About MCP
MCP is an MCP server published by pkgxdev in the Other category: can your ai run anything? yes it can.
The repository has 23 stars and 4 forks, with the last commit 7 months ago. Six months or more without a commit doesn't mean the server is broken, but check the open issues before depending on it in production.
Install
git clone https://github.com/pkgxdev/mcpThis server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.
Ask AI
Ask AI about MCP
Powered by Claude · Grounded in docs
Security checks
Static checks derived from the repository yesterday. Heuristics on the source, not an audit.
- ✓README presentThe repository ships documentation.
- !License declaredNo license file. Legally you have no right to use it in a product.
- !Tests presentNo tests found. Behaviour changes may go unnoticed between versions.
- ✓Dependencies pinnedA lockfile pins dependency versions.
- !No dynamic code executionSource scan found eval or shell execution. Review how tool inputs reach it before granting credentials.
1 check has not been run yet.
README
pkgx MCP
A Model Context Protocol server that can run any Open Source tool via
pkgx.
Usage
- Install
pkgx(or not, we download it for you if you don’t) git clone https://github.com/pkgxdev/pkgx-mcp- Consume in an MCP client (see below for configuration examples)
Cursor/Claude Configuation
~/.cursor/mcp.json:~/Library/Application Support/Claude/claude_desktop_config.json
{
"mcpServers": {
"pkgx": {
"command": "/path/to/pkgx-mcp/main.ts"
}
}
}
Or without pkgx, but with npx:
{
"mcpServers": {
"pkgx": {
"command": "npx",
"args": ["ts-node", "/path/to/pkgx-mcp/main.ts"]
}
}
}
MCP Inspector
npx @modelcontextprotocol/inspector ts-node ./main.ts
Suggested Prompts
Use pkgx to run a series of git commands and generate statistics about this
repository.
Security
Security? Hah.
But seriously, this is a dangerous tool. You are letting AI read any file on
your computer†. We have the decency to run pkgx in a sandbox so at least a
rogue AI can’t run rm -rf /. But we have not restricted reads because that
seemed too limiting.
We need the MCP protocol to advance to allow the user to be prompted with UI to approve certain things that the AI cannot by itself do or something like that.
In the meantime USE WITH ABSURD AMOUNTS OF CAUTION.
† well, on macOS at least we prevent reads to
~/.sshand~/.aws, PRs welcome to exclude more and add Linux sandboxing.
[!IMPORTANT]
The AI cannot write to your file system.
On macOS anyway. On Linux we need you to PR that for us.
README fetched from the repository yesterday. The original is authoritative.