I
io.github.TheRealFloatDev/agentsbestfriend
turbo
MCP that provides fast, token-efficient tools for navigating, searching, and understanding codebases
No known CVEs
No license
Maintained
Last commit 126d ago
Works with most clients
Transport: stdio, sse, http
11 tools · ~459 tok
Grade A · 0.2% of 200K ctx
MCPpedia last refreshed this data
This server has been archived and is no longer actively maintained.
io.github.TheRealFloatDev/agentsbestfriend is an MCP server that MCP that provides fast, token-efficient tools for navigating, searching, and understanding codebases. Its tool list has not been published yet over stdio, sse and http, requires no API key, and scores 72/100 on MCPpedia's security, maintenance and efficiency rubric.
Step 1
Install in your client
Config is the same across clients — only the file and path differ.
CD
Supported in Claude Desktopstdio, sse, http · Node 18+
Paste into ~/Library/Application Support/Claude/claude_desktop_config.json
{
"mcpServers": {
"abf": {
"env": {
"ABF_PROJECT_ROOT": "/path/to/your/project"
},
"args": [
"/path/to/AgentsBestFriend/packages/cli/dist/index.js",
"start"
],
"command": "node"
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
Embed in your READMEAbout badges →
[](https://mcppedia.org/s/io-github-therealfloatdev-agentsbestfriend)
Read me
What io.github.TheRealFloatDev/agentsbestfriend does
A local MCP server that gives AI coding agents fast, token-efficient tools for navigating, searching, and understanding codebases — including monorepos.
Test This Server
Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.
npx -y 'turbo' 2>&1 | head -1 && echo "✓ Server started successfully"
After testing, let us know if it worked:
Scored, not listed
Why this score
Five weighted categories — click any category to see the underlying evidence.
Score breakdown
72/100across 5 weighted dimensions
0255075100
27
20
15
10
−28
Security
Maintenance
Efficiency
Documentation
Compatibility
Categoriesclick a row to see evidence
Security
OSV.dev2 fixed
CVE-2026-45773medium · fixed
Turbo: Login callback CSRF/session fixation
### Impact Turborepo's self-hosted login and SSO browser flows did not validate a CSRF state value on the localhost callback. While the CLI was waiting for authentication, a malicious web page could send a request to the local callback server with an attacker-controlled token. If accepted before the legitimate callback, the CLI could complete login with the wrong credentials. This affects users authenticating the `turbo` CLI against self-hosted remote cache/auth endpoints. Vercel-hosted login
CVE-2026-45772critical · fixedCVSS 9.8
Turbo: Unexpected local code execution during Yarn Berry detection
### Impact Turborepo can be vulnerable to arbitrary code execution when run in untrusted repositories that contain malicious Yarn configuration. In affected versions, package manager detection executed `yarn --version` from the project directory, which could cause Yarn to load and execute a project-controlled `yarnPath` from `.yarnrc.yml`. An attacker who controls repository contents could cause code execution when a user or CI system runs affected `turbo`, `@turbo/codemod`, or `@turbo/worksp
Inventory
Tools (11)
Click any tool to inspect its schema.
~459 tokens total
Community
Reviews
Be the first to review
Have you used this server?
Share your experience — it helps other developers decide.
How easy was setup?Did it work reliably?How was the documentation?
Sign in to write a review.
Frequently Asked Questions
- Is io.github.TheRealFloatDev/agentsbestfriend safe to use?
- io.github.TheRealFloatDev/agentsbestfriend has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
- How do I install io.github.TheRealFloatDev/agentsbestfriend?
- io.github.TheRealFloatDev/agentsbestfriend supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
- What can io.github.TheRealFloatDev/agentsbestfriend do?
- io.github.TheRealFloatDev/agentsbestfriend provides 11 tools: abf_search, abf_symbols, abf_chunk, abf_project_overview, abf_dependencies and 6 more. See the full tools list on the server page for descriptions and parameters.
- What AI clients work with io.github.TheRealFloatDev/agentsbestfriend?
- io.github.TheRealFloatDev/agentsbestfriend is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.
- Is io.github.TheRealFloatDev/agentsbestfriend actively maintained?
- io.github.TheRealFloatDev/agentsbestfriend is less actively maintained — last commit was 126 days ago.
Related
Similar servers
Others in developer-tools
Context797Context7 Platform -- Up-to-date code documentation for LLMs and AI code editors
61.2k 2
G
Mcp Gitlab96MCP server for using the GitLab API
1.9k 12
Supabase MCP Server96Manage Supabase projects — databases, auth, storage, and edge functions
2.9k 4
Chrome Devtools Mcp96Chrome DevTools for coding agents
49.7k 10
MCP Security Weekly
Get CVE alerts and security updates for io.github.TheRealFloatDev/agentsbestfriend and similar servers.
Community
Discussion
Start a conversation
Ask a question, share a tip, or report an issue.
Has anyone used this with Cursor?How do you handle auth?Any alternatives?
Sign in to join the discussion.