25 MIT-licensed open-source projects worth tracking for agent infrastructure
25 MIT-licensed agent-infrastructure repos with outsized, rising attention among 655 agent-swarm stargazers. Stars and activity checked 2026-10-10.

Which open-source projects are worth tracking for agent infrastructure? These 25. They are the MIT-licensed repositories with outsized, rising attention among the 655 GitHub accounts that star agent-swarm. "Worth tracking" is not "most starred": we rank by popularity-normalized lift plus a recency gate, so a repository with under 200 stars can qualify while giants like facebook/react drop out. The boundary: MIT license only, cohort attention measured in our July 2026 crawl, star counts and last-push dates refreshed 2026-10-10. Several of these repos have fewer than 200 stars.
Selection evidence — crawled July 2026, facts refreshed 2026-10-10
- 528,916 star edges across 228,177 distinct repositories, from 655 agent-swarm stargazers with bot and drive-by accounts removed.
- Lift is the observed versus expected number of co-stars, compared on a log scale. Given how many repositories each stargazer has starred and how popular a repository is globally, we estimate how many of our accounts would have starred it by chance, then measure how far reality exceeds that. A shrinkage term discounts thin support.
- Recency is weighted with an exponential half-life, so a repo that spiked in this cohort a year ago and went quiet ranks below one accelerating right now.
- Recency filters: at least 8 cohort stars, at least 5 of them in the last 90 days, and at least half of all cohort stars inside that window. This cut the pool from 2,471 candidates to 342 (13.8%).
- MIT gate: the recorded final candidate pool contained 340 repositories, of which 179 carried an exact MIT license. The published funnel does not explain the two-repository difference from the preceding 342 count.
- Editorial pass: we removed mirrors, templates, prompt and skill collections, and awesome-lists, leaving 25.
One caveat before the list: co-starring signals attention, not adoption or production use. This is a cohort description, not a survey, and our clustering of the 25 into four groups is weak — read the categories as vicinities, not boundaries.
The 25, as of 2026-10-10
1. Operator-Visible Agent Systems
Exposing agentic work as a state a human can inspect, pause, or override.
| Repository | Why it matters | Current limitation | Stars | Last push | License |
|---|---|---|---|---|---|
| swarmclawai/swarmclaw | Self-hosted, multi-provider runtime for persistent agent teams with restart-safe branching, scheduling, and background jobs across several agent CLIs. | No commits in over 90 days. | 689 | 2026-06-30 | MIT |
| leodavinci1/kanbots | Desktop kanban that dispatches issues to coding-agent CLIs in isolated Git worktrees, streaming tool activity and pausing for decisions instead of running unattended. | No commits in over 90 days — the quietest on the list. | 610 | 2026-05-25 | MIT |
| ClaudioDrews/memory-os | Local memory stack that separates permanent instructions, sessions, trust-scored facts, and a generated wiki instead of dumping everything into one vector store. | Built around the Hermes stack, not a general-purpose memory layer. | 1,372 | 2026-09-20 | MIT |
| pikpikcu/airecon | Authorized-testing agent that drives any OpenAI-compatible LLM gateway — local or hosted — and adds testing-specific phases, checkpoints, and failure-aware payload reuse on top of a generic shell agent. | Needs a Kali Linux Docker sandbox and a model with native tool calling; target data stays local only with a local gateway. | 1,074 | 2026-09-11 | MIT |
| kerlenton/mcpsnoop | Transparent stdio/HTTP proxy that records the actual MCP traffic between a client and its servers — replay, drift detection, and CI failures on malformed frames. | Sees only the traffic that passes through the proxy. | 361 | 2026-10-07 | MIT |
2. Closed-Loop Agent Engineering
These projects treat "configure, run, observe, grade, ship" as the actual unit of work, and make that loop repeatable around whatever runtime you already use.
