{ "data": { "a": { "slug": "git-reference-server", "name": "Git (MCP reference server)", "vendor": "MCP project (reference servers)", "vendorUrl": "https://modelcontextprotocol.io", "kind": "mcp", "category": "code", "summary": "Python reference server for reading and changing local Git repositories through twelve tools (status, staged and unstaged diffs, diff against a ref, add, commit, reset, log, create branch, checkout, show, branch list). `git_init` was removed in September 2025.", "url": "https://www.anchorterminal.com/tools/git-reference-server", "markdownUrl": "https://www.anchorterminal.com/tools/git-reference-server.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/git-reference-server.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/git-reference-server.json", "repo": "https://github.com/modelcontextprotocol/servers", "license": "MIT and Apache-2.0", "transports": [ "stdio" ], "packages": [ { "registry": "pypi", "name": "mcp-server-git" }, { "registry": "oci", "name": "mcp/git" } ], "auth": "none", "authNotes": "Local process operating on a repository path.", "pricing": "free", "pricingNotes": "Open source.", "priceSummary": "Free · OSS", "where": "local", "x402": { "level": "no", "evidence": "Local reference server, no payments.", "endpoints": [] }, "toolCount": 12, "popularity": { "githubStars": 90000, "npmWeekly": null, "pypiWeekly": 41433, "asOf": "2026-09-26" }, "docsUrl": "https://github.com/modelcontextprotocol/servers/blob/main/src/git/README.md", "capabilities": [ "code.git" ], "tags": [ "reference", "local", "open-source", "python" ], "lastRelease": "2026-08-18", "graded": true, "disclosure": "MCP started at Anthropic, which makes the Claude models our research agents and review panel run on (Anthropic donated it to the Agentic AI Foundation, a directed fund under the Linux Foundation, in December 2025), and this server is graded by the same checklist as every other listing.", "anchor": { "graded": true, "score": 52.1, "grade": "D", "agentReady": false, "rank": 892, "ranked": true, "rankOf": 1239, "categoryRank": 13, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 69, "maintenance": 39, "payments": 60, "reliability": 55, "schema": 61, "security": 37, "transparency": 75 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-01" }, "negative": -4, "negativeNotes": [ "2025-12-17: three advisories for mcp-server-git published together, argument injection in `git_diff` and `git_checkout` that could overwrite local files (GHSA-9xwc-hfwc-8w59), missing path validation with `--repository` (GHSA-j22h-9j4x-23w5) and `git_init` creating repositories anywhere (GHSA-5cgr-j3jf-jw3v). Fixed in 2025.12.18 and disclosed in public, so the deduction is reduced (https://github.com/modelcontextprotocol/servers/security/advisories).", "2026-02-25: path traversal in `git_add` let files outside the repository be staged (GHSA-vjqx-cfc4-9h6v), fixed in 2026.1.14 before publication (https://github.com/modelcontextprotocol/servers/security/advisories)." ], "verdict": "Twelve tools of about 1,400 tokens in total, each with `readOnlyHint` or `destructiveHint` set. Four advisories in the last year (argument injection, path validation, `git_init`, `git_add` traversal), all fixed.", "bestFor": "Local commit loops in a sandboxed checkout where an agent stages, commits and branches.", "disclosure": "MCP started at Anthropic, which makes the Claude models our research agents and review panel run on (Anthropic donated it to the Agentic AI Foundation, a directed fund under the Linux Foundation, in December 2025), and this server is graded by the same checklist as every other listing.", "strengths": [ "Twelve tools of about 1,400 tokens in total, each with `readOnlyHint` or `destructiveHint` set", "`--repository` and MCP roots confine every call to allowed paths, with checks hardened after the December 2025 advisories", "Refs and paths starting with `-` are rejected, closing the argument-injection class", "No credentials, no network calls and no telemetry" ], "weaknesses": [ "Four advisories in the last year (argument injection, path validation, `git_init`, `git_add` traversal), all fixed", "SECURITY.md says the repository isn't eligible for vulnerability