Why HarnessKit?
Every agent, a different world. Extensions, configs, memory, and rules — scattered across different directories, in different formats, with different conventions.
HarnessKit brings them all under one roof — see, secure, and manage everything across every agent, from one place.
Key Features
🧩 Full Suite Extension Management
HarnessKit manages all five extension types from a unified interface — Skills, MCP Servers, Plugins, Hooks, and Agent-first CLIs.
* "—" means HarnessKit does not manage this extension type for the agent yet.
- Smart organization — Filter by type, agent, or source, and search by name. Extensions from the same repo are automatically grouped into packs for batch management.
- Full visibility — Every extension shows its agents, permissions, trust score, and status at a glance. Open the detail panel for per-agent file paths, directory structure, and audit findings.
- Effortless management — Enable or disable right from the list. Check for updates across all extensions with one click.
- Cross-agent deployment — See which agents have the extension and which don't — deploy to any missing agent with one click. HarnessKit handles the format differences between agents (JSON, TOML, hook conventions, MCP schemas) automatically.
https://github.com/user-attachments/assets/897611c4-4ca3-426f-91ba-fcda301e9cfe
https://github.com/user-attachments/assets/a2a74fd1-f3f2-4525-9d64-ba00378d6eef
🤖 Agent Configs, Memory & Rules
HarnessKit manages every agent's Configs, Memory, Rules, Subagents, and Ignore files from one place. Currently supporting 17 agents: Claude Code, Codex, Gemini CLI, Cursor, Antigravity, Copilot, Devin Desktop, OpenCode, Hermes, Kiro, Oh My Pi, DeepSeek Harness, Grok Build, Qoder CN, OpenClaw, PenguinHarness, and Pi.
- Config file tracking — Automatically discovers every agent's config files — both global and per-project. Add your project directories or custom paths and HarnessKit picks them up alongside the global ones.
- Per-agent dashboard — Each agent gets its own page with all files organized by category, showing scope, path, file size, and a summary of installed extensions. Expand any file to preview its content right in the app.
- Custom paths — Add any file or folder to an agent's dashboard for tracking. Useful for custom configs or scripts that HarnessKit doesn't auto-discover — they show up alongside everything else with the same live preview.
- Real-time detection — The moment a config file is modified, the dashboard reflects it.
https://github.com/user-attachments/assets/9b38494a-2ab3-4071-a450-02a30b859323
🛡️ Security Audit & Permission Transparency
Every extension is scanned by a built-in security engine with 18 static analysis rules and receives a Trust Score (0–100), grouped into three tiers — Safe (80+), Low Risk (60–79), and Needs Review (below 60). A dedicated Audit page lets you search, filter by tier, and drill into every finding.
- One-click audit — Run a full security scan across all extensions with a single click. The dashboard shows how many extensions were scanned and when the last audit ran.
- Precise tracing — Every finding pinpoints the exact file and line number, so you can trace the issue immediately.
- Per-agent scanning — Even if multiple agents share the same extension, each agent's copy is audited independently — because versions can drift, and a safe copy on one agent doesn't guarantee safety on another.
- Permission transparency — Every extension's permissions are surfaced across five dimensions — filesystem paths, network domains, shell commands, database engines, and environment variables. You see exactly what each extension can reach before you decide to keep it.
https://github.com/user-attachments/assets/5650c759-f30f-42df-83b2-cf0bafd3fb95
🏪 Marketplace Ecosystem
Discover, evaluate, and install — three marketplaces in one, each with trending lists and search:
- Skills — Browse and install from the skills.sh registry. Also supports install from Git URL or local directory.
- MCP Servers — Browse the Smithery registry of Model Context Protocol servers.
- Agent-first CLI — Discover CLI tools built specifically for agents — the newest frontier of the agent extension ecosystem.
