{"name":"com.ascent-partners/opencode-workbench","slug":"ascent-partners-opencode-workbench","title":null,"description":"Provision an OpenCode workbench and MCP stack on any Linux box, local or over SSH.","url":"https://mcp.market/server/ascent-partners-opencode-workbench","rating":null,"grade":"B","score":81,"certified":false,"status":"active","category":"other","tags":[],"presence":{"score":33,"stars":1,"forks":0,"downloads_week":94,"last_push_at":"2026-10-14T15:33:49.000Z","license":"MIT"},"uptime":{"percent":100,"checks":28,"ok":28,"last_checked_at":"2026-10-25T11:54:29.625Z","last_ok_at":"2026-10-25T11:54:29.625Z","latency_ms":20},"claimed":false,"transport":"mixed","callable_via_gateway":true,"default_price_micros":0,"repository":"https://github.com/simonmak-ascent/opencode-workbench","website":null,"version":"4.0.2","remotes":[{"type":"streamable-http","url":"https://opencode-workbench.simonmak.com/mcp"}],"packages":[{"registryType":"npm","identifier":"@simonmak-ascent/opencode-workbench","version":"4.0.2","transport":{"type":"stdio"}}],"tools":[{"name":"apply_clone","description":"Apply the Workbench profile to a target: clone the repo and install missing components (OpenCode CLI, Node/pnpm, MCP servers, skills, plugins, optional Docker). It OVERWRITES `<home>/.config/opencode/opencode.json`, copies `AGENTS.md`, resets an existing profile repo to `origin/main`, and runs global installs that need write permission (plus SSH for `mode:ssh`) and can take minutes. Writes a names-only `~/.env.workbench` (mode 600); never secret values. Consent-gated and idempotent: without `confirm:true` it returns the plan and changes nothing. Parameter semantics: `components` defaults to required+core; `workspace` defaults to `~/opencode-workbench`; `skipRepo` skips the clone/update; `profileUrl` overrides the git remote; `dryRun` returns the plan. To preview only, use plan_clone.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"target":{"type":"object","properties":{"mode":{"type":"string","enum":["local","ssh"],"description":"Run on this machine (local) or a remote host (ssh)."},"host":{"description":"SSH host (required when mode=ssh).","type":"string"},"user":{"description":"SSH user (defaults to ssh config / current user).","type":"string"},"port":{"description":"SSH port.","type":"integer","exclusiveMinimum":0,"maximum":9007199254740991},"identityFile":{"description":"SSH private key path.","type":"string"},"cwd":{"description":"Working directory on the target.","type":"string"}},"required":["mode"],"description":"The machine to operate on: this host (local) or a remote host over SSH (ssh)."},"confirm":{"description":"Set true to actually install. When absent, the call returns a plan and makes no changes.","type":"boolean"},"components":{"description":"Component ids to include; defaults to required+core.","type":"array","items":{"type":"string"}},"workspace":{"description":"Target directory for the profile repo.","type":"string"},"profileUrl":{"description":"Override profile git URL.","type":"string"},"skipRepo":{"description":"Do not clone/update the profile repo on the target.","type":"boolean"},"dryRun":{"description":"Report only; make no changes.","type":"boolean"}},"required":["target"],"$schema":"http://json-schema.org/draft-07/schema#"}},{"name":"describe_workbench","description":"Describe this MCP server from its bundled profile without contacting any target or making a network call: repository URL, the default component set, components grouped by tier (required/core/optional), and optional MCP add-ons. It takes no parameters, is always safe, and returns instantly. Use it first to resolve a component id for install_component/remove_component/update_component or to see available add-ons; use inspect_target for a machine's live state.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{},"$schema":"http://json-schema.org/draft-07/schema#"}},{"name":"inspect_target","description":"Probe one Linux machine — this host (`local`) or a remote host over SSH (`ssh`) — and report its OS, kernel, architecture, package manager, Node/npm, OpenCode, Docker, and per-tool detection flags, plus the names (never values) of credentials present. Read-only: it runs one shell probe as the target user (over SSH when `mode:ssh`), installs nothing, writes nothing, contacts no external service, and can take a few seconds per hop. Parameter semantics: `target.mode` selects local vs ssh (default `local`); `target.host` is required only for ssh; `target.user` defaults to the ssh config/current user; `target.cwd` sets the directory for relative checks; `target.port`/`identityFile` pass straight to ssh. Use it to see what a clone would touch, then plan_clone to turn that into an ordered plan and apply_clone to perform it.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"target":{"type":"object","properties":{"mode":{"type":"string","enum":["local","ssh"],"description":"Run on this machine (local) or a remote host (ssh)."