agent-manager — Watchlist

MCP100 Assessment

Watchlist / Tracking

Why we’re tracking it

Recheck a specific changing behavior of github.com/YoanWai/agent-manager: Has tmux session execution scope or embedded MCP permissions changed across releases?

Reviewed Oct 9, 2026 · Documentation review; complete setup workflow not independently tested

Best fit

Agent session coordination, status and worktree review

What we know

Agent Manager coordinates multiple coding agents and embeds a separate stdio MCP server.

Maintenance / activity evidence

agent-manager v0.39.0 was released on 2026-09-26.

Tracking evidence observed Oct 9, 2026. These dated signals do not establish current maintenance. Reviewed enrichment confidence: high.

Activity source · releases ↗

Verification gaps / watch-outs

Installation and comprehensive security have not been independently audited.
MCP host/agent environment. Do not present as a standalone server unless separately verified. Reported action classes: Start, stop, or control terminal-based agents; Modify agent task state and files through configured agents. Complete write authority is not verified.
Authentication not yet verified.
Agent manager can run or coordinate shell-capable coding agents and may indirectly mutate workspaces.

Agent manager can run or coordinate shell-capable coding agents and may indirectly mutate workspaces.
Advisory/security review not completed; no safety badge.
Write action classes summarize access risk; tool-level completeness and exact operation names are not independently verified. Do not mark them as confirmed documented write inventory.
Unknown vulnerabilities and provider data handling are not certified by this public tracking review.

Full authority, access and evidence limits are available in Review context and Access & risk.

Popularity

580 repository stars

Stars observed Oct 9, 2026.

Repository total for YoanWai/agent-manager.

All limitations / Review context

Has tmux session execution scope or embedded MCP permissions changed across releases?

No identified material blocker to an accurately qualified public tracking entry in the limited cited evidence. This is not an installation safety certification; product-specific cautions must remain visible.

Agent manager can run or coordinate shell-capable coding agents and may indirectly mutate workspaces.
Advisory/security review not completed; no safety badge.
Write action classes summarize access risk; tool-level completeness and exact operation names are not independently verified. Do not mark them as confirmed documented write inventory.
MCP host/agent environment. Do not present as a standalone server unless separately verified.
Reviewed write actions: Start, stop, or control terminal-based agents; Modify agent task state and files through configured agents
Complete write authority is not verified.
Installation, client compatibility and comprehensive security have not been independently audited. Authentication and access depend on the configured services.
Can manage running coding agents and terminal sessions; local process and workspace actions may have write authority.
Unknown vulnerabilities and provider data handling are not certified by this public tracking review.
Release evidence proves attributable activity, not entire installation or tool-level safety.
Current Discovery source binding and atomic apply must be generated using MCP100 existing pipeline.
exact authentication contract
first-party data processing and retention
data retention and permission scope
Write actions/tool inventory not confirmed against exact tool documentation; listed action classes remain illustrative or context-dependent. Empty inventory does not establish read-only.
Host-level process controls can spawn/kill sessions; not just an external server catalog.
This is not a standalone general-purpose MCP server; use the resource-type-specific setup and expectations.
Radar public tracking editorial review completed in limited scope; not a security or installation certification. Verify setup according to deployment mode and do not invent unresolved facts.

Original activity observations

agent-manager v0.39.0 was released on 2026-09-26.

Technical identity

github.com/YoanWai/agent-manager

Exact implementation source: https://github.com/YoanWai/agent-manager ↗
Reviewed resource type: Host
Repository identity: YoanWai/agent-manager

Evidence & Sources

Evidence basis: Recorded source evidence
Setup runtime verification: Not independently runtime-tested by MCP100 for this setup workflow.

Reviewed Oct 9, 2026 · Latest source observation Oct 9, 2026

GitHub repository ↗
yoanwai/agent-manager
Recorded repository material and project history.
Includes references whose attribution is not established.

Setup · Watchlist

Host / Desktop app setup

Publisher instructions.

