by ATaC-team · MCP Server · ★ 303
Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h
uv tool install atacTaken from the project's README on GitHub.
Flagged: spawns subprocesses. Scanned against 42 published rules built on the SlowMist agent-security taxonomy, refreshed every 8 hours.
The quality score combines nine heuristic checks of the repo and its README: completeness, clarity, specificity, examples, structure, agent readiness, step-by-step content, instruction quality and security notes. It rates how well the project explains itself to an agent, not the code.
| Stars | 303 |
| Forks | 11 |
| Language | TypeScript |
| Category | MCP Server |
| License | MIT |
| Quality Score | 62/100 |
| Last Updated | 2026-10-12 |
| Created | 2026-01-14 |
| Platforms | mcp, node |
| Est. Tokens | ~15k |
English | 中文 中文 ATaC是一个面向 Agent 工作流的工具运行时，帮助 Agent 通过编排图代码复用资产。 它主要提供三类能力： 统一工具注册：把本地 Agent 工具和 MCP 工具纳入同一个运行时 Agent 自编排 graph：让 Agent 生成的 graph 代码可以直接复用这些已注册能力 一键运行：加载并执行这些 graph 工作流 把工具注册到 ATaC，让 Agent 用代码把这些工具组织成流程，并逐步沉淀为可复用、可维护的 graph 工作流。 🤖 最小接入示例 注册 Agent 内置工具和 MCP 工具 python import asyncio import inspect import sys from pathlib import Path from atac import AtacService import...
Looking for a ATaC alternative? If you're comparing ATaC with other mcp server tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.
Enterprise-ready MCP Gateway & Registry that centralizes AI development tools with secure OAuth authentication
AI agent tooling for data engineering workflows.
🚀 JoySafeter: An enterprise AI Agent Platform—Not just chatting. building、running、testing, and tracing autono
The AI control plane for every agent in your enterprise, built around an enterprise-grade MCP gateway. Give ea
A curated collection of top-tier penetration testing tools and productivity utilities across multiple domains.
A set of tools that gives agents powerful capabilities.
Explore other popular mcp server tools:
Grades come from a rule-based scan built on the SlowMist agent-security taxonomy: 42 published rules, covering credential harvesting, data exfiltration, curl | sh installers and more. It is a first-layer scan, not a manual audit — we say so rather than overstate it.
The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.
Sources & who's responsible: