What's this about?
Geiger runs one read-only command to inventory agents, harnesses, MCP servers, plugins and AI extensions installed on a machine, including what files or systems they can reach. The MIT-licensed repository had 78 stars during collection.
What exactly is “agent inventory”?
It is an asset list for autonomous software: what is present, where it is configured and which permissions it holds. You cannot meaningfully secure agent access if you do not know which agents exist.
What's the community saying?
HN 44 points and 21 comments.
- Enterprise users saw a possible tool for identifying unsanctioned “shadow AI.”
- Security-minded commenters argued local agents should already be isolated from personal files and system drives.
- Users compared it with other agent-observability projects and suggested richer live status displays.
- The read-only approach was welcomed as a low-risk first audit step.