
Agent Claim Mcp
io.github.vk0dev由 GitHub 帳號 vk0dev 發布v1.0.2更新於 Oct 24, 2026
File-claim coordination for parallel AI coding agents: claim files before edits, no stomping.
概覽
讓平行工作的編碼代理在共用工作區中宣告檔案路徑、查詢歸屬並釋放宣告,避免編輯衝突。
- 可以做什麼
- 這是一個本地優先的 MCP 伺服器,提供三個工具:claim_files 對正規化路徑建立或更新帶 TTL 的宣告,release_claim 釋放由呼叫方代理持有的宣告,whose_claim 查詢路徑是否空閒或已被占用,並回傳擁有者、任務、備註與到期時間。宣告存放在本地 JSON 帳本中,因此不同工作階段之間的重疊宣告透過同一個檔案解決。衝突處理是明確且全有或全無的:只要有一個請求路徑已被占用,就不會寫入任何內容。
- 適用情境
- 適用於多個編碼代理刻意共用同一個檢出目錄與檔案系統檢視,並希望在編輯前而非合併時發現衝突的情境。它是一個很窄的原語,用來搭配既有的任務分派層,而不是佇列、規劃器或協調平台。如果每個代理已有自己的分支或工作區,通常不需要它。
- 執行需求
- 透過 stdio 在本機執行;可用 npx @vk0/agent-claim-mcp 安裝,或讓 MCP 用戶端指向本機檢出所建置的 dist/server.js。需要 Node.js 與共用的檔案系統檢視:所有用戶端須在同一台機器上以同一使用者執行,並解析到相同的儲存庫根目錄或 cwd。未宣告帳號、API 金鑰、環境變數或標頭。
安裝
在 SourceWeft 中
- 開啟 儀表板中的 Agent Claim Mcp,將其新增到工作區。
- 為需要使用其工具的對話啟用該服務。
Desktop only,透過 STDIO。 STDIO 服務會啟動本機處理程序,因此需要 SourceWeft 桌面主機。
其他 MCP 客戶端
參照 儲存庫 中的啟動說明。
README
Agent Claim MCP
Languages: English · 日本語 · 简体中文 · Русский · Español
Use Agent Claim MCP when multiple coding agents share one worktree and you need a tiny local coordination primitive before edits, not a full orchestration framework. It gives agents one job: claim paths, detect collisions, and release ownership so parallel work stops stomping the same files.
Agent Claim MCP is a local-first MCP server for Claude Code, Cursor, Cline, and other MCP clients that need file ownership coordination without queues, planners, or custom AGENTS.md conventions. The current release surface centers on three bounded actions only: claim normalized paths, inspect who owns them, and release by path or claim id with explicit conflict reporting across separate sessions.
Release status:
@vk0/[email protected]is live on npm, so thenpx -y @vk0/agent-claim-mcpinstall path is now the truthful default for external users. Phase 5 external proof may be satisfied by either Official MCP Registry validation or a live Smithery listing, but the current proof state remains pending until one of those public artifacts is explicitly verified. Official MCP Registry validation is still pending, so do not describe the package as registry-accepted or marketplace-listed until a real registry or Smithery proof URL is cited.Milestone truth: the product wedge stays narrow, 3 tools plus a local JSON ledger for shared-worktree collision prevention, not a broader orchestration platform.
Current next manual step: complete the pending human rerun and verification path for Official MCP Registry proof, then record the verdict from that run instead of assuming acceptance from npm availability.
Registry rerun quickstart
Current truthful state:
- npm
1.0.0is live - Official MCP Registry acceptance is still pending
- workflow
25282612113did not complete the registry validation path - the repo is now past the earlier
NPM_TOKENsecret-fix step, but the registry proof still needs a human rerun plus verification before it can be treated as accepted
Exact rerun command:
After the rerun, verify in this order:
- confirm the rerun completed successfully in GitHub Actions
- run
npm run preflight:registry - follow
docs/official-registry-validation-runbook.md - only then record registry acceptance as proven
Operator shortcut: use the runbook's Quick operator path for the exact rerun-to-verification order, and treat npm-live status as separate from registry-proof status.
Why / When to use
Choose this server when your workflow already has task routing, but still needs a simple lock-like primitive at edit time:
- two or more agents can touch the same repo in parallel
- you want collision detection before file edits, not after merge conflicts
- you want claims to expire automatically with TTLs
- you want a narrow primitive that another agent can understand from name + description alone
- you do not want a bundled rules engine, queue runner, or orchestration platform
Installation
The canonical external install path is now the published npm package:
Status note: npm install is live today, but Official MCP Registry validation and Smithery/other marketplace proof are still not established, so treat the package as npm-available first rather than marketplace-verified.
