Dive

Name: Dive
Author: OpenAgentPlatform

Issues

Dive is an open-source MCP Host Desktop Application that seamlessly integrates with any LLMs supporting function calling capabilities. ✨

1,798stars

168forks

TypeScript

Installation

# Add to your Claude Code skills
git clone https://github.com/OpenAgentPlatform/Dive

Getting Started

Guides for using ai agents skills like Dive.

Caveman: Cut Claude Token Use by 65%
How agent-side prompt compression works, when to use it, and when not to.
What is an AI Skills Marketplace?
Definitions, how marketplaces work, and how to choose between them in 2026.
Getting Started with AI Skills

Security ReportIssues

Last scanned: 4/26/2026

{
  "issues": [
    {
      "type": "npm-audit",
      "message": "@aws-sdk/client-bedrock: Vulnerability found",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "@aws-sdk/client-sso: Vulnerability found",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "@aws-sdk/core: Vulnerability found",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "@aws-sdk/credential-provider-env: Vulnerability found",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "@aws-sdk/credential-provider-http: Vulnerability found",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "@aws-sdk/credential-provider-ini: Vulnerability found",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "@aws-sdk/credential-provider-node: Vulnerability found",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "@aws-sdk/credential-provider-process: Vulnerability found",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "@aws-sdk/credential-provider-sso: Vulnerability found",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "@aws-sdk/credential-provider-web-identity: Vulnerability found",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "@aws-sdk/middleware-user-agent: Vulnerability found",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "@aws-sdk/nested-clients: Vulnerability found",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "@aws-sdk/token-providers: Vulnerability found",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "@aws-sdk/util-user-agent-node: Vulnerability found",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "@chevrotain/cst-dts-gen: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "@chevrotain/gast: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "@electron/rebuild: Vulnerability found",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "@hono/node-server: @hono/node-server has authorization bypass for protected static paths via encoded slashes in Serve Static Middleware",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "@isaacs/brace-expansion: @isaacs/brace-expansion has Uncontrolled Resource Consumption",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "@mermaid-js/parser: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "@modelcontextprotocol/sdk: @modelcontextprotocol/sdk has cross-client data leak via shared server/transport instance reuse",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "@remix-run/router: React Router vulnerable to XSS via Open Redirects",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "@smithy/config-resolver: AWS SDK for JavaScript v3 adopted defense in depth enhancement for region parameter value",
      "severity": "low"
    },
    {
      "type": "npm-audit",
      "message": "@smithy/middleware-retry: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "@xmldom/xmldom: xmldom: Uncontrolled recursion in XML serialization leads to DoS",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "ajv: ajv has ReDoS when using `$data` option",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "app-builder-lib: Vulnerability found",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "brace-expansion: brace-expansion Regular Expression Denial of Service vulnerability",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "chevrotain: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "dmg-builder: Vulnerability found",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "dompurify: DOMPurify contains a Cross-site Scripting vulnerability",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "electron: Electron: Context Isolation bypass via contextBridge VideoFrame transfer",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "electron-builder: Vulnerability found",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "electron-builder-squirrel-windows: Vulnerability found",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "fast-xml-parser: fast-xml-parser has RangeError DoS Numeric Entities Bug",
      "severity": "critical"
    },
    {
      "type": "npm-audit",
      "message": "flatted: flatted vulnerable to unbounded recursion DoS in parse() revive phase",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "glob: glob CLI: Command injection via -c/--cmd executes matches with shell:true",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "hono: Hono JWK Auth Middleware has JWT algorithm confusion when JWK lacks \"alg\" (untrusted header.alg fallback)",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "immutable: Immutable is vulnerable to Prototype Pollution",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "js-yaml: js-yaml has prototype pollution in merge (<<)",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "langium: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "lodash: Lodash has Prototype Pollution Vulnerability in `_.unset` and `_.omit` functions",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "lodash-es: Lodash has Prototype Pollution Vulnerability in `_.unset` and `_.omit` functions",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "mdast-util-to-hast: mdast-util-to-hast has unsanitized class attribute",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "mermaid: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "minimatch: minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "patch-package: Vulnerability found",
      "severity": "low"
    },
    {
      "type": "npm-audit",
      "message": "path-to-regexp: path-to-regexp vulnerable to Denial of Service via sequential optional groups",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "picomatch: Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob Matching",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "postcss: PostCSS has XSS via Unescaped </style> in its CSS Stringify Output",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "prismjs: PrismJS DOM Clobbering vulnerability",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "qs: qs's arrayLimit bypass in comma parsing allows denial of service",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "react-router: Vulnerability found",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "react-router-dom: Vulnerability found",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "react-syntax-highlighter: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "refractor: Vulnerability found",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "rollup: Rollup 4 has Arbitrary File Write via Path Traversal",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "tar: node-tar Vulnerable to Arbitrary File Creation/Overwrite via Hardlink Path Traversal",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "tmp: tmp allows arbitrary temporary file / directory write via symbolic link `dir` parameter",
      "severity": "low"
    },
    {
      "type": "npm-audit",
      "message": "underscore: Underscore has unlimited recursion in _.flatten and _.isEqual, potential for DoS attack",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "uuid: uuid: Missing buffer bounds check in v3/v5/v6 when buf is provided",
      "severity": "medium"
    },
    {
      "type": "npm-audit",
      "message": "vite: Vite Vulnerable to Path Traversal in Optimized Deps `.map` Handling",
      "severity": "high"
    },
    {
      "type": "npm-audit",
      "message": "yaml: yaml is vulnerable to Stack Overflow via deeply nested YAML collections",
      "severity": "medium"
    }
  ],
  "status": "FAILED",
  "scannedAt": "2026-04-26T06:07:31.517Z",
  "semgrepRan": false,
  "npmAuditRan": true,
  "pipAuditRan": true
}

