mcp-hub

MCP Hub is a client-side application with no backend or server-side code execution, significantly reducing inherent security risks. It stores all user data (saved and custom servers) exclusively in browser localStorage, making it privacy-preserving as no data is sent externally. The application transparently generates configuration snippets for MCP servers, which the user then manually integrates into their Claude Code environment. The 'Security Policy' and 'CONTRIBUTING.md' explicitly highlight that users should verify the source and commands of any MCP server they configure, as MCP Hub itself does not execute these commands. The primary security consideration lies with the external MCP servers users choose to integrate, not the MCP Hub application itself. No 'eval' or similar dangerous patterns are used for arbitrary code execution within the application's core logic.