Every listing shows its description, install count, and source. For skills, you can preview the documentation, check third-party security audit scores before installing, and install to any agent with one click — HarnessKit tracks the source so you always know where each extension came from.
https://github.com/user-attachments/assets/a80e2c95-52fe-4cd5-aab1-bd01b4c224cf
🔀 Project-Level Management
The sidebar scope picker switches between Global, All scopes, or any registered project. Agents, Extensions, and Audit all filter by the active scope — per-project setups are managed independently of your global config.
https://github.com/user-attachments/assets/321fc4b6-4f6b-4f6e-a9eb-1b0084334cb2
https://github.com/user-attachments/assets/6392967a-e8a3-4805-9dc3-c4cf16f5c07f
📦 Kits
Pack a curated set of skills, MCP servers, rules and memory files into a portable Kit — then deploy the whole bundle to any project with one click. Skip the setup churn every time you spin up a new project.
- Compose once, reuse everywhere — Build a Kit from your existing extensions, rules, and memory files. Pick a target agent at install time and HarnessKit writes everything to the right places.
- Multi-project ready — Install the same Kit to as many projects as you need. The detail drawer shows where each one is currently deployed, and removing it from a project cleans up cleanly.
- Portable bundles — Export any Kit as a self-contained
.hk-kit.zipto share with teammates or carry across machines. Import is one click. - Origin tracking — Kit-installed extensions merge with their marketplace origin in the Extensions list, so you always know where each extension came from.
https://github.com/user-attachments/assets/e9621e72-f47d-4ea6-99b3-fbd296692048
https://github.com/user-attachments/assets/ec88b596-7999-436f-943e-1dce169cd6f0
https://github.com/user-attachments/assets/c84b6513-484d-4b5d-b083-73de0b3e800e
📂 In-Place Management
HarnessKit works directly with your agents' native directories instead of copying them into a managed folder — no shadow copies, no sync conflicts.
- Native directories — Reads and writes directly to each agent's own config directory. Your files stay exactly where they are.
- Non-destructive operations — Enabling or disabling an extension is a simple file rename in place. Nothing is moved or duplicated.
- Zero lock-in — Uninstall HarnessKit and everything is exactly where it was. No migration, no cleanup needed.
⌨️ CLI Support
HarnessKit ships a standalone command-line interface (hk) for terminal-first workflows, available on macOS, Linux, and Windows:
$ hk status
Agents 15 detected (claude · codex · gemini · cursor · antigravity · copilot · windsurf · opencode · hermes · kiro · omp · dsh · grok · qoder-cn · penguin)
Extensions 136 total (124 skills · 2 mcp · 8 plugins · 1 hooks · 1 clis)
$ hk list --kind skill --agent claude # filter by type and agent
$ hk list --kind mcp --agent grok # Grok Build MCP servers
$ hk audit # security audit with trust scores
$ hk enable my-skill # enable by name
$ hk disable --pack owner/repo # batch disable by source
🌐 Web Mode
The same full-featured UI that runs in the desktop app is also available as a web interface — served directly from the hk CLI binary. No extra dependencies, no separate install.
$ hk serve
HarnessKit Web UI [my-host] running at http://127.0.0.1:7070/?token=a1b2c3…
This makes HarnessKit usable on Linux servers, HPC clusters, or any headless machine where a desktop app isn't an option. Web mode has full feature parity with the desktop app — the only difference is that file-system operations (like "Open in Finder") are desktop-only. See Getting Started for setup instructions.
✨ Thoughtful & Interactive UX
- 💡 Tip of the Day — The Overview dashboard surfaces contextual tips for each detected agent from a community-maintained library. Learn shortcuts and best practices as you work.
- 📊 Dynamic Activity Feed — Agent Activity and Recently Installed timelines capture every config change, extension install, and agent event in real time.
- ⚡ Quick Actions — One-click View Agents, Run Audit, Check Updates, and Marketplace access right from the dashboard.
- 🎯 Playful Touches — Smooth animations and micro-interactions throughout the app make daily use feel alive.
- 🎨 Themes — Multiple themes with Light, Dark, and System mode support.
Getting Started
Requirements: At least one supported AI coding agent installed.
🖥️ Desktop App (macOS / Windows)
-
Download the installer for your platform from the latest release:
-
Install it:
- macOS: open the DMG and drag HarnessKit to the Applications folder.
