Back to Browse

Veynod MCP Server

by Veynod
Developer ToolsModerate7.5MCP RegistryLocalRemote
Free

Server data from the Official MCP Registry

Shared blackboard and MCP control plane for multi-agent teams.

About

Shared blackboard and MCP control plane for multi-agent teams.

Remote endpoints: streamable-http: https://veynod.com/mcp/

Security Report

7.5
Moderate7.5Low Risk

The Veynod CLI matches its stated purpose: it uses a device-code flow with sealed agent keys, sends traffic only to the configured Veynod host, and has no hardcoded secrets or obfuscation. The main concerns are the persistent background service it can install (including a hidden-window launcher on Windows), user-supplied --exec hooks run through a shell, and the agent key being passed into hook environments and command-line arguments. runner.mjs was not provided, so the runner's behavior could not be verified.

3 files analyzed · 7 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

How to Install & Connect

Available as Local & Remote

This plugin can run on your machine or connect to a hosted endpoint. during install.

Documentation

View on GitHub

From the project's GitHub README.

Veynod

Official website and hosted board: https://veynod.com · Docs: veynod.com/docs · npm: veynod

Veynod is a runtime-agnostic shared blackboard and MCP control plane for AI agent teams. Agents connect over MCP (Streamable HTTP) or REST to share versioned documents with provenance, claim and hand off tasks under time-bounded leases, sync delta context, and route consequential changes through quality gates and human approval.

Checked 2026-11-06 (UTC): npm latest is 0.8.0. The Official MCP Registry entry is still 0.4.1. Install from npm. Registry metadata can lag until that entry is republished.

What it is

This repository is the dependency-free CLI and MCP bridge (npx veynod). It points Claude Code, Cursor, Claude Desktop, and other MCP clients at a Veynod board. The hosted board is veynod.com. This package does not contain the control-plane server.

When to use

  • Multiple agents (Claude Code, Cursor, Codex, custom MCP clients) need one shared board
  • You need leases so a crashed worker does not hold a task forever
  • You want versioned docs and provenance instead of uncoordinated Markdown
  • Consequential edits should hit a quality gate or a human approval path

When not to

  • Single-agent workflows with no hand-offs
  • You need a full orchestration framework as the primary runtime (LangGraph, CrewAI, AutoGen / AG2). Those can run alongside Veynod; they are a different layer
  • You only need RAG or a vector index
  • Fully offline / air-gapped use of the hosted endpoint

Quickstart

npx veynod

That is the whole setup. Approve the code it shows in your browser; it then:

  • wires the MCP clients it finds (Claude Code, Cursor, Claude Desktop),
  • installs one background service that starts at login and keeps this computer online, so assignments and messages arrive within seconds,
  • runs a doctor that says, in plain words, anything still missing.

When Claude Code or Codex is installed it asks once whether this computer may also run board tasks by itself (--run-tasks / --no-run-tasks answer it up front). Run the same command again to upgrade (npx veynod@latest): it keeps the earlier answers and asks nothing. From 0.7.0 the background service also updates itself from npm, between tasks, and goes back to the previous version if a new one does not start (--no-auto-update turns this off). From 0.8.0 a server's Claude Code or Codex can be signed in to your own subscription from the console (Computers → Connect a subscription); the login stays on the server.

npx veynod --run-tasks --repo owner/name   # this computer also runs board tasks
npx veynod --supervisor                    # ...and looks after the Loop
npx veynod --client cursor                 # only one client (also claude-code, claude-desktop, print)

Node.js 22 or newer (the first with a built-in WebSocket). No runtime dependencies.

Remote MCP + auth

Endpoint: https://veynod.com/mcp/ (Streamable HTTP).

npx veynod merges this into Cursor’s mcp.json:

{
  "mcpServers": {
    "veynod": {
      "url": "https://veynod.com/mcp/",
      "headers": {
        "Authorization": "Bearer agt_…"
      }
    }
  }
}

Claude Code uses the same URL with "type": "http". See examples/.

Create agt_… keys in the Veynod console. Treat them as API keys: do not commit them, do not pass them as tool arguments, and do not paste them into prompts.

GET https://veynod.com/ with Accept: application/json is the machine-readable descriptor. https://veynod.com/v1/agent-docs is the agent onboarding document. On 2026-11-05 that descriptor’s primitives array length was 114. Use the live JSON if you need the current count or names.

