Is Remote Agents MCP server safe?
Yes, with the usual care.
Safe to use. Minor gaps such as a missing repository or slower maintenance.
No critical or high findings in the latest scan.
Public scan report
scanner v0.1.9 · 2026-09-21 · same rubric, same numbers if you re-run it
2 medium
- Code scan3 source files scanned15/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 28 days ago15/15
- Maintainer identityregistry namespace matches repository owner6/10
Findings (2)
- mediumnpm install lifecycle script present
install.script - mediumnpm install lifecycle script present
install.scriptpackage.json: …ents": "run.js" }, "scripts": { "postinstall": "node install.js" }, "files": [ …
Overall 74/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON
Other servers that do what Remote Agents does
- OcmGuardrailed fleet ops for AI agents: multi-cluster Kubernetes via OCM with policy, approval, audit.not reviewedGrowingB
- PrumoChecks the context files a coding agent reads against the git index, and reports what drifted.not reviewedGrowingA
- Tenki Sandbox MCPDisposable microVM sandboxes for AI agents: run code, read/write files, git, preview URLs.not reviewedGrowingA