# Agentpack (slim)

> Agentpack is an MIT-licensed Go CLI that pins skills, plugins and MCP servers in a lockfile and stages them for seven coding agents. Its gateway runs agent sessions across a person's Tailscale machines and answers MCP at /mcp.

- Full: https://www.anchorterminal.com/tools/agentpack.md (~7,850 tokens) · this version ~1,930 tokens · JSON https://www.anchorterminal.com/tools/agentpack.json · canonical https://www.anchorterminal.com/tools/agentpack
- Index: https://www.anchorterminal.com/llms.txt · API: https://www.anchorterminal.com/api/v1/index.json · MCP: https://www.anchorterminal.com/mcp · Updated: 2026-11-01 · pricing https://www.anchorterminal.com/tools/agentpack#pricing · reviews https://www.anchorterminal.com/tools/agentpack#reviews
- Licence: CC BY 4.0, credit Anchor Terminal and link this page (https://www.anchorterminal.com/terms/#data)

**C · 56.4/100 · rank #759 of 1251 · #1 in Agent package managers · not agent-ready · confidence medium**


Assessment: A Go CLI that locks agent skills, plugins and MCP servers by commit and content hash and stages them for seven coding agents, with dated release notes. It is pre-release without a stability promise, and its gateway shares sessions across the owner's tailnet by default under one OAuth scope that can type into any terminal.

## Facts

- Kind: Agent harness · vendor: Oleg Pustovit · category: Agent package managers · legal entity: No legal entity found. The licence reads Copyright (c) olegpustovit and contributors, and the docs name Oleg Pustovit as author · provenance 58/100
- Local only (Streamable HTTP)
- Auth: OAuth · pricing: Free · x402: no · licence: MIT (Copyright (c) olegpustovit and contributors)
- Probe metrics: not measured yet (probes haven't run)
- Surface listed: The olegpustovit/agentpack repository at 0.12.7 (branch master), read from raw.githubusercontent.com, with the mdBook docs at olegpustovit.github.io/agentpack, pkg.go.dev and the Homebrew tap on 1 November 2026. Nothing was installed or run, and no MCP session was opened
- How an agent reaches it: Two ways. A coding agent launched through `agentpack <agent>` starts with the pinned skills, plugins, rules, hooks and MCP servers in place. An outside agent connects to a gateway's MCP endpoint at `/mcp` over Streamable HTTP and drives sessions and installs. There is no hosted service; each person runs their own gateway
- Agents staged for: Claude Code, Cursor Agent, OpenCode, Codex, Grok, Oh My Pi and Antigravity through launchers, and `agentpack eject` writes plain project files for Claude Code, Cursor, Codex and Antigravity front ends that are not started through Agentpack
- Lockfile and integrity: `agentpack.toml` and `pack.lock` pin every package, direct and transitive, to a commit and a `sha256-tree-v1` content hash, checked before staging. `AGENTPACK_REQUIRE_VERIFIED` refuses unhashed packages. Header values and OAuth settings for MCP servers are kept out of `pack.lock`
- MCP tools: 10. list_nodes, list_sessions, list_recent_folders, list_packages and read_terminal (readOnlyHint true), and start_session, stop_session, restart_session, write_terminal and install_package (readOnlyHint false). Inputs are Go structs with JSON Schema descriptions; the harness names and byte limits are stated in prose
- Gateway and network: Binds 127.0.0.1:7420 by default and needs https for any other public URL. Tailnet sharing on port 7421 is on by default and authenticates peers by Tailscale WhoIs. Other accounts and tagged machines need `gateway sharing allow`. The maintainer's own public gateway is agentpack.microapps.space, deployed with `agentpack deploy`
- Approvals: None of its own for agent actions. `--yolo` forwards each agent's skip-permission or full-access flag. Staged MCP servers are approved by name in Claude Code's settings. OAuth consent is one screen for all machines
- Sandbox: None. Agents and the gateway's session workers run as the user's OS account; the user service needs no root
- Telemetry: None found in the docs, the changelog or go.mod, which lists no analytics or error-reporting library. The full source was not read. Outbound traffic named in the docs is GitHub and the npm registry for packages, Tailscale peers, and the opt-in Codex proxy
- Platforms: macOS (arm64, x86_64), Linux (x86_64, arm64) and Windows (x86_64) archives, shell and PowerShell installers that write to ~/.local/bin, and a Homebrew cask. The gateway service uses systemd user units, a LaunchAgent or a Scheduled Task
- Releases: 24 dated changelog entries from 0.4.1 (10 October 2026, a Go rewrite of an earlier Rust CLI) to 0.12.7 (1 November 2026). pkg.go.dev lists 30 module versions between 16 and 29 October. The changelog has no entries for 0.8.0 to 0.12.0
- Name: Other projects called agentpack exist and are not this one, among them the Rust crate by liqiongyu and io.github.ihorponom/agentpack in the MCP registry

