MCP Tool Integration · Public

agent-opfor

MCP tool integration project for safely connecting external tools, services, or data sources to an AI host.

MCPTool callingHost configurationPermission boundariesAcceptance checks

Best fitDevelopers who need Claude, Cursor, Codex, or another MCP-capable AI host to call external tools safely.

Check whether this project matches your task before installing it.

What it can doMCP setup guidance, host configuration checks, tool permission boundaries, recovery steps, and acceptance checks

Review the portable capability path.

Before continuingVerify in a sandbox

Do not treat a preview pack as a proven local install.

GitHub snapshot365 stars

20 forks · 15 contributors

Doramagic.ai Last verification date: 2026-07-07 Verification method: source evidence, semantic profile, public page gate, and static build acceptance.

Official first step Read manual preview Source repository

Publication status · 2026-07-07

What is agent-opfor?

agent-opfor helps connect external tools, services, or data sources to AI hosts that support MCP.
Best fit: Developers who need Claude, Cursor, Codex, or another MCP-capable AI host to call external tools safely.
Not for: Not for users who cannot change host configuration, grant tool permissions, or isolate network, file, and credential access.
Capability added to an AI workflow: MCP setup guidance, host configuration checks, tool permission boundaries, recovery steps, and acceptance checks
First safe verification step: Verify the MCP server command, permission scope, and rollback path in a non-primary host configuration first.
Verification state: source, Quick Start, and sandbox install checks are recorded as passed.
Top risk: Developers may expose sensitive permissions or credentials: feat: opfor setup wizard has no prompt for custom HTTP headers on url-transport MCP targets
Evidence base: https://github.com/KeyValueSoftwareSystems/agent-opfor, https://github.com/KeyValueSoftwareSystems/agent-opfor#readme, Human Manual, Pitfall Log

Quick decision

Use this section to decide whether the project is worth a deeper read.

Best forDevelopers who need Claude, Cursor, Codex, or another MCP-capable AI host to call external tools safely.

Match the project to your task before installing it.

CapabilityMCP setup guidance, host configuration checks, tool permission boundaries, recovery steps, and acceptance checks

MCP tool integration project for safely connecting external tools, services, or data sources to an AI host.

RepositoryKeyValueSoftwareSystems/agent-opfor

365 stars · 20 forks

What it can do

Translate the upstream project into concrete capabilities the user can judge before installing.

OPFOR Overview & System Architecture

Related topics: Runners & Entry Points (CLI, SDK, MCP Server, Browser Extension, Skills), Evaluators, Patterns & Attack Coverage (OWASP + EU AI Act), Configuration, Reports, Telemetry & Op...

Source: https://github.com/KeyValueSoftwareSystems/agent-opfor / Human Manual

Runners & Entry Points (CLI, SDK, MCP Server, Browser Extension, Skills)

Related topics: OPFOR Overview & System Architecture, Evaluators, Patterns & Attack Coverage (OWASP + EU AI Act), Configuration, Reports, Telemetry & Operations

Source: https://github.com/KeyValueSoftwareSystems/agent-opfor / Human Manual

Evaluators, Patterns & Attack Coverage (OWASP + EU AI Act)

Related topics: OPFOR Overview & System Architecture, Runners & Entry Points (CLI, SDK, MCP Server, Browser Extension, Skills), Configuration, Reports, Telemetry & Operations

Source: https://github.com/KeyValueSoftwareSystems/agent-opfor / Human Manual

Configuration, Reports, Telemetry & Operations

Related topics: OPFOR Overview & System Architecture, Runners & Entry Points (CLI, SDK, MCP Server, Browser Extension, Skills), Evaluators, Patterns & Attack Coverage (OWASP + EU AI Act)

Source: https://github.com/KeyValueSoftwareSystems/agent-opfor / Human Manual

Doramagic Pitfall Log

Source-linked risks stay visible on the manual page so the preview does not read like a recommendation.

Source: Doramagic discovery, validation, and Project Pack records

Sources: https://github.com/KeyValueSoftwareSystems/agent-opfor, Human Manual, Project Pack evidence, and downstream validation signals.

Community Discussion Evidence

Project-level external discussion stays visible on the detail page, not only inside the manual.

Stars365 stars

Forks20 forks

Contributors15 contributors

Licenseunknown

Community Discussion Evidence

12 source-linked items

Review these external discussions before using agent-opfor with real data or production workflows. They are review inputs, not standalone proof that the project is production-ready.

01
bug: Nested .opfor configs
github / github_issue
02
bug: Significant delay in registering pause button clicks.
github / github_issue
03
feat: add first-class support for additional LLM providers
github / github_issue
04
bug:browser extension generates next attack before the agent has complet
github / github_issue
05
bug: Significant delay in registering pause button clicks.
github / github_issue
06
feat: support for evaluating Site-Specific Extension Execution
github / github_issue
07
bug: browser extension targets login form instead of chatbot input durin
github / github_issue
08
feat: Show the response of agent errors instead of just an HTTP status c
github / github_issue
09
feat: Allow the user the steer the attacker agent during testing
github / github_issue
10
feat: Ability to judge and create reports from the conversations between
github / github_issue
11
feat: evaluator for remote code execution
github / github_issue
12
feat: OPFOR getting the ability to upload files to agent
github / github_issue

How to start

Only source-backed commands are shown here. Verify them in an isolated environment first.