},"host":{"description":"SSH host (required when mode=ssh).","type":"string"},"user":{"description":"SSH user (defaults to ssh config / current user).","type":"string"},"port":{"description":"SSH port.","type":"integer","exclusiveMinimum":0,"maximum":9007199254740991},"identityFile":{"description":"SSH private key path.","type":"string"},"cwd":{"description":"Working directory on the target.","type":"string"}},"required":["mode"],"description":"The machine to operate on: this host (local) or a remote host over SSH (ssh)."}},"required":["target"],"$schema":"http://json-schema.org/draft-07/schema#"}},{"name":"install_component","description":"Install a single Workbench component by id (e.g. `node`, `opencode`, `npm-mcps`, `skills`) on a target; `component` must be an id from describe_workbench. Overwrites that component's files when present (e.g. `skills`/`plugins` replace the copies under `<home>/.config/opencode`); global installs need write permission and can take minutes. Idempotent and consent-gated: without `confirm:true` it returns the plan. Parameter semantics: `component` is required; `workspace` defaults to `~/opencode-workbench`; `confirm` defaults to false (plan only). Use it for one targeted component; use apply_clone to install the full default set.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"target":{"type":"object","properties":{"mode":{"type":"string","enum":["local","ssh"],"description":"Run on this machine (local) or a remote host (ssh)."},"host":{"description":"SSH host (required when mode=ssh).","type":"string"},"user":{"description":"SSH user (defaults to ssh config / current user).","type":"string"},"port":{"description":"SSH port.","type":"integer","exclusiveMinimum":0,"maximum":9007199254740991},"identityFile":{"description":"SSH private key path.","type":"string"},"cwd":{"description":"Working directory on the target.","type":"string"}},"required":["mode"],"description":"The machine to operate on: this host (local) or a remote host over SSH (ssh)."},"component":{"type":"string","description":"Component id from describe_workbench."},"workspace":{"description":"Target directory for the profile repo.","type":"string"},"confirm":{"description":"Set true to actually install. When absent, the call returns a plan and makes no changes.","type":"boolean"}},"required":["target","component"],"$schema":"http://json-schema.org/draft-07/schema#"}},{"name":"list_required_credentials","description":"List the credentials the profile references, which the target already provides, and how to acquire each missing one. Value-blind: it reads only whether each env var is set — no values, no network, no writes — via one read-only probe. Parameter semantics: `target` selects the machine (`local` or SSH) and its `home` sets the returned `template` path and the env file the presence check reads; there are no other parameters. Returns `present`/`missing` var-name arrays plus one guidance record per credential (`var`, `purpose`, `url`, `method`, `command`). Use it after plan_clone to see what would degrade; act on one credential with run_auth_flow.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"target":{"type":"object","properties":{"mode":{"type":"string","enum":["local","ssh"],"description":"Run on this machine (local) or a remote host (ssh)."},"host":{"description":"SSH host (required when mode=ssh).","type":"string"},"user":{"description":"SSH user (defaults to ssh config / current user).","type":"string"},"port":{"description":"SSH port.","type":"integer","exclusiveMinimum":0,"maximum":9007199254740991},"identityFile":{"description":"SSH private key path.","type":"string"},"cwd":{"description":"Working directory on the target.","type":"string"}},"required":["mode"],"description":"The machine to operate on: this host (local) or a remote host over SSH (ssh)."}},"required":["target"],"$schema":"http://json-schema.org/draft-07/schema#"}},{"name":"plan_clone","description":"Return a read-only plan for a target: compare it against the Workbench profile and list each component as `install`, `present`, or `manual`, with the commands that would run. It still runs a detection probe on the target (same access as inspect_target) but clones nothing and writes nothing. Parameter semantics: `components` restricts the diff to those ids (default: required+core); `workspace` sets the expected profile path on the target (default `~/opencode-workbench`); `profileUrl` overrides the git remote. Use it to preview before apply_clone, which performs the changes.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"target":{"type":"object","properties":{"mode":{"type":"string","enum":["local","ssh"],"description":"Run on this machine (local) or a remote host (ssh)."},"host":{"description":"SSH host (required when mode=ssh).","type":"string"},"user":{"description":"SSH user (defaults to ssh config / current user).","type":"string"},"port":{"description":"SSH port.","type":"integer","exclusiveMinimum":0,"maximum":9007199254740991},"identityFile":{"description":"SSH private key path.","type":"string"},"cwd":{"description":"Working directory on the target.","type":"string"}},"required":["mode"],"description":"The machine to operate on: this host (local) or a remote host over SSH (ssh)."