Frameworks · agent framework
mcp-agent: review, pricing, security and alternatives
mcp-agent is an open-source agent framework published by LastMile AI, in the frameworks family. mcp-agent is a Python framework for building agents that use MCP servers and composable patterns for agent workflows. Its repository has 8,570 stars and its last commit is from January 25, 2026.
| Adoption (stars) | 23/40 | |
|---|---|---|
| Activity (commits, releases) | 5/30 | |
| Framework (licence, control, models) | 15/30 |
What mcp-agent does
mcp-agent belongs to the frameworks family: libraries for building your own agents in code: loop, tools, memory, orchestration. On our grid it ranks #27 of the 28 projects of this family listed in the directory.
Unlike a ready-made agent, a framework provides the parts to build one: tool calling, step sequencing, memory, coordination of several agents. It is aimed at teams that want a custom agent.
You use it from: developer SDK. Usable models: Claude (Anthropic) and GPT (OpenAI). It can run on your own machine or server.
Who is mcp-agent for?
It is for developers building their own agent or adding agentic AI to a product. Typical tasks people give it:
- build a business agent wired to your APIs
- orchestrate tool and model calls
- add memory and error recovery to an agent
It is a good candidate if your data must stay on your machines.
Access and human control
A framework has no access of its own: the tools you plug in define what the agent can do. Start with read-only tools.
We could not establish whether it asks for human approval before sensitive actions: test it first on an unimportant account or folder.
mcp-agent pricing
The code is free, under the Apache-2.0 licence.
Getting started with mcp-agent
- Install it: the project ships as a Python package (install with
piporuv). The exact command is in the repository README. - Create an API key with the model provider and put it in an environment variable, never in a shared or versioned file.
- Start with the minimal example from the docs, then add one tool at a time and check what the agent does with it.
- Give it a short, checkable task, review the result and its action log, then raise the difficulty step by step.
Security: risk level
A framework does not protect you by default: approval, minimal rights and sandboxing are up to you.
Three habits: least privilege (minimal rights, dedicated keys), human approval for irreversible actions, a sandbox for code execution. The AI agent security check reviews your setup in a few minutes.
Project activity and releases
Created on December 18, 2024, the lastmile-ai/mcp-agent repository has 8,570 stars, 893 forks and 76 open issues, with 767 commits in total. Last change 9 months ago.
Over the last 52 weeks: 44 commits, an average of 0.8 per week.
9 releases in total; 0 in the last twelve months. Latest release: v0.0.21, on May 9, 2025.
mcp-agent vs other frameworks
GitHub stars of the best-rated open-source projects in the frameworks family. Stars measure attention, not quality: a heavily promoted project collects them fast, a specialised tool will have few.
mcp-agent and other frameworks at a glance
The 7 best-ranked agents in the same family, 7 of them open source. The score out of 100 only applies to open-source projects; for proprietary services we show the published entry price. A dash marks information the documentation does not state.
| Agent | Model | Score | Stars or entry price | Self-hostable | Human approval |
|---|---|---|---|---|---|
| mcp-agent | open source | 43 | 8.6K ★ | yes | – |
| LangChain | open source | 93 | 148.4K ★ | yes | – |
| LangGraph | open source | 87 | 43.8K ★ | yes | – |
| Haystack | open source | 84 | 26.8K ★ | yes | – |
| DSPy | open source | 83 | 38.8K ★ | yes | – |
| Agent Development Kit | open source | 83 | 22K ★ | yes | – |
| Pydantic AI | open source | 83 | 20.8K ★ | yes | – |
| Semantic Kernel | open source | 82 | 28.7K ★ | yes | – |
How we rated it
Score: 43/100, computed only from public, verifiable data, with no subjective testing or partnership:
- Adoption 23/40: 8,570 stars on a log scale (40 points from about 200,000).
- Activity 5/30: last commit 9 months ago, 0 releases in six months, 44 commits in a year.
- Framework 15/30: licence, default human approval, self-hosting, model choice and documentation site.
The score does not say whether the agent will succeed at your tasks: it measures how solid the project is. The full grid is on the method page.
Verdict
mcp-agent is a project to watch: compare it with the alternatives before adopting it.
Strengths
- Can run on your side: data under control
- Permissive licence (Apache-2.0)
Limitations
- No commit for 9 months
- Requires programming skills
Avoid if…
- You want a ready-made agent, without code
Alternatives
- LangChain148.4K ★
- LangGraph43.8K ★
- Haystack26.8K ★
- DSPy38.8K ★
- Agent Development Kit22K ★
- Pydantic AI20.8K ★
Learn more
Frequently asked questions
Is mcp-agent free?
The software is free (Apache-2.0 licence). You still pay for the model calls, unless you use a local model.
Is mcp-agent safe?
Our risk level: low. Give it minimum rights and approve irreversible actions.
Which models does mcp-agent use?
According to its documentation: Claude (Anthropic) and GPT (OpenAI).
Can mcp-agent be installed on your own server?
Yes, from the lastmile-ai/mcp-agent repository. Data then stays with you, but security and updates are your job.
What are the alternatives to mcp-agent?
In the same family: LangChain, LangGraph, Haystack, and DSPy.
mcp-agent or LangChain: what is the difference?
Both belong to the frameworks family. Mcp-agent has 8.6K stars against 148.4K for LangChain. The right choice mostly depends on the access you are willing to give it.
Related articles
- Open source or proprietary AI agent: how to decideOctober 25, 2026
- AI agent vs. chatbot: what's the difference?October 24, 2026
- Autonomous AI agents: how much should you let them do?October 12, 2026
- AI agent memory: how agents remember (and forget)October 11, 2026
Neutrality. No affiliate links. No vendor pays to be reviewed, rated or ranked. Reviews are directed by François Chollet, neutral and factual, and every data point is dated and sourced. How we score