Harflow MCP server

HarflowMCP

<!-- mcp-name: io.github.Harflow-Dev/harflow-mcp -->

HarflowMCP is a local MCP server that dispatches coding tasks to Claude Code, Codex, opencode, Vibe, and Antigravity. It provides persistent task history, bounded reads, cancellation, continuation, and reusable workflows. On measured Claude Code versions, callers can opt in to approving individual Bash, Read, Write and Edit requests one exact action at a time (see harness permissions), and can grant a task a bounded list of specific Bash commands with allowed_commands instead of unrestricted access (see dispatch-time command grants).

Current limits of these two features: they are qualified only on Claude Code 2.1.302 (Bash approvals) and 2.1.310; other backends refuse them. Approvals are not available to native workflow children, and a request unanswered after 1800 seconds (or at the node's attempt deadline) is rejected by Harflow, never approved. After a denial there is no approve-later path: recovery is always a new resumetask or continuetask execution guided by denialremedy (allowedcommands covers only Bash approvalrequired and chained-command parts; a denied Read, Write or Edit needs a resumed run so the agent can raise a fresh request; a denyrule cannot be lifted by grants). Retrying a permission-blocked workflow node with a narrow grant, approval notifications and Monitor presentation of approvals are not available yet. See harness permissions.

Vibe runs use its Python CLI entrypoint for headless dispatch; interactive takeover continues with the user's inherited environment.

Version 0.0.2 is under development and unreleased. Harflow, the companion macOS application, is maintained separately and prepares its own exact paired engine runtime. Its managed runtime and MCP registrations work independently of the app process; see the managed runtime guide.

Detached task owners preserve output capture and live input across MCP server restarts. Workflow scheduler recovery is explicit; see supervision and recovery. Recovered tasks disclose owner/process uncertainty and capture continuity. Qualified Claude transcripts can supply bounded display-only recovery activity; see public contracts. Live background wait bounds are persisted and configurable; see task continuation.

Use harflow-ctl version-info --json to inspect runtime identity and compatibility without initializing state. Engine operations require compatible Harflow state, task metadata, saved workflow definitions, workflow run documents and workflow ownership receipts. Known qualified storage lines migrate conservatively before new-line writes. Use harflow-ctl state-inspect --json to inspect an incompatible root without changing it, then explicitly confirm its state-recover proposal to retain a sibling backup and create fresh state. HARFLOWSTATEROOT can also select a separate fresh state directory; see state ownership and recovery for compatibility requirements.

Shortened. The full README is on GitHub.