If you are developing from a local checkout instead of the published package, you can still point your MCP client at the built dist/server.js directly.
That second example is for local development only. On Windows, point your MCP client at the built dist/server.js path on your own machine instead of copying a POSIX path literally.
Build once before using the local path:
Claude Code
Add the stdio server to your Claude Code MCP config:
Claude Desktop
Claude Desktop uses ~/Library/Application Support/Claude/claude_desktop_config.json on macOS and %APPDATA%\Claude\claude_desktop_config.json on Windows:
After saving claude_desktop_config.json, fully restart Claude Desktop so it reloads the MCP server configuration.
Cursor
Cline
Limitations
This server is intentionally narrow and local-first. Install it when your agents share one filesystem view, not when you need distributed coordination.
- Claims live in a local ledger on disk, so they only coordinate sessions that can read and write the same worktree.
- It is not a hosted lock service, queue, or scheduler, and it does not replicate claims across machines by itself.
- TTL expiry is protective cleanup, not a substitute for higher-level task ownership or human review.
- Path normalization reduces shape mismatches, but agents still need to point at the same repo root or
cwdfor claims to line up. - If your workflow needs cross-host coordination, central audit policy, or mandatory approvals, pair this server with a separate orchestration layer instead of stretching the claim ledger beyond its scope.
For a real multi-agent run before publishing, see DOGFOOD.md and the proof artifacts in docs/dogfood-report.md.
Tools
claim_files
Create or refresh a local file-claim entry so parallel agents can see ownership before editing and avoid stomping the same worktree paths during active tasks. Conflict responses are explicit, so overlapping claims across separate sessions do not stay implicit or in-memory only.
Input
Output
If any requested path is already claimed by another active owner, the tool returns ok: false and writes nothing.
release_claim
Remove an existing claim owned by the current agent so finished, paused, or reassigned work stops blocking other agents from safely editing the same paths.
Input
Output
Only the current owner can release an active claim, whether you target it by claimId or by normalized paths, so cleanup works after real multi-agent runs and path-shape variants resolve consistently.
whose_claim
Read the local ledger and explain whether a file path is free or currently claimed, including owner, task, note, and expiry metadata for safe coordination across separate sessions sharing the same worktree.
Input
Output
Real samples
1. coder-A claims foo.ts
2. coder-B collides on the same file
3. coder-A releases the file
Troubleshooting
claim_files returns ok: false
This means at least one requested path is already claimed by another active owner, so nothing new was written. Check the conflicts array for the exact overlapping normalized paths and the current ownerAgentId, then inspect the same paths with whose_claim before retrying.
If one path collides, a mixed request is still all-or-nothing. Split the work or wait for the current owner to release the conflicting path.
release_claim with a claim id returns missing: ["..."]
That claim id was not active in the local ledger at release time. It may already be released, expired, or never existed on this machine. This is not treated as a partial success.
release_claim with paths returns released: []
If ok is still true but released is empty, the requested normalized paths did not match any active claim owned by the caller. The missing array tells you which normalized paths were not matched.
Use whose_claim first when you are unsure whether the path is free, owned by another agent, or already gone from the ledger.
Releasing someone else’s claim
Only the current owner can release an active claim. If another agent still owns the path, inspect it with whose_claim, coordinate with that owner, or wait for the TTL to expire.
Comparison
Choose Agent Claim MCP when you already have your own tasking layer and only need path ownership coordination.
Choose a broader orchestration project when you want one package to define agent rules, work queues, coordination policy, and higher-level execution flow.
FAQ
When should an agent pick this over a git branch or worktree per agent?
Pick claims when multiple agents intentionally share one checkout and one filesystem view — because they reuse the same node_modules, build artifacts, or a running dev server, or because the tasking layer already splits work by files rather than by branches. Branch-per-agent and worktree-per-agent prevent collisions by copying state and deferring conflicts to merge time; claims prevent collisions by declaring path ownership before the first edit, with no extra checkouts and no merge step. If your workflow already isolates each agent in its own branch or worktree, you may not need this server at all.
How is a claim different from a real lock or from git worktree isolation?