Try the prompt first

Test the workflow without installing the upstream project.

preview

Read the Human Manual

Understand inputs, outputs, limits, and failure modes.

manual

Take context to your AI host

Use the compiled assets in your preferred AI environment.

context

Run sandbox verification

Confirm install commands and rollback before using a primary environment.

verify

npm install -g @keyvaluesystems/agent-opfor-cli

Official start command · https://github.com/KeyValueSoftwareSystems/agent-opfor#readme · verified: yes

Human Manual

The English page must expose the real manual, not a short placeholder.

8+ sections · Human Manual

agent-opfor Manual

Open-source adversary emulation for AI agents and MCP servers.

Open the full manual

https://github.com/KeyValueSoftwareSystems/agent-opfor Project Manual
Table of Contents
OPFOR Overview & System Architecture
Related Pages
1. Scope and Design Goals
2. System Components
3. Architecture and Data Flow
4. Typical Usage and Known Limitations

OPFOR Overview & System Architecture

Related topics: Runners & Entry Points (CLI, SDK, MCP Server, Browser Extension, Skills), Evaluators, Patterns & Attack Coverage (OWASP + EU AI Act), Configuration, Reports, Telemetry & Op...

Source: https://github.com/KeyValueSoftwareSystems/agent-opfor / Human Manual

Runners & Entry Points (CLI, SDK, MCP Server, Browser Extension, Skills)

Related topics: OPFOR Overview & System Architecture, Evaluators, Patterns & Attack Coverage (OWASP + EU AI Act), Configuration, Reports, Telemetry & Operations

Source: https://github.com/KeyValueSoftwareSystems/agent-opfor / Human Manual

Evaluators, Patterns & Attack Coverage (OWASP + EU AI Act)

Related topics: OPFOR Overview & System Architecture, Runners & Entry Points (CLI, SDK, MCP Server, Browser Extension, Skills), Configuration, Reports, Telemetry & Operations

Source: https://github.com/KeyValueSoftwareSystems/agent-opfor / Human Manual

Configuration, Reports, Telemetry & Operations

Related topics: OPFOR Overview & System Architecture, Runners & Entry Points (CLI, SDK, MCP Server, Browser Extension, Skills), Evaluators, Patterns & Attack Coverage (OWASP + EU AI Act)

Source: https://github.com/KeyValueSoftwareSystems/agent-opfor / Human Manual

Doramagic Pitfall Log

Source-linked risks stay visible on the manual page so the preview does not read like a recommendation.

Source: Doramagic discovery, validation, and Project Pack records

AI Context Pack and portable assets

After deciding to continue, take the project context into your own AI host.

Complete pack plus user-owned assets

These files are planning and verification assets for Claude Code, Codex, Gemini, Cursor, ChatGPT, and other AI hosts.

Download complete pack Read Human Manual

BundleComplete Project Pack AssetAI Context Pack AssetBoundary & Risk Card AssetHuman Manual AssetPitfall Log AssetPrompt Preview AssetQuick Start EvidenceREPO_INSPECTION.json

Preflight checks

Treat this page as a planning asset, not proof that your local environment is ready.

The manual is generated from source-linked project files and Doramagic validation signals.
Community evidence warnings stay visible instead of being converted into marketing claims.
This English page is indexable because the locale quality gate passed and explicit English index approval is enabled.
Use the upstream repository as the final authority for installation commands, license, and version-specific behavior.

Pitfall Log and verification risks

Doramagic surfaces high-risk items before users treat a candidate capability as verified.

high

Security or permission risk requires verification

Developers may expose sensitive permissions or credentials: feat: opfor setup wizard has no prompt for custom HTTP headers on url-transport MCP targets

high

Security or permission risk requires verification

Developers may expose sensitive permissions or credentials: feat: support for evaluating Site-Specific Extension Execution

medium

Installation risk requires verification

Upgrade or migration may change expected behavior: v0.10.0

medium

Installation risk requires verification

May increase setup, validation, or first-run risk for the user.

medium

Configuration risk requires verification

May increase setup, validation, or first-run risk for the user.

medium

Configuration risk requires verification

Developers may misconfigure credentials, environment, or host setup: bug: Nested .opfor configs

medium

Configuration risk requires verification

Developers may misconfigure credentials, environment, or host setup: bug: Significant delay in registering pause button clicks.

medium

Configuration risk requires verification

Developers may misconfigure credentials, environment, or host setup: bug: browser extension targets login form instead of chatbot input during red-team assessment