AgentStack
MCP verified Apache-2.0 Self-run

Factory

mcp-vilaca-factory Β· by vilaca

🏭 Coding agent CLI engineered to make any LLM β€” local or cloud, frontier or 7B β€” actually useful. 16 providers, multi-tab sessions, automatic key+model failover, plan-mode review, MCP, and recovery loops for models that misbehave.

β€” No reviews yet
0 installs
9 views
0.0% view→install

Install

$ agentstack add mcp-vilaca-factory

βœ“ scanned Β· βœ“ verified β€” works with Claude Code, Cursor, and more.

Security review

βœ“ Passed

No issues found. Passed automated security review. Β· v0.1.0 How review works β†’

  • βœ“ Prompt-injection patterns
  • βœ“ Secret / credential exfiltration
  • βœ“ Dangerous shell & filesystem operations
  • βœ“ Untrusted network calls
  • βœ“ Known-malicious package signatures

What it can access

  • βœ“ Network access No
  • βœ“ Filesystem access No
  • ● Shell / process execution Used
  • βœ“ Environment & secrets No
  • βœ“ Dynamic code execution No

From automated source analysis of v0.1.0. β€œUsed” means the capability is present in the source β€” more access means more to trust, not that it’s unsafe.

View the full security report β†’

Verified badge

Passed review? Show it. Paste this badge into your README β€” it links to the public security report.

AgentStack Verified badge Links to your public security report.
[![AgentStack Verified](https://agentstack.voostack.com/badges/verified.svg)](https://agentstack.voostack.com/security/report/mcp-vilaca-factory)

Reliability & compatibility

βœ“ Security review passed
0 installs to date
β€” no reviews yet
● 20d ago

Declared compatibility

Claude CodeClaude DesktopCursorWindsurf

Compatibility is declared by the source manifest. End-to-end runtime verification is coming β€” see below.

Preview Execution monitoring

We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps β€” measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.

How agent discovery & health will work β†’
Are you the author of Factory? Claim this listing to set pricing, connect Stripe payouts, and keep 70% of every sale.
Sign up to claim

About

🏭 factory

[](https://github.com/vilaca/factory/actions/workflows/lint.yml) [](https://github.com/vilaca/factory/actions/workflows/typecheck.yml) [](https://github.com/vilaca/factory/actions/workflows/test-unit.yml) [](https://github.com/vilaca/factory/actions/workflows/test-e2e-mocks.yml) [](https://github.com/vilaca/factory/actions/workflows/test-e2e-no-mocks.yml) [](https://github.com/vilaca/factory/actions/workflows/test-e2e-headless.yml) [](https://github.com/vilaca/factory/actions/workflows/test-e2e-pty.yml) [](https://codecov.io/gh/vilaca/factory)

A coding agent CLI engineered to make any LLM β€” local or cloud, frontier or 7B β€” actually useful.

Why factory

  • Bring your own model. Pick what fits your privacy, cost, and latency. 16 providers on equal footing β€” local-first (Ollama, llama.cpp) and cloud (Anthropic Claude, Cerebras, Cloudflare Workers AI, Codestral, Cohere, GitHub Copilot, Google AI Studio, Groq, HuggingFace, Mistral, OpenAI, OpenCode Zen, OpenRouter, Vercel AI Gateway).
  • Supports Anthropic Claude-Code [skills](./docs/skills.md) format.
  • Multi-tab sessions. Each tab is an independent agent with its own conversation, working directory, provider, and model. Run a frontier LLM on a refactor in one tab while a local LLM explores tests in another. Switch with Ctrl+N/Ctrl+P or jump directly with F1–F12.
  • Two-tier rotation. When a key hits a rate limit or auth failure, factory swaps to the next saved key for the same model; when keys for a model are exhausted, it walks a configurable chain of : fallbacks β€” frontier β†’ fast β†’ free, automatic.
  • Picker with key management. Startup and in-session pickers support provider β†’ key β†’ model selection, key validation, and saved-key reuse for providers that support multiple API keys.
  • Built for models that don't behave. Text-tool fallback recovers tool calls from prose; an LLM corrector retries malformed calls; an imitation guard strips fabricated tool-result blocks; Bash dedup nudges the model out of spinning loops.
  • Plan mode. Read-only tools execute freely; writes are queued for review. Approve, cancel, or refine before anything touches disk.
  • Cache-aware. Surfaces prompt-cache hit rate per turn and per key for providers that report it. /stats reports session totals, per-turn hit-rate sparkline, compaction events, and the largest tool results.
  • Human or headless. Interactive TUI on a TTY; in scripts and CI it auto-detects no-TTY, reads stdin as a prompt, runs one turn, and streams the result to stdout β€” same agent, no UI. See [docs/headless.md](./docs/headless.md).

