AgentStack
Browse Sign in
Browse Why AgentStack Sell Docs
Sign in
MCP unreviewed MIT Self-run

Native Mcp

mcp-kevinbonnoron-native-mcp · by KevinBonnoron

A suite of MCP (Model Context Protocol) servers packaged as a single static Go binary. Drop-in for Claude Code, Claude Desktop, Cursor, Cline, Zed and any MCP-aware client. No Node, no Python, no uv.

No reviews yet
0 installs
19 views
0.0% view→install

Install

$ agentstack add mcp-kevinbonnoron-native-mcp

Open-source listing, not yet scanned by AgentStack. Follow the source repository for install instructions.

Security review

⚠ Flagged

1 finding(s); flagged for manual review. · v0.1.0 How review works →

  • Prompt-injection patterns
  • Secret / credential exfiltration
  • Dangerous shell & filesystem operations
  • Untrusted network calls
  • Known-malicious package signatures
  • high Pipes remote content directly into a shell (remote code execution).

What it can access

  • Network access Used
  • Filesystem access No
  • Shell / process execution No
  • Environment & secrets No
  • Dynamic code execution No

From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.

View the full security report →

Reliability & compatibility

Not yet reviewed
0 installs to date
no reviews yet
3mo ago

Declared compatibility

Claude CodeClaude DesktopCursorWindsurf

Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.

Preview Execution monitoring

We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.

How agent discovery & health will work →
Are you the author of Native Mcp? Claim this listing to set pricing, connect Stripe payouts, and keep 70% of every sale.
Sign up to claim

About

native-mcp

[](https://github.com/KevinBonnoron/native-mcp/actions/workflows/release.yml) [](https://kevinbonnoron.github.io/native-mcp/) [](https://github.com/KevinBonnoron/native-mcp/releases) [](LICENSE) [](https://go.dev)

> One binary. Every MCP. A suite of Model Context Protocol servers packaged as a single static Go binary — no Node, no Python, no uv. Drop-in for any MCP-aware client.

The official MCP ecosystem ships some servers as npm packages, others through uvx/PyPI. That fragmentation costs every consumer: slow startup, 30–60 MB per process, and two language runtimes to install just to run a handful of tools. native-mcp collapses the suite into one ~3 MB statically-linked binary that dispatches by subcommand and speaks strict JSON-RPC 2.0 over stdio.

native-mcp time
native-mcp filesystem /tmp /home/user/docs   # coming soon
native-mcp fetch                             # coming soon

Every subcommand is fully MCP-conformant, so the same binary plugs into Claude Code, Claude Desktop, Cursor, Continue, Cline, Zed, the official MCP Inspector — anything that speaks the protocol.

Install

# Linux / macOS
curl -fsSL https://raw.githubusercontent.com/KevinBonnoron/native-mcp/main/install.sh | sh

# Windows (PowerShell)
irm https://raw.githubusercontent.com/KevinBonnoron/native-mcp/main/install.ps1 | iex

The installer downloads the right binary, verifies its SHA-256 checksum, and offers to register every bundled server in any MCP client it auto-detects. See the install guide for flags and env vars.

Servers

| Subcommand | Status | Tools | | --- | --- | --- | | time | ✅ shipped | current_time, convert_time | | filesystem | ✅ shipped | read_file, write_file, list_directory, create_directory, move_file, delete_file, delete_directory, get_file_info, list_allowed_paths | | fetch | ✅ shipped | fetch_url, list_allowed_domains | | calculator | ✅ shipped | evaluate | | sqlite | ✅ shipped | query, execute, schema, list_tables | | shell | ✅ shipped | run, list_allowed_commands (strict --allow allowlist, no shell expansion) | | git | ✅ shipped | status, log, diff, show, branch, add, commit | | json | ✅ shipped | query, merge, validate | | crypto | ✅ shipped | uuid, hash, random_bytes | | encode | ✅ shipped | base64_*, base32_*, hex_*, url_* (encode/decode) | | text | ✅ shipped | slug, regex_match, regex_replace, diff, markdown_extract, html_extract | | system | ✅ shipped | info, network_interfaces, meminfo, disk_usage, uptime, env | | dns | ✅ shipped | lookup (A/AAAA/MX/TXT/CNAME/NS/PTR) | | archive | ✅ shipped | create_zip, extract_zip, create_tar, extract_tar, list_allowed_paths | | scheduler | ✅ shipped | validate, next_run, previous_run | | clipboard | ✅ shipped | read, write |

Each server defines its own permissions via CLI flags (e.g. native-mcp filesystem /tmp /home/user/docs is a sandbox of those two paths). No implicit access, no surprises.

Documentation

Full docs at ****:

Develop

The repo ships a [Nix flake](flake.nix) that provisions Go, the LSP/linter/debugger toolchain, Node 20 (for the docs), and a few utilities. Everything lives in the dev shell — nothing leaks into your global env.

If you use direnv, the [.envrc](.envrc) takes care of it:

direnv allow

Without direnv, drop into the shell manually:

nix develop

Either way, you get:

go              # 1.22+
gopls           # LSP
gotools         # goimports, etc.
go-tools        # staticcheck
golangci-lint   # linting
delve           # debugger
gofumpt         # stricter gofmt
nodejs_20       # for the VitePress docs
git

GOPATH and GOCACHE are pinned inside the repo (.gocache/, .gopath/, gitignored) so the dev shell doesn't pollute ~/go.

Common tasks

# Build the binary
go build -o native-mcp ./cmd/native-mcp

# Run all tests
go test ./...

# Smoke-test the time server end-to-end
echo '{"jsonrpc":"2.0","id":1,"method":"tools/list"}' | ./native-mcp time

# Live-reload docs at http://localhost:5173/native-mcp/
cd docs && npm install && npm run dev

Release flow

Pushing to main triggers [.github/workflows/release.yml](.github/workflows/release.yml): tests run, then a matrix builds binaries for linux/{amd64,arm64}, darwin/{amd64,arm64}, windows/amd64, generates checksums.txt, and rolls the latest GitHub release. The installer's releases/latest/download/... URLs point at the most recent build automatically.

Pushing to main with changes under [docs/](docs/) also triggers [.github/workflows/docs.yml](.github/workflows/docs.yml), which builds and deploys the VitePress site to GitHub Pages.

License

[MIT](LICENSE).

Source & license

This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code.

Install and usage instructions live in the source repository linked above.

Reviews

No reviews yet, be the first.

Versions

  • v0.1.0 Imported from the upstream source.