RealZST/HarnessKit

English · 简体中文

One home for every agent.
A free, open-source app to manage all your AI coding agents — desktop, CLI, or web.

Why  •  Features  •  Get Started  •  Roadmap

Every supported agent shows on the Overview by default, installed or not. In Settings → Agent Paths, switch to "Detected only" to hide and disable undetected agents, or flip a single agent's "Enabled" toggle off.

Every agent, a different world. Extensions, configs, memory, and rules — scattered across different directories, in different formats, with different conventions.

HarnessKit brings them all under one roof — see, secure, and manage everything across every agent, from one place.

HarnessKit manages all five extension types from a unified interface — Skills, MCP Servers, Plugins, Hooks, and Agent-first CLIs.

• Smart organization — Filter by type, agent, or source, and search by name. Extensions from the same repo are automatically grouped into packs for batch management.
• Full visibility — Every extension shows its agents, permissions, trust score, and status at a glance. Open the detail panel for per-agent file paths, directory structure, and audit findings.
• Effortless management — Enable or disable right from the list. Check for updates across all extensions with one click.
• Cross-agent deployment — See which agents have the extension and which don't — deploy to any missing agent with one click. HarnessKit handles the format differences between agents (JSON, TOML, hook conventions, MCP schemas) automatically.

HarnessKit manages every agent's Configs, Memory, Rules, Subagents, and Ignore files from one place. Currently supporting 16 agents: Claude Code, Codex, Gemini CLI, Cursor, Antigravity, Copilot, Devin Desktop, OpenCode, Hermes, Kiro, Oh My Pi, DeepSeek Harness, Grok Build, Qoder CN, OpenClaw, and PenguinHarness.

• Config file tracking — Automatically discovers every agent's config files — both global and per-project. Add your project directories or custom paths and HarnessKit picks them up alongside the global ones.
• Per-agent dashboard — Each agent gets its own page with all files organized by category, showing scope, path, file size, and a summary of installed extensions. Expand any file to preview its content right in the app.
• Custom paths — Add any file or folder to an agent's dashboard for tracking. Useful for custom configs or scripts that HarnessKit doesn't auto-discover — they show up alongside everything else with the same live preview.
• Real-time detection — The moment a config file is modified, the dashboard reflects it.

Every extension is scanned by a built-in security engine with 18 static analysis rules and receives a Trust Score (0–100), grouped into three tiers — Safe (80+), Low Risk (60–79), and Needs Review (below 60). A dedicated Audit page lets you search, filter by tier, and drill into every finding.

• One-click audit — Run a full security scan across all extensions with a single click. The dashboard shows how many extensions were scanned and when the last audit ran.
• Precise tracing — Every finding pinpoints the exact file and line number, so you can trace the issue immediately.
• Per-agent scanning — Even if multiple agents share the same extension, each agent's copy is audited independently — because versions can drift, and a safe copy on one agent doesn't guarantee safety on another.
• Permission transparency — Every extension's permissions are surfaced across five dimensions — filesystem paths, network domains, shell commands, database engines, and environment variables. You see exactly what each extension can reach before you decide to keep it.

Discover, evaluate, and install — three marketplaces in one, each with trending lists and search:

• Skills — Browse and install from the skills.sh registry. Also supports install from Git URL or local directory.
• MCP Servers — Browse the Smithery registry of Model Context Protocol servers.
• Agent-first CLI — Discover CLI tools built specifically for agents — the newest frontier of the agent extension ecosystem.

Every listing shows its description, install count, and source. For skills, you can preview the documentation, check third-party security audit scores before installing, and install to any agent with one click — HarnessKit tracks the source so you always know where each extension came from.

The sidebar scope picker switches between Global, All scopes, or any registered project. Agents, Extensions, and Audit all filter by the active scope — per-project setups are managed independently of your global config.

Pack a curated set of skills, MCP servers, rules and memory files into a portable Kit — then deploy the whole bundle to any project with one click. Skip the setup churn every time you spin up a new project.

• Compose once, reuse everywhere — Build a Kit from your existing extensions, rules, and memory files. Pick a target agent at install time and HarnessKit writes everything to the right places.
• Multi-project ready — Install the same Kit to as many projects as you need. The detail drawer shows where each one is currently deployed, and removing it from a project cleans up cleanly.
• Portable bundles — Export any Kit as a self-contained .hk-kit.zip to share with teammates or carry across machines. Import is one click.
• Origin tracking — Kit-installed extensions merge with their marketplace origin in the Extensions list, so you always know where each extension came from.

HarnessKit works directly with your agents' native directories instead of copying them into a managed folder — no shadow copies, no sync conflicts.

• Native directories — Reads and writes directly to each agent's own config directory. Your files stay exactly where they are.
• Non-destructive operations — Enabling or disabling an extension is a simple file rename in place. Nothing is moved or duplicated.
• Zero lock-in — Uninstall HarnessKit and everything is exactly where it was. No migration, no cleanup needed.

