No red flags found in any of the 11 categories — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →
by sandbaseai · MCP Server · ★ 440
Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h
🔒 Is managed-agents safe to install? View the security audit →
managed-agents SandBase managed-agents is the safe, local-first runtime layer for enterprise AI agents. helps teams move AI agents from demos to production with runtime infrastructure for sessions, tools, approvals, sandboxed execution, memory, credential vaults, audit trails, replayable events, and operational visibility. It exposes a Claude Managed Agents-compatible Console and resource API while keeping runtime metadata in SQLite outside your project by default. Use it to build and operate self-hosted AI agents, local developer agents, desktop agent runtimes, MCP-enabled workflows, and enterprise proofs of concept without locking your runtime layer to a single model provider. Why managed-agents? Agent SDKs are great for writing an agent loop. Production agents need more: state, session history, tool governance, sandbox boundaries, credential handling, memory, auditability, and a Console for humans to inspect what happened. focuses on that runtime layer. It is not a visual workflow builder and it is not another model SDK. It is an open-source control plane for running, observing, and governing AI agents locally or in self-hosted environments.
| Stars | 440 |
| Forks | 40 |
| Language | TypeScript |
| Category | MCP Server |
| Quality Score | 71.2773728944644/100 |
| Last Updated | 2026-08-01 |
| Created | 2026-07-11 |
| Platforms | claude-code, mcp, node |
| Est. Tokens | ~17k |
These tools work well together with managed-agents for enhanced workflows:
Explore other popular mcp server tools:
managed-agents is Open-source CMA-compatible agent runtime. Run multi-agent systems locally with any model (Ollama/vLLM/Claude/GPT), MCP tools, scenario templates, and a beautiful dashboard. One command start. Built fo. It is categorized as a MCP Server with 440 GitHub stars.
managed-agents is primarily written in TypeScript.
You can find installation instructions and usage details in the managed-agents GitHub repository at github.com/sandbaseai/managed-agents. The project has 440 stars and 40 forks, indicating an active community.
Grades come from a rule-based scan built on the SlowMist agent-security taxonomy, covering 11 red-flag categories including credential harvesting, data exfiltration, and curl | sh installers. It is a first-layer scan, not a manual audit — we say so rather than overstate it.
The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.
Sources & who's responsible: