MCP Observatory
6m ago Tracked 26,727 Last 6m ago 24h 1,587
github Go analyzed 5336d87 unconfirmed MCP

ydnikolaev/a2ahub

github

Git-backed coordination for autonomous agents: typed requests, versioned contracts, lifecycle state, and verified handoffs—no hosted server.

maintainer
ydnikolaev
license
Apache-2.0
first seen
2026-07-30
last seen
2026-08-02
releases · 30d
30
short id

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 0 tools
transport — counts 0 tools · 0 res · 0 prompts permission surface via code analysis

No tools enumerated yet for this server.

skills & danger signals github-tarball
prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit 5336d87 · analyzer v28 · 3d ago

skills & prompt files 1

code evidence vv0.16.0 · github-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 535

filesystem 2

  • fs ydnikolaev-a2ahub-5336d87/integrations/vscode/src/cli.js :3 const fs = require("node:fs");
  • fs ydnikolaev-a2ahub-5336d87/integrations/vscode/src/extension.js :4 const fs = require("node:fs");

shell / exec 1

  • shell ydnikolaev-a2ahub-5336d87/integrations/vscode/src/cli.js :6 const { spawn } = require("node:child_process");

declared dependencies 76

  • astro@^7.1.1
  • github.com/oklog/ulid/v2@v2.1.1
  • github.com/rogpeppe/go-internal@v1.15.0
  • github.com/santhosh-tekuri/jsonschema/v6@v6.0.2
  • github.com/sigstore/sigstore-go@v1.2.2
  • github.com/yuin/goldmark@v1.8.4
  • gopkg.in/yaml.v3@v3.0.1
  • github.com/asaskevich/govalidator@v0.0.0-20230301143203-a9d515a09cc2
  • github.com/blang/semver@v3.5.1+incompatible
  • github.com/cenkalti/backoff/v5@v5.0.3
  • github.com/cespare/xxhash/v2@v2.3.0
  • github.com/cyberphone/json-canonicalization@v0.0.0-20241213102144-19d51d7fe467
  • github.com/digitorus/pkcs7@v0.0.0-20230818184609-3a137a874352
  • github.com/digitorus/timestamp@v0.0.0-20231217203849-220c5c2851b7
  • github.com/go-logr/logr@v1.4.3
  • github.com/go-logr/stdr@v1.2.2
  • github.com/go-openapi/analysis@v0.25.2
  • github.com/go-openapi/errors@v0.22.8
  • github.com/go-openapi/jsonpointer@v0.23.1
  • github.com/go-openapi/jsonreference@v0.21.6
  • github.com/go-openapi/loads@v0.24.0
  • github.com/go-openapi/runtime@v0.32.4
  • github.com/go-openapi/runtime/server-middleware@v0.30.0
  • github.com/go-openapi/spec@v0.22.6
  • github.com/go-openapi/strfmt@v0.26.4
  • github.com/go-openapi/swag@v0.26.1
  • github.com/go-openapi/swag/cmdutils@v0.26.1
  • github.com/go-openapi/swag/conv@v0.27.0
  • github.com/go-openapi/swag/fileutils@v0.26.1
  • github.com/go-openapi/swag/jsonname@v0.26.1
  • github.com/go-openapi/swag/jsonutils@v0.26.1
  • github.com/go-openapi/swag/loading@v0.26.1
  • github.com/go-openapi/swag/mangling@v0.26.1
  • github.com/go-openapi/swag/netutils@v0.26.1
  • github.com/go-openapi/swag/stringutils@v0.26.1
  • github.com/go-openapi/swag/typeutils@v0.27.0
  • github.com/go-openapi/swag/yamlutils@v0.26.1
  • github.com/go-openapi/validate@v0.26.0
  • github.com/go-viper/mapstructure/v2@v2.5.0
  • github.com/google/certificate-transparency-go@v1.3.3
  • github.com/google/go-containerregistry@v0.21.7
  • github.com/google/uuid@v1.6.0
  • github.com/grpc-ecosystem/grpc-gateway/v2@v2.29.0
  • github.com/in-toto/attestation@v1.2.0
  • github.com/in-toto/in-toto-golang@v0.11.0
  • github.com/opencontainers/go-digest@v1.0.0
  • github.com/pkg/errors@v0.9.1
  • github.com/secure-systems-lab/go-securesystemslib@v0.11.0
  • github.com/shibumi/go-pathspec@v1.3.0
  • github.com/sigstore/protobuf-specs@v0.5.1
  • github.com/sigstore/rekor@v1.5.3
  • github.com/sigstore/rekor-tiles/v2@v2.3.0
  • github.com/sigstore/sigstore@v1.10.8
  • github.com/sigstore/timestamp-authority/v2@v2.1.2
  • github.com/theupdateframework/go-tuf/v2@v2.4.2
  • github.com/transparency-dev/formats@v0.1.1
  • github.com/transparency-dev/merkle@v0.0.2
  • github.com/youmark/pkcs8@v0.0.0-20240726163527-a2c0da244d78
  • go.opentelemetry.io/auto/sdk@v1.2.1
  • go.opentelemetry.io/otel@v1.44.0
  • go.opentelemetry.io/otel/metric@v1.44.0
  • go.opentelemetry.io/otel/trace@v1.44.0
  • go.yaml.in/yaml/v3@v3.0.4
  • golang.org/x/crypto@v0.53.0
  • golang.org/x/mod@v0.37.0
  • golang.org/x/net@v0.56.0
  • golang.org/x/sync@v0.21.0
  • golang.org/x/sys@v0.46.0
  • golang.org/x/term@v0.44.0
  • golang.org/x/text@v0.38.0
  • golang.org/x/tools@v0.46.0
  • google.golang.org/genproto/googleapis/api@v0.0.0-20260526163538-3dc84a4a5aaa
  • google.golang.org/genproto/googleapis/rpc@v0.0.0-20260523011958-0a33c5d7ca68
  • google.golang.org/grpc@v1.82.1
  • google.golang.org/protobuf@v1.36.11
  • k8s.io/klog/v2@v2.140.0

ide-extension 1

  • untrusted-exec (medium) ydnikolaev-a2ahub-5336d87/integrations/vscode/package.json runs its entry point in untrusted workspaces (untrustedWorkspaces.supported)