Agentsnap MCP server
Snapshot tests for AI tool-call traces: diff, validate, and catch silent regressions.
0 stars38 downloads/wk
Reviews
Write oneNobody has reviewed Agentsnap yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Agentsnap tools (3)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
diff_tracesDiff two normalized agentsnap traces and surface meaningful differences. Returns same=true on a structural match, otherwise lists additions (paths only present in current), removals (paths only present in baseline), and changes (paths whose values differ). Use ignore_paths to drop noisy fields (e.g. ["fingerprint","tools[0].result_hash"]) before classification.
normalize_traceCoerce an arbitrary tool-call trace (an array of {name,args} entries or a partial Trace object) into the canonical agentsnap Trace shape. Returns the normalized trace plus a SHA-256 fingerprint hash computed over the canonical (key-sorted) JSON, so two runs can be byte-compared cheaply.
validate_snapshotSanity-check a snapshot object against the agentsnap Trace schema. Verifies required fields (version, tools, fingerprint), tool-entry shape (name + args), and surfaces actionable issues. Returns valid=true on success, otherwise a list of human-readable issues.
Public scan report
scanner v0.1.9 · 2026-09-27 · same rubric, same numbers if you re-run it
- Code scan2 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 58 days ago12/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
How Agentsnap compares
Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 88/100
- higher than 75% of 48,273 servers
- Tools
- 3
- the typical server has 7
- Tools that change things
- 0%
- typical: 0%. Fewer write tools means less an agent can break
- Downloads a week
- 38
- more than 30% of 11,915 servers with a package
What its tools let an agent do: 3 read
Install Agentsnap in Claude Code, Cursor or VS Code
Runs npx -y @mukundakatta/agentsnap-mcp on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add agentsnap -- npx -y @mukundakatta/agentsnap-mcp
What the publisher says
From the Agentsnap repository's README, as published. We do not edit it. Read it on GitHub
agentsnap-mcp
An MCP server that gives AI assistants the ability to inspect, normalize, diff, and validate agent tool-call traces.
Built on top of @mukundakatta/agentsnap. Works with Claude Desktop, Cursor, Cline, Windsurf, Zed, and any other MCP client.
Tools exposed
normalize_trace
Coerce a raw tool-call trace into the canonical agentsnap Trace shape and compute a deterministic SHA-256 fingerprint hash. Use this to compare runs cheaply or feed downstream diff tools.
{
"trace": [
{ "name": "search", "args": { "q": "cats" } },
{ "name": "fetch", "args": "https://example.com" }
],
"input": "find cats",
"model": "claude-opus-4-7"
}{
"normalized": {
"version": 1,
"model": "claude-opus-4-7",
"input": "find cats",
"output": null,
"tools": [
{ "name": "search", "args": { "q": "cats" } },
{ "name": "fetch", "args": "https://example.com" }
],
"error": null,
"fingerprint": { "node": "v22.0.0", "agentsnap": "0.1.0" }
},
"hash": "sha256:..."
}diff_traces
Diff a baseline trace against a current run. Returns a uniform additions / removals / changes vocabulary plus the agentsnap status code (PASSED, OUTPUTDRIFT, TOOLSREORDERED, TOOLSCHANGED, REGRESSION). Use ignorepaths to silence noisy fields before classification.
{
"baseline": { "version": 1, "tools": [{ "name": "search", "args": { "q": "cats" }, "result_hash": "sha256:aaa" }], "error": null, "fingerprint": {...} },
"current": { "version": 1, "tools": [{ "name": "search", "args": { "q": "cats" }, "result_hash": "sha256:bbb" }], "error": null, "fingerprint": {...} },
"ignore_paths": ["tools[].result_hash"]
}→ { "same": true, "status": "PASSED", "additions": [], "removals": [], "changes": [] }
validate_snapshot
Sanity-check a snapshot against the agentsnap Trace schema. Verifies required fields, tool-entry shape, and surfaces actionable issues. Returns valid=true on success or a list of human-readable problems.
Install
Claude Desktop
Add to claudedesktopconfig.json:
{
"mcpServers": {
"agentsnap": {
"command": "npx",
"args": ["-y", "@mukundakatta/agentsnap-mcp"]
}
}
}Cursor / Cline / Windsurf / Zed
Same shape, in the appropriate mcp.json for your client. Most clients auto-discover via npx -y @mukundakatta/agentsnap-mcp.
Local install
npm install -g @mukundakatta/agentsnap-mcp
mcp-agentsnap # listens on stdioWhy this matters
Agents that call tools drift silently. A tool argument changes shape, a nondeterministic result flips a downstream branch, an extra tool sneaks in between releases — none of it shows up in unit tests. agentsnap captures the trace; this MCP server lets your assistant inspect and reason about traces directly: normalize one, diff two, or validate a saved snapshot, all from the model's tool-use surface.
License
MIT.
Nothing above is checked by us. What we check is on the safety report.
Agentsnap: common questions
- Is Agentsnap MCP server safe?
- Yes, by our scan: it is graded A (88/100). Read the Agentsnap safety report
- How do I install Agentsnap?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Agentsnap need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is Agentsnap maintained?
- The last commit was 93 days ago (2026-08-01). The latest release is v0.1.0.
- How does Agentsnap compare with other MCP servers?
- safety score 88/100 (higher than 75% of 48,273 servers); tools 3 (the typical server has 7); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.