Sidecrew MCP server
io.github.lvlrSajjad/sidecrew·v0.2.0Code changes and unit tests by local MLX models, behind a gate a machine can run.
0 stars55 downloads/wk
Reviews
Write oneNobody has reviewed Sidecrew yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Sidecrew tools (10, 2 write)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
sidecrew_escalateWhat the local workers could not do, assembled for you to write yourself. Reads
sidecrew_fixwrite actionRun a whole change plan on this machine: workload #2a, behaviour-preserving changes — type errors,
sidecrew_fix_escalateWhat the local workers could not change, assembled for you to do yourself. Reads a fix run's
sidecrew_fix_plan_validateCheck a change_plan.json before a run spends anything on it, and REFUSE the tasks no worker could
sidecrew_generateOne WorkerTask -> one candidate test, generated by the MLX model running on this machine.
sidecrew_plan_validateCheck a test_plan.json before a run spends anything on it: it parses, its module and exemplars are
sidecrew_reviewWhich survivors are worth reading, and in what batches. Survival is a filter, not an endorsement —
sidecrew_run_batchwrite actionRun a whole plan on this machine: for every function x shape, generate -> verify -> retry once
sidecrew_statusIs a local worker up, which model and revision it is serving, free RAM, and which verifier tools
sidecrew_verifycompile -> run -> mutate one candidate against the function its task_id names, and return a Verdict.
Public scan report
scanner v0.1.10 · 2026-10-31 · same rubric, same numbers if you re-run it
- Code scan79 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 36 days ago12/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
How Sidecrew compares
Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 88/100
- higher than 75% of 48,255 servers
- Tools
- 10
- the typical server has 7
- Tools that change things
- 20%
- typical: 0%. Fewer write tools means less an agent can break
- Downloads a week
- 55
- more than 46% of 12,191 servers with a package
What its tools let an agent do: 8 read · 2 change
Release history: 2 versions in the registry since 2026-09-21, latest 2026-09-24, typically one every 3 days.
Install Sidecrew in Claude Code, Cursor or VS Code
Runs npx -y sidecrew on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add sidecrew -- npx -y sidecrew
What the publisher says
From the Sidecrew repository's README, as published. We do not edit it. Read it on GitHub
sidecrew
You ask for a change to your source code, and you get it — made on your Mac, by models that cost you no Claude tokens, and only after a machine has checked it.
Claude Opus plans the work and reviews what came back. Small models running locally (MLX, no network) do the narrow parts. Between them sits a gate a machine can run — for a code change: the diff stayed where it was asked to, tsc is clean, and every test that passed before still passes. Claude never sees anything that did not survive it.
$ sidecrew fix change_plan.json
fix 2026-09-20T09-14-02Z-rename: 1 step, 12 tasks, 13.0 GB free ÷ 6.5 GB per slot = 2; 1 worker up
step 1/1 "rename the helper": capturing the baseline
rename-01: survived (src/util/asset.util.ts)
rename-02: survived (src/util/asset.util.ts, src/util/asset.util.spec.ts)
…
multi-06: failed at compile · escalating — renamed the symbol 7 times over, 5 compile errors
11/12 survived · 0 → 0 tsc errors · .sidecrew/runs/2026-09-20T09-14-02Z-rename/result.jsonIllustrative shape, not a captured transcript — it is the real output format with the counts from the React measurement below, and no client's file names. 11 of 12 with a 95 % interval of [0.615, 0.998] is the number; the line above is what it looks like while it runs.
Unit tests are workload #1 — the same shape with a mutation-kill gate instead — and the numbers for both are below, each with its interval.
sidecrew needs 24 GB of installed RAM. Below that a 7B cannot sit beside a normal working set (measured), so sidecrew refuses to run and tells you why rather than quietly becoming a different tool (ADR-0073). sidecrew doctor answers this before you plan anything.
And the other half of the ledger, measured 19–20 Sep 2026: the workers are free, the coordination is not. Opus planning costs 8,400–22,100 tokens per task, depending almost entirely on how many tasks are in the plan — see What this costs to run below. A page that says "the work is free" without saying that is telling you half of it.
Before any number below: how tightly to read it
Every rate on this page is an interval, never a point, and the reason is measured. Replaying a frontier model's own diffs — which the gate finds no defect in — through the gate a second time, it disagreed with itself on 2 of 19 candidates: D = 0.105, 95 % interval [0.013, 0.331] (experiments/gate-error-rate/, against a rule frozen before the first replay). That rule's own verdict at D > 0.10 is UNACCEPTABLE, and its consequence is this paragraph: no survival rate here is published as a bare fraction, D travels beside each of them, and no two of our rates are compared without asking whether their difference survives it.
What that does and does not damage. D counts the gate refusing changes that were fine. Nothing in it is evidence of the gate admitting something bad. So:
The gate admits nothing that fails — stands.
The gate refuses only things that fail — **measured false, at roughly one evaluation in ten, and
unproven at any tighter bound.**
Two of the three known causes are now recorded on every verdict — memory pressure (ADR-0066) and a baseline captured on a different calendar day (ADR-0069). The third is undiagnosed, and both measured disagreements happened on a quiet machine, so it is neither of the first two. D was measured on workload #2a's gate; it says nothing about workload #1's mutation gate, which is a different oracle (§4.4 of the rule).
Workload #2a — behaviour-preserving changes, measured
Against a decision rule frozen before the tool had produced a single verdict (experiments/go-no-go-2a/results/REPORT.md). S is survival, A is a blind reviewer's approval of the diff. Every cell is k/n with its exact 95 % interval; D = 0.105 [0.013, 0.331] applies to every S.
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
Sidecrew: common questions
- Is Sidecrew MCP server safe?
- Yes, by our scan: it is graded A (88/100). Read the Sidecrew safety report
- How do I install Sidecrew?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Sidecrew need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is Sidecrew maintained?
- The last commit was 40 days ago (2026-09-25). The latest release is v0.2.0.
- How does Sidecrew compare with other MCP servers?
- safety score 88/100 (higher than 75% of 48,255 servers); tools 10 (the typical server has 7); tools that change things 20% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.