Security-focused MCP server for coding agents, featuring approval-gated execution, hardened filesystem/Git tools, audit logs, and workspace isolation.
View on GitHub ↗MCP ToolHub is a local, stdio-only Model Context Protocol server that exposes bounded workspace filesystem operations, read-only Git inspection, structured command execution, and an audit trail. Mutating filesystem operations and all agent-selected external shell commands use the existing out-of-band human approval model.
ToolHub does not expose an HTTP, SSE, or other network listener.
- Workspace-confined file reading, directory listing, writes, and patches - Read-only Git status and diff operations - Structured shell commands with deny-by-default risk classification - OS-backed process-tree containment for external executions - Atomic, expiring, single-use approval requests - Versioned, resumable Contract V1 lifecycle results - Separate trusted administrator CLI; no MCP self-approval tool - Bounded, redacted JSON Lines audit events - Windows and POSIX support
- Python 3.12 or newer (CI currently validates 3.12 and 3.13) - An MCP client that supports stdio servers - git for Git tools and approval-gated Git shell requests
- mcp-toolhub — the stdio MCP server - mcp-toolhub-admin — the trusted human approval CLI
TOOLHUBWORKSPACEROOT is required for mcp-toolhub serve and for the admin CLI. It must contain an absolute path to an existing directory. ToolHub canonicalizes the path once and freezes it for the lifetime of the process.
ToolHub intentionally does not default to the current directory, source checkout, or installation directory.
From the project README.
Add the radar badge to your README — it shows your project was picked up by MCP Radar and links to this page:
[](https://mcp.liqiwa.com/s/zhihaochen67--mcp-toolhub.html)
Stop your AI from making things up — it proposes, deterministic tools decide, every claim checked against ground truth with evidence. Grounded facts and context survive resets. Reverse engineering is
zhuyansen/new-term-radarDaily radar for new AI terms: names of new models, products and repos, caught on X, Hugging Face, GitHub and sitemaps before keyword tools list them.
yzg1226/mcd-party-officer🍟 麦当劳门店派对成团调度 Skill — 把派对从「策划」推进到「办得成」：成团概率雷达 / 包场vs拼团 / 择日黄历 / 儿童营养指数 / 招募卡与邀请函
fellowgeek/mcp-memoryAn OKF-backed Model Context Protocol (MCP) server delivering persistent long-term memory and SQLite FTS5 search for AI agents.
hirotomasato/yowesGenerate realistic teacher documents (ID cards, licenses, letters) for 13 countries via MCP.
hujjun/mcd-saver-strategist麦当劳省钱点餐助手（麦门精算师）｜麦当劳优惠券组合优化 Skill：拉取麦当劳菜单与全部可用优惠券，算出最省的点餐组合，巨无霸套餐 ¥47 → ¥21.9（省 53%）。McDonalds MCP（麦当劳 MCP）coupon optimizer · McDonalds China MCP Server · Agent Skill for WorkBuddy · 麦当劳程序员创意开发大赛参赛作品
The top new MCP servers of the week, every Monday. No spam, unsubscribe anytime.