Soul-driven AI agent with permission-hardened tools, token budgets, and multi-channel access. Runs 24/7 from CLI, Telegram or More.
# Add to your Claude Code skills
git clone https://github.com/cosmicstack-labs/mercury-agentGuides for using ai agents skills like mercury-agent.
Last scanned: 4/28/2026
{
"issues": [
{
"type": "npm-audit",
"message": "node-cron: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "uuid: uuid: Missing buffer bounds check in v3/v5/v6 when buf is provided",
"severity": "medium"
}
],
"status": "PASSED",
"scannedAt": "2026-04-28T06:28:52.636Z",
"semgrepRan": false,
"npmAuditRan": true,
"pipAuditRan": true
}See how mercury-agent compares with popular alternatives.
mercury-agent is an open-source ai agents skill for AI coding assistants such as Claude Code, Codex CLI, and ChatGPT, built by cosmicstack-labs. Soul-driven AI agent with permission-hardened tools, token budgets, and multi-channel access. Runs 24/7 from CLI, Telegram or More. It has 3,433 GitHub stars.
Yes. mercury-agent passed SkillsLLM's automated security scan — a dependency vulnerability audit plus prompt-injection heuristics — with no high-severity issues. You can read the full report in the Security Report section on this page.
Clone the repository with "git clone https://github.com/cosmicstack-labs/mercury-agent" and add it to your Claude Code skills directory (see the Installation section above).
mercury-agent is primarily written in TypeScript. It is open-source under cosmicstack-labs on GitHub, so you can review or fork the full source.
Yes. SkillsLLM lists many other AI Agents skills you can browse and compare side by side. Open the AI Agents category from the badge at the top of this page, or use the Related Skills and comparison links further down to weigh mercury-agent against similar tools.
No comments yet. Be the first to share your thoughts!
30 days in the Featured rail · terms & refunds
⚠️ Third-Party Software Notice
This skill is third-party open-source software developed and hosted independently on GitHub. SkillsLLM is an informational directory and does not control or maintain the underlying repository.
Any security checks, ratings, or warnings displayed by SkillsLLM are automated and limited in scope. They do not constitute a security certification or guarantee that the software is safe, error-free, or free from malicious code, vulnerabilities, compromised dependencies, or prompt-injection risks.
Review the source code, permissions, dependencies, and configuration before installing or running any third-party skill. Use is at your own risk. To the maximum extent permitted by applicable law, SkillsLLM is not liable for losses arising from third-party software.
Automated security scan — not a certification.
Most AI agents forget you by morning, run whatever the model decides, and stop the moment you close the laptop. Mercury doesn't.
Mercury is an open-source agent with a personality you write yourself, a memory that stays on your disk, and a permission system that sits between the model and your machine. Message it from your terminal, Telegram, Discord, Slack or Signal and you reach the same agent, with the same memory, running as one background process you own.
It reads and writes your files, runs commands, ships code through git and GitHub, researches the web and keeps a schedule. Every one of those actions is checked against rules you set, and every turn stays inside a daily token budget.
Then it goes further:
Install it in one line. Talk to it from anywhere. It is still there tomorrow, and it still remembers.
| Install | One-line installer with no Node.js required, or npm i -g @cosmicstack/mercury-agent on Node.js 22+ |
| Runs on | macOS, Linux, Windows, and Android via Termux |
| Talk to it from | Terminal UI, Telegram, Discord, Slack, Signal, and a local web dashboard |
| Models | DeepSeek, OpenAI, Anthropic, Grok, Ollama (cloud and local), LM Studio, any OpenAI-compatible endpoint, Mercury Cloud, and more, with automatic fallback |
| Safety | Shell blocklist, per-folder read/write scopes, approval prompts, SSRF-guarded fetches, secret redaction in logs |
| Memory | Second Brain: typed, deduplicated facts in SQLite with full-text search, all on your disk |
| Tools | About 50 built in (files, shell, git, GitHub, web, scheduler, memory, sub-agents) plus installable skills |
| Always on | Background daemon with crash recovery and a login service on every OS |
| License | MIT |
Most agents can read files, run commands and fetch pages. The differences are in what happens around those actions, and that is where Mercury puts its effort.
