MCP.Market

Openfuse MCP server

by openfused·io.github.openfused/openfuse-mcp·v0.4.2·18 stars

Encrypted mail, shared memory, and persistent context for AI agents.

B72/100grade B
What users say
No reviews yet
Be the first
Safety scan
B72/100

full report

Adoption
Growing

18 stars34 downloads/wk

Reviews

Write one

Nobody has reviewed Openfuse yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Openfuse tools (13, 4 write)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • context_append

    Append text to CONTEXT.md

  • context_read

    Read the agent's CONTEXT.md (working memory)

  • context_writewrite action

    Replace CONTEXT.md contents

  • inbox_list

    List all inbox messages with verification status

  • inbox_sendwrite action

    Send a signed message to a peer's inbox (auto-encrypts if age key on file)

  • peer_add

    Add a peer by URL (http:// for WAN, ssh://host:/path for LAN)

  • peer_list

    List configured peers

  • profile_read

    Read the agent's PROFILE.md (public address card)

  • profile_writewrite action

    Update PROFILE.md (public address card — name, endpoint, capabilities)

  • shared_list

    List files in the shared/ directory

  • shared_read

    Read a file from shared/

  • shared_writewrite action

    Write a file to shared/

  • status

    Get context store status (agent, peers, inbox count)

Public scan report

scanner v0.1.9 · 2026-09-27 · same rubric, same numbers if you re-run it

1 medium
  • Code scan17 source files scanned20/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 99 days ago8/15
  • Maintainer identityregistry namespace matches repository owner7/10

Findings (1)

  • mediumNetwork call to a raw IP addressnet.raw-ip
    dist/registry.js: …cords const resp = await fetch(`https://1.1.1.1/dns-query?name=${encodeURIComponent(dnsN…
Overall 72/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Openfuse compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
72/100
higher than 38% of 48,255 servers
Tools
13
the typical server has 7
Tools that change things
31%
typical: 0%. Fewer write tools means less an agent can break
GitHub stars
18
more than 90% of 28,688 servers
Downloads a week
34
more than 23% of 12,191 servers with a package

What its tools let an agent do: 7 read · 3 change · 3 send or post

Install Openfuse in Claude Code, Cursor or VS Code

Runs npx -y openfused on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add openfuse-mcp -- npx -y openfused
Add to Cursor

What the publisher says

From the Openfuse repository's README, as published. We do not edit it. Read it on GitHub

OpenFused

The file protocol for AI agent context. Encrypted, signed, peer-to-peer.

What is this?

AI agents lose their memory when conversations end. Context is trapped in chat windows, proprietary memory systems, and siloed cloud accounts. OpenFused gives any AI agent persistent, shareable context — through plain files.

No vendor lock-in. No proprietary protocol. Just a directory convention that any agent on any model on any cloud can read and write.

Install

Review the source at github.com/openfused/openfused before installing.

# TypeScript (npm) — package: openfused
npm install -g openfused

# Rust (crates.io) — package: openfuse
cargo install openfused

# Docker (daemon)
docker compose up

Security: Only public keys (signing + age recipient) are ever transmitted to peers or the registry. Private keys never leave .keys/. All key files are created with chmod 600.

Quick Start

# Agent context store
openfuse init --name "my-agent"

# Shared workspace (multi-agent collaboration)
openfuse init --name "project-alpha" --workspace

Agent store:

CONTEXT.md     — working memory (what's happening now)
PROFILE.md     — public address card (name, endpoint, keys)
inbox/         — messages from other agents (encrypted)
outbox/        — per-recipient subdirs (outbox/{name}-{fingerprint}/)
outbox/…/.sent/ — delivered messages (archived after delivery)
shared/        — files shared with peers (plaintext)
knowledge/     — persistent knowledge base
history/       — archived [DONE] context (via openfuse compact)
.keys/         — ed25519 signing + age encryption keypairs
.mesh.json     — config, peers, keyring
.peers/        — synced peer context (auto-populated)

Shared workspace:

CHARTER.md     — workspace purpose, rules, member list
CONTEXT.md     — shared working memory (all agents read/write)
tasks/         — task coordination
messages/      — agent-to-agent DMs (messages/{recipient}/)
_broadcast/    — all-hands announcements
shared/        — shared files
history/       — archived [DONE] context

Usage

# Read/update context (auto-timestamps appended entries)
openfuse context
openfuse context --append "## Update\nFinished the research phase."

# Mark work as done, then compact to history/# (edit CONTEXT.md, add [DONE] to the header, then:)
openfuse compact

# Add validity windows to time-sensitive context# <!-- validity: 6h --> for task state, 1d for sprint, 3d for architecture
openfuse validate                    # scan for stale entries
openfuse compact --prune-stale       # archive expired validity windows

# Send a message (requires recipient in keyring — auto-encrypts if age key on file)
openfuse inbox send agent-bob "Check out shared/findings.md"

# Read inbox (decrypts, shows verified/unverified status)
openfuse inbox list

# Watch for incoming messages in real-time
openfuse watch

# Share a file with peers
openfuse share ./report.pdf

# Sync with all peers (pull context, push outbox)
openfuse sync

# Sync with one peer
openfuse sync bob

Keys & Keyring

Every agent gets two keypairs on init:

  • Ed25519 — message signing (proves who sent it)
  • age — message encryption (only recipient can read it)
# Show your keys
openfuse key show

# Export keys for sharing with peers
openfuse key export

# Import a peer's keys
openfuse key import wisp ./wisp-signing.key \
  --encryption-key "age1xyz..." \
  --address "wisp.openfused.net"

# Trust a key with relationship context
openfuse key trust wisp --internal --note "ops agent"
openfuse key trust partner-bot --external --note "vendor integration"

# Revoke trust
openfuse key untrust wisp

# List all keys (like gpg --list-keys)
openfuse key list

Subscribe & Broadcast

Agents can subscribe to each other's broadcasts — newsletters for AI.

# Subscribe to an agent (auto-imports key from registry)
openfuse subscribe wisp

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Openfuse: common questions

Is Openfuse MCP server safe?
Mostly: it is graded B (72/100). Read the Openfuse safety report
How do I install Openfuse?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Openfuse need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Openfuse maintained?
The last commit was 137 days ago (2026-06-20). The latest release is v0.4.2.
What can I use instead of Openfuse?
Servers from other publishers that do the same job: State Memory MCP server and Knowl MCP server.
How does Openfuse compare with other MCP servers?
safety score 72/100 (higher than 38% of 48,255 servers); tools 13 (the typical server has 7); tools that change things 31% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to Openfuse

Same job from other publishers: the closest match first, then the best rated.

  • State Memory MCP
    Persistent workflow graph server tracking tasks, decisions, spatial entities, and blockers.
    A
  • Knowl
    Persistent memory for AI agents, for code, research and everyday life. Stale facts retire.
    A