reports", "Classed beta and described as early development, pinned to MCP SDK 1.x", "No push, fetch or remote operations, and no read-only mode", "Two releases since July and no entry in the official MCP registry" ], "agentNotes": [ "Pass `repo_path` on every call, even when the server was started with `--repository`", "Use `git_diff_staged` before `git_commit`; commit takes whatever is staged and can't be undone through the server", "Set `max_count` and a date range on `git_log`; diffs and `git_show` have no size cap", "Send `branch_type` as one of `local`, `remote` or `all`; anything else returns an error string, not a schema error", "Push with another tool; this server has no remote operations" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 2, "avgRating": 2.5, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "D", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 52.1 } ], "editorialScores": { "ergonomics": 69, "maintenance": 39, "payments": 60, "reliability": 55, "schema": 61, "security": 37, "transparency": 76 }, "provenanceScore": 74, "checked": { "categories": { "ergonomics": "2026-10-01", "maintenance": "2026-10-01", "payments": "2026-10-01", "reliability": "2026-10-01", "schema": "2026-10-01", "security": "2026-10-01", "transparency": "2026-10-01" }, "last": "2026-10-01", "lastMoved": "2026-10-27", "oldest": "2026-10-01", "stale": false, "staleAfterDays": 90 } }, "connect": { "claudeCode": "claude mcp add git -- uvx mcp-server-git --repository /path/to/repo", "config": { "mcpServers": { "git": { "args": [ "mcp-server-git", "--repository", "/path/to/repo" ], "command": "uvx" } } } }, "letme": { "capability": "https://letme.dev/code.git", "tool": "https://letme.dev/git-reference-server" }, "sameCompany": [ "fetch-reference-server", "puppeteer-reference-server-archived", "filesystem-reference-server", "memory-reference-server", "postgres-reference-server-archived", "sequential-thinking-reference-server" ], "area": "developer", "provenance": { "legalEntity": "Model Context Protocol, a Series of LF Projects, LLC", "domain": "modelcontextprotocol.io", "domainRegistered": "2024-11-18", "endpointOnVendorDomain": null, "terms": "https://www.lfprojects.org/policies/terms-of-use/", "privacy": "https://www.lfprojects.org/policies/privacy-policy/", "statusPage": "", "changelog": "https://github.com/modelcontextprotocol/servers/releases", "securityTxt": "valid", "checked": "2026-09-26", "score": 74 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/git-reference-server.json", "live": { "slug": "git-reference-server", "versions": [ { "registry": "github", "name": "modelcontextprotocol/servers", "version": "v2.2.0", "released": "2026-10-28", "seenAt": "2026-10-30T14:14:44.752916751Z" }, { "registry": "pypi", "name": "mcp-server-git", "version": "2026.10.28", "released": "2026-10-28", "seenAt": "2026-10-30T14:14:44.64101986Z" } ], "githubStars": 91694, "pypiWeekly": 98271, "securityTxt": { "url": "https://modelcontextprotocol.io/.well-known/security.txt", "state": "valid", "checkedAt": "2026-10-30T15:39:36.19076519Z" }, "domain": { "domain": "modelcontextprotocol.io", "checkedAt": "2026-10-25T14:02:39.415294808Z" }, "github": { "repo": "modelcontextprotocol/servers", "checkedAt": "2026-10-26T07:47:31.838523183Z", "stars": 91569, "archived": false, "issuesEnabled": true, "pushedAt": "2026-10-25T05:26:36Z", "openIssues": 128, "openPRs": 23, "issuesOpened90d": 266, "issuesClosed90d": 457, "prsMerged90d": 186, "ci": { "branch": "main", "runs": 50, "success": 44, "failure": 0, "other": 6, "latest": "success", "latestAt": "2026-10-24T23:43:05Z" }, "advisories": [ { "ghsa": "GHSA-mvf5-2qqv-rg3c", "severity": "medium", "published": "2026-10-25T00:19:52Z" }, { "ghsa": "GHSA-hhwq-wxfx-cj7g", "severity": "low", "published": "2026-10-25T00:19:37Z" }, { "ghsa": "GHSA-53mr-w429-c597", "severity": "low", "published": "2026-10-25T00:19:21Z" }, { "ghsa": "GHSA-v38p-wf49-hx2j", "severity": "medium", "published": "2026-10-25T00:19:06Z" }, { "ghsa": "GHSA-66qx-2266-pmj6", "severity": "low", "published": "2026-10-25T00:18:52Z" }, { "ghsa": "GHSA-7rgq-gccq-qphx", "severity": "medium", "published": "2026-10-25T00:18:38Z" }, { "ghsa": "GHSA-4gxg-m5jx-9j57", "severity": "medium", "published": "2026-10-25T00:18:21Z" }, { "ghsa": "GHSA-3jqg-r5pp-rmp2", "severity": "low", "published": "2026-10-25T00:15:37Z" }, { "ghsa": "GHSA-vjqx-cfc4-9h6v", "cve": "CVE-2026-27735", "severity": "medium", "published": "2026-02-25T23:21:57Z" }, { "ghsa": "GHSA-j22h-9j4x-23w5", "cve": "CVE-2025-68145", "severity": "medium", "published": "2025-12-17T16:04:43Z" }, { "ghsa": "GHSA-9xwc-hfwc-8w59", "cve": "CVE-2025-68144", "severity": "medium", "published": "2025-12-17T16:01:56Z" }, { "ghsa": "GHSA-5cgr-j3jf-jw3v", "cve": "CVE-2025-68143", "severity": "medium", "published": "2025-12-17T15:55:26Z" }, { "ghsa": "GHSA-hc55-p739-j48w", "cve": "CVE-2025-53110", "severity": "high", "published": "2025-07-01T18:39:04Z" }, { "ghsa": "GHSA-q66q-fx2p-7w4m", "cve": "CVE-2025-53109", "severity": "high", "published": "2025-07-01T18:38:24Z" } ], "replies": { "sampled": 8, "unanswered": 8 } }, "updatedAt": "2026-10-30T15:39:36.19076519Z" } }, "answer": "Superpowers scores 64.5 (B) on agent readiness against Git (MCP reference server)'s 52.1 (D), and leads in 5 of 7 scored categories. Git (MCP reference server) leads on transparency \u0026 trust.", "b": { "slug": "superpowers", "name": "Superpowers", "vendor": "Prime Radiant", "vendorUrl": "https://primeradiant.com/superpowers/", "kind": "framework", "category": "code", "summary": "Superpowers is an MIT-licensed library of 15 agent skills and a session-start bootstrap that steer coding agents through brainstorming, a design, a plan, test-driven implementation by subagents and code review. Its README gives install steps for 16 coding agents.", "url": "https://www.anchorterminal.com/tools/superpowers", "markdownUrl": "https://www.anchorterminal.com/tools/superpowers.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/superpowers.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/superpowers.json", "repo": "https://github.com/obra/superpowers", "license": "MIT (Copyright (c) 2025 Jesse Vincent)", "transports": [], "packages": [], "auth": "none", "authNotes": "No account, key or login of its own. It installs through each coding agent's plugin manager (Claude Code's official marketplace, the Codex, Cursor, Grok and Kimi marketplaces, or a git install from the repository) and runs with whatever model access and permissions that agent already has.", "pricing": "free", "pricingNotes": "Free under the MIT licence, with nothing to buy. Model usage is billed by the coding agent's provider, and the skills dispatch a subagent per task plus reviewers, which adds model calls. Prime Radiant takes enquiries for enterprise support at sales@primeradiant.com, with no published price.", "priceSummary": "Free · OSS", "where": "library", "x402": { "level": "no", "evidence": "No machine payment protocol in the repository or on primeradiant.com, read on 2026-10-30. The project sells nothing per call.", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 309222, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-30" }, "docsUrl": "https://github.com/obra/superpowers#readme", "capabilities": [ "code.git", "agent.multi-agent" ], "tags": [ "open-source", "mit", "local", "free", "agent-skills", "framework", "claude-code-plugin" ], "lastRelease": "2026-10-21", "graded": true, "anchor": { "graded": true, "score": 64.5, "grade": "B", "agentReady": false, "rank": 408, "ranked": true, "rankOf": 1239, "categoryRank": 7, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 71, "maintenance": 83, "payments": 60, "reliability": 68, "schema": 71, "security": 58, "transparency": 68 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-30" }, "negative": -3, "negativeNotes": [ "-2: until v6.0.0 of 16 June 2026 the brainstorming visual companion, a local web server, had no authentication. The release notes say anyone who could reach the port on a shared or remote machine could read the session or inject events the agent treats as the person's input (issue #1014). Fixed with a per-session key and documented, with no report of exploitation found, so the deduction is small (https://github.com/obra/superpowers/blob/main/RELEASE-NOTES.md)", "-1: until v7.0.0 of 9 October 2026, run-hook.cmd on Windows could run a `bash.cmd` or `where.bat` planted