README.md

Frequently Asked Questions

What is Dive?

Dive is an open-source ai agents skill for AI coding assistants such as Claude Code, Codex CLI, and ChatGPT, built by OpenAgentPlatform. Dive is an open-source MCP Host Desktop Application that seamlessly integrates with any LLMs supporting function calling capabilities. ✨. It has 1,798 GitHub stars.

Is Dive safe to use?

Dive failed SkillsLLM's automated security scan, which flagged one or more high-severity issues. Review the Security Report section carefully before using it.

How do I install Dive?

Clone the repository with "git clone https://github.com/OpenAgentPlatform/Dive" and add it to your Claude Code skills directory (see the Installation section above).

What programming language is Dive written in?

Dive is primarily written in TypeScript. It is open-source under OpenAgentPlatform on GitHub, so you can review or fork the full source.

Are there alternatives to Dive?

Yes. SkillsLLM lists many other AI Agents skills you can browse and compare side by side. Open the AI Agents category from the badge at the top of this page, or use the Related Skills and comparison links further down to weigh Dive against similar tools.

Agentic AI for Beginners

Build your first AI agent from scratch - tool use, ReAct pattern, memory, deployment

41 minBeginner

Comments (0)

to leave a comment.

No comments yet. Be the first to share your thoughts!

Related Skills

superpowers

by obra

An agentic skills framework & software development methodology that works.

234,966

deepcode-cli build-your-own-openclaw

GitHub repo size GitHub language count GitHub top language GitHub last commit

Dive is an open-source MCP Host Desktop Application that seamlessly integrates with any LLMs supporting function calling capabilities. ✨

