MCP100 IndexHost
WatchlistFirst-party MCP

OpenAgent

by The Open Agent

Reviewed October 5, 2026

Host

Watchlist tracking

Reviewed for relevance and future tracking value.

MCP100 Assessment

Watchlist / Tracking

Why we’re tracking it

Track assistant and tool-host compatibility as its local agent loop changes

Reviewed · Documentation review; complete setup workflow not independently tested

Best fit

Self-hosting a personal AI assistant with RAG, browsing, code execution and MCP tools.

What we know

OpenAgent is a self-hostable personal AI assistant that can connect model providers, build document knowledge bases, browse the web, execute code and call MCP tools.

Maintenance / activity evidence

  • Observed (UTC)feat: support WeChat mini program sign-in

Tracking evidence observed Oct 5, 2026. These dated signals do not establish current maintenance. Reviewed enrichment confidence: high.

Activity source · commits ↗Activity source · releases ↗

Verification gaps / watch-outs

  • Installation and comprehensive security have not been independently audited.
  • Can inherit the capabilities of configured model providers, code execution and MCP tools. Writes: Code/tool actions depend on enabled integrations.
  • Deployment-specific.
  • Sensitive access: Provider credentials, Knowledge-base documents, Tool-accessible resources
  • A self-hosted agent host can aggregate model credentials, local knowledge and powerful tools; deployments need explicit least-privilege configuration.
Security source · repository notice ↗Security source · policy file ↗

Full authority, access and evidence limits are available in Review context and Access & risk.

Popularity

5,689 repository stars

Stars observed Oct 6, 2026.

All limitations / Review context

Which MCP client integrations and tool permissions does the current assistant support?

The bounded assessment reviewed the official README, repository notices, security policy path, and security page for known material public-tracking blockers. No such blocker was identified. This is a public-tracking assessment, not an installation safety certification.

  • A self-hosted agent host can aggregate model credentials, local knowledge and powerful tools; deployments need explicit least-privilege configuration.
  • Can inherit the capabilities of configured model providers, code execution and MCP tools.
  • Deployment-specific.
  • Self-hosted by default, but connected providers/tools may receive data.
  • Reviewed write actions: Code/tool actions depend on enabled integrations
  • Sensitive access: Provider credentials, Knowledge-base documents, Tool-accessible resources
  • Installation, client compatibility and comprehensive security have not been independently audited. Authentication and access depend on the configured services.
  • No independent runtime, installation, or comprehensive security audit was performed.
  • No installation, runtime, client matrix, or complete tool-contract audit was performed in this review.
  • Exact authentication model by deployment
  • Provider credentials and MCP tool permissions vary by deployment.
  • Code execution and external tools increase the authority of the host.

Original activity observations

  • 2026-10-05T17:43:04Z: feat: support WeChat mini program sign-in
Technical identity
github.com/the-open-agent/openagent
Reviewed resource type
Host
Repository identity
the-open-agent/openagent
Service endpoint
http://localhost:14000

Evidence & Sources

Evidence basis
Recorded source evidence
Setup runtime verification
Not independently runtime-tested by MCP100 for this setup workflow.

Reviewed · Latest source observation