{ "run_id": "langflow-ai--langflow-claude-haiku-5-5-1792784516336969478", "date": "2026-10-23T20:04:23.742352+00:00", "repo": "langflow-ai/langflow", "kind": "mcp", "source": "https://github.com/langflow-ai/langflow", "commit": "aeb10d96bb2ea797696613af931e91ddf51f3320", "model": "claude-haiku-5-5", "model_version": "claude-haiku-5-5", "test_version": "readme-bdc1b9b3c0d2673aef87e076d14084a8123ddcf09d520c1ee2e364a37c3f4bb9", "pass": true, "outcome": "pass", "time_to_working_s": 1244.9420047010062, "total_s": 1347.4053637981415, "steps": [ "cd && pwd && ls -la && git -C . rev-parse --is-inside-work-tree 2>&1; python3 --version; id -u; cat /etc/os-release | head -3; ls /inputs 2>&1; ls 2>&1", "cd && cat README.md | head -150", "which uv; uv --version 2>&1; which pip3 python3.12; grep -m1 '^version' ; head -60 ; ls ", "curl -LsSf https://astral.sh/uv/install.sh | sh 2>&1 | tail -5; export PATH=\"$HOME/.local/bin:$PATH\"; uv --version", "export PATH=\"$HOME/.local/bin:$PATH\"; mkdir -p /tmp/lf-fresh && cd /tmp/lf-fresh && uv venv /tmp/lf-venv --python 3.12 2>&1 | tail -3 && VIRTUAL_ENV=/tmp/lf-venv uv pip install langflow -U 2>&1 | tail -8; ls /tmp/lf-venv/bin | grep -i langflow", "cd /tmp/lf-fresh && /tmp/lf-venv/bin/langflow --version; /tmp/lf-venv/bin/langflow run --help 2>&1 | head -60; grep -rn -i \"telemetry\\|DO_NOT_TRACK\" 2>/dev/null | head -5; grep -rln \"DO_NOT_TRACK\" 2>/dev/null | head -3", "cd && grep -n \"DO_NOT_TRACK\\|TELEMETRY\" src/backend/base/langflow/services/telemetry/service.py | head; grep -rn \"LANGFLOW_SUPERUSER_PASSWORD\\|AUTO_LOGIN\" src/backend/base/langflow/services/settings/base.py | head -6", "mkdir -p /tmp/lf-logs && cd /tmp/lf-fresh && export DO_NOT_TRACK=true LANGFLOW_SUPERUSER=langflow LANGFLOW_SUPERUSER_PASSWORD='LfTest-2026-pass' && nohup /tmp/lf-venv/bin/langflow run > /tmp/lf-logs/server.log 2>&1 &\nsleep 60; curl -s -o /dev/null -w \"%{http_code}\\n\" http://127.0.0.1:7860/health; curl -s http://127.0.0.1:7860/health_check; echo; tail -5 /tmp/lf-logs/server.log", "cd /tmp && /tmp/lf-venv/bin/langflow --help 2>/dev/null | grep -v \"^$\" | head -30; curl -s -X POST http://127.0.0.1:7860/api/v1/login -H 'Content-Type: application/x-www-form-urlencoded' -d 'username=langflow&password=' | head -c 400; echo", "cd /tmp && TOKEN= -s -X POST http://127.0.0.1:7860/api/v1/login -H 'Content-Type: application/x-www-form-urlencoded' -d 'username=langflow&password=' | python3 -c 'import sys,json;print(json.load(sys.stdin)[\"access_token\"])') && echo \"$TOKEN\" > /tmp/lf-logs/token && curl -s -X POST http://127.0.0.1:7860/api/v1/flows/ -H \"Authorization: \" -H 'Content-Type: application/json' -d '{\"name\":\"coldpass-probe-flow\",\"description\":\"probe\",\"data\":{\"nodes\":[],\"edges\":[]}}' | head -c 600; echo", "cd /tmp && TOKEN= /tmp/lf-logs/token); FID=b32ad26a-87aa-4e06-8879-41fa27021e75; curl -s http://127.0.0.1:7860/api/v1/flows/$FID -H \"Authorization: \" | python3 -c 'import sys,json;d=json.load(sys.stdin);print(d[\"id\"],d[\"name\"],d[\"description\"])'; grep -A5 \"\\[project.scripts\\]\" ; grep -rn \"langflow mcp\\|mcp-server\\|mcp_server\" --include=*.md* -l | head -5", "cd && grep -n \"stdio\\|mcp-proxy\\|uvx\\|command\\|streamable\\|/api/v1/mcp\" docs/docs/Agents/mcp-server.mdx | head -40; grep -n \"langflow_mcp\\|\\[project.scripts\\]\" -A4 pyproject.toml | head -20", "cd /tmp && TOKEN= /tmp/lf-logs/token); FOLDER=cc3bdc6e-d539-490a-a3d9-cafbe628b89c; curl -s \"http://127.0.0.1:7860/api/v1/mcp/project/$FOLDER\" -H \"Authorization: \" | head -c 800; echo; echo ---; curl -s -X PATCH \"http://127.0.0.1:7860/api/v1/flows/b32ad26a-87aa-4e06-8879-41fa27021e75\" -H \"Authorization: \" -H 'Content-Type: application/json' -d '{\"mcp_enabled\":true,\"action_name\":\"coldpass_probe\",\"action_description\":\"coldpass probe flow\"}' | head -c 300; echo", "cd /tmp && TOKEN= /tmp/lf-logs/token); FOLDER=cc3bdc6e-d539-490a-a3d9-cafbe628b89c; curl -s \"http://127.0.0.1:7860/api/v1/mcp/project/$FOLDER\" -H \"Authorization: \" | head -c 800; echo; curl -s -X POST \"http://127.0.0.1:7860/api/v1/mcp/project/$FOLDER/streamable\" -H \"Authorization: \" -H 'Content-Type: application/json' -H 'Accept: application/json, text/event-stream' -d '{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"initialize\",\"params\":{\"protocolVersion\":\"2025-03-26\",\"capabilities\":{},\"clientInfo\":{\"name\":\"probe\",\"version\":\"0\"}}}' | head -c 400; echo", "cd /tmp && TOKEN= /tmp/lf-logs/token); curl -s -X POST http://127.0.0.1:7860/api/v1/api_key/ -H \"Authorization: \" -H 'Content-Type: application/json' -d '{\"name\":\"coldpass-probe\"}' > /tmp/lf-logs/apikey.json; python3 -c 'import json;d=json.load(open(\"/tmp/lf-logs/apikey.json\"));print(list(d.keys()))'", "cd && ls src/backend/base/langflow/initial_setup/starter_projects/ 2>/dev/null; grep -n \"Hello\\|hello\" -i src/backend/base/langflow/initial_setup/starter_projects/*.json 2>/dev/null | head -3", "mkdir -p /tmp/lf-logs/scripts && cat > /tmp/lf-logs/scripts/mcp_call.py <<'EOF'\nimport asyncio, json, sys\nfrom mcp import ClientSession\nfrom mcp.client.streamable_http import streamablehttp_client\nURL = \"http://127.0.0.1:7860/api/v1/mcp/project/cc3bdc6e-d539-490a-a3d9-cafbe628b89c/streamable\"\nKEY = json.load(open(\"/tmp/lf-logs/apikey.json\"))[\"api_key\"]\nasync def main():\n async with streamablehttp_client(URL, headers={\"x-api-key\": \n async with ClientSession(r, w) as s:\n await s.initialize()\n tools = await s.list_tools()\n print(\"TOOLS\", [t.name for t in tools.tools])\n res = await s.call_tool(\"coldpass_probe\", {\"input_value\": \"hello coldpass\"})\n print(\"RESULT\", res.model_dump_json()[:800])\nasyncio.run(main())\nEOF\ncd /tmp/lf-logs && timeout 120 /tmp/lf-venv/bin/python -I scripts/mcp_call.py 2>&1 | tail -20", "cd /tmp/lf-logs && TOKEN= token); curl -s http://127.0.0.1:7860/api/v1/all -H \"Authorization: \" -o all.json; ls -la all.json; python3 -I -c '\nimport json\nd=json.load(open(\"/tmp/lf-logs/all.json\"))\nprint(list(d.keys())[:20])\nfor cat,comps in d.items():\n if isinstance(comps,dict) and \"ChatInput\" in comps:\n c=comps[\"ChatInput\"]; print(cat, list(c.keys())[:20]); print(c.get(\"display_name\"), c.get(\"outputs\") and [o[\"name\"] for o in c[\"outputs\"]]); break\n'", "cd /tmp/lf-logs && TOKEN= token) && python3 -I - <<'EOF'\nimport json, copy, urllib.request\nall_ = json.load(open(\"/tmp/lf-logs/all.json\"))\ncomp = all_[\"input_output\"][\"ChatInput\"]\nnode = copy.deepcopy(comp)\nnid = \"ChatInput-coldp1\"\nnode[\"template\"][\"input_value\"][\"value\"] = \"hello coldpass\"\ndata = {\"nodes\":[{\"id\":nid,\"type\":\"genericNode\",\"position\":{\"x\":100,\"y\":100},\n \"data\":{\"id\":nid,\"type\":\"ChatInput\",\"node\":node}}],\"edges\":[]}\nbody = json.dumps({\"data\": data}).encode()\nreq = urllib.request.Request(\"http://127.0.0.1:7860/api/v1/flows/b32ad26a-87aa-4e06-8879-41fa27021e75\", data=body, method=\"PATCH\",\n headers={\"Authorization\":\"\"+open(\"/tmp/lf-logs/token\").read().strip(),\"Content-Type\":\"application/json\"})\nr = urllib.request.urlopen(req).read().decode()\nprint(r[:200])\nEOF\ntimeout 150 /tmp/lf-venv/bin/python -I scripts/mcp_call.py 2>&1 | tail -20", "cd /tmp/lf-logs && TOKEN= token); curl -s -X POST \"http://127.0.0.1:7860/api/v1/run/b32ad26a-87aa-4e06-8879-41fa27021e75?stream=false\" -H \"Authorization: \" -H 'Content-Type: application/json' -d '{\"input_value\":\"hello coldpass\",\"input_type\":\"chat\",\"output_type\":\"chat\"}' | head -c 1200; echo; echo ---; grep -i \"error\\|exception\" /tmp/lf-logs/server.log | tail -5 | cut -c1-400", "cd /tmp/lf-logs && KEY=$(python3 -I -c 'import json;print(json.load(open(\"/tmp/lf-logs/apikey.json\"))[\"api_key\"])'); curl -s -X POST \"http://127.0.0.1:7860/api/v1/run/b32ad26a-87aa-4e06-8879-41fa27021e75?stream=false\" -H \"x-api-key: \" -H 'Content-Type: application/json' -d '{\"input_value\":\"hello coldpass\",\"input_type\":\"chat\",\"output_type\":\"chat\"}' | head -c 1500; echo", "cd && python3 -I -c '\nimport json\nd=json.load(open(\"Basic Prompting.json\"))\ne=d[\"data\"][\"edges\"][0]\nprint(json.dumps(e,indent=1)[:1500])\n'", "cd /tmp/lf-logs && python3 -I - <<'EOF'\nimport json, copy, urllib.request\nall_ = json.load(open(\"/tmp/lf-logs/all.json\"))\ndef node_for(name, nid, value=None):\n node = copy.deepcopy(all_[\"input_output\"][name])\n if value is not None:\n node[\"template\"][\"input_value\"][\"value\"] = value\n return {\"id\":nid,\"type\":\"genericNode\",\"position\":{\"x\":100,\"y\":100},\"data\":{\"id\":nid,\"type\":name,\"node\":node}}\nci, co = \"ChatInput-coldp1\", \"ChatOutput-coldp2\"\nnodes = [node_for(\"ChatInput\", ci, \"hello coldpass\"), node_for(\"ChatOutput\", co)]\nQ = lambda s: s.replace('\"', \"\u0153\")\nsrc = {\"dataType\":\"ChatInput\",\"id\":ci,\"name\":\"message\",\"output_types\":[\"Message\"]}\ntgt = {\"fieldName\":\"input_value\",\"id\":co,\"inputTypes\":[\"Message\"],\"type\":\"str\"}\nedge = {\"animated\":False,\"className\":\"\",\"data\":{\"sourceHandle\":src,\"targetHandle\":tgt},\n \"id\":\"reactflow__edge-\"+ci+Q(json.dumps(src,separators=(\",\",\":\")))+\"-\"+co+Q(json.dumps(tgt,separators=(\",\",\":\"))),\n \"selected\":False,\"source\":ci,\"sourceHandle\":Q(json.dumps(src,separators=(\", \",\": \"))),\"target\":co,\"targetHandle\":Q(json.dumps(tgt,separators=(\", \",\": \")))}\ndata = {\"nodes\":nodes,\"edges\":[edge]}\nreq = urllib.request.Request(\"http://127.0.0.1:7860/api/v1/flows/b32ad26a-87aa-4e06-8879-41fa27021e75\", data=json.dumps({\"data\":data}).encode(), method=\"PATCH\",\n headers={\"Authorization\":\"\"+open(\"/tmp/lf-logs/token\").read().strip(),\"Content-Type\":\"application/json\"})\nprint(urllib.request.urlopen(req).status)\nEOF\nKEY=$(python3 -I -c 'import json;print(json.load(open(\"/tmp/lf-logs/apikey.json\"))[\"api_key\"])'); curl -s -X POST \"http://127.0.0.1:7860/api/v1/run/b32ad26a-87aa-4e06-8879-41fa27021e75?stream=false\" -H \"x-api-key: \" -H 'Content-Type: application/json' -d '{\"input_value\":\"hello coldpass\",\"input_type\":\"chat\",\"output_type\":\"chat\"}' | head -c 1500; echo", "cd /tmp/lf-logs && timeout 150 /tmp/lf-venv/bin/python -I scripts/mcp_call.py 2>&1 | tail -5 | cut -c1-700", "cd && grep -rln \"apscheduler\\|crontab\\|cron_trigger\\|CronTrigger\\|--once\\|--now\" src/backend/base/langflow --include=*.py | head -8; grep -n \"listeners\" -A6 src/backend/base/langflow/cli/*.py 2>/dev/null | head -20; grep -n \"^test\\|^unit_tests\\|^test_\" Makefile | head", "cd && grep -rln \"def listeners\\|listener\" src/backend/base/langflow --include=*.py | head -8; grep -rn \"def listeners\" -A12 src/backend/base/langflow --include=*.py | head -30; /tmp/lf-venv/bin/langflow listeners --help 2>/dev/null | tail -20 | cut -c1-120", "cd && grep -c \"Deploy as an MCP server\\*\\* and turn your flows into tools for MCP clients.