Sandbox
@uvwt/agentdock

MCP runtime for agents on local machines and servers

AgentDock runs as an MCP service that exposes file, shell, Git, browser, desktop, and task tools to connected agents. You can point a client like ChatGPT, Claude, or Codex at it and coordinate work across one or more machines with access controls and persistent task state.

784 stars93 forksGoUpdated 6d ago
Who it's for

Builders who want their agent to work across local devices, servers, and containers through MCP.

What it delivers

You can let an agent do real work on real machines without switching contexts or handing over full system access.

What it does

File and command tools

Reads, searches, and edits text files, runs commands with timeouts, and separates stdout, stderr, and exit status.

Multi-device orchestration

Connects multiple AgentDock instances so one conversation can coordinate work across computers and servers.

Skills and dynamic MCP

Installs, activates, rolls back, and manages Skills, and registers, enables, or removes dynamic MCP servers.

Native ACP support

Can act as an ACP client and host local coding-agent adapters with session and prompt controls.

Browser and desktop automation

Opens browser sessions, clicks, types, waits, inspects responses, and uses desktop automation on macOS.

Recoverable tasks

Stores task state, checkpoints, blockers, and completion checks so interrupted work can resume later.

Authentication and boundaries

Supports bearer tokens or OAuth, path boundaries, private-directory protection, and redaction for sensitive output.

How to get it

  1. 1Run the full check before submitting code
    make check

README

English | 简体中文

AgentDock logo

AgentDock MCP

Give AI agents secure, controlled access to every machine you operate.

Open ChatGPT in your browser and manage multiple computers and servers from one conversation. Write code, change configuration, run commands, and deploy in the real environment where the work belongs—without consuming a dedicated Codex coding quota.

uvwt%2Fagentdock | Trendshift

Documentation · Download · Community

CI GitHub Release Docker Hub GHCR License

AgentDock: operate multiple devices from one AI conversation

What is AgentDock?

AgentDock is an independent tool runtime for AI agents.

It provides unified, secure, and controlled file, command, Git, Skill, MCP, browser automation, and task execution across local computers, remote servers, and containers. Connect multiple AgentDock instances to coordinate work across devices and finish multi-machine workflows in a single conversation.

AgentDock does not provide a chat interface or perform model inference. It focuses on one responsibility:

Let AI agents operate real environments within explicit permission boundaries and return structured, traceable, and verifiable results.

              ChatGPT / Claude / Codex
                        │
                        │ MCP (multiple instances supported)
          ┌─────────────┼─────────────┐
          ▼             ▼             ▼
   ┌───────────┐ ┌───────────┐ ┌───────────┐
   │ AgentDock │ │ AgentDock │ │ AgentDock │
   │ Local Mac │ │ LAN Host  │ │ Cloud VPS │
   └─────┬─────┘ └─────┬─────┘ └─────┬─────┘
         │             │             │
         ▼             ▼             ▼
   Files · Shell · Git  Tunnels       Proxy · Deploy

What can AgentDock do?

  • Manage multiple computers and servers directly from ChatGPT without repeatedly switching SSH sessions
  • Write code, modify projects, run tests, and operate Git in the real local or remote environment without depending on a dedicated coding-agent quota
  • Manage VPS hosts, Docker services, reverse proxies, and deployment configuration
  • Inspect logs, processes, ports, and actual runtime state
  • Operate authenticated web pages and macOS desktop applications
  • Connect multiple AgentDock instances and coordinate cross-device work in one conversation
  • Extend capabilities through Skills and dynamic MCP servers
  • Persist long-running task state and continue after an interruption
  • Use the same tool model across macOS, Linux, Windows, and containers
  • And more

Quick start

Regular users can install AgentDock from the official package for their operating system. You do not need the source code or Go.

See Install AgentDock for the complete instructions.

PlatformDocumentation
DockerDocker installation
LinuxAutomated Linux installation
Linux / VPSManual systemd deployment
macOSmacOS installation
WindowsGraphical Windows installer

Choose a connection option

  • Local only: the client and AgentDock run on the same computer.
  • Temporary public address: ChatGPT, a phone, or another remote device needs access and no domain is ready. The address may change after the Tunnel restarts.
  • Fixed domain: a stable address for long-term use. Requires a Cloudflare-managed domain and Tunnel Token.

After installation, get the MCP URL and Bearer Token or OAuth sign-in details from the control panel or terminal, then add them to the MCP, Tools, or Connectors settings in your client. Public access must keep authentication enabled. Do not include credentials in screenshots, issues, or public conversations.

Connect an AI client

AgentDock exposes tools over MCP Streamable HTTP. The exact client syntax varies, but a typical configuration looks like this:

{
  "mcpServers": {
    "agentdock": {
      "url": "http://127.0.0.1:8765/mcp",
      "headers": {
        "Authorization": "Bearer <AGENTDOCK_AUTH_TOKEN>"
      }
    }
  }
}

Core capabilities

Files and commands

  • Read and search UTF-8 text, traverse directories, and apply structured edits
  • Atomic file writes, path boundaries, and private-directory protection
  • Command execution with timeout and output limits
  • Separate stdout, stderr, and exit status
  • Long-running command sessions, PTY, observation, input, and termination
  • Output truncation and sensitive-value redaction
  • macOS, Linux, Windows, and WSL support

Skills and dynamic MCP

Official and community Skill sources live in uvwt/agentdock-skills. This repository only keeps core Skills that must ship with the AgentDock runtime, including bootstrap/security Skills and the built-in agentdock-user-guide official user guide.