Dive Demo

Features 🎯

🌐 Universal LLM Support: Compatible with ChatGPT, Anthropic, Ollama and OpenAI-compatible models
💻 Cross-Platform: Available for Windows, MacOS, and Linux
🔄 Model Context Protocol: Enabling seamless MCP AI agent integration on both stdio and SSE mode
☁️ OAP Cloud Integration: One-click access to managed MCP servers via OAPHub.ai - eliminates complex local deployments
🏗️ Dual Architecture: Modern Tauri version alongside traditional Electron version for optimal performance
🌍 Multi-Language Support: Supports 24+ languages including English, Traditional Chinese, Simplified Chinese, Spanish, Japanese, Korean, German, French, Italian, Portuguese, Russian, Thai, Vietnamese, Filipino, Indonesian, Polish, Turkish, Ukrainian, Swedish, Norwegian, Finnish, and Lao
⚙️ Advanced API Management: Multiple API keys and model switching support with model_settings.json
🛠️ Granular Tool Control: Enable/disable individual MCP tools for precise customization
💡 Custom Instructions: Personalized system prompts for tailored AI behavior
⌨️ Keyboard Shortcuts: Comprehensive hotkey support for efficient navigation and operations (rename, settings, reload, new chat, etc.)
📝 Chat Draft Saving: Automatically saves chat input drafts to prevent data loss
🔄 Auto-Update Mechanism: Automatically checks for and installs the latest application updates
🔐 MCP Server Authentication: Added support for MCP server authentication

⚠️ Note: This feature is currently unstable and may require frequent re-authorization
🛠️ Built-in Local Tools: Pre-configured tools available out of the box - Fetch (web requests), File Manager (read/write files), and Bash (command execution)
🤖 MCP Server Installer Agent: Intelligent agent that helps you install and configure MCP servers automatically
🔔 Multiple Elicitation Support: Handle multiple MCP elicitation requests simultaneously in the UI
📁 @ File Path Search: Extended @ keyword in chat input to search file paths

Recent updates(2026/02/26) - v0.14.0+ 🎉

🛠️ Skills & Slash Commands: Support skills and more slash commands
🔍 Chat History Search: Support chat history search

Platform Availability

Platform	Electron	Tauri
Windows	✅	✅
macOS	✅	🔜
Linux	✅	✅

Migration Note: Existing local MCP/LLM configurations remain fully supported. OAP integration is additive and does not affect current workflows.

Download and Install ⬇️

Get the latest version of Dive:

Windows users: 🪟

Choose between two architectures:

Tauri Version (Recommended): Smaller installer (<30MB), modern architecture
Electron Version: Traditional architecture, fully stable
Python and Node.js environments will be downloaded automatically after launching

MacOS users: 🍎

Electron Version: Download the .dmg version
You need to install Python and Node.js (with npx uvx) environments yourself
Follow the installation prompts to complete setup

Linux users: 🐧

Choose between two architectures:

Tauri Version: Modern architecture with smaller installer size
Electron Version (Recommended): Traditional architecture with .AppImage format
You need to install Python and Node.js (with npx uvx) environments yourself
For Ubuntu/Debian users:
- You may need to add --no-sandbox parameter
- Or modify system settings to allow sandbox
- Run chmod +x to make the AppImage executable
For Arch users:
- If you are using Arch Linux, you can install dive using an AUR helper. For example: paru -S dive-ai

MCP Setup Options

For more detailed instructions, please see MCP Servers Setup.

The easiest way to get started! Access enterprise-grade MCP tools instantly:

Sign up at OAPHub.ai
Connect to Dive using one-click deep links or configuration files
Enjoy managed MCP servers with zero setup - no Python, Docker, or complex dependencies required

Benefits:

✅ Zero configuration needed
✅ Cross-platform compatibility
✅ Enterprise-grade reliability
✅ Automatic updates and maintenance

Build 🛠️

See BUILD.md for more details.

Contributing 🤝

We welcome contributions from the community! Here's how you can help:

Development Setup

Fork the repository
Clone your fork: git clone https://github.com/YOUR_USERNAME/Dive.git
Install dependencies: npm install
Start development: npm run dev (Electron) or cargo tauri dev (Tauri)
Make your changes and test thoroughly
Submit a pull request

License 📄

Dive is open-source software licensed under the MIT License.

Connect With Us 🌐

💬 Join our Discord
🐦 Follow us on Twitter/X Reddit Thread
⭐ Star us on GitHub
🐛 Report issues on our Issue Tracker