\" README.md && mkdir -p .coldpass && python3 -I - <<'EOF'\nimport json\nkey = json.load(open(\"/tmp/lf-logs/apikey.json\"))[\"api_key\"]\nW = \"\"\nPROJ = \"cc3bdc6e-d539-490a-a3d9-cafbe628b89c\"\nURL = f\"http://127.0.0.1:7860/api/v1/mcp/project/{PROJ}/streamable\"\nARGV = [\"/tmp/lf-venv/bin/langflow\", \"run\"]\nENV = {\"DO_NOT_TRACK\": \"true\", \"LANGFLOW_SUPERUSER\": \"langflow\", \"LANGFLOW_SUPERUSER_PASSWORD\": \"LfTest-2026-pass\"}\nARGS = {\"input_value\": \"hello coldpass\"}\nprobe = {\"kind\": \"mcp_http\", \"argv\": ARGV, \"cwd\": W, \"url\": URL, \"env\": ENV,\n \"headers\": {\"x-api-key\": \"tool\": \"coldpass_probe\", \"arguments\": ARGS,\n \"expected_text\": \"hello coldpass\"}\nclaim = {\"kind\": \"claim\", \"claim\": \"Langflow flows are exposed as MCP tools that an MCP client can call\",\n \"source\": \"**Deploy as an MCP server** and turn your flows into tools for MCP clients.\",\n \"input\": \"input_value=hello coldpass\", \"expected\": \"tool result echoes the input text\",\n \"probe_kind\": \"mcp_http\", \"argv\": ARGV, \"cwd\": W, \"url\": URL, \"env\": ENV,\n \"headers\": {\"x-api-key\": \"tool\": \"coldpass_probe\", \"arguments\": ARGS,\n \"expected_text\": \"hello coldpass\"}\nexamples = [{\"kind\": \"example\", \"claim\": \"Install Langflow locally from PyPI (README Quickstart)\",\n \"source\": \"README.md Quickstart > Install locally\",\n \"reason\": \"Not run as an example; the install step was executed directly: uv pip install langflow -U in a fresh venv (/tmp/lf-venv, Python 3.12.3). No documented example command in the README was runnable as a finite example.\"}]\ncycles = {\"detected\": False,\n \"reason\": \"Entry points inspected: no cron, scheduler, --once or --now in src/backend/base/langflow; the only long-running loop is 'langflow listeners', which holds external provider connections (Slack Socket Mode, Microsoft Graph polling, Gmail Pub/Sub) and needs real provider credentials, so it was not exercised. The product webhook endpoints need external callers.\",\n \"checks\": []}\njson.dump(probe, open(W+\"/.coldpass/probe.json\",\"w\"), indent=2)\njson.dump([claim], open(W+\"/.coldpass/claims.json\",\"w\"), indent=2)\njson.dump(examples, open(W+\"/.coldpass/examples.json\",\"w\"), indent=2)\njson.dump(cycles, open(W+\"/.coldpass/cycles.json\",\"w\"), indent=2)\nprint(\"written\")\nEOF\nls -la .coldpass; pkill -f \"langflow run\" ; sleep 3; curl -s -o /dev/null -w \"%{http_code}\\n\" http://127.0.0.1:7860/health || echo \"port free\"", "cd && grep -nF \"Deploy as an MCP server** and turn your flows into tools for MCP clients.\" README.md; echo \"rc=$?\"; ls -la .coldpass", "ps -eo pid,args | grep \"[l]angflow\" | cut -c1-150; for p in $(ps -eo pid,args | grep \"[/]tmp/lf-venv/bin/langflow run\" | awk '{print $1}'); do kill $p; done; sleep 5; curl -s -o /dev/null -w \"%{http_code}\\n\" http://127.0.0.1:7860/health_check || echo \"port 7860 free\"", "cd && = timeout 900 python3 -I --validate --replay 2>&1 | tail -60 | cut -c1-600", "cd && = timeout 900 python3 -I --validate --replay > /tmp/lf-logs/validate.json 2>/tmp/lf-logs/validate.err; echo rc=$?; python3 -I -c '\nimport json\nd=json.load(open(\"/tmp/lf-logs/validate.json\"))\nprint(\"valid\", d.get(\"valid\"), \"problems\", d.get(\"problems\"))\nr=d.get(\"replay\",{})\nprint(\"replay status\", r.get(\"status\"))\nfor k,v in r.get(\"details\",{}).items():\n if k in (\"claims\",\"examples\",\"cycles\",\"checks\"): print(k, json.dumps(v)[:500])\nprint(sorted(d.keys()))\n'; tail -3 /tmp/lf-logs/validate.err; ps -eo pid,args | grep \"[/]tmp/lf-venv/bin/langflow\" | head -2", "python3 -I -c '\nimport json\nd=json.load(open(\"/tmp/lf-logs/validate.json\"))\nr=d[\"replay\"]; print(sorted(r.keys())); det=r.get(\"details\",{}); print(sorted(det.keys()))\nfor k in det:\n if isinstance(det[k],(list,dict)) and k not in (\"tool_result\",): print(k, json.dumps(det[k])[:300])\n'", "python3 -I -c '\nimport json\nr=json.load(open(\"/tmp/lf-logs/validate.json\"))[\"replay\"]\nfor k in (\"claims\",\"cycle_checks\",\"example_checks\",\"evidence_strength\"):\n print(k, json.dumps(r.get(k))[:600])\n'", "mkdir -p && python3 -I - <<'EOF'\nimport json\nreport = {\n \"outcome\": \"working\",\n \"fault_owner\": None,\n \"operation\": \"Install Langflow 1.13.0 from PyPI per the README Quickstart, start the server, create a flow via the REST API, expose it as an MCP tool, and call that tool over streamable HTTP; the tool returned 'hello coldpass'.\",\n \"operation_scope\": \"Local Linux guest (Ubuntu 24.04, Python 3.12.3, uv 0.13.5), no browser, no external providers. Auth: \",\n \"steps\": [\n \"curl -LsSf https://astral.sh/uv/install.sh | sh\",\n \"uv venv /tmp/lf-venv --python 3.12 (run from fresh dir /tmp/lf-fresh)\",\n \"uv pip install langflow -U (README: 'uv pip install langflow -U', run in a fresh directory)\",\n \"langflow run (README: 'uv run langflow run'; started as /tmp/lf-venv/bin/langflow run with DO_NOT_TRACK=true and LANGFLOW_SUPERUSER_PASSWORD set)\",\n \"POST /api/v1/login, POST /api/v1/flows/, PATCH /api/v1/flows/{id} (mcp_enabled=true), POST /api/v1/api_key/\",\n \"POST /api/v1/run/{flow_id} echoed 'hello coldpass' through ChatInput->ChatOutput\",\n \"MCP streamable HTTP initialize, tools/list (coldpass_probe), tools/call -> 'hello coldpass'\",\n \"python3 -I --validate --replay -> valid, replay PASS\"\n ],\n \"deviations\": [\n \"uv was not preinstalled; installed with the official uv install.sh (curl|sh) into ~/.local.\",\n \"README 'uv run langflow run' was not used from the checkout; the PyPI package was installed in a venv per the README install step and run via the absolute path /tmp/lf-venv/bin/langflow run. The checkout source (also version 1.13.0) was not built or run.\",\n \"Release packages disable auto login, so LANGFLOW_SUPERUSER_PASSWORD was set to a throwaway local value in the guest.\",\n \"The project MCP endpoint rejected the Bearer JWT and required an x-api-key header, so the probe passes x-api-key instead of Authorization.\",\n \"The empty flow returned no MCP content; a ChatInput node built from the product's own component catalog (/api/v1/all) and an edge to a ChatOutput node were added before the tool call returned text.\",\n \"The README has no runnable example or test command for the quickstart; the example entry is recorded with reason. The Makefile unit test suite was not run.\",\n \"The checker path /inputs/coldpass-preflight.py does not exist in this guest; the checker at was used instead.\",\n \"Git init/fetch was not performed; the workspace is not a git repository and the checker ran without it.\",\n \"A broad pkill matched my own shell command once; the server was then stopped by PID and port 7860 confirmed free before replay.\"\n ],\n \"stuck_step\": None,\n \"main_blocker\": None,\n \"plain_failure\": None,\n \"suggested_fix\": \"None for the tested path. Optional: the checkout's own source run path (make run_cli / uv run langflow run from the repo) was not exercised.