One home for every agent.
A free, open-source app to manage all your AI coding agents — desktop, CLI, or web.
Why • Features • Get Started • Roadmap
Every agent, a different world. Extensions, configs, memory, and rules — scattered across different directories, in different formats, with different conventions.
HarnessKit brings them all under one roof — see, secure, and manage everything across every agent, from one place.
HarnessKit manages all five extension types from a unified interface — Skills, MCP Servers, Plugins, Hooks, and Agent-first CLIs.
| Agent | Skills | MCP | Plugins | Hooks | Agent-first CLIs |
|---|---|---|---|---|---|
| Claude Code | ✓ | ✓ | ✓ | ✓ | ✓ |
| Codex | ✓ | ✓ | ✓ | ✓ | ✓ |
| Gemini CLI | ✓ | ✓ | ✓ | ✓ | ✓ |
| Cursor | ✓ | ✓ | ✓ | ✓ | ✓ |
| Antigravity | ✓ | ✓ | — | — | ✓ |
| Copilot | ✓ | ✓ | ✓ | ✓ | ✓ |
* "—" indicates the agent currently does not support this extension type.
- Smart organization — Filter by type, agent, or source, and search by name. Extensions from the same repo are automatically grouped into packs for batch management.
- Full visibility — Every extension shows its agents, permissions, trust score, and status at a glance. Open the detail panel for per-agent file paths, directory structure, and audit findings.
- Effortless management — Enable or disable right from the list. Check for updates across all extensions with one click.
- Cross-agent deployment — See which agents have the extension and which don't — deploy to any missing agent with one click. HarnessKit handles the format differences between agents (JSON, TOML, hook conventions, MCP schemas) automatically.
extensions-demo.mp4
extensions-demo2.mp4
HarnessKit manages every agent's Configs, Memory, Rules, and Ignore files from one place. Currently supporting 6 agents: Claude Code, Codex, Gemini CLI, Cursor, Antigravity, and Copilot.
- Config file tracking — Automatically discovers every agent's config files — both global and per-project. Add your project directories or custom paths and HarnessKit picks them up alongside the global ones.
- Per-agent dashboard — Each agent gets its own page with all files organized by category, showing scope, path, file size, and a summary of installed extensions. Expand any file to preview its content right in the app.
- Custom paths — Add any file or folder to an agent's dashboard for tracking. Useful for custom configs or scripts that HarnessKit doesn't auto-discover — they show up alongside everything else with the same live preview.
- Real-time detection — The moment a config file is modified, the dashboard reflects it.
agents-demo.mp4
Every extension is scanned by a built-in security engine with 18 static analysis rules and receives a Trust Score (0–100), grouped into three tiers — Safe (80+), Low Risk (60–79), and Needs Review (below 60). A dedicated Audit page lets you search, filter by tier, and drill into every finding.
- One-click audit — Run a full security scan across all extensions with a single click. The dashboard shows how many extensions were scanned and when the last audit ran.
- Precise tracing — Every finding pinpoints the exact file and line number, so you can trace the issue immediately.
- Per-agent scanning — Even if multiple agents share the same extension, each agent's copy is audited independently — because versions can drift, and a safe copy on one agent doesn't guarantee safety on another.
- Permission transparency — Every extension's permissions are surfaced across five dimensions — filesystem paths, network domains, shell commands, database engines, and environment variables. You see exactly what each extension can reach before you decide to keep it.
audit-demo.mp4
Discover, evaluate, and install — three marketplaces in one, each with trending lists and search:
- Skills — Browse and install from the skills.sh registry. Also supports install from Git URL or local directory.
- MCP Servers — Browse the Smithery registry of Model Context Protocol servers.
- Agent-first CLI — Discover CLI tools built specifically for agents — the newest frontier of the agent extension ecosystem.
Every listing shows its description, install count, and source. For skills, you can preview the documentation, check third-party security audit scores before installing, and install to any agent with one click — HarnessKit tracks the source so you always know where each extension came from.
marketplace-demo.mp4
HarnessKit works directly with your agents' native directories instead of copying them into a managed folder — no shadow copies, no sync conflicts.
- Native directories — Reads and writes directly to each agent's own config directory. Your files stay exactly where they are.
- Non-destructive operations — Enabling or disabling an extension is a simple file rename in place. Nothing is moved or duplicated.
- Zero lock-in — Uninstall HarnessKit and everything is exactly where it was. No migration, no cleanup needed.