},"components":{"description":"Component ids to include; defaults to required+core.","type":"array","items":{"type":"string"}},"workspace":{"description":"Target directory for the profile repo.","type":"string"},"profileUrl":{"description":"Override profile git URL.","type":"string"},"skipRepo":{"description":"Do not clone/update the profile repo on the target.","type":"boolean"},"dryRun":{"description":"Report only; make no changes.","type":"boolean"}},"required":["target"],"$schema":"http://json-schema.org/draft-07/schema#"}},{"name":"remove_component","description":"Uninstall one Workbench component by id from a target — the inverse of install_component — for a bounded, documented subset with an automated uninstall (e.g. `opencode`, `pnpm`, `npm-mcps`, `skills`, `docker-containers`); `component` must be an id from describe_workbench. Idempotent: an already-absent component reports `absent`; a component with no automated uninstall (system packages such as git/curl/node) reports `manual`. Destructive and consent-gated: without `confirm:true` it returns a preview and changes nothing, and it deletes only that component's files — never `opencode.json` or the profile repo. Parameter semantics: `workspace` sets the profile path some removals need; `dryRun` reports without changing. Use it to tear down one component; for several, call it per id.","write_action":true,"price_micros":0,"input_schema":{"type":"object","properties":{"target":{"type":"object","properties":{"mode":{"type":"string","enum":["local","ssh"],"description":"Run on this machine (local) or a remote host (ssh)."},"host":{"description":"SSH host (required when mode=ssh).","type":"string"},"user":{"description":"SSH user (defaults to ssh config / current user).","type":"string"},"port":{"description":"SSH port.","type":"integer","exclusiveMinimum":0,"maximum":9007199254740991},"identityFile":{"description":"SSH private key path.","type":"string"},"cwd":{"description":"Working directory on the target.","type":"string"}},"required":["mode"],"description":"The machine to operate on: this host (local) or a remote host over SSH (ssh)."},"component":{"type":"string","description":"Component id from describe_workbench."},"workspace":{"description":"Profile repo directory (used by components whose removal needs it).","type":"string"},"confirm":{"description":"Set true to actually remove. When absent, the call returns a preview and makes no changes.","type":"boolean"},"dryRun":{"description":"Report the action without changing anything.","type":"boolean"}},"required":["target","component"],"$schema":"http://json-schema.org/draft-07/schema#"}},{"name":"run_auth_flow","description":"Return the acquisition plan for one credential on a target: the provider URL, the exact non-interactive command when one exists (e.g. `opencode auth login`, `opencode mcp auth vercel`, `gh auth login`), and whether it is already present. Read-only and value-blind: it emits guidance and re-checks presence with one read-only probe; it does not run the commands or handle secret values. Parameter semantics: `var` must be an env var name returned by list_required_credentials (unknown names error); `target` selects the machine and its `home` is where the value should be written. Use it for a single credential; it does not replace that listing.","write_action":true,"price_micros":0,"input_schema":{"type":"object","properties":{"target":{"type":"object","properties":{"mode":{"type":"string","enum":["local","ssh"],"description":"Run on this machine (local) or a remote host (ssh)."},"host":{"description":"SSH host (required when mode=ssh).","type":"string"},"user":{"description":"SSH user (defaults to ssh config / current user).","type":"string"},"port":{"description":"SSH port.","type":"integer","exclusiveMinimum":0,"maximum":9007199254740991},"identityFile":{"description":"SSH private key path.","type":"string"},"cwd":{"description":"Working directory on the target.","type":"string"}},"required":["mode"],"description":"The machine to operate on: this host (local) or a remote host over SSH (ssh)."},"var":{"type":"string","description":"Credential env var name from list_required_credentials (e.g. OPENCODE_API_KEY)."}},"required":["target","var"],"$schema":"http://json-schema.org/draft-07/schema#"}},{"name":"update_component","description":"Update one Workbench component in place by id: re-run its install script to fetch the current version (e.g. `opencode` re-runs the official installer; `npm-mcps` reinstalls the latest globals). It OVERWRITES the component's files, needs write permission, and can take minutes for global installs; the resolved version may change. Parameter semantics: `component` must be an id from describe_workbench; `workspace` defaults to `~/opencode-workbench`; `dryRun` previews; `confirm` defaults to false — set `confirm:true` to apply. For the whole profile use apply_clone.","write_action":true,"price_micros":0,"input_schema":{"type":"object","properties":{"target":{"type":"object","properties":{"mode":{"type":"string","enum":["local","ssh"],"description":"Run on this machine (local) or a remote host (ssh)."