@sleep2agi/commhub-server weekly downloads statistics

@sleep2agi/commhub-server

CommHub: MCP Streamable HTTP + SSE push + REST API for an AI agent network. Single-process Bun server, SQLite-backed, zero config when launched through anet.

The supported path is to install the anet CLI (@sleep2agi/agent-network) and run anet hub start, which wires up the port, default admin account, recovery admin utok_, and local config for you.

Quick start (verified)

⚠️ Do not run bunx @sleep2agi/commhub-server without a version Without a version this resolves to the npm latest dist-tag, and latest is currently 0.8.8 (published 2026-06-24).

On 0.8.8 an anonymous GET /health returns the {networkId}:{alias} of every live SSE connection — no token required. The redaction fix is 7bacb729 (security(#473), 2026-07-29), 35 days after 0.8.8 shipped, so 0.8.8 does not contain it.

Pin a version, or use the preview channel:

bunx --bun @sleep2agi/commhub-server@preview      # contains the redaction fix

Or use the supported path, anet hub start, which pulls the version in PINNED_SERVER_VERSION rather than latest.

Self-check: curl -sS http://<host>:9200/health | jq 'has("sse_sessions")' — true means you are on an affected build.

# Recommended — through the anet CLI
npm install -g @sleep2agi/agent-network
anet hub start
#   • http://127.0.0.1:9200 by default
#   • SQLite at ~/.commhub/commhub.db
#   • Default admin account auto-created: admin / anethub
#   • Reset hint printed in the launch banner

# Or directly via bunx (Bun required). Direct runs need explicit auth or dev-open.
bunx @sleep2agi/commhub-server --dev-open

# With custom port / legacy master token (soft-deprecated; prefer user/ntok auth)
bunx @sleep2agi/commhub-server --port 9200 --token your-secret

Once running:

Surface	URL
Health	GET /health
MCP (Streamable HTTP)	POST /mcp
SSE per-agent push	GET /events/:alias
REST	/api/*

Pairs with

Package
@sleep2agi/agent-network	CLI
@sleep2agi/agent-network-dashboard	Web UI
@sleep2agi/agent-node	Agent runtime host

Install the matching versions with npm install -g <pkg> — the latest dist-tag on npm is authoritative. Pinning versions here goes stale on every release and nobody comes back to fix it.

MCP tools

Agent-side

Tool	Description
report_status	Heartbeat + status (idle / working / blocked / error / offline)
report_completion	Final completion payload
get_inbox	Pull pending tasks
ack_inbox	Acknowledge receipt

Hub-side (used by Dashboard, Claude Code, peer agents)

Tool	Description
send_task	Dispatch a task (supports ttl_seconds)
send_message	Send a chat message (no task lifecycle)
send_reply	Reply to a task (replied / failed / cancelled, plus in_reply_to)
send_ack	Acknowledge without inbox
retry_task	Retry failed / expired / cancelled tasks
cancel_task	Cancel a pending task
reassign_task	Move a task to a different agent
get_task	Fetch task details (used by peer-coordination polling)
get_all_status	Global presence panel
get_session_status	Per-session detail
broadcast	Group send
list_tasks	Task list, filterable by network_id
get_completions	Completion history

The table above lists the 17 collaboration-core tools. Node lifecycle / provider ops tools ship on the same MCP surface — the authoritative full list is docs-site/docs/api/mcp-tools.md. Don't read the count above as "17 tools total".

REST API

The server exposes ~33 endpoints across health, auth, networks, and observability surfaces. The endpoints in use today by the verified flow are:

Method	Endpoint	Notes
GET	/health	No auth
POST	/mcp	MCP entry
POST	/api/auth/register	Bootstrap admin
POST	/api/auth/login	Returns user token
GET	/api/auth/me	Current user
PUT	/api/auth/me	Edit profile
POST	/api/auth/password	Change password
GET / POST / DELETE	/api/auth/tokens[…]	Manage API tokens
GET	/api/status	Sessions snapshot
GET	/api/tasks	Task list (Dashboard)
GET	/api/messages	Message list (Dashboard)
GET	/api/nodes	Node directory
GET	/api/stats	Aggregate stats
GET	/api/audit-log	Audit trail

Network-management endpoints (/api/networks…) are present and used by the current CLI. /api/license[…] is present as an experimental legacy trial/pro-license surface.

Auth: Authorization: Bearer <token> header, or ?token=<token> query.

SQLite schema

Auto-created on first run.…