Apex Ghost Family runs on your own machine — the client starts it, so there is no endpoint to ping. Last commit 7 Nov 2026.
Read-only window into an open self-evolving agent family: fleet health, court verdicts, receipts.
What the code does
We read the source, 20 h ago · rules 995398eba69f
Things with no honest explanation: a promise that contradicts the code, code that runs at install time while hiding what it does, data leaving the machine.
r = subprocess.run(["winget", "list", "--id", winget_id],
("subprocess rm -rf string", "import subprocess\nsubprocess.run(['rm', '-rf', '/'])",
What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.
r = subprocess.run(["winget", "list", "--id", winget_id],
ok = bool(eval(row["checker"], {"_a": str(a or "").lower()}))
return json.load(open(os.path.join(ROOT, "Config", fn),
t2 = t[:idx] + insert + t[idx:]
tmp = p + ".hookcheck.tmp"
with open(tmp, "w", encoding="utf-8", newline="") as f:
shell=True if os.name == "nt" else False)
e = dict(os.environ)
Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.
We found things in this code
Code changes quietly between releases, and nobody reads the diff of a dependency. We do, on every release — watch Apex Ghost Family and you get told the day something new turns up.
Alternatives to Apex Ghost Family
same job, measured the same wayRead-only Elasticsearch/OpenSearch for AI agents — search, indices, mappings, count, health.
Read-only fleet visibility: endpoint agents, health samples, alerts and org summaries.
Read-only MCP server for coding-agent traces, alerts, costs, usage, and budget health.
Mine your AI coding session logs into a you.md profile with dated receipts, for an agent to read.
Agentless Windows Server health checks over WinRM: one verdict per server, a diffable inventory
Read-only codebase audits for coding agents: secrets, RLS, deps, review verdicts. No writes.
Read-only health validation for Windows Server failover clusters running SQL Server FCI.
One-stop claim verification for AI agents: verdicts with confidence, evidence, signed receipts.
Apex Ghost Family — questions
Answers built from our own checks of this server.