- Windows: run the installer. It is not code-signed yet, so Windows SmartScreen shows a warning on first run: click More info → Run anyway.
-
Launch HarnessKit. It will automatically detect your installed agents and scan their extensions.
Already installed? Open Settings → Check for Updates to upgrade in-app.
🌐 Web Mode (macOS / Linux / Windows)
Local machine
-
Install HarnessKit:
# macOS / Linux curl -fsSL https://raw.githubusercontent.com/RealZST/HarnessKit/main/install.sh | sh# Windows (PowerShell) irm https://raw.githubusercontent.com/RealZST/HarnessKit/main/install.ps1 | iex -
Start the web interface:
hk serveThen open the
http://localhost:7070/?token=…URL thathk serveprints. Auth is on by default; the token is saved, so next timehttp://localhost:7070just works. On a trusted single-user machine,hk serve --no-tokenskips the token entirely.
Remote server
-
Install HarnessKit on the server:
# macOS / Linux server ssh user@your-server curl -fsSL https://raw.githubusercontent.com/RealZST/HarnessKit/main/install.sh | sh exit# Windows server ssh user@your-server irm https://raw.githubusercontent.com/RealZST/HarnessKit/main/install.ps1 | iex exit -
Start the web interface:
ssh -L 7070:localhost:7070 user@your-server hk serveThen open the
http://localhost:7070/?token=…URL thathk serveprints, in your local browser. Auth is on by default; the token is saved, so next timehttp://localhost:7070just works. Keep the SSH session running while you use HarnessKit.
Tip: Managing several remote nodes? Start each with
hk serve --name <label>(e.g.--name my-macbook). The label shows in the sidebar and the browser tab title, so multiple tabs are easy to tell apart. Defaults to the machine hostname.
Download the binary for your platform from the latest release (referred to as <file> below):
Local machine:
-
Install HarnessKit:
# macOS / Linux chmod +x <file> mkdir -p ~/.local/bin mv <file> ~/.local/bin/hk# Windows (PowerShell) New-Item -ItemType Directory -Force -Path "$env:USERPROFILE\.local\bin" | Out-Null Move-Item <file> "$env:USERPROFILE\.local\bin\hk.exe" -
Start the web interface:
hk serveThen open the
http://localhost:7070/?token=…URL thathk serveprints. Auth is on by default; the token is saved, so next timehttp://localhost:7070just works. On a trusted single-user machine,hk serve --no-tokenskips the token entirely.
Remote server:
-
Upload and install the binary on the server:
scp <file> user@your-server:~/ ssh user@your-server chmod +x ~/<file> mkdir -p ~/.local/bin mv ~/<file> ~/.local/bin/hk exit -
Start the web interface:
ssh -L 7070:localhost:7070 user@your-server hk serveThen open the
http://localhost:7070/?token=…URL thathk serveprints, in your local browser. Auth is on by default; the token is saved, so next timehttp://localhost:7070just works. Keep the SSH session running while you use HarnessKit.
Updating
Re-run the install script from Local machine or Remote server above — both scripts overwrite the existing hk binary. After updating, restart hk serve to pick up the new version.
If you installed via manual download, grab the latest binary from releases and replace your existing hk (or hk.exe).
⌨️ CLI (macOS / Linux / Windows)
If you've already installed HarnessKit via the Web Mode steps above, the CLI is ready to use — it's the same hk binary.
See CLI Support above for the full list of commands.
Roadmap
- 🤖 More Agents — more to come
- ⌨️ CLI Enhancements — More commands and richer functionality for
hk
Contributing
Contributions are welcome! See CONTRIBUTING.md for local setup, project structure, and PR guidelines.
License
This project is licensed under Apache-2.0.
Artwork (public/icons/ and src/components/shared/agent-mascot/) is All Rights Reserved and is not covered by the Apache-2.0 license.
All product names, logos, and trademarks are property of their respective owners. HarnessKit is an independent project, not affiliated with or endorsed by any agent vendor.
