Skip to content
AI Sec Watch

Exposure Registry

Open-source packages that hand work to language models. For each package the registry records the first release that declares an LLM SDK, agent framework or MCP dependency, the authority its dependencies grant (shell, files, browser, network, code execution), and which other packages reach an LLM component through their dependencies.

Source: each package's own registry metadata (PyPI, npm, crates.io and the Go module proxy), read release by release. How this is measured ยท Updated 2026-10-10

Packages tracked
3,985
Declare an LLM dependency
617
Reach one through a dependency
92
LLM packages with host authority
291

Packages first declaring an LLM dependency, by month

Nov 2023: 1212Nov 2023Dec 2023: 23Jan 2024: 22Feb 2024: 3939Mar 2024: 14Apr 2024: 21May 2024: 19Jun 2024: 11Jul 2024: 10Aug 2024: 15Sep 2024: 8Oct 2024: 7Nov 2024: 22Dec 2024: 14Jan 2025: 15Jan 2025Feb 2025: 12Mar 2025: 13Apr 2025: 8May 2025: 8Jun 2025: 16Jul 2025: 5Aug 2025: 2Sep 2025: 9Oct 2025: 9Nov 2025: 10Dec 2025: 7Jan 2026: 27Jan 2026Feb 2026: 6Mar 2026: 8Apr 2026: 10May 2026: 8Jun 2026: 13Jul 2026: 24Aug 2026: 6Sep 2026: 5Oct 2026: 11Oct 2026
Packages first declaring an LLM dependency, per month
MonthItems
Nov 202312
Dec 202323
Jan 202422
Feb 202439
Mar 202414
Apr 202421
May 202419
Jun 202411
Jul 202410
Aug 202415
Sep 20248
Oct 20247
Nov 202422
Dec 202414
Jan 202515
Feb 202512
Mar 202513
Apr 20258
May 20258
Jun 202516
Jul 20255
Aug 20252
Sep 20259
Oct 20259
Nov 202510
Dec 20257
Jan 202627
Feb 20266
Mar 20268
Apr 202610
May 20268
Jun 202613
Jul 202624
Aug 20266
Sep 20265
Oct 20261

Most declared

Packages that declare each component directly.

Authority granted

LLM-integrated packages whose dependencies grant each capability.

