Open source · MIT · MCP server

Turn any AI agent into your technical co-founder.

Causly Server gives your agent hands. Ship code, find clients, track deals, take meeting notes and run your calendar from one local MCP server, with guardrails on every risky action.

$ npm install -g causly-server
$ causly-server init
Read the quickstartView on GitHub
agent session · example
you

Ship this change and open a pull request.

tool

ship_change

Blocked: HIGH risk action, needs confirm: true

you

Go ahead.

tool

ship_change { confirm: true }

✓ tests ✓ lint ✓ build

✓ branch pushed, pull request opened

you

Find companies hiring React developers and add the best three to my pipeline.

tool

lead_hn_hiring → pipeline_add_lead ×3

✓ leads saved, follow-up reminder set

▍

230+
Tools across build, sell and operate
5
Permission levels on every tool
0
Cloud accounts to create
MIT
Open source, free to use

01 / CAPABILITIES

One server for the whole founder workflow.

Code is only part of a founder's week. Causly Server covers building, selling and operating, so your agent can carry work from one step to the next.

Build and ship

136 tools

From a local edit to a verified deploy, without leaving the conversation.

  • Files, git, shell, project42
  • GitHub27
  • Terraform20
  • Docker18
  • Vercel11
  • Postgres and MySQL8
  • Supabase6
  • Workflows4

Sell and grow

18 tools

Find clients, keep a pipeline, and fix your SEO from the same place you code.

  • Pipeline9
  • SEO4
  • Leads3
  • Research2

Operate

50 tools

Meetings, reminders and tickets that survive the end of a chat.

  • Notion15
  • Meetings9
  • Calendar8
  • Sentry8
  • Linear7
  • Reminders3

Communicate

21 tools

Read and send, with a confirmation step before anything leaves your machine.

  • Gmail8
  • Slack8
  • Telegram5

Workflows, not just tools

Four tools chain several steps into one verified outcome. If a step fails, they stop and tell you exactly which one.

Browse every tool
ship_change
Checks, branch, commit, push and an open pull request.
fix_ci
Finds the failing run and pulls logs for every failed job.
verify_ci_fix
Pushes the fix and waits for the new run to pass or fail.
deploy_project
Tests, build, deploy, then a live health check.

02 / HOW IT WORKS

Set up in minutes. Runs on your machine.

Causly Server is a single Node.js process your editor starts over stdio. There is no network listener, no Causly cloud and no account.

  1. 01

    Install

    One npm package. Needs Node.js 22.13 or newer and no API keys to start.

    npm install -g causly-server
  2. 02

    Connect

    init finds Claude Desktop, Cursor and Windsurf and wires them up for you.

    causly-server init
  3. 03

    Ask

    Your agent searches the tools, loads what it needs, and calls them by name.

    “Prep me for my next meeting.”
  4. 04

    Approve

    High-risk actions need an explicit confirm. Every call lands in an activity log.

    confirm: true

Your agent

Claude Desktop, Cursor, Windsurf, your own

Causly Server

MCP over stdio

Tool router

search_tools, load_toolset, use_tool

Safety layer

Permissions, workspace limit, redaction

Tool packs

Loaded on demand, not all at once

Local store

SQLite, encrypted secrets, your keys

Your services

GitHub, Vercel, Google, Slack, Telegram, more

Read the architecture guideCausly Server

03 / SECURITY

Built so one bad call cannot cost you a day.

Every tool has a risk level. The server enforces it, whichever agent or editor is calling.

READ

No side effects

runs immediately

LOW

Small, easy to undo

runs immediately

MEDIUM

Changes files or state

runs immediately

HIGH

Hard to undo or visible to others

needs confirm: true

DESTRUCTIVE

Deletes or cannot be reversed

needs confirm: true

Workspace limit

Confine file and command tools to the folders you choose. Symbolic links are resolved first.

Command safety

Catastrophic shell commands are blocked. Risky ones are flagged in the audit log.

Secret redaction

Tokens and passwords are removed from inputs and errors before anything is logged.

Encrypted secrets

A local store using AES-256-GCM, under a master key only you hold.

Activity log

One structured line for every tool call, including the ones that were blocked.

Local-first

No Causly cloud or account. Data only leaves for services you configured yourself.

Guardrails, not a sandbox. The approval gate is a flag the agent must pass, and the workspace limit checks path arguments. Use scoped keys and an agent you trust. The docs list exactly what is and is not protected.

Read the security model

04 / WORKS WITH

Any MCP client. Set up for the ones you already use.

Claude Desktop

Wired by init

Cursor

Wired by init

Windsurf

Wired by init

Claude Code

One command, printed by init

Your own agent

Tested with plain JavaScript and LangChain (JS)

RUNTIME
Node.js 22.13 or newer
PLATFORMS
Windows, macOS and Linux, tested in CI on all three
KEYS
None to start. Add them per service when you need them
LICENSE
MIT

05 / FAQ

Questions, answered.

Is Causly Server free?

Yes. It is open source under the MIT license. You pay only for the third-party services you choose to connect, such as GitHub or Groq, under their own terms.

Does my data leave my machine?

Causly has no cloud and no account. Your keys live in ~/.causly/.env and your pipeline, meetings and reminders are in a local SQLite file. Data goes only to services you configured, and only when a tool for that service runs. The status and doctor commands check the npm registry for a newer version at most once a day, and you can turn that off.

Which agents and editors work with it?

Any client that can start a stdio MCP server. The init command sets up Claude Desktop, Cursor and Windsurf, and prints a one-line command for Claude Code. It has also been tested with a plain JavaScript MCP client and LangChain (JS).

Do I need API keys to start?

No. Files, git, shell, Docker and Terraform work without any keys, and so do the pipeline, leads and research tools. Add keys later, one service at a time, with causly-server setup.

Can an agent delete things or push code without asking me?

High-risk and destructive tools are refused unless the call includes confirm: true, and a well-behaved agent asks you first. That gate is a safety measure, not a separate approval screen, so scope your keys and use the workspace limit for a harder boundary.

Which operating systems are supported?

Windows, macOS and Linux. The test suite runs on all three on every change, and Windows has had the most hands-on use. It needs Node.js 22.13 or newer.

Give your agent hands.

Install it, connect your editor, and ask for the first thing on your list.

$ npm install -g causly-server
Read the quickstartStar on GitHub