v0.2.0 — First Public Release

v0.2.0 — First Public Release

Date: 2026-04-27
Status: First public npm release. Packages live under the
@marmarlabs scope.

AgentBridge is an AI-native action layer for web apps. Web apps
publish a machine-readable manifest at /.well-known/agentbridge.json
declaring their structured actions. AI agents discover and invoke those
actions through an MCP server that enforces safety guarantees
(confirmation gates, origin pinning, audit logging, idempotency keys).

Honest status

AgentBridge v0.2.0 is usable today for:

• Local development and prototyping.
• Authoring and validating manifests.
• Scanner-driven readiness audits of any AgentBridge surface.
• Converting OpenAPI 3.x documents into draft AgentBridge manifests.
• Wiring AgentBridge actions into MCP-speaking agents (Claude Desktop,
  Cursor, custom clients).

It is not yet production security infrastructure. The following are
on the roadmap but not in 0.2.0:

• Signed manifests — a consumer cannot cryptographically verify a
  manifest's publisher.
• OAuth scope enforcement — permissions[] on actions is
  documentary; the MCP server does not check the agent's bearer token
  scopes.
• HTTP MCP transport — the bundled MCP server speaks stdio only.
• Distributed audit storage — the audit log is a local JSON file.

See docs/roadmap.md for the full roadmap.

Install

# Author manifests in your own app
npm install @marmarlabs/agentbridge-sdk @marmarlabs/agentbridge-core

# Run the CLI
npx @marmarlabs/agentbridge-cli scan http://localhost:3000

# Run the MCP server
npx @marmarlabs/agentbridge-mcp-server

Or clone the repo for development:

git clone https://github.com/marmar9615-cloud/agentbridge-protocol.git
cd agentbridge-protocol
npm install
npm run dev   # demo on :3000, Studio on :3001

Packages

Package	What it is
@marmarlabs/agentbridge-core	Schemas, types, validation, audit log helpers.
@marmarlabs/agentbridge-sdk	defineAgentAction, manifest builder, route handler glue.
@marmarlabs/agentbridge-scanner	0–100 readiness scoring with structured checks.
@marmarlabs/agentbridge-openapi	OpenAPI 3.x → AgentBridge manifest converter.
@marmarlabs/agentbridge-cli	agentbridge CLI: scan, validate, init, generate, mcp-config.
@marmarlabs/agentbridge-mcp-server	stdio MCP server with confirmation tokens, origin pinning, idempotency.

Quickstart

Scaffold a manifest

npx @marmarlabs/agentbridge-cli init
# writes agentbridge.config.ts and public/.well-known/agentbridge.json

Score a URL

npx @marmarlabs/agentbridge-cli scan http://localhost:3000

Validate a manifest

npx @marmarlabs/agentbridge-cli validate ./public/.well-known/agentbridge.json
# accepts file paths or URLs

OpenAPI import

Take an existing OpenAPI 3.x doc and turn it into a draft manifest:

npx @marmarlabs/agentbridge-cli generate openapi ./your-api.openapi.json \
    --base-url https://api.example.com \
    --out ./public/.well-known/agentbridge.json

Risk inferred from HTTP method (GET → low, POST/PUT/PATCH → medium,
DELETE → high). Always review before publishing. See
docs/openapi-import.md for the full guide.

MCP setup

Edit ~/Library/Application Support/Claude/claude_desktop_config.json
(macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows):

{
  "mcpServers": {
    "agentbridge": {
      "command": "npx",
      "args": ["@marmarlabs/agentbridge-mcp-server"],
      "env": { "AGENTBRIDGE_ALLOW_REMOTE": "false" }
    }
  }
}

Restart Claude Desktop. Five tools should appear:
discover_manifest, scan_agent_readiness, list_actions,
call_action, get_audit_log.

See docs/mcp-client-setup.md for Cursor and
custom clients.

Safety invariants enforced today

These are tested and locked down:

Invariant	Test
Risky actions require explicit confirmationApproved: true AND a single-use, input-bound confirmationToken.	apps/mcp-server/src/tests/call-action.test.ts
Action endpoints must share origin with manifest.baseUrl.	same
Loopback-only URLs by default; AGENTBRIDGE_ALLOW_REMOTE=true is the only escape.	same
Audit redaction strips authorization, cookie, password, token, secret, api_key recursively.	packages/core/src/tests/audit.test.ts
Demo-app destructive actions are simulated; no real services touched.	apps/demo-app/lib/actions.ts

Versioning policy

• Manifest schema is stable for the v0.x line. Field additions are
  non-breaking; field removals or shape changes will bump to 1.0.
• Public package APIs may shift between 0.x releases — not casually,
  but not promised. Pin to ~0.2.0 if you need a stable surface; pin
  to ^0.2.0 if you want patches.

Reporting issues

• Public bugs / feature requests:
  https://github.com/marmar9615-cloud/agentbridge-protocol/issues
• Security issues: see SECURITY.md. Do not
  open a public issue.

Acknowledgements

Built on the Model Context Protocol
and Zod.