Install
$ agentstack add mcp-ossirytk-toolpilot Open-source listing, not yet scanned by AgentStack. Follow the source repository for install instructions.
Security review
⚠ Flagged1 finding(s); flagged for manual review. · v0.1.0 How review works →
- • Prompt-injection patterns
- • Secret / credential exfiltration
- • Dangerous shell & filesystem operations
- • Untrusted network calls
- • Known-malicious package signatures
- high Pipes remote content directly into a shell (remote code execution).
What it can access
- ● Network access Used
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
toolpilot
High‑performance persistent MCP server for GitHub Copilot CLI and VS Code Copilot.
Available tools
| Tool | Description | |------|-------------| | fs_glob | Deterministic glob expansion with capped output | | fs_tree | Depth-limited directory tree (include_hidden available for dotfiles/dirs) | | text_search | Literal/regex search with line and byte offsets, plus optional glob / file_type filters | | read_file | UTF-8 file reader with optional start_line/end_line and max_bytes cap | | json_select | Explicit field selection and typed filters for JSON files | | yaml_select | Field extraction from YAML/TOML using dot-notation paths (including array indexes like jobs.0.steps) | | file_hash | File checksums for sha256 (default), sha1, and md5 | | git_log | Structured git history with optional diff stat and unified diff output | | server_stats | Request/cache counters including cache entries and eviction counters |
The server runs as a single persistent stdio MCP process, returns structured JSON only, and uses in-process caches for parsed JSON, memory-mapped text files, and compiled regexes.
Installation
Prerequisites
A Rust toolchain is required. Install it via rustup:
Linux / macOS:
curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh
Windows (PowerShell):
Download and run rustup-init.exe from , or install via winget:
winget install Rustlang.Rustup
Option 1 — cargo install from GitHub (recommended)
cargo install --git https://github.com/ossirytk/toolpilot
The binary is placed in ~/.cargo/bin/toolpilot (Linux/macOS) or %USERPROFILE%\.cargo\bin\toolpilot.exe (Windows). Ensure ~/.cargo/bin is on your PATH (rustup adds it automatically).
Option 2 — cargo binstall
If you have cargo-binstall installed:
cargo binstall --git https://github.com/ossirytk/toolpilot toolpilot
Option 3 — Build from source
git clone https://github.com/ossirytk/toolpilot
cd toolpilot
cargo build --release
The binary is written to target/release/toolpilot.
Configuration
After installation, register toolpilot as an MCP server in your editor or CLI.
> Note: Do not use cargo run as the command — the compilation delay causes > the client to time out before the server is ready. Always point to the > compiled binary.
GitHub Copilot CLI
Copy mcp-config.example.json to ~/.copilot/mcp-config.json and set command to the binary path:
{
"mcpServers": {
"toolpilot": {
"type": "stdio",
"command": "toolpilot"
}
}
}
If the binary is not on your PATH, use the absolute path to the compiled binary instead:
Linux / macOS:
{
"mcpServers": {
"toolpilot": {
"type": "stdio",
"command": "/absolute/path/to/toolpilot/target/release/toolpilot"
}
}
}
Windows:
{
"mcpServers": {
"toolpilot": {
"type": "stdio",
"command": "C:\\path\\to\\toolpilot\\target\\release\\toolpilot.exe"
}
}
}
VS Code Copilot
Workspace-level (.vscode/mcp.json)
Add a .vscode/mcp.json file to your workspace:
{
"servers": {
"toolpilot": {
"type": "stdio",
"command": "toolpilot"
}
}
}
User-level (settings.json)
Open Settings → Open User Settings (JSON) and add:
{
"mcp": {
"servers": {
"toolpilot": {
"type": "stdio",
"command": "toolpilot"
}
}
}
}
The settings.json file is located at:
- Linux:
~/.config/Code/User/settings.json - macOS:
~/Library/Application Support/Code/User/settings.json - Windows:
%APPDATA%\Code\User\settings.json
Source & license
This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: ossirytk
- Source: ossirytk/toolpilot
- License: Unlicense
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.