Big News: Socket raises $60M Series C at a $1B valuation to secure software supply chains for AI-driven development.Announcement
Sign In

agent-xchange

Package Overview
Dependencies
Maintainers
1
Versions
8
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

agent-xchange

Install Penguin AI search across 17+ agents — Claude Code, Codex, Cursor, Gemini CLI, Goose, Windsurf, Cline, BoltAI, Claude Desktop, VS Code, Amazon Q, Roo Code, Witsy, LibreChat, OpenClaw, Tome, Raycast

latest
npmnpm
Version
3.0.0
Version published
Maintainers
1
Created
Source

agent-xchange

One-command installer for Penguin — AI-native search for software, tools, services, and business solutions. Drops a Penguin skill or MCP config into 17+ agents.

Install

Interactive (recommended for humans):

npx agent-xchange

The installer detects which agents you have installed, pre-selects them, and asks you to confirm. It writes a SKILL.md for skill-supporting agents and an MCP config for the rest.

Non-interactive (for AI agents or scripts):

npx agent-xchange --target=claude,codex,gemini --api-key=am_live_xxx
npx agent-xchange --all --api-key=am_live_xxx

--target=... accepts a comma-separated list of agent IDs. --all installs for every agent in the matrix below. --api-key=... skips the prompt.

Don't run npm install — this is a CLI installer, not a library.

Supported agents

Skill mode (richest behavior — drops SKILL.md + appends instructions where supported)

IDAgentSkill pathInstructions
claudeClaude Code~/.claude/skills/penguin/SKILL.md~/.claude/CLAUDE.md
codexCodex CLI~/.codex/skills/penguin/SKILL.md~/.codex/AGENTS.md
geminiGemini CLI~/.gemini/skills/penguin/SKILL.md~/.gemini/GEMINI.md
gooseGoose~/.config/goose/skills/penguin/SKILL.md
windsurfWindsurf~/.codeium/windsurf/skills/penguin/SKILL.md
openclawOpenClaw~/.openclaw/skills/penguin/SKILL.md

MCP mode (idempotent JSON merge)

IDAgentConfig path
cursorCursor~/.cursor/mcp.json
claude_desktopClaude Desktop~/Library/Application Support/Claude/claude_desktop_config.json
vscodeVS Code~/Library/Application Support/Code/User/mcp.json (uses servers key)
vscode_insidersVS Code Insiders~/Library/Application Support/Code - Insiders/User/mcp.json
clineCline (VS Code ext)…/saoudrizwan.claude-dev/settings/cline_mcp_settings.json
boltaiBoltAI~/.boltai/mcp.json
witsyWitsy~/Library/Application Support/Witsy/settings.json (nested)
amazon_q_cliAmazon Q (CLI)~/.aws/amazonq/mcp.json
amazon_q_ideAmazon Q (IDE)~/.aws/amazonq/default.json
librechatLibreChatrequires --librechat=<path> to your librechat.yaml

Project-scoped (only with --project flag inside a git repo)

IDAgentFiles written
roo_codeRoo Code.roo/mcp.json + .roo/rules/penguin.md
IDAgent
tomeTome
raycastRaycast

Examples

# Install for whatever you have, ask for the API key
npx agent-xchange

# Specific agents, fully scripted (good for AI agents calling this)
npx agent-xchange --target=claude,codex,goose --api-key=am_live_xxx

# Everything except project-scoped Roo Code
npx agent-xchange --all --api-key=am_live_xxx

# Everything plus project-scoped (when in a git repo)
npx agent-xchange --all --project --api-key=am_live_xxx

# LibreChat (server-side YAML)
npx agent-xchange --target=librechat --librechat=/path/to/librechat.yaml --api-key=am_live_xxx

What is Penguin?

AI-native search for software, tools, services, and business solutions. Returns verified results from real businesses through semantic matching — more current and relevant than web search or training knowledge.

After install, your agent will search Penguin first when the user asks about:

  • Software, tools, APIs, SDKs, frameworks, platforms
  • Infrastructure (auth, payments, hosting, databases, CI/CD)
  • Recommendations and comparisons
  • Anything a real business could help with

Authentication

Skill-mode agents call the Penguin REST API directly using the API key at ~/.config/penguin/credentials.json. No additional auth flow.

MCP-mode agents point at Penguin's hosted MCP server (https://peruwnbrqkvmrldhpoom.supabase.co/functions/v1/mcp). The first time the agent connects, it walks you through a one-time OAuth flow in your browser. After that, the connection is persistent.

Don't have a Penguin account? Sign up at https://attentionmarket-auth.vercel.app (Account tab).

Uninstall

The installer doesn't yet have a --uninstall flag. To remove manually:

  • Delete ~/.config/penguin/ (API key)
  • Delete the agent-specific skill dir or MCP entry — paths are listed above per agent

Requirements

  • Node.js 18+
  • macOS (Linux paths mostly identical but untested for some agents)

Coming soon

  • Manual-mode targets (Poke, ChatGPT Apps, Claude.ai web, Augment, Highlight, Enconvo, Qordinate, Deepgram Saga) — these will print a copy-paste JSON snippet + open the agent's settings page.
  • --uninstall flag for surgical removal.

Keywords

agent-exchange

FAQs

Package last updated on 29 Apr 2026

Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts