jailbreak-mcp
A MCP server wrapper for using the entire Model Context Protocol without tool limits, missing concepts, or context overload.
Warning
This tool is actively being developed. Watch out! 🐉
Why does this exist?
MCP servers could be ✨ amazing ✨ but using them comes with a few caveats.
Your client is probably missing most of the actual protocol. There are many capabilities listed in the MCP:
- Tools, which are like functions.
- Resources, which are like values.
- Prompts, which are prompts.
As of writing, almost no MCP client (Cursor, Claude Desktop, Cherry Studio) implements all of them. If you are a Cursor user, you can only use tools.
See the Model Context Protocol documentation to see what your MCP client of choice is lacking.
Admittedly this isn't the biggest deal - most servers just use tools anyway. This may become a bigger deal in future if more servers start to implement more of the protocol.
Warning
This bit isn't done yet! It's currently tools only.
Jailbreak-MCP remedies this by exposing configured resources and prompts as tools, so even the most restrictive implementations are fully usable.
MCP servers fill the context window
The more tools you have configured, the more your MCP servers are taking up of the all-important context window of your agent.
If you wanted to use tools or information from multiple MCP servers at once, your context window becomes very small very fast.
To remedy this, some clients have implemented warnings about having too many tools configured at once. Cursor has implemented a hard restriction of 40 tools, but hides which tools are disabled at any given moment.
Some servers expose many tools at the same time. The GitHub MCP server alone fills the entire Cursor tool cap.
The best thing you can do currently is manually enable and disable which MCP servers you want to have turned on at any given moment.
JailbreakMCP fixes this by providing configurable "modes" which expose only the exact tools and resources you need to do a given task, and tools to switch between modes on the fly.
Installation
Example installation will be assuming you're using Cursor.
- Start by making a backup of your current
mcp.json
file.Tip
The default location is
~/.cursor/jailbreak.mcp.json
. To rename your existing Cursor config:mv ~/.cursor/mcp.json ~/.cursor/jailbreak.mcp.json
- Create a new
mcp.json
file where the old one was, with these contents:
The server will prefer arguments over environment variables over
~/.cursor/jailbreak.mcp.json
.
- From here, you need to configure a
default
mode.
Configuration
Modes
Each mode is a whitelist of available servers, and any particular tools/prompts/capabilities to allow.
Modes are key/value pairs under the modes
key in the config.
Under each mode are keys of the names of the servers to allow (the same name as
defined under mcpServers
).
To allow everything for a given server, set its value to true
.
To be more specific, specify which tools, prompts, and resources you want as a list of names or resource URIs.
TODO
Need to:
- Read in the config file (mcp.json), can take in an argument or a env var
- Validate it's in the correct format (zod schema)
Startup
- Load a new client for each MCP entry
- List all tools
- Add all those to a register
create-jailbreak
package fornpm init jailbreak
setup
Runtime
- Expose that list via the tools endpoint
- Take in commands
- Forward them through to the respective MCP server
- Forward the results back
Support
- Update transport command to support Nix, fnm, etc
- Update connections to pass through MCP host environment (is this needed?)
- Update tools to support dynamic tools, eg changing
Spice
- CI & releases
- Support SSE servers
- Also load all prompts & resources
- Optionally exclude or prefer tools
- Expose all of the other things as well
- Instructions, dynamic?
- Templatable help message?
This server cannot be installed
remote-capable server
The server can be hosted and run remotely because it primarily relies on remote services or has no dependency on the local environment.
A configurable MCP server wrapper for Cursor that eliminates tool count limits when using the Model Context Protocol.
Related MCP Servers
- AsecurityAlicenseAqualityA template for creating and connecting custom tools to Cursor IDE using Model Context Protocol with support for cheerful server responses.Last updated -41PythonMIT License
- AsecurityAlicenseAqualityA template for creating custom tools for Cursor IDE using Model Context Protocol that allows users to deploy their own MCP server to Heroku and connect it to Cursor IDE.Last updated -21PythonMIT License
- AsecurityAlicenseAqualityA template for creating custom tools for Cursor IDE using Model Context Protocol (MCP), allowing developers to extend Cursor's functionality with their own server-based tools.Last updated -112PythonMIT License
- -securityAlicense-qualityA Model Context Protocol (MCP) server for Cursor IDE that simplifies the installation and configuration of other MCP servers.Last updated -88223JavaScriptMIT License