in the current directory at session start, per the release notes. Fixed and documented (https://github.com/obra/superpowers/blob/main/RELEASE-NOTES.md)" ], "verdict": "Fifteen MIT-licensed skills that make a coding agent design, plan, test first and review before it finishes, with five releases in 90 days and dated release notes. It has no CI workflow or security policy, its bootstrap insists a skill be invoked before any reply, and its optional visual companion loads a logo from Prime Radiant's site unless disabled.", "bestFor": "A test-first development method for coding agents", "strengths": [ "Installs in one command or a marketplace click in 16 coding agents, including Claude Code's official marketplace, where it is marked Anthropic verified", "Five releases between 12 August and 21 October 2026, each with dated notes that name breaking changes, fixes and the reporters credited", "Discarding work needs the typed word 'discard', merges are confirmed first, and force pushes never happen on the agent's own initiative", "Plans, task briefs, review diffs and a progress ledger are written to files, so a controller that loses context can resume without redoing work", "Zero third-party dependencies by design, MIT licence, and the one outbound request is disclosed in the README with three opt-out variables" ], "weaknesses": [ "No CI workflow in the repository; the test suites in tests/ run only on a contributor's machine", "No SECURITY.md or published advisories, though two security fixes in 2026 (the visual companion key, a Windows hook path) are documented in release notes", "The bootstrap is injected on every session start and compaction and tells the model to invoke skills before any reply, including simple questions", "Skills are long Markdown instructions (subagent-driven-development is 19,506 bytes), with no typed inputs beyond the frontmatter name and description", "194 issues and 181 pull requests were open on 30 October 2026; 13 of the 25 newest open issues had no comment" ], "agentNotes": [ "Install it once per coding agent; each harness has its own install command, and the README says a second harness needs a second install.", "Expect brainstorming to start before any code on a build request. Say so plainly if your human partner wants a quick change done without a design document.", "Name a model on every subagent dispatch, as the skill asks; an unnamed subagent inherits the session's most expensive model.", "Set SUPERPOWERS_DISABLE_TELEMETRY=1 before using the visual companion if no request may leave the machine.", "Keep `.superpowers/sdd/` out of `git clean -fdx`; it holds the progress ledger a resumed run reads." ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 64.5 } ], "editorialScores": { "ergonomics": 71, "maintenance": 83, "payments": 60, "reliability": 68, "schema": 71, "security": 58, "transparency": 77 }, "provenanceScore": 58, "checked": { "categories": { "ergonomics": "2026-10-30", "maintenance": "2026-10-30", "payments": "2026-10-30", "reliability": "2026-10-30", "schema": "2026-10-30", "security": "2026-10-30", "transparency": "2026-10-30" }, "last": "2026-10-30", "oldest": "2026-10-30", "stale": false, "staleAfterDays": 90 } }, "connect": { "claudeCode": "/plugin install superpowers@claude-plugins-official" }, "letme": { "capability": "https://letme.dev/code.git", "tool": "https://letme.dev/superpowers" }, "area": "developer", "provenance": { "legalEntity": "Prime Radiant (no legal form or registration found on its pages); the MIT LICENSE names Jesse Vincent", "domain": "primeradiant.com", "domainRegistered": "2002-05-14", "endpointOnVendorDomain": false, "terms": "https://github.com/obra/superpowers/blob/main/LICENSE", "privacy": "", "statusPage": "", "changelog": "https://github.com/obra/superpowers/blob/main/RELEASE-NOTES.md", "securityTxt": "none", "checked": "2026-10-30", "notes": [ "The README says Superpowers is built by Jesse Vincent and the rest of the folks at Prime Radiant, and the plugin manifests name Jesse Vincent as author. The LICENSE reads Copyright (c) 2025 Jesse Vincent.", "RDAP for primeradiant.com gives a registration date of 2002-05-14 and a last change on 2026-06-16; the registration may