| Repository | Why it matters | Current limitation | Stars | Last push | License |
|---|---|---|---|---|---|
| LiteLLM-Labs/litellm-agent-control-plane | One creation/execution UI spanning multiple managed and local agent backends, instead of a separate dashboard per runtime. | No commits in over 90 days. | 1,305 | 2026-06-20 | MIT |
| exoharness/exo | Experimental harness whose agent can modify and restart its own prompts, tools, memory, and policies — with a rewindable sandbox keeping canonical conversations outside the part being changed. | Self-described experimental; self-modification only stays safe inside the rewindable sandbox. | 1,495 | 2026-10-08 | MIT |
| Amal-David/pagecast | Local-first CLI/MCP server for publishing agent-generated static reports, tracking context so repeat publishes update one URL rather than sprawling. | Publishes only to Cloudflare Pages. | 191 | 2026-09-21 | MIT |
| darkrishabh/agent-skills-eval | Runs the same prompt with and without a given Agent Skill to estimate its incremental lift, with reusable artifacts and deterministic tool-call assertions. | Measures a skill's incremental lift, not end-to-end agent quality. | 799 | 2026-10-07 | MIT |
| raindrop-ai/workshop | Local debugger that streams agent tokens, tool calls, and spans into a browser, and can replay a captured production trace against real agent code. | Replay only covers traces it captured. | 1,108 | 2026-08-22 | MIT |
| mgechev/skillgrade | Cross-provider CLI that tests whether Claude, Gemini, or Codex actually discover and use a skill under declared tasks and graders — CI mode included. | Scoped to skill discovery and use, not general agent capability. | 720 | 2026-10-05 | MIT |
3. Sidecars That Extend the Agent
Small, attachable capabilities that add leverage without replacing the host agent. Think MCP, CLIs, plugins, deliberately narrow in scope.
| Repository | Why it matters | Current limitation | Stars | Last push | License |
|---|---|---|---|---|---|
| xhluca/agent-talk | Encrypted peer messaging for independent coding agents across sessions or machines, without requiring a full orchestration suite. | Messaging only — no shared state or orchestration. | 191 | 2026-09-10 | MIT |
| raiyanyahya/recall | Claude Code plugin that captures sessions into a compact project-resume document using local TF-IDF/TextRank summarization — no extra model call. | Claude Code is the first-class harness; OpenCode support is opt-in. | 755 | 2026-09-07 | MIT |
| zaydmulani09/mnemo | Local Rust sidecar that builds a SQLite knowledge graph and returns ranked prompt context via weighted multi-hop relationships, not just vector similarity. | No commits in over 90 days. | 237 | 2026-06-04 | MIT |
| ronak-create/FableCut | Browser video editor whose timeline is editable as JSON through UI, MCP, files, or REST — compact patch operations and revision-counter conflict rejection instead of silent overwrites. | One person's project, created in early July. | 711 | 2026-10-08 | MIT |
| bschoepke/ableton-live-mcp | Experimental MCP server giving agents access to Ableton Live's Python object model, including an audio-tap loop for capture-analyze-adjust cycles. | Experimental, and tied to Ableton Live. | 228 | 2026-10-06 | MIT |
| tracewayapp/traceway | OpenTelemetry-native platform unifying logs, traces, metrics, and AI telemetry under one trace ID, with an agent-oriented CLI exposing stable JSON and exit codes. Highest cohort penetration on this list (27 of our 655 accounts). | You adopt its telemetry platform, not just a library. | 1,603 | 2026-10-05 | MIT |
| nikitadoudikov/claude-pulse | Local ops dashboard built from Claude Code/Codex session files and hooks — live context fill, usage estimates, and phone-based allow/deny for pending commands. | Quieter since July, and reads Claude Code/Codex session files only. | 247 | 2026-07-19 | MIT |
4. Beyond Context, Execution Governance
Execution needs structured context about state, permissions, provenance, and prior work. A bigger context window alone can't give you that.
