marathon · max tools · per-file gate | | /verify | proof → claim_done |
Security
- Secret values never returned over MCP (names only)
- Prefer
shell=Falseverify/soak · verify command allowlist - Forge-proof evidence types:
PASSING_TEST/BLAST_RADIUS/EDIT_SAFE - Network scrape/browser are explicit invocations
State lives under GODKILLER_HOME or /.godkiller/.
License
MIT © 2026 GODKILLER Team — [LICENSE](LICENSE)
Source & license
This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: taurus42119-stack
- Source: taurus42119-stack/godkiller-mcp
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.