Back to Home
bug-ops icon

mcp-execution

Verified Safe

by bug-ops

Overview

Transforms any Model Context Protocol (MCP) server into executable, type-safe TypeScript tools for AI agents, enabling progressive loading and achieving significant token savings.

Installation

Run Command
mcp-execution

Environment Variables

  • GITHUB_TOKEN
  • GITHUB_PERSONAL_ACCESS_TOKEN
  • MCPBRIDGE_DEBUG

Security Notes

The Rust codebase demonstrates robust security practices, including explicit checks against path traversal (e.g., '..'), command injection (forbidden characters in commands/environment variables), and denial-of-service (DoS) protection (file size/count limits). It avoids `unsafe` Rust code. The TypeScript runtime bridge executes user-configured external commands via `child_process.spawn`. While this introduces an inherent risk if the user's `~/.claude/mcp.json` configuration is malicious, the project properly sanitizes parameters passed to these configured commands by JSON stringifying them. It is safe assuming trusted user configuration.

Similar Servers

Stats

Interest Score50
Security Score9
Cost ClassLow
Avg Tokens1000
Stars29
Forks1
Last Update2026-01-19

Tags

MCPCode ExecutionProgressive LoadingTypeScriptAI AgentsToken SavingsCode Generation