Delimit runs on your own machine — the client starts it, so there is no endpoint to ping. Last commit 8 Nov 2026.
One workspace for every AI coding assistant. Shared tasks, memory, and governance.
What the code does
We read the source, 13 h ago · rules 995398eba69f
A value the model can set ends up inside a file or shell call. That is not a flaw by itself — for a terminal server it is the job — but it is where things go wrong when it is not.
const content = fs.readFileSync(filePath, 'utf8');
Things with no honest explanation: a promise that contradicts the code, code that runs at install time while hiding what it does, data leaving the machine.
env = dict(os.environ)
What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.
__import__(pkg)
return subprocess.check_output(
self.command, shell=True,
execSync(`${cmd} --version`, { stdio: 'pipe' });
path.join(codexConfig.configPath, codexConfig.configFile),
for child in sorted(p.iterdir()):
'/.ssh/',
env = dict(os.environ)
Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.
A tool parameter here reaches a dangerous call
That is not a flaw by itself — but it is where things go wrong when it is not the job. We re-read this code on every release. Watch it and you hear from us the day another one appears.
Alternatives to Delimit
same job, measured the same wayOne shared brain for your AI coding agents: team memory, agent Q&A, tasks, and file claims.
Local Markdown task memory shared by Claude Code and Codex over stdio MCP.
Shared project memory for AI coding agents: decisions, lessons, risks and tasks in one graph.
Shared memory for coding agents and their teams: docs, epics, tasks and decisions over MCP.
Persistent memory for AI assistants — one shared, OAuth-secured vault for every MCP client.
Shared, living memory for you and your people — coves your AI assistant can read and write.
Governed memory and workspace for any AI: tasks, calendar, mail and pages, with per-action consent.
Private local-first AI workspace for shared context, knowledge, tasks, and memories
Delimit — questions
Answers built from our own checks of this server.