Agent Tasks — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Agent Tasks (Plugin) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
Aggregate score unchanged between these scans.
The primary manifest — the file an agent reads to learn what this artifact does.
Pipeline-driven task management for AI coding agents. An MCP server with stage-gated pipelines, multi-agent collaboration, and a real-time kanban dashboard. Tasks flow through configurable stages — backlog, spec, plan, implement, test, review, done — with dependency tracking, approval workflows, artifact versioning, and threaded comments.
Built for AI coding agents (Claude Code, Codex CLI, Gemini CLI, Aider) but works equally well with any MCP client, REST consumer, or WebSocket listener.
| Light Theme | Dark Theme |
|---|---|
| Light mode dashboard | Dark mode dashboard |
When you run multiple AI agents on the same codebase, they need a shared task pipeline — not just a flat todo list. They need stages, dependencies, approvals, and visibility.
backlog > spec > plan > implement > test > review > donetask_artifact(type: "decision")task_artifact(type: "learning") captures insights (technique, pitfall, decision, pattern); auto-propagated to parent and sibling tasks on completiontask_list(next: true) prefers routing tasks to agents with related history (parent, dependency, project) as a tie-breakernpm install -g agent-tasksgit clone https://github.com/keshrath/agent-tasks.git
cd agent-tasks
npm install
npm run buildAdd to your MCP client config (Claude Code, Cline, etc.):
{
"mcpServers": {
"agent-tasks": {
"command": "npx",
"args": ["agent-tasks"]
}
}
}The dashboard auto-starts at http://localhost:3422 on the first MCP connection.
node dist/server.js --port 3422Once configured (see Quick Start above), Claude Code can use all 8 MCP tools directly — creating tasks, advancing stages, adding artifacts, commenting, and more. See the Setup Guide for detailed integration steps.
| Category | Tools |
|---|---|
| Task CRUD (4) | task_create, task_get (include subtasks/artifacts/comments), task_list (search, next), task_delete |
| Metadata (1) | task_update (title, description, priority, tags, project, assignment, dependencies) |
| Lifecycle (1) | task_stage (claim, advance, regress, complete, fail, cancel) |
| Artifacts (1) | task_artifact (general, decision, learning, comment) |
| Config & utils (1) | task_config (pipeline, session, cleanup, rules) |
See full API reference for detailed descriptions of every tool and endpoint.
All endpoints return JSON. CORS enabled. See full API reference for details.
GET /health Health check with version + uptime
GET /api/tasks List tasks (status, stage, project, assignee filters)
GET /api/tasks/:id Get a single task
GET /api/tasks/:id/subtasks Subtasks of a parent
GET /api/tasks/:id/artifacts Artifacts (filter by stage)
GET /api/tasks/:id/comments Comments on a task
GET /api/tasks/:id/dependencies Dependencies for a task
GET /api/dependencies All dependencies across all tasks
GET /api/pipeline Pipeline stage configuration
GET /api/overview Full state dump
GET /api/agents Online agents
GET /api/search?q= Full-text search
POST /api/tasks Create a new task
PUT /api/tasks/:id Update task fields
PUT /api/tasks/:id/stage Change stage (advance or regress)
POST /api/tasks/:id/comments Add a comment
POST /api/cleanup Trigger manual cleanupnpm test # 355 tests across 13 files
npm run test:watch # Watch mode
npm run test:coverage # Coverage report
npm run check # Full CI: typecheck + lint + format + test| Variable | Default | Description |
|---|---|---|
AGENT_TASKS_DB | ~/.agent-tasks/agent-tasks.db | SQLite database file path |
AGENT_TASKS_PORT | 3422 | Dashboard HTTP/WebSocket port |
AGENT_TASKS_INSTRUCTIONS | enabled | Set to 0 to disable response-embedded instructions |
AGENT_COMM_URL | http://localhost:3421 | Agent-comm REST URL for bridge notifications |
AGENT_KNOWLEDGE_URL | http://localhost:3423 | Agent-knowledge REST URL for knowledge bridge |
Required: Node.js >= 20.11, better-sqlite3 (bundled)
Optional (soft dependencies — fail-open, HTTP-only, no npm dep):
learning and decision artifacts to agent-knowledge via POST /api/knowledge. Entries are auto-indexed with embeddings, auto-linked to similar entries, and git-synced. Without agent-knowledge, artifacts stay in agent-tasks only.MIT — see LICENSE
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.