HarnessKit ships a standalone command-line interface (hk) for terminal-first workflows, available on macOS, Linux, and Windows:

$ hk status
  Agents        15 detected (claude · codex · gemini · cursor · antigravity · copilot · windsurf · opencode · hermes · kiro · omp · dsh · grok · qoder-cn · penguin)
  Extensions    136 total (124 skills · 2 mcp · 8 plugins · 1 hooks · 1 clis)

$ hk list --kind skill --agent claude    # filter by type and agent
$ hk list --kind mcp --agent grok        # Grok Build MCP servers
$ hk audit                               # security audit with trust scores
$ hk enable my-skill                     # enable by name
$ hk disable --pack owner/repo           # batch disable by source

The same full-featured UI that runs in the desktop app is also available as a web interface — served directly from the hk CLI binary. No extra dependencies, no separate install.

$ hk serve
HarnessKit Web UI [my-host] running at http://127.0.0.1:7070/?token=a1b2c3…

This makes HarnessKit usable on Linux servers, HPC clusters, or any headless machine where a desktop app isn't an option. Web mode has full feature parity with the desktop app — the only difference is that file-system operations (like "Open in Finder") are desktop-only. See Getting Started for setup instructions.

• 💡 Tip of the Day — The Overview dashboard surfaces contextual tips for each detected agent from a community-maintained library. Learn shortcuts and best practices as you work.
• 📊 Dynamic Activity Feed — Agent Activity and Recently Installed timelines capture every config change, extension install, and agent event in real time.
• ⚡ Quick Actions — One-click View Agents, Run Audit, Check Updates, and Marketplace access right from the dashboard.
• 🎯 Playful Touches — Smooth animations and micro-interactions throughout the app make daily use feel alive.
• 🎨 Themes — Multiple themes with Light, Dark, and System mode support.

Requirements: At least one supported AI coding agent installed.

1. Download the DMG for your architecture from the latest release:

   Chip	File
   Apple Silicon (M1/M2/M3/M4)	HarnessKit_x.x.x_aarch64.dmg
   Intel	HarnessKit_x.x.x_x64.dmg

2. Open the DMG and drag HarnessKit to the Applications folder.

3. Launch HarnessKit. It will automatically detect your installed agents and scan their extensions.

Already installed? Open Settings → Check for Updates to upgrade in-app.

1. Install HarnessKit:

   # macOS / Linux
   curl -fsSL https://raw.githubusercontent.com/RealZST/HarnessKit/main/install.sh | sh

   # Windows (PowerShell)
   irm https://raw.githubusercontent.com/RealZST/HarnessKit/main/install.ps1 | iex

2. Start the web interface:

   hk serve

   Then open the http://localhost:7070/?token=… URL that hk serve prints. Auth is on by default; the token is saved, so next time http://localhost:7070 just works. On a trusted single-user machine, hk serve --no-token skips the token entirely.

1. Install HarnessKit on the server:

   # macOS / Linux server
   ssh user@your-server
   curl -fsSL https://raw.githubusercontent.com/RealZST/HarnessKit/main/install.sh | sh
   exit

   # Windows server
   ssh user@your-server
   irm https://raw.githubusercontent.com/RealZST/HarnessKit/main/install.ps1 | iex
   exit

2. Start the web interface:

   ssh -L 7070:localhost:7070 user@your-server
   hk serve

   Then open the http://localhost:7070/?token=… URL that hk serve prints, in your local browser. Auth is on by default; the token is saved, so next time http://localhost:7070 just works. Keep the SSH session running while you use HarnessKit.

_{Tip: Managing several remote nodes? Start each with hk serve --name <label> (e.g. --name my-macbook). The label shows in the sidebar and the browser tab title, so multiple tabs are easy to tell apart. Defaults to the machine hostname.}

Re-run the install script from Local machine or Remote server above — both scripts overwrite the existing hk binary. After updating, restart hk serve to pick up the new version.

If you installed via manual download, grab the latest binary from releases and replace your existing hk (or hk.exe).

If you've already installed HarnessKit via the Web Mode steps above, the CLI is ready to use — it's the same hk binary.

See CLI Support above for the full list of commands.

• 🤖 More Agents — more to come
• ⌨️ CLI Enhancements — More commands and richer functionality for hk

Contributions are welcome! See CONTRIBUTING.md for local setup, project structure, and PR guidelines.

This project is licensed under Apache-2.0.

Artwork (public/icons/ and src/components/shared/agent-mascot/) is All Rights Reserved and is not covered by the Apache-2.0 license.

All product names, logos, and trademarks are property of their respective owners. HarnessKit is an independent project, not affiliated with or endorsed by any agent vendor.