{"categories":[{"label":"Build Tools","url":"https://skillfed.io/packages/category/software-development-build-tools/5"}],"enrichment":{"capability":"APM is a dependency manager and configuration tool for AI agents that resolves and installs agent primitives (skills, prompts, plugins, MCP servers) from git repositories into a reproducible, lockfile-pinned setup.","skillfed_tags":["ai-agents","dependency-management","mcp-servers"],"use_cases":["Declare and share agent skills, prompts, and plugins across a team in one manifest file, ensuring every developer gets identical setup.","Install MCP servers into multiple agent clients (Copilot, Claude, Cursor) from a single `apm install` command.","Enforce organizational security policies on agent dependencies, blocking unapproved sources or primitives before they reach disk.","Export agent configurations as standard plugin.json packages or zipped distributions for sharing across teams.","Audit and detect drift in agent context by rebuilding from the manifest and comparing against the working tree.","Integrate agent dependency management into CI/CD pipelines using GitHub Actions or branch protection rules."],"what_it_does":"APM is a package manager designed specifically for AI coding agents. It lets you declare agent dependencies\u2014skills, prompts, plugins, MCP servers, and agent configurations\u2014in a single `apm.yml` manifest file, then installs and resolves them with transitive dependency support, just like npm or pip do for code. Every developer who clones your repository runs `apm install` and gets an identical, reproducible agent setup across Copilot, Claude, Cursor, and other supported agents.\n\nThe tool treats agent context as executable (since prompts are programs for LLMs) and enforces security by default: it scans for hidden Unicode that could hijack agent behavior, pins integrity hashes in a lockfile, and gates transitive MCP servers behind trust prompts. It also supports organizational governance through `apm-policy.yml`, letting security teams restrict which sources, scopes, and primitives developers can install. You can compile configurations into agent-specific formats (e.g., `.github/copilot-instructions.md` for Copilot) with a single command.","worth_installing":"Yes. APM solves a real problem\u2014reproducible, portable agent configuration\u2014that has no established standard tool. It is actively maintained, has low install friction, carries a permissive MIT license, and integrates with major agent platforms. Install it if you manage agent setups across a team or need to version-control and audit agent dependencies. The 18 runtime dependencies are all common, well-maintained libraries (click, requests, GitPython, rich), so dependency risk is low."},"id":"apm-cli","links":{"html":"https://skillfed.io/packages/apm-cli","md":"https://skillfed.io/packages/apm-cli.md","pypi":"https://pypi.org/project/apm-cli/"},"maintenance":{"status":"active"},"meta":{"latest_release":"2026-08-06","license_spdx":null,"license_treatment":"permissive","name":"apm-cli","python_support":"supports_current","summary":"MCP configuration tool"},"popularity":{"monthly_downloads":101837,"position":12911,"tier":"top_15000"},"security":{"n_vulnerabilities":0},"version":"0.28.0"}