| Repository | Why it matters | Current limitation | Stars | Last push | License |
|---|---|---|---|---|---|
| sympozium-ai/sympozium | Kubernetes-native coordination layer that represents agents, policies, and executions as cluster resources, putting RBAC and sandboxing in the control plane itself. | Requires running Kubernetes. | 659 | 2026-10-08 | MIT |
| MaxGfeller/open-harness | TypeScript library for embeddable agent harnesses — sessions, tools, middleware, virtual filesystems — with compaction and resumable subagents as opt-in pieces, not a monolith. | Quieter since July; it's a library, so you assemble the runtime yourself. | 617 | 2026-07-17 | MIT |
| vshulcz/deja-vu | Local index/MCP recall layer over coding-agent session histories already on disk, retroactively indexing across several harnesses. | Created 2026-07-14 — about three months old at the 2026-10-10 re-check; recall quality depends on the session histories you already have. | 1,160 | 2026-10-09 | MIT |
| ModernRelay/omnigraph | Branchable graph database for shared agent state where agents mutate isolated branches and submit graph-wide changes for review, combining graph traversal, vector, and full-text search. | Introduces a graph database your team has to operate. | 1,271 | 2026-10-10 | MIT |
| manojmallick/sigmap | Deterministic, byte-stable code-signature map generated without an LLM or vector database — diffable, and able to gate fabricated files, symbols, and tests in CI. | Signatures only: it checks structure, not behavior. | 646 | 2026-10-09 | MIT |
| tastyeffectco/sandboxd | Self-hosted API running coding agents inside per-app Docker containers with live preview URLs, credential proxying, and checkpoint/revert. | You run the container fleet yourself. | 963 | 2026-09-29 | MIT |
| cosmtrek/mindwalk | Local visualization replaying coding-agent sessions over a deterministic 3D map of the repository, making scope and churn spatially visible instead of just chronological. | A visualization layer: it explains sessions, it doesn't change them. | 1,367 | 2026-08-10 | MIT |
All 25 remain MIT-licensed and unarchived as of 2026-10-10. The biggest movers since publication are exo (594 to 1,495 stars), deja-vu (495 to 1,160), traceway (1,048 to 1,603), and mindwalk (949 to 1,367).
What to watch next
Which open-source tools let a human inspect or pause agent work? That is the operator-visible question, and where this cohort concentrates hardest. swarmclaw and kanbots both render agent work as inspectable state a person can interrupt, and mcpsnoop shows the actual MCP frames instead of a black box. Our delegation architecture article describes how operators assign and inspect work.
How do you know a change actually made your agent better? Closed-loop evaluation answers it: run, observe, grade, repeat. agent-skills-eval and skillgrade isolate whether a skill earns its place, while exo pushes the loop further by letting the agent modify itself inside a rewindable sandbox. These repositories offer different ways to inspect that loop. Their presence in the cohort does not establish evaluation quality.
What can you add without replacing the agent you already run? Sidecars — deliberately narrow tools that attach to the host agent. recall bolts session memory onto Claude Code with no extra model call, agent-talk adds encrypted messaging between independent agents, and traceway attaches OpenTelemetry-native observability. Our Code Mode measurement examines one way to reduce tool-result payloads.
Who is allowed to do what, and where is that enforced? Execution governance. sympozium puts RBAC and sandboxing in the Kubernetes control plane, sandboxd isolates agents in per-app containers with credential proxying, and omnigraph makes shared state changes reviewable. Our security page describes the product security boundaries. For a wider view beyond this cohort, see our self-hosted open-source agent platforms list.
Conclusion: never outsource the thinking
Two things we noticed; both held up on the re-check.
The trend for observability and composability over ease-of-use keeps accelerating: a kanban board that shows agent work as inspectable state, a proxy that shows the actual MCP frames, sidecars that bolt one capability onto whatever agent you already run, execution substrates that carry provenance and permissions as data rather than prompt text.
And the stack is still being assembled in public by individuals and small teams. deja-vu and FableCut were weeks old when we found them; since publication exo, deja-vu, traceway, and mindwalk each gained hundreds of stars. Attention is a signal, not a verdict — the thinking about what to adopt stays with you.
Star counts and last-push dates from the GitHub API, checked 2026-10-10. Cohort selection from the July 2026 crawl. agent-swarm does not use or endorse the listed repositories.
Related field notes
Your Agents Write the Titles Your Trackers Read
An IMDEA audit of 9 AI chat services found trackers receiving titles, permalinks and screenshots, not just prompts. Agent swarms multiply those artifacts.
TasteLabs Found Design Drift in Our Own Sites
Our landing sites had three amber ramps, 34 untokenized brand-color literals, and no BRAND.md files. One fix PR has merged; one is still open.
26 Tool Calls, One Script, $0.02: Measuring “Code Mode” in Production
Our session rubric already tells agents: past ten items, write a script instead of N tool calls. We measured what that's worth on one production job, and where the savings stop.
