Back to Home
EstebanForge icon

mcp-cli-ent

Verified Safe

by EstebanForge

Overview

Orchestrates Model Context Protocol (MCP) servers and their tools on-demand for AI agents, without loading tool definitions directly into the agent's context window.

Installation

Run Command
mcp-cli-ent

Environment Variables

  • ENT_CONTEXT7_API_KEY
  • ENT_BRAVE_API_KEY
  • ENT_OPENAI_API_KEY
  • ENT_ANTHROPIC_API_KEY
  • MCP_VERBOSE

Security Notes

The primary security consideration is that mcp-cli-ent's core function is to execute external commands (e.g., 'npx') as defined in user-editable configuration files (`mcp_servers.json`). If this configuration file is compromised or contains malicious command definitions, mcp-cli-ent will execute arbitrary code on the local system. The default `mcp_servers.example.json` utilizes `npx` to fetch and run `@latest` versions of external MCP servers (e.g., `chrome-devtools-mcp@latest`), introducing a supply-chain risk if these upstream npm packages are compromised. However, the Go source code itself does not contain obvious vulnerabilities like 'eval' or direct shell injection when constructing commands via `os/exec.CommandContext`, and environment variable substitution is handled safely with regular expressions. The daemon functionality is designed to run locally (localhost or Unix socket), limiting direct network exposure.

Similar Servers

Stats

Interest Score37
Security Score6
Cost ClassMedium
Avg Tokens1000
Stars6
Forks2
Last Update2026-01-19

Tags

CLI ToolContext GuardianMCP OrchestrationCross-PlatformAI Agent Tooling