WatchlistFirst-party MCP

Trinity

by Ability AI

Reviewed October 5, 2026

Host

Watchlist tracking

Reviewed for relevance and future tracking value.

MCP100 Assessment

Watchlist / Tracking

Why we’re tracking it

Track agent governance and tool-control changes as Trinity evolves

Reviewed · Documentation review; complete setup workflow not independently tested

Best fit

Self-hosting and operating fleets of isolated agents from one control plane.

What we know

Sovereign agent platform with Docker-isolated agents, web/API administration and an MCP control plane for deployment, messaging, schedules and logs.

Maintenance / activity evidence

  • Observed (UTC)chore(deps-dev): bump brace-expansion in /tests/git sync ( 3198)

Tracking evidence observed Oct 5, 2026. These dated signals do not establish current maintenance. Reviewed enrichment confidence: high.

Verification gaps / watch-outs

  • Installation and comprehensive security have not been independently audited.
  • Agent-control-plane authority. Writes: Create/deploy/start/stop/delete agents; Schedules; Messages; GitHub sync.
  • Admin/MCP API key + model credentials.
  • Sensitive access: Provider credentials, GitHub PATs, Agent workspaces/logs
  • Control-plane operations are inherently high authority despite container isolation and audit features.

Full authority, access and evidence limits are available in Review context and Access & risk.

Popularity

583 repository stars

Stars observed Sep 25, 2026.

Do not overwrite existing reviewed stars/download metrics with nulls from this enrichment batch.

Do not overwrite existing reviewed stars/download metrics with nulls from this enrichment batch.

All limitations / Review context

Which MCP integrations and governance controls does the current platform document?

The bounded assessment reviewed the official README, repository notices, security policy path, and security page for known material public-tracking blockers. No such blocker was identified. This is a public-tracking assessment, not an installation safety certification.

  • Control-plane operations are inherently high authority despite container isolation and audit features.
  • Agent-control-plane authority.
  • Admin/MCP API key + model credentials.
  • Self-hosted agent/session/log data plus credentials.
  • Reviewed write actions: Create/deploy/start/stop/delete agents; Schedules; Messages; GitHub sync
  • Sensitive access: Provider credentials, GitHub PATs, Agent workspaces/logs
  • Installation, client compatibility and comprehensive security have not been independently audited. Authentication and access depend on the configured services.
  • No independent runtime, installation, or comprehensive security audit was performed.
  • No installation, runtime, client matrix, or complete tool-contract audit was performed in this review.
  • Requires Docker/Compose and provider credentials.
  • MCP API key provisioning and admin access are privileged.
  • SQLite is a local default; PostgreSQL is recommended for production.

Original activity observations

  • 2026-10-03T09:14:55Z: chore(deps-dev): bump brace-expansion in /tests/git sync ( 3198)
Technical identity
github.com/abilityai/trinity
Exact implementation source
https://github.com/abilityai/trinity ↗
Reviewed resource type
Host
Repository identity
abilityai/trinity
Service endpoint
http://localhost:8080/mcp

Evidence & Sources

Evidence basis
Recorded source evidence
Setup runtime verification
Not independently runtime-tested by MCP100 for this setup workflow.

Reviewed · Latest source observation

  • GitHub repository ↗

    abilityai/trinity

    Recorded repository material and project history.

    Includes references whose attribution is not established.