Claude Flow MCP Server

What the code does

We read the source, 20 h ago · rules 995398eba69f

A value the model can set ends up inside a file or shell call. That is not a flaw by itself — for a terminal server it is the job — but it is where things go wrong when it is not.

        existsSync(registryPath) ? JSON.parse(readFileSync(registryPath, 'utf-8')) : {};

Things with no honest explanation: a promise that contradicts the code, code that runs at install time while hiding what it does, data leaving the machine.

  if (hasRootDelete(rooted) || forceMain || /\bdrop\s+(?:database|schema)\b/.test(low) || /\bmkfs(?:\.\w+)?\s|\bwipefs\b|\bdd\b[^;&|\n]*\bof=\/dev\/(?:sd|nvme|hd|vd|mmcblk|disk)|\bshred\b[^;&|\n]*\/dev\//.test(low)) flags.add('destroy')

What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.

    return existsSync('/.dockerenv');

пакет claude-flow ссылается на ruvnet/claude-flow

      return adapter.eval({ script });

    const child = spawn(cmd, args, {

            return bin ? path.join(dir, bin) : null;

      const toDelete = count - this.maxSize + Math.floor(this.maxSize * 0.1); // Delete 10% extra

USER root

        const files = fs.readdirSync(benchDir)

    || readPrefix(env.npm_config_userconfig || env.NPM_CONFIG_USERCONFIG || path.join(home, '.npmrc'))

Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.

Connect this server

This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.

claude mcp add claude-flow -- npx -y claude-flow

{
  "mcpServers": {
    "claude-flow": {
      "command": "npx",
      "args": [
        "-y",
        "claude-flow"
      ]
    }
  }
}

[mcp_servers.claude-flow]
command = "npx"
args = ["-y", "claude-flow"]

{
  "mcpServers": {
    "claude-flow": {
      "command": "npx",
      "args": [
        "-y",
        "claude-flow"
      ]
    }
  }
}

{
  "servers": {
    "claude-flow": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "claude-flow"
      ]
    }
  }
}

Optional settings from the registry entry, left out of the block above: ANTHROPIC_API_KEY (Anthropic API key for Claude AI models), CLAUDE_FLOW_MODE (Operation mode: development, production, or test), CLAUDE_FLOW_MEMORY_PATH (Path for persistent memory storage), CLAUDE_FLOW_MAX_AGENTS (Maximum number of concurrent agents), CLAUDE_FLOW_PORT (MCP server port), GITHUB_TOKEN (GitHub personal access token for repository operations), FLOW_NEXUS_API_KEY (Flow Nexus cloud platform API key).