sitbon/magg

MCP Tools and AgentsFreeOpen Source

Meta-MCP server letting LLMs discover, install, and orchestrate other MCP servers.

🛡️ AgentReady threat assessment

MAESTRO 7-layer threat model + OWASP AIVSS risk score for sitbon/magg, derived from its capabilities.

AIVSS 10.0 · Critical

These scores are auto-generated from public information (the agent's own listing, docs, and repository) using the canonical OWASP AIVSS formula and the MAESTRO framework — an estimate for guidance, not a penetration test, audit, or certification. See the scoring methodology. Are you the vendor? Factual corrections are free.

Overview

Magg is a meta-MCP server acting as a universal hub that lets LLMs autonomously discover, install, and orchestrate multiple MCP servers, extending their own capabilities on demand. Autonomous install/orchestration of arbitrary servers is a significant security surface for supply-chain and privilege escalation.

Key features

Meta-MCP hub
Autonomous server discovery
On-demand install
Capability orchestration

Use cases

Self-extending agent toolsets
Dynamic MCP orchestration