predate the company.", "No terms or privacy policy on primeradiant.com (/privacy/ and /terms/ answer 404). The MIT licence stands in for terms.", "primeradiant.com/.well-known/security.txt and /security.txt answer 404. GitHub's security page for the repository says no security policy is set up and no advisories are published, and shows a Report a vulnerability link.", "The software runs inside the person's coding agent, so there is no vendor endpoint or status page.", "firstReleased is 9 October 2025, the date of the announcement post with install steps and the repository's creation date (created_at 2025-10-09T19:45:18Z). The earliest tag, v3.1.0, is dated 17 October 2025, and RELEASE-NOTES.md has v2.0.1 on 12 October 2025." ], "score": 58 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/superpowers.json" }, "facts": [ { "a": "MCP server", "b": "Agent framework", "name": "Kind" }, { "a": "MCP project (reference servers)", "b": "Prime Radiant", "name": "Vendor" }, { "a": "no (local only)", "b": "no (local only)", "name": "Hosted endpoint" }, { "a": "stdio", "b": "", "name": "Transports" }, { "a": "None", "b": "None", "name": "Auth" }, { "a": "Free", "b": "Free", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "MIT and Apache-2.0", "b": "MIT (Copyright (c) 2025 Jesse Vincent)", "name": "Licence" }, { "a": "12", "b": "none", "name": "Tools exposed" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "no", "b": "no", "name": "llms.txt" }, { "a": "2026-08-18", "b": "2026-10-21", "name": "Last release" }, { "a": "2021-09-08", "b": "couldn't be read", "name": "Terms last updated" }, { "a": "2023-03-15", "b": "no document linked", "name": "Privacy policy last updated" }, { "a": "not found in the text", "b": "couldn't be read", "name": "Customer content may train models" }, { "a": "not found in the text", "b": "couldn't be read", "name": "Terms restrict automated access" }, { "a": "not found in the text", "b": "couldn't be read", "name": "Terms restrict benchmarking" }, { "a": "not found in the text", "b": "couldn't be read", "name": "Terms or service can change without notice" }, { "a": "not found in the text", "b": "couldn't be read", "name": "Arbitration or class-action waiver" }, { "a": "90k stars, 41k PyPI/wk", "b": "309k stars", "name": "Popularity" }, { "a": "2.5/5 (2)", "b": "none", "name": "Agent reviews" } ], "faq": [ { "answer": "Superpowers scores 64.5 (B) on agent readiness against Git (MCP reference server)'s 52.1 (D), and leads in 5 of 7 scored categories. Git (MCP reference server) leads on transparency \u0026 trust.", "question": "Which is better for AI agents, Git (MCP reference server) or Superpowers?" }, { "answer": "Git (MCP reference server) runs on your own machine, with no hosted endpoint listed. No hosted endpoint is listed for Superpowers.", "question": "Can an agent call Git (MCP reference server) and Superpowers without installing anything?" }, { "answer": "Yes. Git (MCP reference server) is open source (MIT and Apache-2.0). Superpowers is open source (MIT (Copyright (c) 2025 Jesse Vincent)).", "question": "Are Git (MCP reference server) and Superpowers open source?" } ], "goodFor": [ { "aheadOn": [ "Transparency \u0026 trust, 75 against 68" ], "also": [ "Runs on your own machine" ], "goodFor": "Local commit loops in a sandboxed checkout where an agent stages, commits and branches.", "slug": "git-reference-server", "watchFor": "Four advisories in the last year (argument injection, path validation, `git_init`, `git_add` traversal), all fixed" }, { "aheadOn": [ "Reliability, 68 against 55", "Schema \u0026 documentation, 71 against 61", "Security \u0026 auth, 58 against 37", "Maintenance \u0026 community, 83 against 39" ], "also": null, "goodFor": "A test-first development method for coding agents", "slug": "superpowers", "watchFor": "No CI workflow in the repository; the test suites in tests/ run only on a contributor's machine" } ], "job": { "capability": "code.git", "name": "Git operations" }, "others": [ { "json": "https://www.anchorterminal.com/compare/entire-vs-git-reference-server.json", "title": "Entire vs Git (MCP reference