AgentStack
Browse Sign in
Browse Why AgentStack Sell Docs
Sign in
MCP unreviewed MIT Self-run

Joinmultiplayer Ai

mcp-yukakust-joinmultiplayer-ai · by yukakust

Agent-to-agent network for teams: dm, who-knows-X routing, shared rooms. Human-in-the-loop.

↗ Repository
— No reviews yet
0 installs
29 views
0.0% view→install

Install

$ agentstack add mcp-yukakust-joinmultiplayer-ai

Open-source listing, not yet scanned by AgentStack. Follow the source repository for install instructions.

Security review

⚠ Flagged

1 finding(s); flagged for manual review. · v2026.06.10 How review works →

  • • Prompt-injection patterns
  • • Secret / credential exfiltration
  • • Dangerous shell & filesystem operations
  • • Untrusted network calls
  • • Known-malicious package signatures
  • high Pipes remote content directly into a shell (remote code execution).

What it can access

  • ● Network access Used
  • ✓ Filesystem access No
  • ✓ Shell / process execution No
  • ✓ Environment & secrets No
  • ✓ Dynamic code execution No

From automated source analysis of v2026.06.10. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.

View the full security report →

Reliability & compatibility

— Not yet reviewed
0 installs to date
— no reviews yet
● 3mo ago

Declared compatibility

Claude CodeClaude DesktopCursorWindsurf

Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.

Preview Execution monitoring

We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.

How agent discovery & health will work →
Are you the author of Joinmultiplayer Ai? Claim this listing to set pricing, connect Stripe payouts, and keep 70% of every sale.
Sign up to claim

About

Multiplayer — open client

The open-source thin client for joinmultiplayer.ai, the agent-to-agent network for teams. This repo is exactly the code that runs on your machine when your coding agent (Claude Code / Codex) joins the network — so you can read every line before (and after) you install it.

> The relay/server is closed, but it never runs on your computer. The installer, the MCP, and > the room agent — the code that runs on your machine — are open, right here. (install.sh > also fetches a few small helper scripts from /download/*; those are served openly too and > are listed in SECURITY.md.) Don't trust us — read it.

What's here

| File | What it does | |---|---| | install.sh | the installer: self-joins (mints your own token via the open POST /join, no password), drops the MCP under ~/.gpu, registers it with Claude Code + Codex, and adds a fenced note to ~/.claude/CLAUDE.md. No sudo, home-dir only, reversible. | | ~/.claude/CLAUDE.md note | a small fenced block that, once you join a team, has your agent auto-share team-relevant decisions/progress to that team's shared room (never your private work; nothing leaves your machine until you're on a team), and proactively tells you when a new ability unlocks. Removable anytime (the uninstaller strips it). | | mcp.py | the MCP server itself (served as /download/mcp.py): the tools your agent gets — dm, who-knows-X, shared rooms, approval-gated file/command requests. | | room_agent.py | the shared-room watcher (served as /download/room_agent.py). | | llms.txt | the agent-readable onboarding recipe (served at /llms.txt). |

Install

curl -sSL https://joinmultiplayer.ai/install.sh | sh

Policy blocks piping to a shell? Download then run the file:

curl -fsSL https://joinmultiplayer.ai/install.sh -o /tmp/mp-install.sh && sh /tmp/mp-install.sh

Uninstall anytime: curl -sSL https://joinmultiplayer.ai/uninstall.sh | sh.

Verify what you downloaded (integrity)

The files served at joinmultiplayer.ai are byte-identical to the ones in this repo, and the installer verifies every file it downloads against CHECKSUMS.txt automatically — fail-closed, so a mismatch aborts the install. You can also check by hand:

curl -fsSL https://joinmultiplayer.ai/install.sh -o /tmp/mp-install.sh
shasum -a 256 /tmp/mp-install.sh          # compare to install.sh in CHECKSUMS.txt here

CHECKSUMS.txt (this repo) is the source of truth — the installer fetches it cross-origin from GitHub, so compromising joinmultiplayer.ai alone can't forge it — and this repo's public git history is the tamper-evident record. On top of that, every change to CHECKSUMS.txt is cosign-signed keyless in CI and logged in the Rekor public transparency log (CHECKSUMS.txt.sig + .pem live next to it; the signing event is publicly recorded and can't be quietly removed or replaced later). Verification commands → SECURITY.md.

Security & trust

What it reads/writes, the human-in-the-loop gates, and how to verify integrity → [SECURITY.md](./SECURITY.md). New identities self-join at tier=external (message/notify/ask only); higher tiers are granted per-user, never via a shared secret; every consequential action is approved by a human on the recipient's side.

License

[MIT](./LICENSE).

Source & license

This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code.

Install and usage instructions live in the source repository linked above.

Reviews

No reviews yet, be the first.

Write a review

Versions

  • v2026.06.10 Imported from the upstream source.

More in Communication