MCP.Market

Wiff MCP server

by xxxoooxoxo·io.github.xxxoooxoxo/wiff·v0.9.1·5 stars

Deterministic, resumable multi-agent workflows across Codex, Claude, Cursor, and Kimi.

A92/100grade A
What users say
No reviews yet
Be the first
Safety scan
A92/100

full report

Adoption
Growing

5 stars68 downloads/wk

Reviews

Write one

Nobody has reviewed Wiff yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Wiff tools (5, 1 write)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • workflow_cancelwrite action

    Interrupt all live agents and mark a workflow run cancelled.

  • workflow_models

    List the models each agent backend (codex, claude, cursor, kimi) can run, with supported reasoning efforts. Backends that are unavailable on this machine report an error instead of models.

  • workflow_start

    Launch a deterministic JavaScript workflow in the background, or resume a previous run without repeating successful unchanged agent calls. User and project preferences are loaded from Wiff config. Always pass the caller's absolute working directory as cwd.

  • workflow_status

    Read the latest persisted status, phase, counters, result, and artifact paths for a workflow run.

  • workflow_wait

    Wait until a workflow changes state or the timeout elapses. Call repeatedly until the run is completed, failed, cancelled, or interrupted.

Public scan report

scanner v0.1.10 · 2026-10-02 · same rubric, same numbers if you re-run it

no findings
  • Code scan20 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 22 days ago15/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Overall 92/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Wiff compares

Against every graded AI and agents MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
92/100
higher than 90% of 4,460 AI and agents servers
Tools
5
the typical AI and agents server has 6
Tools that change things
20%
typical: 0%. Fewer write tools means less an agent can break
GitHub stars
5
more than 78% of 2,711 AI and agents servers
Downloads a week
68
more than 53% of 1,538 AI and agents servers with a package

What its tools let an agent do: 4 read · 1 change

Install Wiff in Claude Code, Cursor or VS Code

Runs npx -y @xxxoooxoxo/wiff on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add wiff -- npx -y @xxxoooxoxo/wiff
Add to Cursor

What the publisher says

From the Wiff repository's README, as published. We do not edit it. Read it on GitHub

wiff

Harness-agnostic, deterministic, resumable multi-agent workflows — written as plain JavaScript. Like wf, but wiff.

Fan a task out to a fleet of agents with a small script instead of a prayer. You write ordinary JavaScript with agent(), /goal stages, parallel(), and pipeline(); the runtime executes it in the background, journals every step, and — when a run dies halfway through — resumes it without re-paying for a single completed agent. A disposable MCP bridge talks to a persistent local daemon, so active workflows outlive the Codex, Claude Code, Cursor, or cron process that launched them while each child runs on Codex, Claude, Cursor, or Kimi.

export const meta = {
  name: "audit",
  description: "Audit files in parallel, fix confirmed issues in isolation",
  phases: [{ title: "Audit" }, { title: "Fix" }],
};

phase("Audit");
const findings = await parallel(
  args.files.map((file) => () =>
    agent(`Audit ${file} for auth bugs`, {
      key: `audit:${file}`,          // stable key → free replay on resume
      sandbox: "read-only",
      schema: findingSchema,          // structured JSON output
    }),
  ),
);

phase("Fix");
return await parallel(
  findings.filter((f) => f.real).map((f) => () =>
    agent(`Fix: ${f.summary}`, {
      key: `fix:${f.file}`,
      agentType: "surgeon",           // persona from .codex/agents/surgeon.md
      isolation: "worktree",          // own git worktree — parallel writes can't collide
      sandbox: "workspace-write",
    }),
  ),
);

When one stage must keep working until a condition is genuinely satisfied, make it a native Codex goal:

phase("Verify and repair");
await agent("/goal Make the unit tests pass and verify the final run.", {
  key: "tests-green",
  sandbox: "workspace-write",
  timeoutMs: 30 * 60 * 1_000,
});

Wiff holds the workflow at that statement and continues the same Codex thread while its goal is active. The next stage starts only after the worker marks the goal complete; blocked, paused, or limited goals fail explicitly.

Put durable preferences in ~/.wiff/config.json, with optional project overrides in /.wiff/config.json:

{
  "version": 1,
  "instructions": "Verify before reporting success.",
  "defaults": {
    "model": "claude-sonnet-5",
    "fallbackModels": ["gpt-5.6-sol"]
  },
  "rules": [
    {
      "name": "fix-until-green",
      "when": { "phase": ["Fix", "Repair"] },
      "goal": "Relevant tests must pass.",
      "options": {
        "model": "gpt-5.6-sol",
        "effort": "high"
      }
    }
  ]
}

Defaults fill missing agent options; matching rules are explicit user policy and override generated workflow options. Instructions are injected alongside the task, ordered fallback models may cross backends, and applicable preference changes invalidate cached results on resume.

Why

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Wiff: common questions

Is Wiff MCP server safe?
Yes, by our scan: it is graded A (92/100). Read the Wiff safety report
How do I install Wiff?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Wiff need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Wiff maintained?
The last commit was 55 days ago (2026-09-10). The latest release is v0.9.1.
What can I use instead of Wiff?
Servers from other publishers that do the same job: LLM Sandbox MCP server, PaperBanana MCP server and SuperCompress MCP server.
How does Wiff compare with other AI and agents MCP servers?
safety score 92/100 (higher than 90% of 4,460 AI and agents servers); tools 5 (the typical AI and agents server has 6); tools that change things 20% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to Wiff

Same job from other publishers: the closest match first, then the best rated.

  • LLM Sandbox
    Securely run LLM-generated code in isolated containers across 7 languages and 3 container backends.
    A
  • PaperBanana
    Generate academic diagrams and statistical plots from text using multi-agent AI.
    A
  • SuperCompress
    Compress coding-agent context ~64%. Hosted Neural Keep MCP for Cursor/Claude/Codex.
    B
  • OpenWorkProof
    Verifiable agent evidence; opt-in Codex guard and reference SOC alert review.
    A
  • Agent Lsp
    Orchestrates language servers into 65 code-intelligence tools across 32 languages, token-optimized.
    A