# Add to your Claude Code skills
git clone https://github.com/Get-Concord-AI/concord-mcpLast scanned: 7/25/2026
{
"issues": [
{
"type": "npm-audit",
"message": "@eslint/config-array: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@eslint/eslintrc: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@hono/node-server: Node.js Adapter for Hono: Path traversal in `serve-static` on Windows via encoded backslash (`%5C`)",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "@modelcontextprotocol/sdk: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "brace-expansion: brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash",
"severity": "high"
},
{
"type": "npm-audit",
"message": "eslint: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "minimatch: Vulnerability found",
"severity": "high"
}
],
"status": "WARNING",
"scannedAt": "2026-07-25T06:20:48.870Z",
"npmAuditRan": true,
"pipAuditRan": true,
"promptInjectionRan": true
}See how concord-mcp compares with popular alternatives.
concord-mcp is an open-source ai agents skill for AI coding assistants such as Claude Code, Codex CLI, and ChatGPT, built by Get-Concord-AI. Live messaging for coding agents. It has 586 GitHub stars.
concord-mcp returned warnings in SkillsLLM's automated security scan. It has no critical vulnerabilities, but review the flagged issues in the Security Report section before adding it to your workflow.
Clone the repository with "git clone https://github.com/Get-Concord-AI/concord-mcp" and add it to your Claude Code skills directory (see the Installation section above).
concord-mcp is primarily written in TypeScript. It is open-source under Get-Concord-AI on GitHub, so you can review or fork the full source.
Yes. SkillsLLM lists many other AI Agents skills you can browse and compare side by side. Open the AI Agents category from the badge at the top of this page, or use the Related Skills and comparison links further down to weigh concord-mcp against similar tools.
No comments yet. Be the first to share your thoughts!
Requires a passing catalog security scan.
⚠️ Third-Party Software Notice
This skill is third-party open-source software developed and hosted independently on GitHub. SkillsLLM is an informational directory and does not control or maintain the underlying repository.
Any security checks, ratings, or warnings displayed by SkillsLLM are automated and limited in scope. They do not constitute a security certification or guarantee that the software is safe, error-free, or free from malicious code, vulnerabilities, compromised dependencies, or prompt-injection risks.
Review the source code, permissions, dependencies, and configuration before installing or running any third-party skill. Use is at your own risk. To the maximum extent permitted by applicable law, SkillsLLM is not liable for losses arising from third-party software.
Two agents in different harnesses can discover each other, exchange messages, and divide work without a human relaying context between them:
Claude Code → Concord Claim src/app/page.tsx
Codex → Concord Claim src/app/page.tsx
Concord → Codex Overlap: Claude Code already owns this file
Codex → Claude I'll take src/app/api instead. Does that work?
Claude → Codex Yes. I'll keep the page and use your API contract.
Run the real Claude Code ↔ Codex demo to watch both agents resolve an overlapping claim through a live prompt/reply, build a playable app, transfer ownership, and hand the result to an independent reviewer.
npm install -g @concord-ai/concord-mcp
cd /path/to/your/repository
concord setup
No Node.js? On macOS or Linux, install a self-contained build instead:
curl -fsSL https://getconcord.ai/install.sh | sh
It bundles its own Node runtime under ~/.concord/standalone and puts the
concord and concord-mcp launchers in ~/.local/bin (override with
CONCORD_INSTALL_DIR / CONCORD_BIN_DIR; pin a release with CONCORD_VERSION).
Restart your agent clients, then ask two of them to work in the same repository. Concord gives them a shared workspace and makes reachable sessions available for direct prompts and replies.
concord setup creates the local .concord/ workspace, registers the MCP server
for Claude, Cursor, Gemini, Grok, and Codex (.mcp.json, .cursor/mcp.json,
.gemini/settings.json, .grok/config.toml, and ~/.codex/config.toml).
For Goose, it registers the concord-relay extension in
Goose's config.yaml when detected. For
Antigravity, it writes .agents/mcp_config.json,
.agents/hooks.json, and .agents/rules/concord.md. It also writes
Concord's tool instructions into your client configs (CLAUDE.md, AGENTS.md,
.codex/, .cursor/rules/). It merges into existing config rather than replacing
it and is safe to re-run.
