mcp-devtools

An MCP (Model Context Protocol) server that exposes developer tools — file I/O, search, shell execution, task tracking, and web fetching — to LLM agents over HTTP.

Overview

mcp-devtools wraps common developer operations as MCP tools, letting LLM agents (Claude, etc.) perform real work in a controlled environment. It runs as a FastAPI/FastMCP HTTP server and ships with security guardrails to prevent destructive or sensitive operations.

Tools exposed

Tool	Description
read	Read file contents
write	Write files
edit	Targeted string replacement in files
glob	File pattern matching
grep	Regex search across files
bash	Execute shell commands (guardrailed)
web_fetch	Fetch URLs (SSRF-protected)
todo_write	Manage task lists

Security guardrails

The server enforces guardrails at the tool layer — no configuration required:

• Path protection — blocks writes to system paths (/etc, /bin, /System, etc.)
• Sensitive file blocking — refuses access to .env, SSH keys, TLS certs, cloud credentials, etc.
• Bash command blocking — blocks destructive commands (rm -rf /, fork bombs, sudo, disk overwrites, curl-pipe-to-shell, etc.)
• SSRF protection — web_fetch blocks requests to private IP ranges and cloud metadata endpoints

Installation

Requires Python 3.13+ and uv.

git clone https://github.com/mredvard/mcp-devtools.git
cd mcp-devtools
uv sync

Running locally

uv run uvicorn devtools.app:app --host 0.0.0.0 --port 8000

The MCP endpoint is available at http://localhost:8000/llm (streamable HTTP transport).

Health check: GET /health
Tool discovery: GET /llm/meta/tools

Running with Docker

docker build -t mcp-devtools .
docker run -p 8000:8000 mcp-devtools

Kubernetes deployment

Manifests for a sandboxed Kubernetes deployment are in k8s/llm-sandbox/. See k8s/llm-sandbox/README.md for deployment instructions.

cd k8s/llm-sandbox
bash deploy.sh

Development

uv sync --group dev
uv run pytest

Project structure

src/devtools/
├── app.py          # FastAPI app with MCP mount
├── server.py       # FastMCP instance and tool registration
├── guardrails.py   # Security validation (paths, bash, SSRF)
└── tools/          # Individual tool implementations
k8s/llm-sandbox/    # Kubernetes manifests

License

MIT