uvwt/agentdock
Secure MCP runtime for AI agents to operate local machines, servers, and containers with multi-device orchestration.
About uvwt/agentdock
uvwt/agentdock is an open-source project on GitHub, mainly written in Go. Secure MCP runtime for AI agents to operate local machines, servers, and containers with multi-device orchestration. It currently holds 965 stars and 119 forks with 0 open issues, and was last pushed on an unknown date (repository created unknown).
Project Overview
AI Homed tracks it on the Today's Trending board.
GitHub Repository Details
README
English | 简体中文
AgentDock MCP
Give AI agents secure, controlled access to every machine you operate.
Open ChatGPT in your browser and manage multiple computers and servers from one conversation. Write code, change configuration, run commands, and deploy in the real environment where the work belongs—without consuming a dedicated Codex coding quota.
What is AgentDock?
AgentDock is an independent tool runtime for AI agents.
It provides unified, secure, and controlled file, command, Git, Skill, MCP, browser automation, and task execution across local computers, remote servers, and containers. Connect multiple AgentDock instances to coordinate work across devices and finish multi-machine workflows in a single conversation.
AgentDock does not provide a chat interface or perform model inference. It focuses on one responsibility:
Let AI agents operate real environments within explicit permission boundaries and return structured, traceable, and verifiable results.
ChatGPT / Claude / Codex
│
│ MCP (multiple instances supported)
┌─────────────┼─────────────┐
▼ ▼ ▼
┌───────────┐ ┌───────────┐ ┌───────────┐
│ AgentDock │ │ AgentDock │ │ AgentDock │
│ Local Mac │ │ LAN Host │ │ Cloud VPS │
└─────┬─────┘ └─────┬─────┘ └─────┬─────┘
│ │ │
▼ ▼ ▼
Files · Shell · Git Tunnels Proxy · Deploy
What can AgentDock do?
- Manage multiple computers and servers directly from ChatGPT without repeatedly switching SSH sessions
- Write code, modify projects, run tests, and operate Git in the real local or remote environment without depending on a dedicated coding-agent quota
- Manage VPS hosts, Docker services, reverse proxies, and deployment configuration
- Inspect logs, processes, ports, and actual runtime state
- Operate authenticated web pages and macOS desktop applications
- Connect multiple AgentDock instances and coordinate cross-device work in one conversation
- Extend capabilities through Skills and dynamic MCP servers
- Persist long-running task state and continue after an interruption
- Use the same tool model across macOS, Linux, Windows, and containers
- And more
Quick start
Regular users can install AgentDock from the official package for their operating system. You do not need the source code or Go.
See Install AgentDock for the complete instructions.
| Platform | Documentation | | --- | --- | | Docker | Docker installation | | Linux | Automated Linux installation | | Linux / VPS | Manual systemd deployment | | macOS | macOS installation | | Windows | Graphical Windows installer |
Choose a connection option
- Local only: the client and AgentDock run on the same computer.
- Temporary public address: ChatGPT, a phone, or another remote device needs access and no domain is ready. The address may change after the Tunnel restarts.
- Fixed domain: a stable address for long-term use. Requires a Cloudflare-managed domain and Tunnel Token.
Connect an AI client
AgentDock exposes tools over MCP Streamable HTTP. The exact client syntax varies, but a typical configuration looks like this:
{
"mcpServers": {
"agentdock": {
"url": "http://127.0.0.1:8765/mcp",
"headers": {
"Authorization": "Bearer <AGENTDOCK_AUTH_TOKEN>"
}
}
}
}
Core capabilities
Files and commands
- Read and search UTF-8 text, traverse directories, and apply structured edits
- Atomic file writes, path boundaries, and private-directory protection
- Command execution with timeout and output limits
- Separate stdout, stderr, and exit status
- Long-running command sessions, PTY, observation, input, and termination
- Output truncation and sensitive-value redaction
- macOS, Linux, Windows, and WSL support
Skills and dynamic MCP
Official and community Skill sources live in uvwt/agentdock-skills. This repository only keeps core Skills that must ship with the AgentDock runtime, including bootstrap/security Skills and the built-in agentdock-user-guide official user guide.
- Validate, install, uninstall, activate, and roll back Skill packages
- Stable, development, canary, and pinned release channels
- Isolated environment variables and runtimes for each Skill
- Register, enable, disable, refresh, and remove dynamic MCP servers
- Streamable HTTP and stdio transports
- Search tools, inspect schemas, and perform controlled calls
- Configuration isolation between MCP servers
Native ACP
AgentDock can optionally act as a native ACP client and host a local coding-agent adapter.
- Desktop control panels provide presets for Codex, Claude, and Grok; host configuration controls whether ACP is enabled and which adapter is selected.
- Use
acp_sessionto create and manage sessions,acp_promptto run and observe prompts, andacp_interactionto answer agent permission requests. - Optional ACP operations are available only when the connected adapter advertises the corresponding capability.
- ACP working directories follow the host process or container security boundary rather than an AgentDock filesystem allowlist.
Browser and desktop automation
- Start, close, and clean up browser sessions
- Navigate, click, type, select, and wait
- Inspect page text, interactive elements, errors, and network responses
- Persist login state, use dedicated browser profiles, and capture screenshots
- Use system Chrome and macOS desktop automation
Recoverable tasks
- Persist task state
- Define explicit goals, steps, and completion conditions
- Record staged checkpoints
- Track blockers and resume after interruption
- Perform final review and evidence-based completion checks
- Reuse workflow templates
Recall and NexusDock integration
AgentDock can optionally pair with NexusDock as a multi-device aggregation entrypoint:
- Long-term project memory
- Runbooks and experience records
- Workflow templates
- Private notes
- Multi-device state coordination
- Temporary signed Artifact downloads proxied by NexusDock while the source node is online
Runtime directories
| Path | Purpose |
| --- | --- |
| ~/AgentDock | Default working directory for relative file operations |
| ~/.agentdock | AgentDock state, configuration, sessions, and extension data |
Ports
Default MCP URL for Docker, native installs, and local development:
http://127.0.0.1:8765/mcp
Ports are configurable. Clients must use the address defined by the actual deployment.
For public deployments, enable Bearer Token or OAuth authentication and use HTTPS. Never expose an unauthenticated MCP service to the public internet.
Development and contribution
Run the full check before submitting code:
make check
GitHub Actions continuously run tests, static checks, builds, and release validation.
User documentation is maintained separately in uvwt/agentdock-docs. Changes to user-visible behavior, configuration, installation, or tool schemas should update the matching documentation in the same change set.
Changes involving device pairing, cross-node tool routing, Recall, or Workflow integrations may also require coordinated changes in uvwt/nexusdock. The shared protocol is maintained in uvwt/agentdock-protocol. When changing shared interfaces or data structures, update the protocol definitions first, then align both implementations and their protocol dependency versions, check compatibility, update the corresponding documentation, and link related cross-repository changes in the PR.
Submit bugs and feature requests through GitHub Issues.
Support the project
If AgentDock helps you, please consider giving it a Star ⭐. Thank you for your support
| Alipay | |
|---|---|
Star History
Related links
License
Apache License 2.0. See LICENSE.