
MCP Task Orchestrator
If you're wiring up multi-agent workflows and tired of agents skipping steps because a prompt wasn't emphatic enough, this enforces work discipline at the server layer. It gives agents 14 MCP tools to create dependency graphs, advance work items through quality gates, and attach structured notes. The key move is that advance_item actually blocks the call if required documentation is missing or dependencies aren't satisfied, so you're not relying on the LLM to be diligent. Actor attribution tracks which agent made which change across sessions, auditing mode requires identity claims on every write, and get_context returns full state without replaying conversation history. Schemas live in YAML config, notes can reference evaluation skills, and traits let you compose cross-cutting requirements like security reviews without duplicating definitions.
- GitHub stars
- 214
- tool
- 1
- transport
- STDIO
- env vars
- 24
- last updated
- Nov 11, 2026
Tools
1 toolsPublic tool metadata for what this MCP can expose to an agent.
orchestrateGerente de Proyectos y Enjambres — /api/orchestrate endpoint. Fee: $0.20 USDC via x402.1 params
Gerente de Proyectos y Enjambres — /api/orchestrate endpoint. Fee: $0.20 USDC via x402.
payloadstringSponsors
Configuration
DATABASE_PATHSQLite database file path (default: data/current-tasks.db)
AGENT_CONFIG_DIRDirectory containing .taskorchestrator/config.yaml for workflow schemas (default: working dir)
MCP_TRANSPORTTransport mode: stdio (default) or http
MCP_HTTP_PORTHTTP port when using http transport (default: 3001)
MCP_SESSION_IDLE_TIMEOUT_MINUTESMinutes without a request before an HTTP MCP session is closed; the client re-initializes on its next call (default: 120)
LOG_LEVELLogging level: DEBUG, INFO, WARN, ERROR (default: INFO)
LOG_FILEOptional log file path. Unset (default) disables file logging; logs are always JSON on stderr.
API_ALLOW_QUERY_TOKEN_FOR_SSEAllow ?token= auth for SSE (browser EventSource workaround) (default: false)
API_ALLOW_UNAUTHENTICATEDConfirm flag required alongside API_AUTH_MODE=none (default: false)
API_AUTH_MODEREST API auth mode: bearer, jwks, or none (with API_ALLOW_UNAUTHENTICATED=true). Required when API_ENABLED=true
API_ENABLEDMaster REST API switch; set true to register /api/v1/* routes (default: false)
API_JWKS_ALGORITHMSComma-separated JWT algorithm allowlist for jwks mode (e.g. RS256,EdDSA)
API_JWKS_ALLOW_INSECURE_URLLoopback-only opt-in to fetch API_JWKS_URL over plaintext http (default: false)
API_JWKS_AUDIENCEExpected aud claim value in JWTs (jwks mode)
API_JWKS_CACHE_TTL_SECONDSJWKS key cache TTL in seconds (default: 300)
API_JWKS_ISSUERExpected iss claim value in JWTs (jwks mode)
API_JWKS_MAX_STALE_SECONDSOldest a cached key set may be and still be served after a failed refresh (default: max(3600, TTL))
API_JWKS_MAX_TOKEN_LIFETIME_SECONDSMaximum accepted token lifetime in seconds (default: 86400)
API_JWKS_URLJWKS endpoint URL (jwks mode); must be https and resolve to public addresses
API_REDACT_NOTE_ATTRIBUTIONRedact actor/verification on notes for non-admin callers (default: true)
API_SSE_AUTH_CHECK_INTERVAL_SECONDSInterval for token-expiry checks on open SSE connections (default: 30)
API_SSE_BUFFER_SIZELast-Event-ID replay window in event ids (default: 1000; 0 = no replay)
API_TOKENS_PATHPath to the bearer token YAML secret file (default: /run/secrets/api-tokens.yaml)
CORS_ALLOWED_HEADERSComma-separated CORS request headers allowlist
Readme
MCP Task Orchestrator
Server-enforced workflow discipline for AI agents.
Prompt-based frameworks hope the LLM follows instructions. This one blocks the call if it doesn't.
Details
- Repository
- github.com/jpicklyk/task-orchestrator
- Categories
- Automation & Workflows, Productivity & Office
- Package
ghcr.io/jpicklyk/task-orchestrator:4.0.2- Transport
- STDIO
- Registry
- MCP registry, active