Other MCP Server

Claude Flow

Name: Claude Flow
Author: ruvnet

AI orchestration with hive-mind swarms, neural networks, and 87 MCP tools for enterprise dev.

Scan flagged something by ruvnet21,326MITTypeScriptAdvancedstdio

Install

Claude Code

claude mcp add claude-flow -- npx -y claude-flow

Cursor

{
  "mcpServers": {
    "claude-flow": {
      "command": "npx",
      "args": [
        "-y",
        "claude-flow"
      ]
    }
  }
}

VS Code

{
  "mcp": {
    "servers": {
      "claude-flow": {
        "command": "npx",
        "args": [
          "-y",
          "claude-flow"
        ]
      }
    }
  }
}

Windsurf

{
  "mcpServers": {
    "claude-flow": {
      "command": "npx",
      "args": [
        "-y",
        "claude-flow"
      ]
    }
  }
}

Claude Desktop

{
  "mcpServers": {
    "claude-flow": {
      "command": "npx",
      "args": [
        "-y",
        "claude-flow"
      ]
    }
  }
}

Safety Report

80% Scan flagged something

Scanned 5 months ago

4 passed 1 warnings

Security

Authentication

details

No built-in authentication. Runs as a local MCP server. Claims CVE-hardened with input validation and command sandboxing via AIDefence.

Info

CORS Policy

details

Primarily stdio transport. No HTTP server by default.

N/A

Rate Limiting

details

Local process; no rate limiting.

N/A

Known CVEs

details

No known CVEs. Self-described as CVE-hardened but no third-party verification available.

Info

Code Quality

Dependency Audit

details

Large Node.js dependency surface (175+ tools, multiple plugins). No public dependency audit. Caution advised before production use.

Warning

Dangerous Patterns

details

No dangerous code patterns detected

Pass

License

details

MIT license confirmed.

Pass

Code Source

details

Open source on GitHub (ruvnet/claude-flow). MIT license.

Pass

Community

Maintenance Status

details

Actively maintained. Currently at v3.5 with regular releases.

Pass

Compatibility

Claude CodePrimary target. Install via `claude mcp add ruflo -- npx ruflo@v3alpha mcp start` or `npx ruflo@latest mcp start`.

Not Tested

CursorCompatible as stdio MCP server.

Not Tested

VS CodeWorks with MCP-enabled VS Code extensions.

Not Tested

WindsurfStandard stdio MCP support.

Not Tested

Claude DesktopConfigurable as stdio server in claude_desktop_config.json.

Not Tested

Tools Provided (35)

swarm_init

Initialize agent swarms with configurable topology (hierarchical, mesh, adaptive) and consensus strategy.

agent_spawn

Spawn specialized agents of defined types within the swarm.

task_orchestrate

Orchestrate task execution across agents with dependency management.

swarm_status

Check swarm health and status.

agent_list

List active agents in the current swarm.

agent_metrics

Retrieve agent performance metrics.

memory_search

Semantic vector search across stored agent memory patterns.

memory_store

Save patterns with embeddings to the agent memory store.

memory_usage

Check memory usage statistics for the agent memory system.

neural_status

View the current state of the neural learning system.

neural_train

Train the neural system on patterns to improve agent behavior.

neural_patterns

List learned patterns in the neural system.

github_swarm

Coordinate GitHub operations (PRs, issues) across agent swarms.

repo_analyze

Analyze repository structure and codebase.

pr_enhance

Enhance pull requests with AI-assisted improvements.

issue_triage

Categorize and triage GitHub issues.

code_review

Perform AI-assisted code reviews.

task_create

Create a new task for agent assignment.

task_list

List all tasks and their current states.

task_status

Check the status of a specific task.

task_cancel

Cancel a running or queued task.

task_assign

Assign a task to a specific agent.

task_retry

Retry a failed task.

worker_run

Execute a background worker process.

worker_status

Check the health and status of a background worker.

worker_alerts

Retrieve alerts and notifications from workers.

worker_history

View execution history of background workers.

ruvector_search

Perform vector similarity search using PostgreSQL pgvector.

ruvector_insert

Insert vectors into the PostgreSQL vector store.

ruvector_batch_search

Perform batch vector similarity searches.

ruvector_health

Check PostgreSQL vector store connection health.

progress_check

Check V3 implementation progress status.

progress_sync

Synchronize progress data across agents.

progress_summary

Generate a progress summary report.

progress_watch

Monitor progress updates in real-time.

Frequently Asked Questions

What is Claude Flow?

AI orchestration with hive-mind swarms, neural networks, and 87 MCP tools for enterprise dev.

What tools does Claude Flow provide?

Claude Flow provides 35 tools including swarm_init, agent_spawn, task_orchestrate, swarm_status. Each tool can be called by AI agents to perform specific operations.

Is Claude Flow safe to use?

We cannot tell you that, and nobody scanning at this scale can. What we did in March 2026 was shallow-clone Claude Flow and run five keyword searches over its source: auth identifiers, CORS configuration, rate-limit identifiers, the dependency manifest against a hardcoded list of 18 known-vulnerable packages, and unguarded eval/exec calls. At least one matched — the specific finding is in the scan report on this page. A text search cannot follow a variable, judge intent, or tell you what a server does once it is running, so "nothing matched" is not "safe". What the scan does and does not cover is written out at /mcp/security.

What are alternatives to Claude Flow?

Similar MCP servers include FastMCP, Oh My Posh Validator, PraisonAI. Each serves a similar purpose but may differ in features, language, and compatibility.

Stay Updated on MCP Servers

New servers, safety alerts, and install guides — weekly.

Claude Flow

Install

Safety Report

Compatibility

Tools Provided (35)

Frequently Asked Questions

Similar MCP Servers

FastMCP

Oh My Posh Validator

PraisonAI

Free AI writing tools

Stay Updated on MCP Servers