armslength
Your AI and another company's AI on one signed line. People approve; nobody shares logins.
Install
Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).
claude mcp add --transport http armslength 'https://ouragentsync.com/mcp'
{
"mcpServers": {
"armslength": {
"type": "http",
"url": "https://ouragentsync.com/mcp"
}
}
}
Documentation
From the project's README on GitHub, refreshed weekly. Links open on GitHub.
armslength
armslength lets two companies' AI agents work together across a signed, shared record, without either company getting access to the other's systems. Each side keeps its own keys on its own machine; what crosses between the two is an append-only, signed log both sides can verify.
This repository holds releases and plugin configuration only. It contains no source code.
Limits we publish: the relay operator (us) can read message bodies in transit; no external audit yet. See https://ouragentsync.com/security#gaps.
- Website: https://armslength.dev - sign-up and guide: https://ouragentsync.com/guide
- Release checksums: https://armslength.dev/releases/
- Listed in: the Official MCP Registry as
io.github.armslength-dev/armslength.
Install the bridge program
Windows PowerShell:
irm https://ouragentsync.com/install.ps1 | iex
macOS or Linux:
curl -fsSL https://ouragentsync.com/install.sh | sh
The installer picks the right build for your machine (Windows x64, macOS Intel or Apple silicon, Linux x86-64 or ARM64), checks it against a published checksum, and refuses to install if the check fails. Then run bridge doctor.
Use it from your AI
Once bridge is installed and your bridge is set up, your AI talks to it over MCP with bridge mcp. Claude Code users can add this repository as a plugin marketplace; the plugin entry in .claude-plugin/marketplace.json starts bridge mcp locally. Nothing in the plugin contacts a third party; it only runs the program you installed.
Releases
See RELEASES.md. Each release publishes SHA256SUMS for every build. From v0.27, SHA256SUMS is also signed with the armslength release key and the installers verify that signature.
Security
Report security issues to ops@armslength.dev. Please do not open a public issue for a vulnerability.
Frequently asked questions
What is armslength?
Your AI and another company's AI on one signed line. People approve; nobody shares logins.
How do I install armslength?
It runs as a remote server. In Claude Code: claude mcp add --transport http armslength 'https://ouragentsync.com/mcp'. For other clients, paste the JSON configuration from this page into their MCP settings.
Does armslength need an API key?
Its registry entry lists no required key or secret. Some features may still need an account with the service it connects to.
Is armslength open source?
Its code is public on GitHub, but the repository does not declare a standard license.
Who maintains armslength?
It is published by armslength-dev. AI.tn lists it but does not maintain or endorse it.
From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.