\"\n}\njson.dump(report, open(\"\",\"w\"), indent=2)\nprint(\"ok\")\nEOF\n= timeout 900 python3 -I --validate --replay > /tmp/lf-logs/validate2.json 2>&1; echo rc=$?; python3 -I -c 'import json;d=json.load(open(\"/tmp/lf-logs/validate2.json\"));print(d[\"valid\"],d[\"problems\"],d[\"replay\"][\"status\"])' 2>/dev/null || tail -c 600 /tmp/lf-logs/validate2.json; ps -eo pid,args | grep \"[/]tmp/lf-venv/bin/langflow\" | wc -l", "ps -eo pid,ppid,etime,args | grep \"[/]tmp/lf-venv/bin/langflow\" | cut -c1-160; curl -s -o /dev/null -w \"7860:%{http_code}\\n\" http://127.0.0.1:7860/health_check", "cd && ls -la .coldpass && ls report.json 2>&1 | head -1; python3 -I -c 'import json;[json.load(open(\"\"+f)) for f in [\"report.json\",\"probe.json\",\"claims.json\",\"examples.json\",\"cycles.json\"]];print(\"all JSON parse\")'" ], "stuck_step": null, "error_excerpt": null, "what_it_did": "Install Langflow 1.13.0 from PyPI per the README Quickstart, start the server, create a flow via the REST API, expose it as an MCP tool, and call that tool over streamable HTTP; the tool returned 'hello coldpass'.", "suggested_fix": null, "tokens_in": 1159865, "tokens_out": 25337, "cost_usd": 0.03411259, "usage_complete": true, "checks": [ { "check": "operation", "status": "PASS", "details": { "working": true, "kind": "mcp_http", "url": "http://127.0.0.1:7860/api/v1/mcp/project/cc3bdc6e-d539-490a-a3d9-cafbe628b89c/streamable", "hosting": "local", "transport": "streamable-http", "scope": "remote hosted MCP initialize + tools/list", "argv": [ "/tmp/lf-venv/bin/langflow", "run" ], "serverInfo": { "name": "langflow-mcp-project-cc3bdc6e-d539-490a-a3d9-cafbe628b89c", "version": "1.30.0" }, "protocolVersion": "2025-06-18", "tools": [ "coldpass_probe" ], "tool_schema_bytes": 363, "tool_result": { "content": [ { "type": "text", "text": "hello coldpass" } ], "isError": false }, "tool_result_checked": true } } ], "safety": { "version": "z2x-1", "rules_version": "z2x-1", "summary": "Review signals: 1 connection review, 1 encoded blob, 1265 hardcoded secret, 116 known vulnerability. 44 static matches retained as context.", "expected": "Reviewed as expected for a test run: resolver address lookups that send no data.", "findings": [ { "kind": "connection-review", "count": 1, "note": "Repository processes attempted these non-loopback connections; proxies can hide the final hostname.", "location_count": 28, "process_count": 32 }, { "kind": "encoded-blob", "count": 1, "note": "Source contains encoded blob; review its purpose.", "location_count": 1, "path": "src/frontend/src/utils/styleUtils.ts" }, { "kind": "hardcoded-secret", "count": 1265, "note": "Gitleaks found a possible hardcoded secret; value withheld.", "location_count": 68 }, { "kind": "known-vulnerability", "count": 110, "note": "OSV reports a known vulnerability in this dependency version.", "location_count": 29 } ], "context": [ { "kind": "hardcoded-secret", "count": 44, "note": "Gitleaks found a possible hardcoded secret; value withheld.", "location_count": 21 } ], "limitations": [ "A short run cannot establish that code is safe.", "Connections show IP addresses; proxies can hide the final hostname.", "Tracing covers dispatched commands and their children, not the whole OS; guest root can interfere with tracing." ], "static": { "dependency_note": "OSV scanned supported lockfiles; unpinned dependencies and unsupported formats are outside this check." }, "evidence_url": "/safety/?run=langflow-ai--langflow-claude-haiku-5-5-1792784516336969478", "evidence_file": "/data/safety/langflow-ai--langflow-claude-haiku-5-5-1792784516336969478.json.gz" }, "agent_execution": "native_agent", "agent_runtime": "claude-code", "agent_runtime_version": "2.1.300 (Claude