
Company News
Socket Joins New OpenJS Program to Fund Node.js Security Work
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.
@aioproductoscom/mcp-agent
Advanced tools
AIOProductOS Agent — an MCP server that turns Claude Code, Cursor, or Codex into an assignable Backend/Frontend/Mobile/QA teammate inside AIOProductOS.
Turn Claude Code, Cursor, or Codex into an assignable Backend / Frontend / Mobile / QA teammate inside AIOProductOS. Your team assigns it tasks like any teammate; it pulls the work, does it in your repo on your model, opens a PR (or writes tests), and reports status back. AIOProductOS owns the work lifecycle; your host owns the runtime — we never hold your repo credentials.
A team admin opens AIOProductOS → Settings → AI Team, hires a teammate (name it, pick a role), and copies the token shown once. One agent = one role; the token decides which tools appear.
The only thing you paste is the token. Launch your host from the project directory.
claude mcp add productos-agent \
-e PRODUCTOS_TOKEN=agent_live_xxx \
-- npx -y @aioproductoscom/mcp-agent
.cursor/mcp.json{
"mcpServers": {
"productos-agent": {
"command": "npx",
"args": ["-y", "@aioproductoscom/mcp-agent"],
"env": { "PRODUCTOS_TOKEN": "agent_live_xxx" }
}
}
}
mcp.json{
"mcpServers": {
"productos-agent": {
"command": "npx",
"args": ["-y", "@aioproductoscom/mcp-agent"],
"env": { "PRODUCTOS_TOKEN": "agent_live_xxx" }
}
}
}
Self-hosted AIOProductOS? Add "PRODUCTOS_URL": "https://platform.your-domain.com".
Tell your host: "You're an AIOProductOS agent — call get_skill, then work your assigned tasks."
| Tool | What it does |
|---|---|
whoami | Org, your name, your role |
get_skill | Your role-specialized workflow + hard rules (read first) |
get_assigned_tasks | Tasks assigned to you, pullable, with run state |
get_task_context(id) | Acceptance criteria + linked feature/insight/product + thread |
start_task(id) | Atomic claim → In Progress (fails if another session holds it) |
report_progress(id, note) | Progress comment on the task |
submit_work(id, …) | Dev — attach PR + summary + files → In Review |
submit_tests(id, …) | QA — attach tests + coverage + results → In Review |
block_task(id, reason) | Stuck / underspecified → blocked + a clear question |
list_channels | Team Comms channels you've been added to |
read_channel(id) | Recent messages in a channel — catch up before replying |
post_to_channel(id, body) | Talk to your human teammates — posts as you, live |
reply_in_channel(id, parent_id, body) | Reply in a thread |
ping | Keep "online" in the team view |
Talk to the team. Add the agent to a Comms channel in AIOProductOS (e.g.
#eng) and it can post there.submit_workalready auto-pings a "ready for review" line into the agent's channel; usepost_to_channelfor anything else. Membership is the switch — the agent only reaches channels you add it to.
submit_work lands the task In Review — it never merges. A human
approves the PR.@aioproductoscom/mcpFAQs
AIOProductOS Agent — an MCP server that turns Claude Code, Cursor, or Codex into an assignable Backend/Frontend/Mobile/QA teammate inside AIOProductOS.
We found that @aioproductoscom/mcp-agent demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Company News
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.