95 packages

PackageExposureIntegrated sinceDeclaresAuthorityAdvisories
@copilotkit/mcp-apps-renderernpmDirect2026-09-141.71.2Model Context Protocol SDKMCP tools
browser-harnessPyPIDirect2026-09-030.1.11Model Context Protocol SDKMCP tools
@ag-ui/mcp-middlewarenpmDirect2026-06-010.0.1Model Context Protocol SDKMCP tools
google-antigravityPyPIDirect2026-05-190.1.0Google Gemini SDK, Model Context Protocol SDKMCP tools
fastmcp-slimPyPIDirect2026-05-113.3.0b1Anthropic SDK, Google Gemini SDK, Model Context Protocol SDK, OpenAI SDKMCP tools
n8nnpmDirect2026-04-292.19.1LangChain, Model Context Protocol SDK, Pinecone, Qdrant, Vercel AI SDKCode execution, File system, MCP tools, Shell commands57
jupyter-ai-toolsPyPIDirect2026-04-210.5.0Model Context Protocol SDKMCP tools
@n8n/mcp-browsernpmDirect2026-03-300.1.0-rc1Model Context Protocol SDKBrowser control, MCP tools
@n8n/agentsnpmDirect2026-03-260.1.0Model Context Protocol SDK, Vercel AI SDKOutbound HTTP, MCP tools
nemo-gymPyPIDirect2026-03-110.2.0Anthropic SDK, Model Context Protocol SDK, OpenAI SDKCode execution, Outbound HTTP, MCP tools
ddgsPyPIDirect2026-03-119.11.3Model Context Protocol SDKMCP tools
@stripe/agent-toolkitnpmDirect2026-02-120.9.0Model Context Protocol SDK, Vercel AI SDKMCP tools
pyzoteroPyPIDirect2026-02-061.10.0Model Context Protocol SDKMCP tools
opentelemetry-instrumentation-mcpPyPIDirect2026-01-200.51.0Model Context Protocol SDKMCP tools
@ag-ui/mcp-apps-middlewarenpmDirect2025-12-050.0.1Model Context Protocol SDKMCP tools
openenv-corePyPIDirect2025-11-260.1.1FastMCP, Hugging Face Hub / Transformers, OpenAI SDK, smolagentsOutbound HTTP, MCP tools
@microsoft/agents-a365-toolingnpmDirect2025-11-180.1.0-preview.30Model Context Protocol SDKOutbound HTTP, MCP tools
claude-agent-sdkPyPIDirect2025-09-280.0.23Claude Agent SDKMCP tools
mcp-ui-serverPyPIDirect2025-09-260.1.0Model Context Protocol SDKMCP tools
semgrepPyPIDirect2025-09-181.137.0Model Context Protocol SDKOutbound HTTP, MCP tools
jupyter-server-mcpPyPIDirect2025-09-110.1.0FastMCPMCP tools
bedrock-agentcorePyPIDirect2025-09-050.1.3LangChain, LangGraph, Model Context Protocol SDK, Strands AgentsOutbound HTTP, MCP tools1
lfxPyPIDirect2025-07-290.1.0LangChain, Model Context Protocol SDKFile system, Outbound HTTP, MCP tools2
@brave/brave-search-mcp-servernpmDirect2025-07-161.3.1Model Context Protocol SDKMCP tools
llm-sandboxPyPIDirect2025-06-300.3.14Model Context Protocol SDKCode execution, MCP tools
temporalioPyPIDirect2025-06-201.13.0Google Agent Development Kit, Google Gemini SDK, LangChain, LangGraph, Model Context Protocol SDK, OpenAI Agents SDK, Strands AgentsMCP tools
claude-code-sdkPyPIDirect2025-06-120.0.10Claude Agent SDKMCP tools
verifiersPyPIDirect2025-06-050.1.0Anthropic SDK, Model Context Protocol SDK, OpenAI SDK, OpenAI Agents SDKOutbound HTTP, MCP tools
livekit-agentsPyPIDirect2025-05-291.0.23Model Context Protocol SDK, OpenAI SDKFile system, Outbound HTTP, MCP tools
strands-agentsPyPIDirect2025-05-140.0.1Strands AgentsFile system, Outbound HTTP, MCP tools
trackioPyPIDirect2025-05-140.0.6Hugging Face Hub / Transformers, Model Context Protocol SDKBrowser control, MCP tools
ociPyPIDirect2025-05-132.152.0Model Context Protocol SDKOutbound HTTP, MCP tools
pytidbPyPIDirect2025-03-260.0.2LiteLLM, Model Context Protocol SDKMCP tools
google-adkPyPIDirect2025-03-170.0.1Google Agent Development KitCode execution, File system, Outbound HTTP, MCP tools1
openai-agentsPyPIDirect2025-03-110.0.2OpenAI Agents SDKCode execution, Outbound HTTP, MCP tools
chainlitPyPIDirect2025-03-092.4.0rc0Hugging Face Hub / Transformers, LangChain, LlamaIndex, Model Context Protocol SDK, OpenAI SDK, Semantic KernelFile system, Outbound HTTP, MCP tools2
fastapi-mcpPyPIDirect2025-03-080.1.0Model Context Protocol SDKOutbound HTTP, MCP tools
blaxelPyPIDirect2025-02-180.0.64CrewAI, Google Agent Development Kit, LangChain, LangGraph, LiteLLM, LlamaIndex, Model Context Protocol SDK, OpenAI Agents SDK, Pydantic AIOutbound HTTP, MCP tools
beartypePyPIDirect2025-02-120.20.0rc1FastMCP, LangChainMCP tools
agnoPyPIDirect2025-01-200.0.2Anthropic SDK, Azure AI Inference / Azure OpenAI SDK, Chroma, Claude Agent SDK, Cohere SDK, DSPy, FastMCP, Google Gemini SDK, Groq SDK, Hugging Face Hub / Transformers, LanceDB, LangChain, LangGraph, LiteLLM, Model Context Protocol SDK, Milvus, Mistral AI SDK, Ollama client, OpenAI SDK, pgvector, Pinecone, Qdrant, WeaviateBrowser control, File system, Outbound HTTP, MCP tools
posthogPyPIDirect2025-01-143.8.0Anthropic SDK, Claude Agent SDK, FastMCP, Google Gemini SDK, LangChain, LangGraph, Model Context Protocol SDK, OpenAI Agents SDKOutbound HTTP, MCP tools
ibm-watsonx-aiPyPIDirect2025-01-131.2.1LangChain, LangGraph, Model Context Protocol SDK, MilvusOutbound HTTP, MCP tools
mcpadaptPyPIDirect2025-01-110.0.2CrewAI, Google Gemini SDK, LangChain, LangGraph, LlamaIndex, Model Context Protocol SDK, smolagentsMCP tools
smolagentsPyPIDirect2024-12-270.1.0smolagentsBrowser control, Code execution, Outbound HTTP, MCP tools5
fastmcpnpmDirect2024-12-231.0.0FastMCPMCP tools, Shell commands
supergatewaynpmDirect2024-12-211.0.0Model Context Protocol SDKMCP tools
github.com/mark3labs/mcphostGoDirect2024-12-08v0.1.0Model Context Protocol SDKMCP tools
mcp-simple-arxivPyPIDirect2024-12-070.2.1FastMCPOutbound HTTP, MCP tools
@modelcontextprotocol/server-sequential-thinkingnpmDirect2024-12-030.5.1Model Context Protocol SDKMCP tools
pydantic-ai-examplesPyPIDirect2024-11-250.0.6a1Model Context Protocol SDK, Pydantic AIMCP tools

A package counts as integrated when a release declares one of the dependencies in the published catalog as a runtime or optional (extra) dependency. The integration date is the first such release, found by searching the release history on the assumption that a dependency, once added, is kept. Data: JSON, and the registry tables in each dataset release.