
Security News
Socket Releases Free Certified Patches for Nuxt Security Vulnerabilities
Socket releases free Certified Patches for high-severity Nuxt vulnerabilities, including server-side remote code execution through server island props.
tachibot-mcp
Advanced tools
TachiBot MCP: 65 AI tools, 12 providers. Multi-model orchestration (Perplexity, Grok, OpenAI, Gemini, Qwen, Kimi, MiniMax, DeepSeek, GLM, StepFun, ERNIE, local), YAML workflows, token-optimized profiles. Smart routing, parallel execution, jury system.
65 AI tools. 12 providers. One protocol.
Orchestrate Perplexity, Grok, GPT-5.5, Gemini, Qwen, Kimi K2.7-Code, and MiniMax M3 from Claude Code, Claude Desktop, Cursor, or any MCP client.
Get Started · View Tools · Documentation
If TachiBot helps your workflow, a star goes a long way.
grok-4.3 while xAI's region-staged rollout completes (EU mid-July) — tools keep working everywhere, and 4.5 activates by itself.grok_search_lite (new tool, 65 total) — the same Grok live search on grok-4-1-fast ($0.20/$0.50, 2M ctx), ~10x cheaper than grok_search. Use it for high-volume lookups and jury/council fan-outs.openai_* tools move to gpt-5.6-sol (flagship, same $5/$30 as 5.5 but stronger), terra for code (5.5-level at half price), luna for explanations ($1/$6). The $30/$180 gpt-5.5-pro tier is replaced by sol + reasoning effort; a permission fallback (sol → terra → 5.5) covers org-gated accounts./test and /audit skills (19 skills total) — /test generates runnable tests via testgen; /audit runs an OWASP/CWE security review via security_review.tachibot init now offers to install Claude Code skills with a per-skill skip choice ([Enter]=all · [s]=choose which to skip · [n]=none). Skills are opt-in — postinstall no longer writes to ~/.claude silently (npm run install-skills still installs all non-interactively)..mcpb extension now points at a valid entry point (was broken) and tracks the package version; tachibot init exits cleanly on non-interactive/CI stdin instead of hanging.refine_prompt (new tool) — opt-in prompt improver on a cheap/fast model: raw query → goal-first brief + what changed + open questions. Never auto-fires, never executes anything — you review, then use the brief. In Claude Code, /prompt refine presents the open questions as clickable choices and merges your answers into a final brief.list_prompt_techniques now defaults to the ~9 core techniques that still help 2026 reasoning models (output contracts like scot, pre_mortem, bdd_spec); all=true for the full 31.technique="auto" — preview_prompt_technique recommends the right technique for your task, with reasons. Ask tachi "improve my prompt" for the symptom-based menu.tachibot init (new CLI wizard) — detects your API keys and clients, prints the exact config for Claude Code and Claude Desktop. Never writes or echoes keys..mcpb from the latest release and double-click. No JSON editing.doctor — shows which keys are set, which tools are visible vs hidden and why, and what to try first.debug_triage — ranked root-cause hypotheses with the cheapest discriminating check for each (Grok 4.3)spec_writer — loose request → reviewable spec: user stories, Given/When/Then, out-of-scope, open questions (GPT-5.5)diff_review / plan_critique / testgen / security_review — multi-model diff review, adversarial plan red-team, test generation, OWASP/CWE audit/review, /redteam, /spec, /triage, /setupfocus orchestration screen: 37 lines of repeated scaffolding → 10 focused linesnpm test exits 0 again (uncancelled race timers leaked past Jest teardown)TachiBot ships with 19 slash commands for Claude Code. These orchestrate the tools into powerful workflows:
| Skill | What it does | Example |
|---|---|---|
/setup | Guided configuration — runs doctor, walks through keys/profiles | /setup |
/spec | Request → reviewable spec before planning | /spec add OAuth somehow |
/blueprint | Multi-model planning → bite-sized TDD steps | /blueprint add OAuth with refresh tokens |
/judge | Multi-model council - parallel analysis with synthesis | /judge how to implement rate limiting |
/think | Sequential reasoning chain with any model | /think grok,gemini design a cache layer |
/focus | Mode-based reasoning (debate, research, analyze) | /focus architecture-debate Redis vs Pg |
/breakdown | Strategic decomposition with pre-mortem | /breakdown refactor payment module |
/decompose | Split into sub-problems, deep-dive each one | /decompose implement collaborative editor |
/prompt | Recommend the right thinking technique (31 available) | /prompt why do users churn |
/algo | Algorithm analysis with 4 specialized models (DeepSeek lead) | /algo optimize LRU cache O(1) |
/lens | Long-context analysis over Kimi's 256K window | /lens find inconsistencies in this spec |
/reflect | Grounded reflexion loop — critique vs external evidence | /reflect harden this auth middleware |
/tot | Tree-of-Thought: branch → jury-prune → synthesize | /tot design a rate limiter |
/review | Multi-model diff review — panel + Gemini judge verdict | /review (or paste a diff) |
/redteam | Adversarial plan red-team — pre-mortem, risks, plan edits | /redteam <paste plan> |
/triage | Ranked root-cause bug triage | /triage <paste stack trace> |
/test | Generate runnable tests (edge cases first) | /test src/auth.ts |
/audit | Security review — OWASP/CWE findings + fixes | /audit the login handler |
/tachi | Help - see available skills, tools, key status | /tachi |
Skills automatically adapt to your configured API keys. Even with just 1-2 providers, all skills work.