Code)", "tool_transport": "mcp-assigned-vm", "platform": "linux", "reasoning": "low", "service_tier": null, "resources": { "cpus": 2, "memory_mib": 4096, "disk_mib": 32768 }, "native_tool_calls": 36, "native_bundle": null, "architecture": null, "backend": "hyperv", "platform_details": { "backend": "hyperv", "os": "linux" }, "platform_conflicts": null, "sandbox_source": null, "source_pin": { "commit": "aeb10d96bb2ea797696613af931e91ddf51f3320", "url": "https://github.com/langflow-ai/langflow" }, "purpose": "initial", "profile": { "model": "claude-haiku-5-5", "reasoning": "low" }, "fault": { "owner": null, "status": "resolved", "reason": null }, "fix_id": null, "verifies_run_id": null, "hosting": "local", "operation_scope": "remote hosted MCP initialize + tools/list", "tool_calls": 36, "guest_setup": null, "runtime": null, "runtime_version": null, "runtime_revision": null, "source_revision": null, "evidence_version": null, "failure_origin": null, "evidence_strength": "readme_checked", "works": "yes", "install_s": null, "first_use_s": null, "mcp": "local", "needs": [], "needs_which": null, "agent_interface": [ "mcp" ], "license": "MIT", "repo_url": "https://github.com/langflow-ai/langflow", "cost_to_try": "free", "hardware": null, "what_failed": null, "local_or_hosted": "local", "cycle_checks": [ { "kind": "cycle", "claim": "Scheduled or looping main behavior", "source": "repository entry points", "input": "source inspection", "expected": "identify the product trigger", "verdict": "yes", "outcome": "Entry points inspected: no cron, scheduler, --once or --now in src/backend/base/langflow; the only long-running loop is 'langflow listeners', which holds external provider connections (Slack Socket Mode, Microsoft Graph polling, Gmail Pub/Sub) and needs real provider credentials, so it was not exercised. The product webhook endpoints need external callers.", "evidence": "Entry points inspected: no cron, scheduler, --once or --now in src/backend/base/langflow; the only long-running loop is 'langflow listeners', which holds external provider connections (Slack Socket Mode, Microsoft Graph polling, Gmail Pub/Sub) and needs real provider credentials, so it was not exercised. The product webhook endpoints need external callers.", "command": "" } ], "claims": [ { "kind": "claim", "claim": "Langflow flows are exposed as MCP tools that an MCP client can call", "source": "**Deploy as an MCP server** and turn your flows into tools for MCP clients.", "input": "{\"tool\": \"coldpass_probe\", \"arguments\": {\"input_value\": \"hello coldpass\"}}", "expected": "tool result echoes the input text", "command": "/tmp/lf-venv/bin/langflow run tools/call {\"tool\": \"coldpass_probe\", \"arguments\": {\"input_value\": \"hello coldpass\"}}", "verdict": "yes", "outcome": "Real input produced the expected result: hello coldpass", "evidence": "hello coldpass\"}], \"isError\": false}", "source_checked": true, "source_file": "README.md" } ], "claims_note": null, "example_checks": [ { "kind": "example", "claim": "Install Langflow locally from PyPI (README Quickstart)", "source": "README.md Quickstart > Install locally", "input": "", "command": "", "evidence": "Not run as an example; the install step was executed directly: uv pip install langflow -U in a fresh venv (/tmp/lf-venv, Python 3.12.3). No documented example command in the README was runnable as a finite example.", "deferred": false, "expected": "documented command completes successfully", "verdict": "blocked", "outcome": "Not run as an example; the install step was executed directly: uv pip install langflow -U in a fresh venv (/tmp/lf-venv, Python 3.12.3). No documented example command