Install
$ agentstack add mcp-kevinbonnoron-native-mcp Open-source listing, not yet scanned by AgentStack. Follow the source repository for install instructions.
Security review
⚠ Flagged1 finding(s); flagged for manual review. · v0.1.0 How review works →
- • Prompt-injection patterns
- • Secret / credential exfiltration
- • Dangerous shell & filesystem operations
- • Untrusted network calls
- • Known-malicious package signatures
- high Pipes remote content directly into a shell (remote code execution).
What it can access
- ● Network access Used
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
native-mcp
[](https://github.com/KevinBonnoron/native-mcp/actions/workflows/release.yml) [](https://kevinbonnoron.github.io/native-mcp/) [](https://github.com/KevinBonnoron/native-mcp/releases) [](LICENSE) [](https://go.dev)
> One binary. Every MCP. A suite of Model Context Protocol servers packaged as a single static Go binary — no Node, no Python, no uv. Drop-in for any MCP-aware client.
The official MCP ecosystem ships some servers as npm packages, others through uvx/PyPI. That fragmentation costs every consumer: slow startup, 30–60 MB per process, and two language runtimes to install just to run a handful of tools. native-mcp collapses the suite into one ~3 MB statically-linked binary that dispatches by subcommand and speaks strict JSON-RPC 2.0 over stdio.
native-mcp time
native-mcp filesystem /tmp /home/user/docs # coming soon
native-mcp fetch # coming soon
Every subcommand is fully MCP-conformant, so the same binary plugs into Claude Code, Claude Desktop, Cursor, Continue, Cline, Zed, the official MCP Inspector — anything that speaks the protocol.
Install
# Linux / macOS
curl -fsSL https://raw.githubusercontent.com/KevinBonnoron/native-mcp/main/install.sh | sh
# Windows (PowerShell)
irm https://raw.githubusercontent.com/KevinBonnoron/native-mcp/main/install.ps1 | iex
The installer downloads the right binary, verifies its SHA-256 checksum, and offers to register every bundled server in any MCP client it auto-detects. See the install guide for flags and env vars.
Servers
| Subcommand | Status | Tools | | --- | --- | --- | | time | ✅ shipped | current_time, convert_time | | filesystem | ✅ shipped | read_file, write_file, list_directory, create_directory, move_file, delete_file, delete_directory, get_file_info, list_allowed_paths | | fetch | ✅ shipped | fetch_url, list_allowed_domains | | calculator | ✅ shipped | evaluate | | sqlite | ✅ shipped | query, execute, schema, list_tables | | shell | ✅ shipped | run, list_allowed_commands (strict --allow allowlist, no shell expansion) | | git | ✅ shipped | status, log, diff, show, branch, add, commit | | json | ✅ shipped | query, merge, validate | | crypto | ✅ shipped | uuid, hash, random_bytes | | encode | ✅ shipped | base64_*, base32_*, hex_*, url_* (encode/decode) | | text | ✅ shipped | slug, regex_match, regex_replace, diff, markdown_extract, html_extract | | system | ✅ shipped | info, network_interfaces, meminfo, disk_usage, uptime, env | | dns | ✅ shipped | lookup (A/AAAA/MX/TXT/CNAME/NS/PTR) | | archive | ✅ shipped | create_zip, extract_zip, create_tar, extract_tar, list_allowed_paths | | scheduler | ✅ shipped | validate, next_run, previous_run | | clipboard | ✅ shipped | read, write |
Each server defines its own permissions via CLI flags (e.g. native-mcp filesystem /tmp /home/user/docs is a sandbox of those two paths). No implicit access, no surprises.
Documentation
Full docs at ****:
- Install — one-liner, env vars, manual download, build from source
- Server reference — flags, tool schemas, examples per server
- Use with Claude Code / Claude Desktop / Cursor / any MCP client
- Debug with MCP Inspector
Develop
The repo ships a [Nix flake](flake.nix) that provisions Go, the LSP/linter/debugger toolchain, Node 20 (for the docs), and a few utilities. Everything lives in the dev shell — nothing leaks into your global env.
If you use direnv, the [.envrc](.envrc) takes care of it:
direnv allow
Without direnv, drop into the shell manually:
nix develop
Either way, you get:
go # 1.22+
gopls # LSP
gotools # goimports, etc.
go-tools # staticcheck
golangci-lint # linting
delve # debugger
gofumpt # stricter gofmt
nodejs_20 # for the VitePress docs
git
GOPATH and GOCACHE are pinned inside the repo (.gocache/, .gopath/, gitignored) so the dev shell doesn't pollute ~/go.
Common tasks
# Build the binary
go build -o native-mcp ./cmd/native-mcp
# Run all tests
go test ./...
# Smoke-test the time server end-to-end
echo '{"jsonrpc":"2.0","id":1,"method":"tools/list"}' | ./native-mcp time
# Live-reload docs at http://localhost:5173/native-mcp/
cd docs && npm install && npm run dev
Release flow
Pushing to main triggers [.github/workflows/release.yml](.github/workflows/release.yml): tests run, then a matrix builds binaries for linux/{amd64,arm64}, darwin/{amd64,arm64}, windows/amd64, generates checksums.txt, and rolls the latest GitHub release. The installer's releases/latest/download/... URLs point at the most recent build automatically.
Pushing to main with changes under [docs/](docs/) also triggers [.github/workflows/docs.yml](.github/workflows/docs.yml), which builds and deploys the VitePress site to GitHub Pages.
License
[MIT](LICENSE).
Source & license
This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: KevinBonnoron
- Source: KevinBonnoron/native-mcp
- License: MIT
- Homepage: https://kevinbonnoron.github.io/native-mcp/
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.