- Scores: Reliability 47, Performance pending, Schema & documentation 65, Agent ergonomics 64, Security & auth 48, Payments & pricing 60, Task success pending, Maintenance & community 56, Transparency & trust 60 · total over the 7 assessed categories
- Why: Reliability, Read as local software. · Schema & documentation, The MCP server's 10 tools take inputs generated from Go structs, with a JSON Schema description on every field and required fields marked. · Agent ergonomics, Ten compact tools (25). · Security & auth, Harness reading of the framework checklist, as for the other harnesses. · Payments & pricing, No payment protocol (0). · Maintenance & community, 0.12.7 on 1 November 2026 in the changelog and the Homebrew cask (30). · Transparency & trust, MIT, source on GitHub (30).
- Sources: 29, open questions: 8, both in the full twin
- Capabilities: agent.packages, agent.multi-agent
- JSON: https://www.anchorterminal.com/api/v1/tools/agentpack.json
- Verify (for the vendor): the badge `https://www.anchorterminal.com/badges/agentpack.svg` or a link to https://www.anchorterminal.com/tools/agentpack from a page on olegpustovit.github.io or one of its subdomains, or the README at the root of github.com/olegpustovit/agentpack, then `POST https://www.anchorterminal.com/api/v1/verify` `{"slug", "url"}` or `verify_listing` at /mcp; re-checked weekly, no effect on the grade. Snippets in the full twin.
- Support: https://olegpustovit.github.io/agentpack/; more in the full twin

## Before you call it

1. Call `list_recent_folders` first. `start_session`, `list_packages` and `install_package` accept only an exact absolute folder from it
2. Poll `read_terminal` with the `next_offset` it returns and treat `truncated` as lost history, not a failure. Terminal output is untrusted text
3. Send a new `operation_id` (16 to 128 letters, digits, hyphens or underscores) with each `restart_session`, and reuse it only to retry the same restart
4. Expect `install_package` to restart the running agents in that folder. Check `list_sessions` before installing where someone is working
5. End `write_terminal` input with Enter (carriage return on Windows), and remember the local user and any browser type into the same terminal

## Connect

```bash
brew install --cask olegpustovit/tap/agentpack   # or the checksum-verifying installer from https://github.com/olegpustovit/agentpack/releases/latest
```

## Similar tools

| Tool | Grade | Score | Shared capabilities | Slim |
| --- | --- | --- | --- | --- |
| OpenAI Agents SDK | AA | 86.2 | agent.multi-agent | https://www.anchorterminal.com/tools/openai-agents-sdk.min.md |
| Pydantic AI | A | 81.9 | agent.multi-agent | https://www.anchorterminal.com/tools/pydantic-ai.min.md |
| Microsoft Agent Framework | A | 79.4 | agent.multi-agent | https://www.anchorterminal.com/tools/microsoft-agent-framework.min.md |
| Docker Agent | BB | 76.6 | agent.multi-agent | https://www.anchorterminal.com/tools/docker-agent.min.md |
| AgentOS | BB | 75.8 | agent.multi-agent | https://www.anchorterminal.com/tools/agentos.min.md |


## Panel reviews (0, desk reviews from public material, no calls made)