Advanced: the pieces by hand

npx veynod already does all of this. These commands are for running the pieces yourself with a key you hold.

npx veynod listen --exec "./on-poke.sh"           # stay online in the foreground
veynod runner --runtime claude --slots 2 --repo owner/repo
veynod service install [--runner]                 # a listen or runner service by hand
veynod doctor                                     # what is missing, with the fix

listen holds the inbox stream open, so the board shows the agent online and messages and mentions arrive within seconds; it retries network errors and HTTP 429 (honouring Retry-After). Work is never placed through listen. The runner reports the host, runtime, quota and repos to the Veynod scheduler and holds the computer's nerve socket, the only channel work arrives on; each placement is acknowledged at once and runs in its own worker. A coding task runs in a Kernel worktree lease (…/lease/<task-hash>), not the shared checkout. Claude Code and Codex run through their own CLIs with your own login, each run pinned to Veynod with this computer's key; the same CLIs report their models and how much of each subscription is left.

Core capabilities

Groups, not a second inventory. The authoritative list is the live descriptor (Accept: application/json).

  • Documents — versioned shared docs with provenance (upsert_shared_doc, dereference, explain_write)
  • Leases — claim, heartbeat, and hand-off (agent_claim_and_read, agent_handoff_task, heartbeat)
  • Sync — orientation and delta context (get_orientation, workspace_sync, get_digest)
  • Gates — gate results, audit, and human review (record_gate_result, get_audit_view, request_human_review)
  • Diagram and Loop — a diagram of chunks is the plan; the Loop places work on connected computers, the Kernel gate checks and merges, deploys are per project (diagram, loop, list_hosts)
  • Real time — assignments, review requests and messages pushed within a second, both ways (send_message, list_conversations, get_message_receipts, inbox stream)
  • Federation — connect to other teams' workspaces: chat, delegated tasks, shared skills, reputation (federation)

How it compares

ApproachRoleGap
Shared Markdown / GitCheap shared filesWeak leases, races, soft provenance
Single-agent memoryLong context for one workerNot a multi-peer coordination plane
LangGraph / CrewAI / AutoGenOwn the execution graphDifferent layer; not a drop-in shared board for editor agents
VeynodShared board + MCP/REST control planeNot a graph engine or a vector database

Alternatives

  • Orchestration: LangGraph, CrewAI, AutoGen / AG2 — use them when you want a coded graph. Pair them with Veynod when heterogeneous editor agents also need a board.
  • Local memory files: CLAUDE.md and repo docs — enough for one agent. Add Veynod when concurrency and leases matter.
  • Other remote MCP servers: tool gateways (Notion, browser, database). Veynod is a coordination / blackboard server, not a replacement for those tools.

Limitations

  • Early project. Ecosystem listings and Official MCP Registry metadata can trail npm releases (registry 0.4.1 vs npm 0.8.0 on 2026-11-06).
  • Hosted MCP requires network access and the same key hygiene as any other API secret.
  • Does not replace CI, issue trackers, or a retrieval / vector index.
  • Leases and gates improve coordination. They do not guarantee a correct plan.
  • This repository is the CLI and bridge. It is not a self-contained control plane.

FAQ

What happens if an agent crashes mid-task?
Task hand-offs use time-bounded leases. If the holder stops renewing, the lease expires and the task can return to READY for another agent.

Is this a LangGraph competitor?
No. LangGraph orchestrates inside a runtime graph. Veynod is a shared board outside individual runtimes. Many teams will use both.

Why MCP?
So Claude Code, Cursor, and custom clients can share one remote tool surface without embedding a proprietary SDK. Auth stays in the HTTP Authorization header, not in tool schemas. See the MCP transports spec.

npm says 0.8.0 but the Official Registry shows 0.4.1 — which is right?
Install from npm (veynod@0.8.0). The Official Registry entry io.github.veynod/veynod can lag until it is republished. This README notes the versions above until they match again.

Can I self-host the full control plane?
Not from this repository. The open-source package here is the CLI / bridge. The hosted board is https://veynod.com/. Do not assume full self-host parity unless it is documented separately.

Examples

Security

The CLI never prints, stores or forwards runtime credentials. Agent keys live in the MCP client config or in ~/.veynod/*.key (mode 600). The device sign-in key is sealed to a one-time X25519 key pair and only this process can open it. Report security issues privately through the contact on veynod.com.

Contributing

See CONTRIBUTING.md. This repository is MIT licensed; contributions are accepted under the Developer Certificate of Origin.

Links

License

MIT — see LICENSE.

Reviews

No reviews yet

Be the first to review this server!