Getting started? Type
/tachito see what's available.
gemini-3.5-flash, GA May 19 2026) — Flash/search tier; reasoning default stays gemini-3.1-pro-preview| Profile | Tools | Best For |
|---|---|---|
| Minimal | 13 | Quick tasks, low token budget |
| Research Power | 36 | Deep investigation, multi-source |
| Code Focus | 42 | Software development, SWE tasks |
| Balanced | 54 | General-purpose, mixed workflows |
| Heavy Coding | 58 | Max code tools + agentic workflows |
| Full (default) | 65 | Everything enabled |
npm install -g tachibot-mcp
npx -y -p tachibot-mcp tachibot init
Detects your keys and clients, then prints the exact config for Claude Code and Claude Desktop.
claude mcp add tachibot -- npx -y -p tachibot-mcp tachibot
Then verify with /mcp. Add API keys with --env, e.g. --env OPENROUTER_API_KEY=sk-or-xxx --env PERPLEXITY_API_KEY=pplx-xxx.
One-click (easiest): download tachibot-mcp.mcpb from the latest release and double-click it — Claude Desktop installs the extension with no JSON editing. Add your API keys when prompted (or later via the extension settings).
Gateway Mode (Recommended) — 2 keys, all providers:
{
"mcpServers": {
"tachibot": {
"command": "tachibot",
"env": {
"OPENROUTER_API_KEY": "sk-or-xxx",
"PERPLEXITY_API_KEY": "pplx-xxx",
"USE_OPENROUTER_GATEWAY": "true"
}
}
}
}
Direct Mode — One key per provider:
{
"mcpServers": {
"tachibot": {
"command": "tachibot",
"env": {
"PERPLEXITY_API_KEY": "your-key",
"GROK_API_KEY": "your-key",
"OPENAI_API_KEY": "your-key",
"GOOGLE_API_KEY": "your-key",
"OPENROUTER_API_KEY": "your-key"
}
}
}
}
Get keys: OpenRouter | Perplexity
See Installation Guide for detailed instructions.
perplexity_ask · perplexity_reason · grok_search · grok_search_lite · openai_search · gemini_search
grok_reason · openai_reason · qwen_reason · qwq_reason · kimi_thinking · kimi_decompose · deepseek_reason · glm_reason · stepfun_reason · ernie_reason · planner_maker · planner_runner · list_plans · spec_writer
kimi_code · grok_code · grok_debug · qwen_coder · qwen_algo · qwen_competitive · deepseek_algo · minimax_code · minimax_agent · testgen · debug_triage
gemini_analyze_text · gemini_analyze_code · gemini_judge · jury · diff_review · plan_critique · gemini_brainstorm · openai_brainstorm · openai_code_review · openai_explain · grok_brainstorm · grok_architect · security_review · kimi_long_context
think · nextThought · focus · tachi · doctor · usage_stats
workflow · workflow_start · continue_workflow · list_workflows · create_workflow · visualize_workflow · workflow_status · validate_workflow · validate_workflow_file
list_prompt_techniques · preview_prompt_technique · execute_prompt_technique · refine_prompt
local_query — any OpenAI-compatible local server (Ollama / LM Studio / llama.cpp / vLLM). Zero-cost, offline, private; also available as the local jury juror (hermes is accepted as a legacy alias). Runs whatever LOCAL_LLM_MODEL points at — e.g. a Nous Hermes build (ollama pull hermes3). Note the Hermes agent itself is model-agnostic — it runs on 300+ backends (GPT, Claude, Gemini, DeepSeek, or self-hosted Ollama/vLLM) — so "Hermes" was never a guarantee of distinct weights.
// Create a plan with multi-model council
planner_maker({ task: "Build a REST API with auth and tests", mode: "start" })
// → Grok searches → Qwen analyzes → Kimi decomposes → GPT critiques → Gemini synthesizes
// Execute with checkpoints
planner_runner({ plan: planContent, mode: "step", stepNum: 1 })
// → Automatic verification at 50%, 80% (kimi_decompose), and 100%
kimi_decompose({
task: "Migrate monolith to microservices",
depth: 3,
outputFormat: "dependencies"
})
// → Structured subtasks with IDs, parallel flags, acceptance criteria
kimi_code({
task: "review",
code: "function processPayment(amount, card) { ... }",
language: "typescript"
})
// → SWE-Bench 76.8% quality analysis
focus({
query: "Design a scalable event-driven architecture",
mode: "deep-reasoning",
models: ["grok", "gemini", "kimi"],
rounds: 5
})
Contributions welcome! See CONTRIBUTING.md for guidelines.
FAQs
TachiBot MCP: 65 AI tools, 12 providers. Multi-model orchestration (Perplexity, Grok, OpenAI, Gemini, Qwen, Kimi, MiniMax, DeepSeek, GLM, StepFun, ERNIE, local), YAML workflows, token-optimized profiles. Smart routing, parallel execution, jury system.
The npm package tachibot-mcp receives a total of 332 weekly downloads. As such, tachibot-mcp popularity was classified as not popular.
We found that tachibot-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Socket releases free Certified Patches for high-severity Nuxt vulnerabilities, including server-side remote code execution through server island props.

Security News
An open letter signed by 50 companies, from NVIDIA and Microsoft to Mistral and Hugging Face, urges Washington not to restrict open weight AI.

Security News
/Research
A fake corepack.org site is impersonating the Node.js tool and delivers an infostealer and proxyware to developers who download it.