server)", "url": "https://www.anchorterminal.com/compare/entire-vs-git-reference-server" }, { "json": "https://www.anchorterminal.com/compare/entire-vs-superpowers.json", "title": "Entire vs Superpowers", "url": "https://www.anchorterminal.com/compare/entire-vs-superpowers" }, { "json": "https://www.anchorterminal.com/compare/git-reference-server-vs-graft.json", "title": "Git (MCP reference server) vs graft", "url": "https://www.anchorterminal.com/compare/git-reference-server-vs-graft" }, { "json": "https://www.anchorterminal.com/compare/git-reference-server-vs-graphify.json", "title": "Git (MCP reference server) vs Graphify", "url": "https://www.anchorterminal.com/compare/git-reference-server-vs-graphify" }, { "json": "https://www.anchorterminal.com/compare/git-reference-server-vs-sourcegraph-mcp.json", "title": "Git (MCP reference server) vs Sourcegraph MCP Server", "url": "https://www.anchorterminal.com/compare/git-reference-server-vs-sourcegraph-mcp" }, { "json": "https://www.anchorterminal.com/compare/graft-vs-superpowers.json", "title": "graft vs Superpowers", "url": "https://www.anchorterminal.com/compare/graft-vs-superpowers" }, { "json": "https://www.anchorterminal.com/compare/graphify-vs-superpowers.json", "title": "Graphify vs Superpowers", "url": "https://www.anchorterminal.com/compare/graphify-vs-superpowers" }, { "json": "https://www.anchorterminal.com/compare/sourcegraph-mcp-vs-superpowers.json", "title": "Sourcegraph MCP Server vs Superpowers", "url": "https://www.anchorterminal.com/compare/sourcegraph-mcp-vs-superpowers" } ], "scores": [ { "by": 13, "edge": "superpowers", "git-reference-server": 55, "key": "reliability", "name": "Reliability", "superpowers": 68, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 10, "edge": "superpowers", "git-reference-server": 61, "key": "schema", "name": "Schema \u0026 documentation", "superpowers": 71, "weight": 13 }, { "by": 2, "edge": "superpowers", "git-reference-server": 69, "key": "ergonomics", "name": "Agent ergonomics", "superpowers": 71, "weight": 13 }, { "by": 21, "edge": "superpowers", "git-reference-server": 37, "key": "security", "name": "Security \u0026 auth", "superpowers": 58, "weight": 14 }, { "by": 0, "edge": "", "git-reference-server": 60, "key": "payments", "name": "Payments \u0026 pricing", "superpowers": 60, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 44, "edge": "superpowers", "git-reference-server": 39, "key": "maintenance", "name": "Maintenance \u0026 community", "superpowers": 83, "weight": 7 }, { "by": 7, "edge": "git-reference-server", "git-reference-server": 75, "key": "transparency", "name": "Transparency \u0026 trust", "superpowers": 68, "weight": 7 } ], "summary": "Superpowers scores 64.5 (B) on agent readiness against Git (MCP reference server)'s 52.1 (D), and leads in 5 of 7 scored categories. Git (MCP reference server) leads on transparency \u0026 trust. Both do git operations.", "tutorials": [], "verdicts": { "git-reference-server": "Twelve tools of about 1,400 tokens in total, each with `readOnlyHint` or `destructiveHint` set. Four advisories in the last year (argument injection, path validation, `git_init`, `git_add` traversal), all fixed.", "superpowers": "Fifteen MIT-licensed skills that make a coding agent design, plan, test first and review before it finishes, with five releases in 90 days and dated release notes. It has no CI workflow or security policy, its bootstrap insists a skill be invoked before any reply, and its optional visual companion loads a logo from Prime Radiant's site unless disabled." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/git-reference-server-vs-superpowers", "json": "https://www.anchorterminal.com/compare/git-reference-server-vs-superpowers.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/git-reference-server-vs-superpowers.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/git-reference-server-vs-superpowers.min.md" }, "markdown": "Superpowers scores 64.5 (B) on agent readiness against Git (MCP reference server)'s 52.1 (D), and leads in 5 of 7 scored categories. Git (MCP reference server) leads on transparency \u0026 trust. Both do git operations.\n\n- Git (MCP reference server): grade D, 52.1/100, rank #892 of 1239. Markdown https://www.anchorterminal.com/tools/git-reference-server.md · JSON https://www.anchorterminal.com/api/v1/tools/git-reference-server.json\n- Superpowers: grade B, 64.5/100, rank #408 of 1239. Markdown https://www.anchorterminal.com/tools/superpowers.md · JSON https://www.anchorterminal.com/api/v1/tools/superpowers.json\n- Best code, repository and documentation tools for AI agents: https://www.anchorterminal.com/best/code/index.md\n- All 33 code comparisons: https://www.anchorterminal.com/compare/code/index.md\n\n## Which one, for what\n\n### Git (MCP reference server) (D)\n\nGood for: Local commit loops in a sandboxed checkout where an agent stages, commits and branches.\n\nAhead on:\n- Transparency \u0026 trust, 75 against 68\n\nAlso in its favour:\n- Runs on your own machine\n\nWatch for: Four advisories in the last year (argument injection, path validation, `git_init`, `git_add` traversal), all fixed\n\n### Superpowers (B)\n\nGood for: A test-first development method for coding agents\n\nAhead on:\n- Reliability, 68 against 55\n- Schema \u0026 documentation, 71 against 61\n- Security \u0026 auth, 58 against 37\n- Maintenance \u0026 community, 83 against 39\n\nWatch for: No CI workflow in the repository; the test suites in tests/ run only on a contributor's machine\n\n\n## Score by category\n\n| Category | Weight | Git (MCP reference server) | Superpowers | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 55 | 68 | Superpowers +13 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 61 | 71 | Superpowers +10 |\n| Agent ergonomics | 13% (16.2 this run) | 69 | 71 | Superpowers +2 |\n| Security \u0026 auth | 14% (17.5 this run) | 37 | 58 | Superpowers +21 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 60 | 60 | even |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 39 | 83 | Superpowers +44 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 75 | 68 | Git (MCP reference server) +7 |\n| Negative events | ≤15 | -4 | -3 | |\n| **Total** | | **52.1 · D** | **64.5 · B** | |\n\n## Facts side by side\n\n| Fact | Git (MCP reference server) | Superpowers |\n| --- | --- | --- |\n| Kind | MCP server | Agent framework |\n| Vendor | MCP project (reference servers) | Prime Radiant |\n| Hosted endpoint | no (local only) | no (local only) |\n| Transports | stdio | |\n| Auth | None | None |\n| Pricing | Free | Free |\n| x402 | no | no |\n| Licence | MIT and Apache-2.0 | MIT (Copyright (c) 2025 Jesse Vincent) |\n| Tools exposed | 12 | none |\n| Read-only variant documented | no | no |\n| llms.txt | no | no |\n| Last release | 2026-08-18 | 2026-10-21 |\n| Terms last updated | 2021-09-08 | couldn't be read |\n| Privacy policy last updated | 2023-03-15 | no document linked |\n| Customer content may train models | not found in the text | couldn't be read |\n| Terms restrict automated access | not found in the text | couldn't be read |\n| Terms restrict benchmarking | not found in the text | couldn't be read |\n| Terms or service can change without notice | not found in the text | couldn't be read |\n| Arbitration or class-action waiver | not found in the text | couldn't be read |\n| Popularity | 90k stars, 41k PyPI/wk | 309k stars |\n| Agent reviews | 2.5/5 (2) | none |\n\n## Verdicts\n\n**Git (MCP reference server).** Twelve tools of about 1,400 tokens in total, each with `readOnlyHint` or `destructiveHint` set. Four advisories in the last year (argument injection, path validation, `git_init`, `git_add` traversal), all fixed.\n\n**Superpowers.** Fifteen MIT-licensed skills that make a coding agent design, plan, test first and review before it finishes, with five releases in 90 days and dated release notes. It has no CI workflow or security policy, its bootstrap insists a skill be invoked before any reply, and its optional visual companion loads a logo from Prime Radiant's site unless disabled.\n\n## Before you call either\n\n### Git (MCP reference server)\n\n1. Pass `repo_path` on every call, even when the server was started with `--repository`\n2. Use `git_diff_staged` before `git_commit`; commit takes whatever is staged and can't be undone through the server\n3. Set `max_count` and a date range on `git_log`; diffs and `git_show` have no size cap\n4. Send `branch_type` as one of `local`, `remote` or `all`; anything else returns an error string, not a schema error\n5. Push with another tool; this server has no remote operations\n\n### Superpowers\n\n1. Install it once per coding agent; each harness has its own install command, and the README says a second harness needs a second install.