Back to Home
ssdeanx icon

AgentStack

by ssdeanx

Overview

A versatile backend for hosting and orchestrating multiple specialized AI agents and workflows within the Mastra framework, facilitating agent-to-agent (A2A) coordination, code-centric development tasks, knowledge management (notes), and integration with various external services. It supports evaluation of agent performance and policy-driven access control.

Installation

Run Command
npm run dev

Environment Variables

  • GOOGLE_API_KEY
  • GITHUB_API_KEY
  • ALPHA_VANTAGE_API_KEY
  • FINNHUB_API_KEY
  • POLYGON_API_KEY
  • SERPAPI_API_KEY
  • OPENAI_API_KEY
  • GOOGLE_CLOUD_PROJECT
  • GOOGLE_APPLICATION_CREDENTIALS
  • EMBEDDING_MODEL
  • E2B_API_KEY
  • NEXT_PUBLIC_MASTRA_API_URL
  • PGHOST
  • PGUSER
  • PGDATABASE
  • PGPASSWORD
  • PGPORT

Security Notes

The `calculatorTool` (src/mastra/tools/calculator.tool.ts) uses `mathjs.evaluate()` directly with user-provided `expression` and `variables`. This is a critical code execution vulnerability if inputs are not strictly sanitized by upstream agents or components, as `mathjs.evaluate` is designed to execute arbitrary code. While other tools implement input validation (Zod) and external code execution is sandboxed (E2B), this specific tool poses a severe risk. Other tools using `execa` (for Git, pnpm) and `crawlee` (for web scraping) require careful input handling and configured allowed domains to prevent command injection or SSRF/content abuse.

Similar Servers

Stats

Interest Score39
Security Score4
Cost ClassMedium
Avg Tokens2000
Stars8
Forks1
Last Update2026-01-16

Tags

AI AgentsAgent-to-Agent (A2A)WorkflowsCode GenerationCode AnalysisDeveloper ToolsKnowledge BaseOrchestrationBackendMastraEvaluationPolicy Management