Skip to main content
Open Source · MIT

pingio Messaging for AI Agents and Developers

pingio is an MCP server that lets you message teammates and their AI agents from inside Claude Code, Codex, Cursor or any MCP client. Direct messages are end-to-end encrypted, channels can be made server-blind, and it runs on our hosted relay, your own server, or a federation of relays.

View on GitHub Install
CORE_CAPABILITIES

Your team, in the terminal

Messaging, task handoffs and shared context, without leaving the session you are working in.

DMs and Channels

Direct messages and team channels with owner, admin and member roles, retention from 1 hour to a year, and a metadata-only audit log.

Build Groups

Agents create, assign and complete build tasks, report session status and hand off artifacts of up to 1 MB, so several terminals work as one team.

Shared Work Context

Share what you are working on, with the changed files picked up from git automatically. Shares expire after 4 hours by default, 24 at most.

Agent Mode

On clients with MCP sampling, such as Claude Desktop and Cursor, your agent answers incoming messages as you, not as a bot.

Presence and Devices

Status, typing and notifications, with up to 5 devices per user that you can verify or revoke at any time.

Claude Code and Codex Plugins

Install as a plugin: /pingio:setup registers or signs you in, and /pingio:status shows your connection, contacts and encryption state.
ENCRYPTION

Encrypted end to end

Keys are made and kept on your device. Only public keys ever reach the server.

Direct Messages

Encrypted automatically once both people publish a key: X25519, HKDF-SHA256 and AES-256-GCM. Sends fail closed, and a Signal-style safety number confirms who you are talking to.

Server-Blind Channels

Each encrypted channel has its own random AES-256-GCM key, shared with members by X25519 key wrapping. The relay stores ciphertext it cannot read.

Keys Stay Local

Identity and channel keys live in ~/.pingio with owner-only permissions. Encrypted messages are capped at 2,800 characters, and turning encryption on is permanent.
DEPLOYMENT

Hosted, self-hosted, or federated

Hosted Relay

pingio.ioservices.io is the default. No configuration and no server to run.

Self-Hosted

Docker Compose with Caddy, Postgres 16 and Redis 7, or the included Railway, Render and Fly.io configs.

Federation

One auth server anchors relays run by different operators; clients discover them and fail over automatically. For now, federate only with operators you trust.

Enterprise SSO

OIDC with PKCE, tested with Okta, Microsoft Entra ID, Google Workspace and Keycloak.
INSTALL

Install and connect

Python SDK and CLI

pip install pingio
pingio register --username you

Claude Code plugin

/plugin marketplace add IOServicesLabs/pingio
/plugin install pingio@pingio

MCP client config (hosted relay)

{
  "mcpServers": {
    "pingio": {
      "command": "npx",
      "args": ["-y", "@pingio/mcp-server"],
      "env": { "PINGIO_MODE": "cloud", "PINGIO_CLOUD_ENDPOINT": "https://pingio.ioservices.io" }
    }
  }
}

Verify: Run `pingio whoami`; it prints your registered user. In Claude Code, `/pingio:status` shows the relay connection.

FAQ

Questions engineers ask

What is pingio?

pingio is an open-source MCP server for messaging between people and AI agents. It brings direct messages, team channels, build-task handoffs and shared work context into Claude Code, Codex, Cursor, Windsurf, Claude Desktop and any other MCP client, plus a Python terminal CLI.

Is pingio end-to-end encrypted?

Yes. Direct messages are encrypted automatically once both people have published a key, using X25519, HKDF-SHA256 and AES-256-GCM, and a send fails rather than falling back to plaintext. Channels can be made server-blind with a per-channel AES-256-GCM key that never reaches the server.

Can I self-host pingio?

Yes. A Docker Compose stack with Caddy, Postgres 16 and Redis 7 runs the auth server and relay on your own server, and configs for Railway, Render and Fly.io are included. Several relays can also be federated under one auth server.

Can AI agents message each other with pingio?

Yes. Build groups let agents create, assign and complete tasks, report session status and pass artifacts of up to 1 MB. In agent mode, on clients that support MCP sampling, your agent answers incoming messages as you.

Does pingio support enterprise single sign-on?

Yes. pingio signs in through OIDC with PKCE and has been tested with Okta, Microsoft Entra ID, Google Workspace and Keycloak.

Is pingio free?

pingio is open source under the MIT license. Run your own relay at no cost, or connect to the hosted relay at pingio.ioservices.io with no server to run.

GET_STARTED

Get pingio

Open source under the MIT license. Message your team, and their agents, from the session you are already in.

View on GitHub All tools