},"host":{"description":"SSH host (required when mode=ssh).","type":"string"},"user":{"description":"SSH user (defaults to ssh config / current user).","type":"string"},"port":{"description":"SSH port.","type":"integer","exclusiveMinimum":0,"maximum":9007199254740991},"identityFile":{"description":"SSH private key path.","type":"string"},"cwd":{"description":"Working directory on the target.","type":"string"}},"required":["mode"],"description":"The machine to operate on: this host (local) or a remote host over SSH (ssh)."},"component":{"type":"string","description":"Component id from describe_workbench."},"workspace":{"description":"Profile repo directory (used by components whose update needs it).","type":"string"},"confirm":{"description":"Set true to actually update. When absent, the call returns a preview and makes no changes.","type":"boolean"},"dryRun":{"description":"Report the action without changing anything.","type":"boolean"}},"required":["target","component"],"$schema":"http://json-schema.org/draft-07/schema#"}},{"name":"verify_clone","description":"Re-check a target after a clone: return a per-component `present`/`missing` list plus whether `opencode.json` and `~/.env.workbench` exist. Read-only and idempotent: it runs a detection probe (SSH or local) and checks files, writing nothing. `target` selects the machine (`local` or SSH) and its `home` is where the `opencode.json` and `~/.env.workbench` checks run; `components` restricts the check to those ids (omit it to check every component, the default); `workspace` sets the profile path used by component checks. Use it after apply_clone and after component changes; for a pre-clone preview use plan_clone.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"target":{"type":"object","properties":{"mode":{"type":"string","enum":["local","ssh"],"description":"Run on this machine (local) or a remote host (ssh)."},"host":{"description":"SSH host (required when mode=ssh).","type":"string"},"user":{"description":"SSH user (defaults to ssh config / current user).","type":"string"},"port":{"description":"SSH port.","type":"integer","exclusiveMinimum":0,"maximum":9007199254740991},"identityFile":{"description":"SSH private key path.","type":"string"},"cwd":{"description":"Working directory on the target.","type":"string"}},"required":["mode"],"description":"The machine to operate on: this host (local) or a remote host over SSH (ssh)."},"components":{"description":"Component ids to include; defaults to required+core.","type":"array","items":{"type":"string"}},"workspace":{"description":"Target directory for the profile repo.","type":"string"},"profileUrl":{"description":"Override profile git URL.","type":"string"},"skipRepo":{"description":"Do not clone/update the profile repo on the target.","type":"boolean"},"dryRun":{"description":"Report only; make no changes.","type":"boolean"}},"required":["target"],"$schema":"http://json-schema.org/draft-07/schema#"}}],"scan":{"score":81,"grade":"B","scanned_at":"2026-10-14T17:39:23.198Z","report":{"scannerVersion":"0.1.10","scannedAt":"2026-10-14T17:39:23.069Z","components":{"code":{"score":25,"max":25,"notes":["27 source files scanned"]},"reliability":{"score":20,"max":20,"notes":["remote reachable in 922ms"]},"poisoning":{"score":15,"max":15,"notes":["10 tool descriptions checked"]},"auth":{"score":3,"max":15,"notes":["open endpoint exposes 3 write-action tools with no auth"]},"maintenance":{"score":15,"max":15,"notes":["last push 0 days ago"]},"identity":{"score":3,"max":10,"notes":["namespace and repository owner differ"]}},"findings":[{"id":"auth.open-write","severity":"high","component":"auth","title":"Write-action tools reachable without authentication"}],"inputs":{"probes":[{"url":"https://opencode-workbench.simonmak.com/mcp","reachable":true,"authRequired":false,"latencyMs":922,"serverInfo":{"name":"opencode-workbench","version":"4.0.2"}}],"packages":[{"registryType":"npm","identifier":"@simonmak-ascent/opencode-workbench","version":"4.0.2","found":true,"license":"MIT","hasInstallScripts":false,"dependencyCount":3,"publishedAt":"2026-10-14T15:25:42.895Z","weeklyDownloads":94}],"repo":{"found":true,"owner":"simonmak-ascent","repo":"opencode-workbench","archived":false,"pushedAt":"2026-10-14T15:33:49Z","stars":1,"forks":0,"openIssues":0,"ownerType":"User","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/246365505?v=4","ownerCreatedAt":"2025-11-26T19:53:23Z","license":"MIT"},"icon":{"url":"https://opencode-workbench.simonmak.com/favicon.svg","source":"site"},"presence":{"stars":1,"forks":0,"downloadsWeek":94,"license":"MIT","lastPushAt":"2026-10-14T15:33:49.000Z","score":33}}}},"grade_history":[],"reviews":[]}