HarnessKit ships a standalone command-line interface (hk) for terminal-first workflows, available on macOS, Linux, and Windows:
$ hk status
Agents 6 detected (claude · codex · gemini · cursor · antigravity · copilot)
Extensions 136 total (124 skills · 2 mcp · 8 plugins · 1 hooks · 1 clis)
$ hk list --kind skill --agent claude # filter by type and agent
$ hk audit # security audit with trust scores
$ hk enable my-skill # enable by name
$ hk disable --pack owner/repo # batch disable by sourceThe same full-featured UI that runs in the desktop app is also available as a web interface — served directly from the hk CLI binary. No extra dependencies, no separate install.
$ hk serve
HarnessKit Web UI running at http://127.0.0.1:7070This makes HarnessKit usable on Linux servers, HPC clusters, or any headless machine where a desktop app isn't an option. Web mode has full feature parity with the desktop app — the only difference is that file-system operations (like "Open in Finder") are desktop-only. See Getting Started for setup instructions.
- 💡 Tip of the Day — The Overview dashboard surfaces contextual tips for each detected agent from a community-maintained library. Learn shortcuts and best practices as you work.
- 📊 Dynamic Activity Feed — Agent Activity and Recently Installed timelines capture every config change, extension install, and agent event in real time.
- ⚡ Quick Actions — One-click View Agents, Run Audit, Check Updates, and Marketplace access right from the dashboard.
- 🎯 Playful Touches — Smooth animations and micro-interactions throughout the app make daily use feel alive.
- 🎨 Themes — Multiple themes with Light, Dark, and System mode support.
Requirements: At least one supported AI coding agent installed.
-
Download the DMG for your architecture from the latest release:
Chip File Apple Silicon (M1/M2/M3/M4) HarnessKit_x.x.x_aarch64.dmgIntel HarnessKit_x.x.x_x64.dmg -
Open the DMG and drag HarnessKit to the Applications folder.
-
Launch HarnessKit. It will automatically detect your installed agents and scan their extensions.
Already installed? Open Settings → Check for Updates to upgrade in-app.
-
Install HarnessKit:
# macOS / Linux curl -fsSL https://raw.githubusercontent.com/RealZST/HarnessKit/main/install.sh | sh
# Windows (PowerShell) irm https://raw.githubusercontent.com/RealZST/HarnessKit/main/install.ps1 | iex
-
Start the web interface:
hk serve
Then open
http://localhost:7070in your browser.
-
SSH into the remote server:
ssh user@your-server
-
Install HarnessKit on the server:
# macOS / Linux curl -fsSL https://raw.githubusercontent.com/RealZST/HarnessKit/main/install.sh | sh
# Windows (PowerShell) irm https://raw.githubusercontent.com/RealZST/HarnessKit/main/install.ps1 | iex
-
Start HarnessKit on the server:
hk serve --no-open
-
On your local machine, open a new terminal and create an SSH tunnel:
ssh -L 7070:localhost:7070 user@your-server
-
Open
http://localhost:7070in your local browser.Both the server process (step 3) and the SSH tunnel (step 4) need to stay running.
If you prefer not to use the install script, or your machine doesn't have curl:
-
Download the file for your platform from the latest release (referred to as
<file>below):Platform File macOS (Apple Silicon) hk-macos-arm64macOS (Intel) hk-macos-x64Linux hk-linux-x64Windows hk-windows-x64.exeIf using locally, make it executable, move to PATH, and run:
# macOS / Linux chmod +x <file> mkdir -p ~/.local/bin mv <file> ~/.local/bin/hk
# Windows (PowerShell) New-Item -ItemType Directory -Force -Path "$env:USERPROFILE\.local\bin" | Out-Null Move-Item <file> "$env:USERPROFILE\.local\bin\hk.exe"
Then run
hk serveand openhttp://localhost:7070in your browser.If using on a remote server, upload the binary, install it, and start HarnessKit:
# From your local machine — upload the binary scp <file> user@your-server:~/ # SSH into the server — install and start ssh user@your-server chmod +x ~/<file> mkdir -p ~/.local/bin mv ~/<file> ~/.local/bin/hk hk serve --no-open
Then on your local machine, open an SSH tunnel and visit
http://localhost:7070:ssh -L 7070:localhost:7070 user@your-server
If you've already installed HarnessKit via the Web Mode steps above, the CLI is ready to use — it's the same hk binary.
See CLI Support above for the full list of commands.
- 🤖 More Agents — Hermes-agent, OpenClaw, OpenCode, and more
- 📦 Extension Migration — Export/import your extension setup between devices
- ⌨️ CLI Enhancements — More commands and richer functionality for
hk
This project is licensed under Apache-2.0.
Artwork (public/icons/ and src/components/shared/agent-mascot/) is All Rights Reserved and is not covered by the Apache-2.0 license.
All product names, logos, and trademarks are property of their respective owners. HarnessKit is an independent project, not affiliated with or endorsed by any agent vendor.