Install
$ agentstack add mcp-kwonye-mcpx ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
mcpx
mcpx is a local MCP gateway. Install upstream MCP servers once, authorize them once, and expose them to multiple AI clients — all managed from a native desktop app (macOS + Linux + Windows) or CLI.
Platforms
- macOS — Desktop app (menubar tray) + CLI
- Linux — Desktop app (system tray) + CLI
- Windows — Desktop app (system tray) + CLI
- CLI only: Any platform with Node.js/Bun
Desktop App
The mcpx desktop app is the easiest way to manage your MCP servers. It runs in your system tray with a full dashboard for server discovery, configuration, and monitoring.
- Menubar tray — Gateway status, quick server list, and one-click dashboard access from the menu bar
- Dashboard — Start/stop the gateway daemon, view connected servers, and add new ones with a paste-and-go command input
- Browse Registry — Discover and one-click install servers from the official MCP Registry
- Projects — Organize servers into project-specific groups
- Skills — Create and manage shared MCP skill definitions
- Settings — Configure auto-start, launch-at-login, and auto-updates
Download
Download the latest release from GitHub Releases.
Install from source
Prerequisites: Bun >= 1.2
macOS:
git clone https://github.com/kwonye/mcpx.git
cd mcpx/app
bun install
bun run desktop-install
This builds and installs the app to /Applications/mcpx.app.
For development with DevTools:
bun run desktop-install:dev
Linux:
git clone https://github.com/kwonye/mcpx.git
cd mcpx/app
bun install
bun run build
bunx electron-builder build --linux
This produces an AppImage and .deb in app/dist/.
Windows:
git clone https://github.com/kwonye/mcpx.git
cd mcpx/app
bun install
bun run build
bunx electron-builder build --win
This produces an NSIS installer and portable .exe in app/dist/.
Quick Tour
Menubar tray & popover — The tray icon shows gateway status (green = running, red = stopped). Click it to open a quick-status popover:
- Start / Stop the gateway daemon
- See active server count at a glance
- Add Your First Server — Paste any
mcpx addcommand directly into the popover - Open Dashboard — Jump to the full management window
My Servers tab — The main view for managing your MCP servers:
- See all configured upstream servers and their connection status
- Start/stop the gateway daemon
- Add servers by pasting an
mcpx addcommand (e.g.mcpx add vercel https://mcp.vercel.com/mcp)
Browse Registry tab — Discover and install MCP servers from the official registry:
- Browse curated MCP servers
- One-click install
Projects tab — Organize servers into project groups:
Skills tab — Manage shared skill definitions:
Settings tab — App configuration:
CLI
The mcpx CLI is also available as a standalone npm package for terminal workflows and CI.
Install
npm install -g @kwonye/mcpx@latest
# or
bun add -g @kwonye/mcpx@latest
Quick Start
Add servers with CLI (recommended)
mcpx add vercel https://mcp.vercel.com/mcp
mcpx add next-devtools npx next-devtools-mcp@latest
mcpx add and mcpx remove auto-sync by default. Run mcpx sync when you want a manual re-sync or to target specific clients.
Client-native compatibility shims
# Claude Code
mcpx claude mcp add vercel https://mcp.vercel.com/mcp
# Codex
mcpx codex mcp add next-devtools --env FOO=bar -- npx next-devtools-mcp@latest
# VS Code
mcpx code --add-mcp '{"name":"vercel","url":"https://mcp.vercel.com/mcp"}'
Add servers manually in JSON config
Edit ~/.config/mcpx/config.json and add entries under servers:
{
"servers": {
"vercel": {
"transport": "http",
"url": "https://mcp.vercel.com/mcp",
"headers": {
"Authorization": "secret://vercel_auth_header"
}
},
"next-devtools": {
"transport": "stdio",
"command": "npx",
"args": ["next-devtools-mcp@latest"],
"env": { "FOO": "bar" },
"cwd": "/path/to/project"
}
}
}
After manual edits, run mcpx sync to propagate changes.
What it does
- Stores upstream servers in a central config (
~/.config/mcpx/config.json) - Stores upstream auth in one consolidated secure store (AES-256-GCM encrypted file) so each MCP auth flow is done once and reused across all synced clients
- Runs a local MCP gateway daemon (
http://127.0.0.1:/mcp) - Syncs managed gateway entries into supported clients:
- Claude / Claude Code
- Codex
- Cursor
- Cline
- OpenCode
- Kiro
- VS Code / VS Code Insiders
- Qwen CLI
- OpenClaw
- Hermes
- Gives each upstream a top-level client entry (
/vercel,/next-devtools, etc.) while routing through one local daemon - Uses local gateway-token auth for client → gateway (
x-mcpx-local-token) - Supports encrypted-file backed secret references for upstream headers (AES-256-GCM, no Keychain)
- Passes upstream OAuth challenges through to compatible clients
- Proxies OAuth well-known metadata endpoints in single-upstream mode
Advanced CLI Usage
Auth and secrets
mcpx secret set vercel_auth_header --value "Bearer "
mcpx secret ls
mcpx secret rm vercel_auth_header
mcpx auth set vercel --header Authorization --value "Bearer "
mcpx auth set next-devtools --env NEXT_DEVTOOLS_TOKEN --value ""
mcpx auth show
mcpx auth rm vercel --header Authorization --delete-secret
mcpx auth rotate-local-token
Daemon lifecycle
mcpx daemon start
mcpx daemon status
mcpx daemon logs
mcpx daemon stop
Targeted sync
mcpx sync
mcpx sync claude
mcpx sync --client claude --client codex
Config/data/state path overrides
MCPX_CONFIG_HOMEMCPX_DATA_HOMEMCPX_STATE_HOME
Troubleshooting
mcpx doctor
mcpx status
mcpx daemon logs
mcpx sync --json
mcpx status opens an interactive MCP inventory menu in TTY sessions showing each configured upstream, which clients have it synced, and actions (configure auth, re-authenticate, clear auth, reconnect, disable).
Build and test from source
CLI
cd cli
bun install
bun run build
bun test
Desktop app
cd app
bun install
bun run dev # Start Electron dev server
bun run build # Build for production
bun run test # Run unit tests
bun run e2e # Run Playwright E2E tests
Architecture
This is a monorepo containing:
cli/— ThemcpxCLI and core library (@kwonye/mcpx)app/— The desktop app (Electron + React) for macOS, Linux, and Windows
The desktop app imports the CLI's core logic directly via a @mcpx/core TypeScript alias, so both packages share identical configuration parsing, sync logic, and secret management.
Notes
- Client connectivity is HTTP-first; upstreams can be HTTP or stdio
- Secrets are stored in an encrypted file (
secrets.json+secrets.keyin the data directory) using AES-256-GCM via Node's built-incrypto. No native dependencies, no Keychain prompts. MCPX_SECRET_env var overrides work on all platforms for CI/headless
Source & license
This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: kwonye
- Source: kwonye/mcpx
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.