in the README was runnable as a finite example." } ], "does_what_it_says": "yes", "maintenance": { "archived": false, "commits_90d": 1033, "last_commit_at": "2026-10-22T20:37:39Z", "last_release_at": "2026-10-22T21:20:30Z", "median_reply_hours": 15.8, "merged_prs_90d": 904, "note": "actively maintained: last commit 0 days ago; 1033 commits and 904 merged PRs in 90 days; 206 open issues, 1015 open PRs; 5 of 11 recent threads got a maintainer reply, median first reply 15.8h; latest release 2026-10-22", "open_issues": 206, "open_prs": 1015, "reply_share": 0.45, "reply_threads": 11, "verdict": "maintained" }, "maintenance_verdict": "maintained", "maintenance_note": "actively maintained: last commit 0 days ago; 1033 commits and 904 merged PRs in 90 days; 206 open issues, 1015 open PRs; 5 of 11 recent threads got a maintainer reply, median first reply 15.8h; latest release 2026-10-22", "maintained": "active", "maintained_note": "last commit 0 days ago; 1 open issues, 2 answered or closed", "last_commit_at": "2026-10-23T19:18:10Z", "last_release_at": "2026-10-22T21:20:30Z", "open_issues": 1, "answered_issues": 2, "platforms_claimed": [ "mac", "windows" ], "topic": "mcp-server", "agent_interfaces": [ { "interface": "mcp", "evidence": "independent checker", "observed": true, "operation_checked": true } ], "agent_interfaces_note": "README metadata is a discovery hint, not pinned documentation proof. Observed interfaces were exercised in this run. An empty list means unknown.", "mcp_context": { "tool_count": 1, "schema_bytes": 363, "tokens_approx": 91, "estimate_method": "ceil(compact UTF-8 tools/list JSON bytes / 4)", "scope": "returned tools/list page only; excludes client framing and tool results" }, "tested_at": "2026-10-23T20:04:23.742352+00:00", "tested_commit": "aeb10d96bb2ea797696613af931e91ddf51f3320", "tested_with": { "agent": "claude-code", "agent_version": "2.1.300 (Claude Code)", "model": "claude-haiku-5-5", "model_route": "claude-haiku-5-5", "reasoning": "low", "os": "linux", "backend": "hyperv", "transport": "mcp-assigned-vm" }, "setup_identity": { "repo": "langflow-ai/langflow", "source": "https://github.com/langflow-ai/langflow", "commit": "aeb10d96bb2ea797696613af931e91ddf51f3320", "source_revision": null, "os": "linux", "architecture": null, "backend": "hyperv", "model": "claude-haiku-5-5", "model_version": "claude-haiku-5-5", "agent_execution": "native_agent", "agent_runtime": "claude-code", "agent_runtime_version": "2.1.300 (Claude Code)", "tool_transport": "mcp-assigned-vm", "runtime": null, "runtime_version": null, "runtime_revision": null, "sandbox_source": null, "guest_setup": null, "source_pin": { "commit": "aeb10d96bb2ea797696613af931e91ddf51f3320", "url": "https://github.com/langflow-ai/langflow" }, "platform_details": { "os": "linux", "backend": "hyperv" }, "platform_conflicts": null, "reasoning": "low", "service_tier": null, "resources": { "cpus": 2, "memory_mib": 4096, "disk_mib": 32768 }, "operation": "Install Langflow 1.13.0 from PyPI per the README Quickstart, start the server, create a flow via the REST API, expose it as an MCP tool, and call that tool over streamable HTTP; the tool returned 'hello coldpass'.", "operation_scope": "remote hosted MCP initialize + tools/list", "hosting": "local", "kind": "mcp", "test_version": "readme-bdc1b9b3c0d2673aef87e076d14084a8123ddcf09d520c1ee2e364a37c3f4bb9", "evidence_version": null }, "other_model": null, "other_run_id": null, "models_agree": null, "furthest_model": null, "transcript_url": null, "report_url": "/reports/langflow-ai--langflow-claude-haiku-5-5-1792784516336969478.json" }