Executor
Connect any agent to everything.
Executor is an open-source integration layer for AI agents. Configure every integration once (MCP servers, OpenAPI specs, GraphQL APIs) with authentication and per-tool policies, then use that one catalog from any MCP-compatible agent.
Website · Documentation · Discord
https://github.com/user-attachments/assets/11225f83-e848-42ba-99b2-a993bcc88dad
Why Executor
Every agent you use (Claude Code, Cursor, ChatGPT, and the rest) needs its own copy of every integration: the same API keys pasted in three places, the same MCP servers wired up again, no shared idea of what each tool is allowed to do.
Executor is the layer in between. Add a tool once, give it credentials once, set its policy once, and every agent shares it over MCP. Your integrations, auth, and policies live in one place instead of being scattered across each client.
- Any integration. First-party support for MCP servers, OpenAPI, GraphQL, and
Google Discovery. If you can describe it with a JSON schema, it can be an integration. The plugin system is open to any integration type.
- One catalog, every agent. Anything MCP-compatible connects to the same
set of tools.
- Governed by policy. Each tool is allowed, gated behind approval, or
blocked, with sensible defaults derived from the spec.
- Run it your way. Local CLI, a desktop app, hosted Executor Cloud, or
self-hosted on Docker or Cloudflare. Same functionality, different packaging.
How it works
- Add an integration: an MCP server, an OpenAPI spec, or a GraphQL API.
- Create a connection: one configured (optionally authenticated) instance