codegraph — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited codegraph (Rules) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
<p align="center"> <img src="web/public/logo.svg" width="112" alt="Synapse logo" /> </p>
<h1 align="center">Synapse</h1>
<p align="center"><strong>English</strong> | <a href="README.zh-CN.md">简体中文</a></p>
An open-source AI agent platform that does the work for you. Describe any task in plain language — Synapse plans, codes, browses, and delivers results in a secure sandbox, streaming every step in real time.
Chat-driven task execution — Users describe tasks in plain language. Synapse routes each turn into either a single-agent ReAct loop or planner-managed orchestration, then streams progress in real time.
Sandboxed tool execution — Agents can write and run code, install packages, query databases, automate browsers, manipulate files, and generate artifacts inside sandbox sessions created on demand by the configured provider.
Planner-managed multi-agent work — Planner mode can be forced per turn or auto-selected by the execution router. The planner declares a plan, spawns worker agents when decomposition is warranted, waits on results, and streams step and agent status live.
Extensible skill system — Skills are SKILL.md packages with frontmatter for description, allowed tools, dependencies, and sandbox hints. Synapse supports bundled skills plus install flows from git URLs, direct URLs, uploads, and a remote registry.
MCP integration — Connect external tools via the Model Context Protocol. Add MCP servers to extend agent capabilities with third-party APIs and services.
Persistent memory and compaction — Synapse injects user-scoped memory into prompts, compacts long-running conversations with runtime-specific policies, and supports verified fact retrieval for channel-style flows.
Channel integrations — Connect messaging platforms like Telegram to chat with Synapse directly from your favorite apps. Supports bot configuration, account linking, and seamless conversation sync.
Real-time streaming UI — The frontend renders plans, tool calls, thinking, artifacts, browser/computer-use output, and sub-agent progress from the SSE event stream as they happen.
Synapse includes dedicated views for planning, skills, MCP configuration, artifact browsing, and channel integrations.
| Multi-Agent Planning | Skills System | MCP Integration |
|---|---|---|
| Multi-Agent Planning | Skills System | MCP Integration |
| Artifact Library | Web Channel Page | Telegram Channel Integration |
|---|---|---|
| Artifact Library | Web Channel Page | Telegram Channel Integration |
The product mark is a diagonal synapse — two neural terminals on a 45° axis, a synaptic cleft at the center, and a signal pulse dot. All lockups stay strict monochrome (black/white only).
web/public/logo.svg inverts via prefers-color-scheme.web/src/shared/components/Logo.tsx (default variant="diagonal") uses tokens from web/src/app/globals.css (--logo-black, --logo-white, --logo-neutral-700, --logo-neutral-300).make generate-favicons (reads favicon-light.svg / favicon-dark.svg).web/public/favicon-light.svg, web/public/favicon-dark.svgweb/public/favicon-16.png, web/public/favicon-32.png, web/public/favicon.ico, plus dark PNG variants (favicon-dark-16.png, favicon-dark-32.png)web/public/apple-touch-icon.png, web/public/apple-touch-icon-dark.pngweb/public/icon-192.png, web/public/icon-512.pngweb/src/app/layout.tsx sets a dark default; ThemeFavicon plus a beforeInteractive bootstrap script sync icons with the resolved app theme (next-themes), not just OS prefers-color-scheme.docs/logo-monochrome-spec.md/design-review/logosuse_planner can force planner mode, otherwise the backend classifies each turn into single-agent or planner-managed execution shapesuvmake install
# Create backend/.env (see backend/.env.example)
# ANTHROPIC_API_KEY=...
# TAVILY_API_KEY=...
make devOpen http://localhost:3000.
Synapse also ships as a native desktop app built with Tauri v2. It wraps the same web UI in a native window with automatic backend/frontend process management.
# Dev mode
make desktop
# Production build (.app / .msi / .deb)
make build-desktopThe desktop app manages backend and frontend as sidecar processes — if they're already running (e.g. via make dev), it connects to the existing services. Google OAuth opens in the system browser and hands the session back to the desktop window automatically.
See Desktop App Guide for configuration and troubleshooting.
| Layer | Technology |
|---|---|
| Backend | Python 3.12+, FastAPI, Anthropic SDK, SQLAlchemy (async), Alembic |
| Frontend | Next.js 16, React 19, Tailwind CSS 4, Zustand, Framer Motion, Radix UI |
| Desktop | Tauri v2, Rust, WKWebView (macOS) / WebView2 (Windows) |
| Sandbox | Boxlite micro-VMs, E2B cloud sandboxes, provider-specific browser templates |
| Database | PostgreSQL, Redis (optional) |
| Package Manager | uv (backend), npm (frontend) |
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.