Apra-Labs/apra-fleet

github
github JavaScript analyzed e5d17a3

AI agents that write code, review each other's work, and coordinate across your machines

maintainer
Apra-Labs
licence
NOASSERTION
first seen
2026-06-01
last seen
2026-10-10
releases · 30d
4
github stars
102 reported
short id

Apra-Labs/apra-fleet is an MCP server distributed on github, maintained by Apra-Labs, tracked here since June 2026. It has shipped 30 releases and exposes 55 tools. Tools include child_id_allocator, cloud_control, code_context, code_flow, code_graph, code_impact, and 49 more. Its composite risk grade is C — an inferred review prompt computed from observed signals, not a verdict.

what we found

Reading the source raised 3 review prompts — dangerous code, exfiltration combo and tool shadowing — each a pattern worth a human look rather than a finding of fault.

Its 55 tools appear to reach filesystem, shell / exec, network, secrets and database, inferred from tool names, descriptions and input schemas rather than from observed behaviour.

Since the previous scan on 2026-10-10: 24 tools added.

full security breakdown →

tools

20 of 55
  • child_id_allocator
  • cloud_control
  • code_context
  • code_flow
  • code_graph
  • code_impact
  • code_map
  • code_query
  • code_tests
  • compose_permissions
  • credential_store_delete
  • credential_store_list
  • credential_store_set
  • credential_store_update
  • dolt_push_mutex
  • execute_command
  • execute_prompt
  • fleet_status
  • get_member_model_pricing
  • kb_capture
All 55 tools →

release cadence · 90d

9 releases
2026-07-14 2026-08-27 now

recent releases

last 10
version date src
v0.4.4_9b29f1 2026-10-10 github
v0.4.4_f391a6 2026-10-10 github
v0.4.4_09bcac 2026-10-10 github
v0.4.3 2026-09-28 github
v0.4.2 2026-09-07 github
v0.4.1 2026-08-19 github
v0.4.0 2026-08-05 github
v0.3.6 2026-07-24 github
v0.3.5 2026-07-20 github
v0.3.4 2026-07-01 github

view all →