{
  "slug": "anythingmcp",
  "repo": "HelpCode-ai/anythingmcp",
  "name": "anythingmcp",
  "tagline": "Company brain for AI agents as MCP gateway. Connect your infrastructure and services, APIs, databases, file servers, memory, skills and knowledge graph to Claude, ChatGPT, Gemini and Microsoft Copilot. With SSO/RBAC, audit, user roles and self learning. 600+ predefined connectors (SAP, Odoo, Telegram …). ",
  "category": "ai-agents",
  "license_spdx": "AGPL-3.0",
  "stars": 756,
  "contributors": 11,
  "last_push_days": 0,
  "latest_release": "main",
  "safety_score": 85.5,
  "verdict": "healthy",
  "risk_reasons": [
    "Active developer activity and positive OpenSSF Scorecard evaluation."
  ],
  "scorecard": 8.6,
  "components": {
    "security_health": 88,
    "maintenance": 94,
    "community": 68,
    "releases": 86
  },
  "language": "TypeScript",
  "self_host_difficulty": "Medium",
  "install_commands": {
    "clone": "git clone https://github.com/HelpCode-ai/anythingmcp.git"
  },
  "website_url": "https://anythingmcp.com",
  "ai_report": "### Autonomous Evaluation Report: anythingmcp\n\n**Category:** ai-agents | **Self-Host Difficulty:** Medium | **Safety Score:** 86/100 (HEALTHY)\n\n#### 1. Architecture & Maintenance Cadence\nanythingmcp is an active open-source software project tracked under `HelpCode-ai/anythingmcp`. Maintenance telemetry scores 94/100 and community trust scores 68/100 based on repository activity and contributor adoption. The codebase is distributed under the `AGPL-3.0` open-source license.\n\n#### 2. Security Health & Supply-Chain Signals\nSecurity health is rated at 88/100 based on licensing compliance, commit hygiene, and issue response indicators. Release cadence discipline is evaluated at 86/100.\n\n#### 3. Key Observations & Operational Risk\n- **Notice:** Autonomous execution surface: inspect prompt injection boundaries and tool privileges before granting shell/network access.\n\n#### 4. Deployment Guidance\nRecommended for production deployment and self-hosting. Run containerized with unprivileged user permissions (non-root UID) and enforce reverse proxy authentication.",
  "ai_report_status": "approved",
  "scanned_at": "2026-11-06T08:59:15.758Z",
  "unlisted": false,
  "archived": false,
  "advisories_count": 0,
  "provenance": "Autonomous Heuristic Audit: Security Health 88 · Maintenance 94",
  "permission_model": {
    "asks_before_destructive": true,
    "approval_prompt_detail": "Requires explicit user confirmation before destructive execution.",
    "execution_environment": "MCP Host Sandbox / Stdio Protocol",
    "filesystem_access": "Scoped Tool Working Directory",
    "network_access": "Outbound HTTPS to configured LLM provider and tool endpoints",
    "verdict": "anythingmcp implements standard agent safety controls with isolated process execution.",
    "review_status": "approved"
  },
  "use_cases": [
    "Deploy anythingmcp in secure environments",
    "Integrate with developer and agent workflows"
  ],
  "audience": {
    "perfectFor": [
      "DevSecOps teams",
      "Homelab administrators",
      "Software engineers"
    ],
    "skipIf": [
      "Teams requiring proprietary vendor warranties"
    ]
  },
  "setup_steps": {
    "status": "failed",
    "steps": [],
    "source_url": "https://github.com/HelpCode-ai/anythingmcp#readme",
    "model": "ag/gemini-3.8-flash-high",
    "written_at": "2026-11-05T17:58:41.950Z",
    "reason": "pipes a download into a shell"
  },
  "skill_check": {
    "ok": true,
    "findings": [],
    "checked_at": "2026-11-05T21:12:36.931Z"
  }
}