Source evidence observed Oct 12, 2026.

Additional setup details required — see the specific gaps below.

Download / install
Publisher instructions
Agent Manager is a tmux-based multi-agent TUI that exposes MCP tools inside the agent sessions it manages. Install the host app via documented Homebrew/binary route, then use its agent integration; do not claim it is a globally independent MCP server.
Advanced configuration · package install
package install · Review before use
brew install agent-manager
Configure application / integrations
Publisher instructions
Requires tmux and git; README also documents checksummed install script and WSL2 support. Launch with agent-manager. The publisher documents terminal host/tmux sessions, not an automatically running MCP endpoint.
Check connection
MCP100 setup guide
Run agent-manager --version to confirm CLI presence, then start agent-manager and inspect configured coding-agent sessions. This verifies host startup, not an MCP server handshake.
agent-manager --version
Disconnect / uninstall / revoke
MCP100 setup guide
Stop `agent-manager` and remove only its integration from the agent host if configured. `agent-manager` is an agent orchestration CLI rather than a guaranteed standalone MCP server.
brew uninstall agent-manager

Official Documentation & Sources

What it does

Agent Manager coordinates multiple coding agents and embeds a separate stdio MCP server.

Capability: Developer Tools
Resource type: Host
Best fit: Agent session coordination, status and worktree review

Representative uses

list_sessions
create_session
task
managed terminal

Limitations

Host-level process controls can spawn/kill sessions; not just an external server catalog.
This is not a standalone general-purpose MCP server; use the resource-type-specific setup and expectations.
Radar public tracking editorial review completed in limited scope; not a security or installation certification. Verify setup according to deployment mode and do not invent unresolved facts.

Reviewed access

Access & risk

Review the exact access boundary before connecting this MCP to accounts, credentials, or sensitive data.

Authentication: Not documented in the reviewed sources
Permissions: MCP host/agent environment. Do not present as a standalone server unless separately verified.
Data handling: Not documented in the reviewed sources
Cost: unknown
Risk and cautions: Agent manager can run or coordinate shell-capable coding agents and may indirectly mutate workspaces.

Access scope and cautions

Write actions: Not verified Start, stop, or control terminal-based agents Modify agent task state and files through configured agents
Risk level: high
Security notes: Advisory/security review not completed; no safety badge. Write action classes summarize access risk; tool-level completeness and exact operation names are not independently verified. Do not mark them as confirmed documented write inventory.

The reviewed evidence does not establish the complete write authority of this MCP. Consult the unresolved evidence before granting write access.

FAQ

Based on reviewed evidence as of 2026-10-09. Watchlist tracking is not a recommendation or a security certification.

Which tasks are documented for this implementation?

The reviewed tasks include: list_sessions; create_session; task; managed terminal.

What setup and authentication are documented?

A complete connection procedure is not verified. Recorded transport: stdio. Client notes: Launch the documented MCP subcommand and inspect declared tools. These facts do not supply missing installation commands, credentials or a verified authentication procedure. Authentication: Local terminal sessions and agent execution authority.

Can it modify data or perform write operations?

Not verified. The available evidence does not establish the complete write authority. The partial inventory lists: Start, stop, or control terminal-based agents; Modify agent task state and files through configured agents. Recorded permission context: MCP host/agent environment. Do not present as a standalone server unless separately verified.

What limitations and risks should I check before use?

Agent manager can run or coordinate shell-capable coding agents and may indirectly mutate workspaces. Host-level process controls can spawn/kill sessions; not just an external server catalog. This is not a standalone general-purpose MCP server; use the resource-type-specific setup and expectations. Radar public tracking editorial review completed in limited scope; not a security or installation certification. Verify setup according to deployment mode. Advisory/security review not completed; no safety badge. Write action classes summarize access risk; tool-level completeness and exact operation names are not independently verified. Can manage running coding agents and terminal sessions; local process and workspace actions may have write authority. Unknown vulnerabilities and provider data handling are not certified by this public tracking review.