  • Validate, install, uninstall, activate, and roll back Skill packages
  • Stable, development, canary, and pinned release channels
  • Isolated environment variables and runtimes for each Skill
  • Register, enable, disable, refresh, and remove dynamic MCP servers
  • Streamable HTTP and stdio transports
  • Search tools, inspect schemas, and perform controlled calls
  • Configuration isolation between MCP servers

Native ACP

AgentDock can optionally act as a native ACP client and host a local coding-agent adapter.

  • Desktop control panels provide presets for Codex, Claude, and Grok; host configuration controls whether ACP is enabled and which adapter is selected.
  • Use acp_session to create and manage sessions, acp_prompt to run and observe prompts, and acp_interaction to answer agent permission requests.
  • Optional ACP operations are available only when the connected adapter advertises the corresponding capability.
  • ACP working directories follow the host process or container security boundary rather than an AgentDock filesystem allowlist.

Browser and desktop automation

  • Start, close, and clean up browser sessions
  • Navigate, click, type, select, and wait
  • Inspect page text, interactive elements, errors, and network responses
  • Persist login state, use dedicated browser profiles, and capture screenshots
  • Use system Chrome and macOS desktop automation

Recoverable tasks

  • Persist task state
  • Define explicit goals, steps, and completion conditions
  • Record staged checkpoints
  • Track blockers and resume after interruption
  • Perform final review and evidence-based completion checks
  • Reuse workflow templates

Recall and NexusDock integration

AgentDock can optionally pair with NexusDock as a multi-device aggregation entrypoint:

  • Long-term project memory
  • Runbooks and experience records
  • Workflow templates
  • Private notes
  • Multi-device state coordination
  • Temporary signed Artifact downloads proxied by NexusDock while the source node is online

Runtime directories

PathPurpose
~/AgentDockDefault working directory for relative file operations
~/.agentdockAgentDock state, configuration, sessions, and extension data

Ports

Default MCP URL for Docker, native installs, and local development:

http://127.0.0.1:8765/mcp

Ports are configurable. Clients must use the address defined by the actual deployment.

For public deployments, enable Bearer Token or OAuth authentication and use HTTPS. Never expose an unauthenticated MCP service to the public internet.

Development and contribution

Run the full check before submitting code:

make check

GitHub Actions continuously run tests, static checks, builds, and release validation.

User documentation is maintained separately in uvwt/agentdock-docs. Changes to user-visible behavior, configuration, installation, or tool schemas should update the matching documentation in the same change set.

Changes involving device pairing, cross-node tool routing, Recall, or Workflow integrations may also require coordinated changes in uvwt/nexusdock. The shared protocol is maintained in uvwt/agentdock-protocol. When changing shared interfaces or data structures, update the protocol definitions first, then align both implementations and their protocol dependency versions, check compatibility, update the corresponding documentation, and link related cross-repository changes in the PR.

Submit bugs and feature requests through GitHub Issues.

Support the project

If AgentDock helps you, please consider giving it a Star ⭐. Thank you for your support

WeChatAlipay
WeChat donation QR codeAlipay donation QR code

Star History

Star History Chart

Related links

License

Apache License 2.0. See LICENSE.

Community

Join the QQ group (1081337019)

Files in the repo

Repository payload21 top-level entries
  • .github
  • cmd
  • core-skills
  • desktop
  • docs
  • internal
  • packaging
  • scripts
  • .dockerignore
  • .env.example
  • .gitattributes
  • .gitignore
  • docker-compose.yml
  • docker-entrypoint.sh
  • Dockerfile
  • go.mod
  • go.sum
  • LICENSE
  • Makefile
  • README.md
  • README.zh-CN.md

Discussion (0)

Ask about usage, or say what you built with it

Sign in to join the discussion.

No comments yet. Be the first to say what this is good for.

More connectors

High-performance code intelligence MCP server. Indexes codebases into a persistent knowledge graph — average repo in milliseconds. 158 languages, sub-ms queries, 99% fewer tokens. Single static binary, zero dependencies.

43k

Universal provider proxy for OpenAI Codex & Claude Code — use any LLM (Claude, Gemini, Grok, DeepSeek, Ollama…) with Codex CLI, App, SDK, and Claude Code

14k
okf-memory/
okf-agent-memory

Git-native persistent memory for AI coding agents. Implements Google OKF v0.2 with sub-300µs in-memory BM25 search, embedded MCP server, and progressive disclosure. Slashes token bloat by 80% with zero external databases or dependencies. Built in pure Go.

547
tirth8205/
code-review-graph

Local-first code intelligence graph for MCP and CLI. Builds a persistent map of your codebase so AI coding tools read only what matters, with benchmarked context reductions on reviews and large-repo workflows.

31k
2akouwu/
reverify

Stop your AI from making things up — it proposes, deterministic tools decide, every claim checked against ground truth with evidence. Grounded facts and context survive resets. Reverse engineering is the proving ground. MCP server + CLI.

1.1k
t8y2/dbxConnectors

20 MB lightweight cross-platform database client for 90+ databases, including MySQL, PostgreSQL, SQLite, Redis, MongoDB, DuckDB, SQL Server, and Dameng. Built-in AI, MCP Server, CLI, desktop and Docker. | 轻量级跨平台数据库管理工具,支持 MySQL、PostgreSQL、SQLite、Redis、MongoDB、达梦等 90+ 数据库,提供桌面端、Docker、CLI、内置 AI 助手和 MCP Server。

19k