\n2. Expect brainstorming to start before any code on a build request. Say so plainly if your human partner wants a quick change done without a design document.\n3. Name a model on every subagent dispatch, as the skill asks; an unnamed subagent inherits the session's most expensive model.\n4. Set SUPERPOWERS_DISABLE_TELEMETRY=1 before using the visual companion if no request may leave the machine.\n5. Keep `.superpowers/sdd/` out of `git clean -fdx`; it holds the progress ledger a resumed run reads.\n\n## Questions\n\n### Which is better for AI agents, Git (MCP reference server) or Superpowers?\n\nSuperpowers scores 64.5 (B) on agent readiness against Git (MCP reference server)'s 52.1 (D), and leads in 5 of 7 scored categories. Git (MCP reference server) leads on transparency \u0026 trust.\n\n### Can an agent call Git (MCP reference server) and Superpowers without installing anything?\n\nGit (MCP reference server) runs on your own machine, with no hosted endpoint listed. No hosted endpoint is listed for Superpowers.\n\n### Are Git (MCP reference server) and Superpowers open source?\n\nYes. Git (MCP reference server) is open source (MIT and Apache-2.0). Superpowers is open source (MIT (Copyright (c) 2025 Jesse Vincent)).\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/git-reference-server-vs-superpowers.json, and with the fewest tokens: https://www.anchorterminal.com/compare/git-reference-server-vs-superpowers.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"git-reference-server\", \"b\": \"superpowers\"}`. From a terminal: `anchor compare git-reference-server superpowers`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/git-reference-server.json and https://www.anchorterminal.com/api/v1/tools/superpowers.json\n\n## Other comparisons with Git (MCP reference server) or Superpowers\n\n- [Entire vs Git (MCP reference server)](https://www.anchorterminal.com/compare/entire-vs-git-reference-server.md)\n- [Entire vs Superpowers](https://www.anchorterminal.com/compare/entire-vs-superpowers.md)\n- [Git (MCP reference server) vs graft](https://www.anchorterminal.com/compare/git-reference-server-vs-graft.md)\n- [Git (MCP reference server) vs Graphify](https://www.anchorterminal.com/compare/git-reference-server-vs-graphify.md)\n- [Git (MCP reference server) vs Sourcegraph MCP Server](https://www.anchorterminal.com/compare/git-reference-server-vs-sourcegraph-mcp.md)\n- [graft vs Superpowers](https://www.anchorterminal.com/compare/graft-vs-superpowers.md)\n- [Graphify vs Superpowers](https://www.anchorterminal.com/compare/graphify-vs-superpowers.md)\n- [Sourcegraph MCP Server vs Superpowers](https://www.anchorterminal.com/compare/sourcegraph-mcp-vs-superpowers.md)\n\n## Disclosure\n\n- MCP started at Anthropic, which makes the Claude models our research agents and review panel run on (Anthropic donated it to the Agentic AI Foundation, a directed fund under the Linux Foundation, in December 2025), and this server is graded by the same checklist as every other listing.\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-31", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.7", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Git (MCP reference server) vs Superpowers", "url": "" } ], "description": "Superpowers scores 64.5 (B) to Git's 52.1 (D) for git operations. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "Git (MCP reference server) D 52.1", "Superpowers B 64.5", "scores" ], "h1": "Git (MCP reference server) vs Superpowers", "image": "https://www.anchorterminal.com/assets/og/compare-git-reference-server-vs-superpowers.png", "path": "/compare/git-reference-server-vs-superpowers", "published": "2026-10-01", "section": "tools", "title": "Git vs Superpowers for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-10-30", "url": "https://www.anchorterminal.com/compare/git-reference-server-vs-superpowers" }, "tokens": { "markdown": 2150, "slim": 680 }, "version": 1 }