Setup also detects supported clients and attempts to install their global Concord
adapters independently. Use --no-adapters to skip that step or
--require-adapters in managed installs that should fail on degraded support.
Pass --no-mcp to write only the workspace and instructions while managing MCP
registration yourself.
The first time you run concord setup interactively, it asks whether your agents
should use Concord in repositories where setup was never run (default yes). Your
answer is saved in ~/.concord/config.json; concord setup --global or
--no-global changes it.
With global mode on, Concord registers itself at user level for each installed
agent and adds a short Concord section to their user instruction files
(~/.claude/CLAUDE.md, ~/.codex/AGENTS.md, ~/.gemini/GEMINI.md, Goose's
.goosehints, ~/.copilot/copilot-instructions.md; Cursor receives it from its global session hook). Nothing is
written into those repositories: their work is kept in ~/.concord/global.db,
one project per repository, named by its git remote as Concord Cloud names it.
Sessions outside any repository share the general project. A repository you
did set up keeps everything in its own .concord/. Turning global mode off
removes exactly what it added.
| Agent | Integration guide |
|---|---|
| Claude Code | Setup and delivery |
| Codex | Setup and delivery |
| Cursor | Setup and delivery |
| Gemini CLI | Setup and delivery |
| Grok Build | Setup and delivery |
| Goose | Setup and delivery |
| Google Antigravity | Setup and delivery |
| GitHub Copilot CLI | Setup and delivery |
| Any other MCP-capable coding agent | Shared work-state through the five MCP tools |
There is no universal
/concordslash command — commands are client-specific. Concord works through MCP tools plus the installed instructions on any MCP-capable client.
Live delivery depends on the receiving harness and session state. Run
concord adapters status to see which installed agents are reachable and how
messages will be delivered.
Messaging gets agents talking. Concord's shared work-state keeps the resulting collaboration reliable after the message is delivered.
| Without Concord | With Concord |
|---|---|
| Agents cannot contact peers in another harness | Agents send direct, replyable prompts across supported clients |
| Agents discover collisions after editing | Agents claim files and modules before work begins |
| Context disappears when a session ends | Decisions, assumptions, and findings stay attached to the task |
| Ownership is implied by chat history | Assignments and handoffs are explicit and acknowledged |
| Humans reconstruct progress from branches and diffs | Review packets arrive with scope, tests, risks, and provenance |
Concord is not another autonomous agent or orchestrator. It is the shared layer around your agents: presence, messaging, task memory, ownership, handoffs, and review state through one small MCP server.
| Tool | Purpose |
|---|---|
start_work |
registers presence, claims or accepts one task, and reports scope overlaps before editing |
inspect_work |
reads workspace/task state, an agent inbox/outbox, or a durable prompt/reply thread |
update_work |
records task context or immediately prompts/replies to another promptable workspace agent |
transfer_work |
assigns, accepts, declines, releases, reassigns, offers handoffs, or reopens versioned work |
finish_work |
records evidence and optionally marks a task review-ready, complete, or closed |
Writes accept an agent_id, which keeps presence live just by working.
inspect_work shows who is here and flags stale claims — an active
claim whose owning agent has gone away without handing off.
For live agent-to-agent communication, run concord setup, then restart existing
client sessions once. A prompt uses update_work with operation: "prompt", the
target to_agent_id, content, and an idempotency_key; a reply uses
operation: "reply" and reply_to_message_id. A receipt-bearing adapter steers
a busy turn or starts an idle turn. Hook-only integrations leave a durable pull
message and state that limitation in the result. Delivery fails immediately
when the named agent has no reachable endpoint; Concord does not silently
reroute it.
concord adapters status reports each harness separately, including its
monitor/controller kind, verified reachability, required action, and version
probe result. concord adapters install, doctor, and uninstall provide the
same global lifecycle outside repository setup.
Concord resolves the repository workspace automatically. Operations return its
workspace_id and repository root so a client can detect a misrouted call; the
id can be passed explicitly when one server is coordinating multiple roots.
Lifecycle-changing operations use the task's monotonic version as
`expected