mastra — security grade SAFE, quality 61/100

Security audit verdict: SAFE · quality 61/100

No red flags found in any of the 11 categories — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →

by mastra-ai · MCP Server · ★ 28.3k

Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h

🔒 Is mastra safe to install? View the security audit →

About mastra

Mastra Mastra is a framework for building AI-powered applications and agents with a modern TypeScript stack. It includes everything you need to go from early prototypes to production-ready applications. Mastra integrates with frontend and backend frameworks like React, Next.js, and Node, or you can deploy it anywhere as a standalone server. It's the easiest way to build, tune, and scale reliable AI products. Why Mastra? Purpose-built for TypeScript and designed around established AI patterns, Mastra gives you everything you need to build great AI applications out-of-the-box.

agentsaichatbotsevalsjavascriptllmmcpnextjsnodejsreactjs

Quick Facts

Stars28,268
Forks2,843
LanguageTypeScript
CategoryMCP Server
Quality Score60.5943976285191/100
Open Issues454
Last Updated2026-09-23
Created2024-08-06
Platformsmcp, node
Est. Tokens~15k

mastra alternative? Top 6 similar tools

Looking for a mastra alternative? If you're comparing mastra with other mcp server tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.

  • voltagent by VoltAgent · ⭐ 10.4k

    AI Agent Engineering Platform built on an Open Source TypeScript AI Agent Framework

  • CopilotKit by CopilotKit · ⭐ 37.5k

    The Frontend Stack for Agents & Generative UI. React, Angular, Mobile, Slack, and more. Makers of the AG-UI P

  • composio by ComposioHQ · ⭐ 30.3k

    Composio powers 1000+ toolkits, tool search, context management, authentication, and a sandboxed workbench to

  • repomix by yamadashy · ⭐ 28.4k

    📦 Repomix is a powerful tool that packs your entire repository into a single, AI-friendly file. Perfect for w

  • LocalAI by mudler · ⭐ 49.2k

    :robot: The free, Open Source alternative to OpenAI, Claude and others. Self-hosted and local-first. Drop-in r

  • E2B by e2b-dev · ⭐ 13.9k

    Open-source, secure environment with real-world tools for enterprise-grade agents.

More MCP Server Tools

Explore other popular mcp server tools:

View all MCP Server tools →

Popular TypeScript Agent Tools

Frequently Asked Questions

What is mastra?

mastra is Mastra is the modern TypeScript framework for AI-powered applications and agents.. It is categorized as a MCP Server with 28.3k GitHub stars.

What programming language is mastra written in?

mastra is primarily written in TypeScript. It covers topics such as agents, ai, chatbots.

How do I install or use mastra?

You can find installation instructions and usage details in the mastra GitHub repository at github.com/mastra-ai/mastra. The project has 28.3k stars and 2843 forks, indicating an active community.

What are the best alternatives to mastra?

The top alternatives to mastra on Agent Skills Hub include voltagent, CopilotKit, composio. Each offers a different approach to the same problem space — compare them side-by-side by stars, quality score, and community activity.

How this security grade is produced

Grades come from a rule-based scan built on the SlowMist agent-security taxonomy, covering 11 red-flag categories including credential harvesting, data exfiltration, and curl | sh installers. It is a first-layer scan, not a manual audit — we say so rather than overstate it.

The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.

Sources & who's responsible:

View on GitHub → Browse MCP Server tools