A claim is an advisory ownership record, not an enforced filesystem lock. Nothing physically prevents a misbehaving process from writing to a claimed path; enforcement is cooperative, which is exactly the contract MCP agents can follow: call claim_files before editing, respect ok: false, release when done. Worktree isolation is stronger but heavier — separate checkouts, duplicated state, and conflicts that only surface at merge. The two compose: use worktrees for long-lived parallel streams, and claims inside any single worktree that more than one agent touches.
What do TTLs actually do, and what happens when a claim expires?
Every claim carries a TTL (ttlSeconds, default 3600), and expired claims are pruned automatically on the next ledger read or write. That means a crashed, killed, or abandoned session can never block a path forever — the worst case is one TTL window. Expiry is protective cleanup, not task handoff: an agent still actively working should refresh its own claim (re-claim the same paths under the same agentId) instead of asking for a very long TTL up front.
What exactly happens on a conflict?
claim_files is all-or-nothing. If any requested path is already owned by another active claim, the tool returns ok: false, writes nothing — including the non-conflicting paths in the same request — and lists each colliding normalized path with its current ownerAgentId and expiresAt in the conflicts array. There is no queueing, no retry, and no forced takeover. The calling agent decides what to do next: split the batch, inspect the owner with whose_claim, coordinate through its own tasking layer, or wait for release or TTL expiry.
Does it work across different MCP clients at the same time, like Claude Code plus Cursor?
Yes, as long as all clients run on the same machine as the same user. Each MCP client spawns its own server process, but every process converges on the same on-disk ledger with atomic temp-file-plus-rename writes, so a claim made from a Claude Code session is visible to a Cursor or Cline session immediately. The one thing agents must keep consistent is path shape: pass a cwd or absolute paths that resolve to the same repo root, so normalization lines up across clients.
Where is the state stored, and does anything leave my machine?
All state lives in one local JSON ledger at ~/.agent-claim-mcp/ledger.json. There is no daemon, no background process, no network listener, no telemetry, and no cloud sync — the server only reads and writes that file when a tool is called. This is also the boundary of the product: claims coordinate sessions that share one filesystem view, and cross-host coordination is explicitly out of scope.
Can I release or steal a claim owned by another agent?
No. release_claim only removes active claims owned by the calling agentId, whether targeted by claimId or by normalized paths. If another agent still owns a path, your options are to inspect it with whose_claim, coordinate with that owner through your tasking layer, or wait for the TTL to expire. This keeps the primitive predictable: ownership changes only by explicit release or by expiry, never by a quiet takeover.
How it works
- claims are stored in a local JSON ledger at
~/.agent-claim-mcp/ledger.json - paths are normalized to absolute paths so different agents cannot dodge collisions with relative path tricks or path-shape variants
- overlapping claims across separate sessions resolve through the same ledger instead of relying on in-memory coordination
- expired claims are pruned automatically on reads and writes
- writes use temp-file plus rename semantics for atomic updates
Development
Packaging
The npm package is expected to ship at least:
README.mdserver.json- compiled
dist/
Use this check before release:
Publish prerequisites
The expected publish path is the GitHub Actions release job that runs after a version tag push. For the unattended npm publish step to succeed, the workflow must receive a non-empty NODE_AUTH_TOKEN from the repo secret configured for npm publishing.
If NODE_AUTH_TOKEN is missing or empty in CI, the first npm publish attempt fails with ENEEDAUTH even when the package itself is ready. Before retrying a release, confirm the GitHub repository secret is present and mapped into the publish job rather than trying to re-run publish steps locally.
For the local proof path before tagging, run the short smoke checklist in docs/smoke-proof.md.
For the first post-publish external acceptance check, use the maintainer runbook in docs/official-registry-validation-runbook.md and the short recording template in docs/official-registry-validation-checklist.md.
License
來源:README.md,提交 5ee6e97
工具
0版本歷史
1- v1.0.2最新Sep 16, 2026
評分
已滿足適用檢查項的 50%
該評分衡量此收錄條目的完整程度,依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價,也不表示伺服器安全或目前可用:可連通性是帶日期的檢查結果,評分也不包含安裝量或使用者評價。
- 近 30 天內可連通25 分
請保持端點能夠回應 MCP 握手;SourceWeft 每 30 天探測一次。
- 已宣告認證方式10 分
請在註冊中心條目中宣告憑證請求標頭,或保持端點能夠回應探測,以便判定其認證方式。
- 已列出工具15 分
請讓伺服器在無憑證時回應 tools/list,或發布可在沙箱中無憑證啟動的軟體包。
- 描述必需15 分
- 圖示10 分
- 文件15 分
- 授權條款10 分