Install
$ agentstack add mcp-xoniks-mcp-server-manager ✓ scanned · ✓ verified — works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
About
MCP Server Manager
Current version: 0.1.0
MCP Server Manager is a local desktop dashboard for managing MCP servers across multiple AI clients. It helps you discover servers, run health checks, review risk, and control lifecycle actions from one place.
App Screenshot
What You Can Do
- See all discovered servers across Claude Desktop, Cursor, and Codex in one table.
- Run Run Health Check to collect runtime diagnostics and failure explanations.
- Add a new server with Name, Client, Command, and Args.
- Review capabilities and risk in a confirmation modal before install (Review & Install -> Approve & Install).
- Use row actions for each server: Details, Enable/Disable, Rescan, and Remove.
- Filter by security posture using summary cards: Total Servers, High Risk, Network Enabled, Full Filesystem, and Policy Violations.
- Open Server Details tabs to inspect Overview, Environment, Health, and Policies.
- Convert discovered external servers to managed control when supported.
Typical Workflow
- Open the app and click Run Health Check.
- Click a summary card to focus on risky or non-compliant servers.
- Open Details on a server to inspect health and policy findings.
- Add or update servers using the form and approval flow.
- Use Disable, Rescan, or Remove for lifecycle operations.
Supported Platforms
- macOS
- Windows
- Linux
Supported AI Clients
- Claude Desktop
- Cursor
- OpenAI Codex (stdio servers)
Local Setup
Prerequisites
- Node.js and npm (
npm ciis used for reproducible installs). - Rust toolchain (
rustup,cargo) with Rust1.77.2or newer. - Tauri system dependencies for your OS:
- macOS: Xcode Command Line Tools.
- Windows: Microsoft C++ Build Tools and WebView2 runtime.
- Linux (Debian/Ubuntu):
sudo apt-get install -y pkg-config libglib2.0-dev libgtk-3-dev libwebkit2gtk-4.1-dev- Release bundling also uses
libayatana-appindicator3-dev librsvg2-dev patchelf.
Install
npm ci
Start the App (Dev)
npm run tauri dev
Build and Release Artifacts
Build frontend assets:
npm run build
Build native desktop bundles:
npm run tauri build
Beta Release Flow (GitHub)
- Beta prerelease tag example:
v0.1.1-beta.1 - Stable release tag example:
v0.1.1 - Pushing a beta/rc tag creates a GitHub prerelease automatically.
- Pushing a stable tag creates a normal GitHub release automatically.
Next Integrations (Post-Beta)
- Add frontend unit/integration tests (Vitest + React Testing Library).
- Add desktop E2E smoke tests for install/enable/disable/remove flows.
- Enable release signing and updater metadata once key management is finalized.
- Publish SBOM and artifact provenance for release bundles.
- Add optional telemetry/crash reporting with explicit user opt-in.
Technical Notes
- Canonical state is stored in
~/.mcp-manager/manifest.json. - Client config files are generated outputs derived from manifest state.
- Bootstrap/reset import flows are supported for reconciliation.
- Stack: Rust + Tauri backend, React + Vite frontend.
Known Limitations
- Bootstrap-imported external servers are analyzed automatically, but confidence is lower for unknown/external command styles.
- External-to-managed conversion reinstall currently supports Node package-based MCP servers (
@modelcontextprotocol/server-*) only. - Codex remote URL server entries are discovered but intentionally skipped by manager import/sync flows (stdio-only management today).
- Approval tokens validate preview-to-install integrity but do not provide identity-backed authorization.
- Sandbox enforcement is soft and can be bypassed; if a sandbox shim is missing/invalid, diagnostics fail and sandboxed sync skips that server until shim integrity is restored.
- Policy violations are computed at read time and are not persisted in manifest.
License
MIT. See [LICENSE](./LICENSE).
Source & license
This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: xoniks
- Source: xoniks/mcp-server-manager
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet — be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.