It asks before it acts. File access is scoped per folder, shell commands pass through a blocklist and an approval step, and outbound requests are checked against private address ranges. You choose per session whether Mercury asks every time or runs freely, and members of a shared Telegram or Discord channel cannot widen their own access.
It remembers you without being told to. After each conversation Mercury extracts a few durable facts (preferences, goals, projects, decisions) with confidence scores, resolves conflicts with what it already knows, and recalls the relevant ones before the next answer. Everything lives in a SQLite file under ~/.mercury, and /memory lets you inspect, pause or clear it.
It respects a budget. A daily token budget is enforced on every turn. When usage climbs, Token Saver mode trims context and can route routine work to a cheaper model. /budget shows where you stand.
It is one runtime, not a collection of scripts. A single background process owns your channels, your bots and the web dashboard. Running mercury in a terminal attaches to that process instantly, so closing the terminal never stops a running task or a bot.
It writes code like a careful engineer. Mercury Code plans and builds in one flow, shows a live checklist, asks once before large changes, and only reports success after a build, test or typecheck actually passes.
It works while you are away. Mercury Bots are persistent specialists with their own persona, model, memory, permissions and daily budget. They run on schedules, hand work to each other, and deliver finished files to ~/Documents/Mercury/<Bot name>/. You can manage the whole fleet from Telegram with buttons.
You own the personality. Mercury's character is defined by plain Markdown files (soul.md, persona.md, taste.md, heartbeat.md) that you can edit.
1. Install. The installer downloads a standalone binary for your OS and CPU and verifies its checksum. No Node.js needed.
# macOS / Linux
curl -fsSL https://mercuryagent.sh/install.sh | sh
# Windows (PowerShell)
irm https://mercuryagent.sh/install.ps1 | iex
Prefer npm? Mercury needs Node.js 22 or newer on that path.
npm i -g @cosmicstack/mercury-agent
2. Run it.
mercury
The first run starts a short setup wizard: your name, the agent's name, Mercury Cloud or your own API keys, and optional channels such as Telegram. Mercury then starts its background service and opens the terminal UI.
3. Use it every day.
mercury # open a chat (attaches to the running Mercury)
mercury code . # open Mercury Code in the current repository
mercury doctor # change providers, keys or channels; applies immediately
mercury status # see what is running
Upgrades are one command: mercury upgrade. It does nothing if you are already on the latest version.
flowchart LR
subgraph You
T[Terminal UI]
TG[Telegram]
DC[Discord / Slack / Signal]
W[Web dashboard]
end
subgraph Runtime["Mercury runtime (one background process)"]
A[Agent loop]
P[Permissions]
M[(Second Brain<br/>SQLite)]
B[Mercury Bots]
S[Scheduler]
end
LLM[LLM providers<br/>with fallback]
T -- attach --> A
TG --> A
DC --> A
W --> A
A --> P
A <--> M
A --> LLM
B --> LLM
S --> A
S --> B
The runtime runs as a login service (LaunchAgent on macOS, systemd on Linux, Task Scheduler on Windows) and restarts itself after a crash. Every channel talks to the same agent, the same permissions and the same memory. The terminal is a client: mercury attaches to the runtime, and mercury code opens a coding session beside it.
| Channel | Access model | Highlights |
|---|---|---|
| Terminal | Single user | Full-screen UI with live streaming, a command picker (/menu), approval prompts, background tasks |
| Telegram | Admins and members, pairing codes | Streaming replies, file delivery, inline buttons for approvals and bot control |
| Discord | Admin role, guild and channel scoping | Slash commands, streaming edits, DMs and channels |
| Slack | Admins and members | Socket Mode (no public endpoint), streaming edits, /mercury command |
| Signal | Pairing codes | End-to-end encrypted through signal-cli, groups and DMs |
| Web | Local login | Chat, Kanban, bots cockpit, memory explorer, providers and skills |
When more than one channel is configured, notifications go to the first available one in order: Signal, Telegram, Discord, Slack, terminal.
A full-screen coding environment that works inside a repository.
mercury code [dir] # from the shell
/code # from a running chat