Mmcp.market

Ouroboros MCP server

by Q00·io.github.Q00/ouroboros·v0.51.5·6.1k stars
No reviews yet

Pins an acceptance spec; the verify command and expected output never enter the success contract.

C66/100grade C
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
C66/100

full report

Adoption
Widely used

6.1k stars29k downloads/wk

Reviews

Write one

Nobody has reviewed Ouroboros yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Ouroboros tools

No tool declarations could be read from the package source. They show once the server is installed.

Public scan report

scanner v0.1.9 · 2026-09-23 · same rubric, same numbers if you re-run it

1 high1 medium
  • Code scan619 source files scanned8/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 2 days ago15/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

Findings (2)

  • highWhole environment serialized (possible credential exfil)env.dump
    ouroboros_ai-0.51.5/src/ouroboros/cli/commands/mcp.py: …_cmd = 'python3 -c "import os,json,sys; json.dump(dict(os.environ), sys.stdout)"' if shell_name =…
  • mediumeval / new Function usedexec.eval
    ouroboros_ai-0.51.5/src/ouroboros/mcp/server/security.py: …, "os.system", "eval(", "exec(", "com…
Overall 66/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

Install Ouroboros in Claude Code, Cursor or VS Code

claude mcp add ouroboros -- uvx ouroboros-ai
Add to Cursor

What the publisher says

From the Ouroboros repository's README, as published. We do not edit it. Read it on GitHub

<!-- mcp-name: io.github.Q00/ouroboros --> English | 한국어 | 简体中文

◯ ─────────── ◯ O U R O B O R O S ◯ ─────────── ◯

It gets smarter on its own. We just hold the line. Skip the prompt engineering. The agent runs, fails, and gets smarter every generation. The grading command and expected result never make it into the success contract we hand it. The Agent OS for replayable AI coding workflows

Quick Start · Why · Results · How It Works · Commands · Philosophy · Guide

# macOS / Linux / WSL 2
curl -fsSL https://raw.githubusercontent.com/Q00/ouroboros/main/scripts/install.sh | OUROBOROS_INSTALL_REF=readme-hero bash
# Windows (PowerShell) — no Python needed; installs Git and uv for you
irm https://raw.githubusercontent.com/Q00/ouroboros/main/scripts/install.ps1 | iex

One command installs it. Then run ooo setup once inside your coding agent — details in Quick Start.

Separate runs, separate hosts. Different tasks on purpose — the engine is what is shared, not the prompt

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Ouroboros: common questions

Is Ouroboros MCP server safe?
With care: it is graded C, so read the findings first (66/100). Read the Ouroboros safety report
How do I install Ouroboros?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Ouroboros need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Ouroboros maintained?
The last commit was 22 days ago (2026-09-21). The latest release is v0.51.5.

More from Q00 →