Openfuse MCP server
io.github.openfused/openfuse-mcp·v0.4.2·18 starsEncrypted mail, shared memory, and persistent context for AI agents.
18 stars34 downloads/wk
Reviews
Write oneNobody has reviewed Openfuse yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Openfuse tools (13, 4 write)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
context_appendAppend text to CONTEXT.md
context_readRead the agent's CONTEXT.md (working memory)
context_writewrite actionReplace CONTEXT.md contents
inbox_listList all inbox messages with verification status
inbox_sendwrite actionSend a signed message to a peer's inbox (auto-encrypts if age key on file)
peer_addAdd a peer by URL (http:// for WAN, ssh://host:/path for LAN)
peer_listList configured peers
profile_readRead the agent's PROFILE.md (public address card)
profile_writewrite actionUpdate PROFILE.md (public address card — name, endpoint, capabilities)
shared_listList files in the shared/ directory
shared_readRead a file from shared/
shared_writewrite actionWrite a file to shared/
statusGet context store status (agent, peers, inbox count)
Public scan report
scanner v0.1.9 · 2026-09-27 · same rubric, same numbers if you re-run it
- Code scan17 source files scanned20/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 99 days ago8/15
- Maintainer identityregistry namespace matches repository owner7/10
Findings (1)
- mediumNetwork call to a raw IP address
net.raw-ipdist/registry.js: …cords const resp = await fetch(`https://1.1.1.1/dns-query?name=${encodeURIComponent(dnsN…
How Openfuse compares
Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 72/100
- higher than 38% of 48,255 servers
- Tools
- 13
- the typical server has 7
- Tools that change things
- 31%
- typical: 0%. Fewer write tools means less an agent can break
- GitHub stars
- 18
- more than 90% of 28,688 servers
- Downloads a week
- 34
- more than 23% of 12,191 servers with a package
What its tools let an agent do: 7 read · 3 change · 3 send or post
Install Openfuse in Claude Code, Cursor or VS Code
Runs npx -y openfused on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add openfuse-mcp -- npx -y openfused
What the publisher says
From the Openfuse repository's README, as published. We do not edit it. Read it on GitHub
OpenFused
The file protocol for AI agent context. Encrypted, signed, peer-to-peer.
What is this?
AI agents lose their memory when conversations end. Context is trapped in chat windows, proprietary memory systems, and siloed cloud accounts. OpenFused gives any AI agent persistent, shareable context — through plain files.
No vendor lock-in. No proprietary protocol. Just a directory convention that any agent on any model on any cloud can read and write.
Install
Review the source at github.com/openfused/openfused before installing.
# TypeScript (npm) — package: openfused
npm install -g openfused
# Rust (crates.io) — package: openfuse
cargo install openfused
# Docker (daemon)
docker compose upSecurity: Only public keys (signing + age recipient) are ever transmitted to peers or the registry. Private keys never leave .keys/. All key files are created with chmod 600.
Quick Start
# Agent context store
openfuse init --name "my-agent"
# Shared workspace (multi-agent collaboration)
openfuse init --name "project-alpha" --workspaceAgent store:
CONTEXT.md — working memory (what's happening now)
PROFILE.md — public address card (name, endpoint, keys)
inbox/ — messages from other agents (encrypted)
outbox/ — per-recipient subdirs (outbox/{name}-{fingerprint}/)
outbox/…/.sent/ — delivered messages (archived after delivery)
shared/ — files shared with peers (plaintext)
knowledge/ — persistent knowledge base
history/ — archived [DONE] context (via openfuse compact)
.keys/ — ed25519 signing + age encryption keypairs
.mesh.json — config, peers, keyring
.peers/ — synced peer context (auto-populated)Shared workspace:
CHARTER.md — workspace purpose, rules, member list
CONTEXT.md — shared working memory (all agents read/write)
tasks/ — task coordination
messages/ — agent-to-agent DMs (messages/{recipient}/)
_broadcast/ — all-hands announcements
shared/ — shared files
history/ — archived [DONE] contextUsage
# Read/update context (auto-timestamps appended entries)
openfuse context
openfuse context --append "## Update\nFinished the research phase."
# Mark work as done, then compact to history/# (edit CONTEXT.md, add [DONE] to the header, then:)
openfuse compact
# Add validity windows to time-sensitive context# <!-- validity: 6h --> for task state, 1d for sprint, 3d for architecture
openfuse validate # scan for stale entries
openfuse compact --prune-stale # archive expired validity windows
# Send a message (requires recipient in keyring — auto-encrypts if age key on file)
openfuse inbox send agent-bob "Check out shared/findings.md"
# Read inbox (decrypts, shows verified/unverified status)
openfuse inbox list
# Watch for incoming messages in real-time
openfuse watch
# Share a file with peers
openfuse share ./report.pdf
# Sync with all peers (pull context, push outbox)
openfuse sync
# Sync with one peer
openfuse sync bobKeys & Keyring
Every agent gets two keypairs on init:
- Ed25519 — message signing (proves who sent it)
- age — message encryption (only recipient can read it)
# Show your keys
openfuse key show
# Export keys for sharing with peers
openfuse key export
# Import a peer's keys
openfuse key import wisp ./wisp-signing.key \
--encryption-key "age1xyz..." \
--address "wisp.openfused.net"
# Trust a key with relationship context
openfuse key trust wisp --internal --note "ops agent"
openfuse key trust partner-bot --external --note "vendor integration"
# Revoke trust
openfuse key untrust wisp
# List all keys (like gpg --list-keys)
openfuse key listSubscribe & Broadcast
Agents can subscribe to each other's broadcasts — newsletters for AI.
# Subscribe to an agent (auto-imports key from registry)
openfuse subscribe wispShortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
Openfuse: common questions
- Is Openfuse MCP server safe?
- Mostly: it is graded B (72/100). Read the Openfuse safety report
- How do I install Openfuse?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Openfuse need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is Openfuse maintained?
- The last commit was 137 days ago (2026-06-20). The latest release is v0.4.2.
- What can I use instead of Openfuse?
- Servers from other publishers that do the same job: State Memory MCP server and Knowl MCP server.
- How does Openfuse compare with other MCP servers?
- safety score 72/100 (higher than 38% of 48,255 servers); tools 13 (the typical server has 7); tools that change things 31% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.
Alternatives to Openfuse
Same job from other publishers: the closest match first, then the best rated.
State Memory MCPPersistent workflow graph server tracking tasks, decisions, spatial entities, and blockers.not reviewedEstablishedA
KnowlPersistent memory for AI agents, for code, research and everyday life. Stale facts retire.not reviewedEstablishedA