Requirements

  • Node.js >= 22
  • At least one LLM provider β€” local (Ollama, llama.cpp) or cloud (see [docs/providers.md](./docs/providers.md) for credentials per provider).

Quick start

git clone https://github.com/vilaca/factory.git
cd factory
npm install && npm run build && npm link
factory

That's it. factory opens a picker for provider, key, and model the first time (for simple-key providers, it can validate and save keys during the flow). Subsequent runs jump straight into the prompt with the last provider/model you used; pass --pick (or use /model / Ctrl+K mid-session) to choose a different one.

> npm link permission errors? It writes a symlink into your npm global prefix; if that's a system path it needs sudo. Either set a user-writable prefix once (npm config set prefix "$HOME/.npm-global" and add $HOME/.npm-global/bin to your PATH), skip linking and run npx factory from the repo, or invoke directly with node /path/to/factory/dist/index.js.

> npm install coming soon. A factory-code package will land on npm once the first tagged release ships; until then, build from source.

Documentation

  • [docs/providers.md](./docs/providers.md) β€” full provider matrix, env vars, auth specifics
  • [docs/configuration.md](./docs/configuration.md) β€” CLI flags, env vars, config file format, experimental flags
  • [docs/slash-commands.md](./docs/slash-commands.md) β€” every /command and what it does
  • [docs/hotkeys.md](./docs/hotkeys.md) β€” keybindings
  • [docs/headless.md](./docs/headless.md) β€” non-TTY mode, exit codes, CI patterns
  • [docs/skills.md](./docs/skills.md) β€” reusable instruction sets, scopes, frontmatter reference, invocation
  • [docs/web-fetch.md](./docs/web-fetch.md) β€” WebFetch tool, bounds, per-domain whitelist
  • [docs/troubleshooting.md](./docs/troubleshooting.md) β€” common issues and fixes
  • [docs/observability.md](./docs/observability.md) β€” session-log JSONL schema
  • [docs/security.md](./docs/security.md) β€” built-in path jail, bash deny list, env scrubbing
  • [ARCHITECTURE.md](./ARCHITECTURE.md) β€” module map, data flow, design overview
  • [CONTRIBUTING.md](./CONTRIBUTING.md) β€” dev setup, conventions, adding a provider

Quick reference

factory --version                                    # print version
factory --help                                       # full flag list
factory                                              # interactive picker
factory -p anthropic -m claude-sonnet-4-6            # one-shot
factory --plan                                       # plan mode
factory --pick                                       # force startup picker
factory --turn-timeout 120                           # auto-abort after 120s
factory --debug                                      # debug logs to stderr
echo "explain src/index.ts" | factory                # headless / non-TTY

Once running, type /help to see the full slash-command list.

Security

Built-in path jail, bash deny list, env scrubbing for subprocess execution, and plan mode for untrusted models. See [docs/security.md](./docs/security.md) for what's enforced and how to extend it, and [SECURITY.md](./SECURITY.md) for the disclosure process.

License

Apache License 2.0 β€” see [LICENSE](LICENSE).

Source & license

This open-source MCP server is cataloged on AgentStack and links to its original source β€” we do not rehost the code.

  • Author: vilaca
  • Source: vilaca/factory
  • License: Apache-2.0
  • Homepage: https://vilaca.github.io/factory/

Install and usage instructions live in the source repository linked above.

Reviews

No reviews yet β€” be the first.

Versions

  • v0.1.0 Imported from the upstream source.