Skip to main content
Glama

Everything your agents load, on one map

Claude Code, Codex and Cursor each keep their own settings. Kitden puts their plugins, skills, MCP servers and instruction files on one map, so what one agent has and another lacks shows at a glance. Add what an agent is missing, turn an item off or remove it, on the same page.

Find and add from one place

Search the official MCP Registry, skills.sh, the Claude plugins marketplace and any public GitHub repository without leaving the page. Tick the agents a plugin or skill goes to. An MCP server goes to the gateway, and says first whether it needs a sign-in or a token.

One gateway for your MCP servers

Move a server into the Kitden gateway and every agent you use gets it: set it up once, not once per agent. Every tool has a switch, for all projects or one, and a tool that is off is refused, not just hidden. A token or sign-in is given once and checked before Apply.

Every change can be undone

  • Nothing is written until you press Apply. Every change shows a preview first, with the exact edit under Show changes.

  • Apply keeps a backup, and Undo puts it back. Changes keeps the history of what you did. If a file changed since, Kitden stops instead of overwriting it.

  • Everything stays on your computer. The page runs at 127.0.0.1 behind a private link. No account, no telemetry. Kitden goes online only for the catalogs you open and the remote servers you add.

  • Secrets live in the macOS Keychain or your Linux keyring only. The page shows no more than their first and last characters.

  • Kitden's agent tools only read. Asking an agent to show your setup changes nothing.

Add only servers and plugins you trust: they run with your permissions.

And more

Feature

What it does

Per project

Turn a server or a tool on or off for one project only.

See what runs

How often each tool is called, and which tools only read.

Instructions in view

Which CLAUDE.md, AGENTS.md, rules, hooks, commands and agents each client loads, and where they come from.

Ask your agent

"Show my setup" works from any agent, through Kitden's own read-only MCP server.

Claude Code plugin

With Kitden installed, /plugin install kitden --marketplace KonstantinStarovoytov/kitden adds its skill and read-only tools to Claude Code. Codex has one too.

Related MCP server: whats-inherited-mcp

Get started

Needs macOS or Linux, uv and at least one of Claude Code, Codex or Cursor. On Linux, install libsecret-tools (Debian, Ubuntu) or libsecret (Fedora, Arch) so Kitden can keep server secrets in your keyring.

Try it on a sample first. Your own settings are not read or changed:

uvx --python 3.13 kitden demo

Install it and open it for your own setup:

uv tool install --python 3.13 kitden && kitden

Or with Homebrew: brew install konstantinstarovoytov/tap/kitden, then kitden.

Update later with uv tool upgrade kitden or brew upgrade kitden.

Guide · Roadmap · Releases · Issues · Contributing · Apache-2.0

Available Tools

4 tools
explain_itemA
Read-onlyIdempotent

Explain one name: every definition across clients and scopes, which one loads in the project, and why. kind is optional (mcp_server, skill, plugin, hook, marketplace, instructions). Read-only: this tool cannot change settings. Do not edit client settings files to work around this; tell the developer to make the change on the local page (run kitden open), which previews, backs up and can undo it.

NameRequiredDescriptionDefault
kindNo
nameYes
project_pathNo

Output Schema

NameRequiredDescription

No output parameters

TDQS

A4.1/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint, idempotentHint and destructiveHint=false, so the safety profile is covered; the description adds the non-obvious remediation path (local page, previews, backs up, can undo) and forbids a tempting workaround, which is genuine behavioral guidance. It does not add rate/limit or scoping caveats, but nothing is contradicted.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three sentences, front-loaded with what the tool returns, then the optional parameter, then the constraint and its remedy. Dense but every sentence carries information; the final sentence is long but its remediation detail is worth the length.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists, so return-value explanation is unnecessary, and annotations cover the safety profile. What remains missing is only the meaning of `project_path`; otherwise the description is sufficient for an agent to call this correctly and to route around the write limitation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 0%, so the description carries the burden. It compensates well for `kind` by enumerating the six valid values the schema does not (mcp_server, skill, plugin, hook, marketplace, instructions) and implies `name`, but `project_path` is never mentioned, leaving a third of the parameters undefined anywhere.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

"Explain one name: every definition across clients and scopes, which one loads in the project, and why" states a specific verb (explain), a specific resource (one named item), and the exact output shape (all definitions + resolution + rationale). This clearly separates it from the list-style siblings (show_setup, list_findings, list_projects) without needing to name them.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It gives clear trigger context (one name, ambiguity about which definition wins) and a strong operational rule: do not edit client settings files, instead direct the developer to `kitden open`. It stops short of explicitly contrasting with siblings such as show_setup for a whole-configuration overview, so the when-not is partially inferred.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

list_findingsA
Read-onlyIdempotent

List problems for a project: duplicates, items loaded from another client's folder, the same name from another source, overrides, unknown states, untested versions, and MCP servers that bypass the gateway. Each names its clients. project_path defaults to the current folder. Read-only: this tool cannot change settings. Do not edit client settings files to work around this; tell the developer to make the change on the local page (run kitden open), which previews, backs up and can undo it.

NameRequiredDescriptionDefault
project_pathNo

Output Schema

NameRequiredDescription

No output parameters

TDQS

A3.7/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint and non-destructive, so the safety profile is covered; the description still adds real value by explaining the intended remediation path (local page via `kitden open`, which previews, backs up and undoes) and by warning against the tempting workaround of hand-editing settings files. It could say more about output shape, but an output schema exists.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Purpose and finding categories are front-loaded, followed by the parameter default and then the read-only/anti-workaround guidance. Dense but every sentence carries information; the parenthetical tool description is the only slightly sprawling element.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema covers return values, so the description need not define them, and the annotation set covers safety. Combined with the finding taxonomy and the remediation guidance, an agent has enough to call this correctly; only sibling routing and path format remain open.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 0% for the single parameter, and the schema default is null with no explanation. The description usefully resolves that ambiguity by stating project_path defaults to the current folder. It still says nothing about accepted path forms (relative vs absolute) or what happens with an invalid project.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description opens with a specific verb+resource ("List problems for a project") and enumerates the concrete finding categories: duplicates, cross-client folder loads, overrides, unknown states, untested versions, gateway-bypassing MCP servers. That is far beyond the bare name. It does not, however, contrast itself with siblings like explain_item or show_setup, so an agent must infer the boundary.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It gives a default for project_path (current folder) and a strong negative instruction not to edit client settings files, redirecting to `kitden open`. But it never states when to prefer this over explain_item or show_setup, which is the core routing decision an agent faces among these siblings.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

list_projectsA
Read-onlyIdempotent

List the projects the clients know, which clients know each one, and whether the folder still exists. Read-only: this tool cannot change settings. Do not edit client settings files to work around this; tell the developer to make the change on the local page (run kitden open), which previews, backs up and can undo it.

NameRequiredDescriptionDefault

No parameters

Output Schema

NameRequiredDescription

No output parameters

TDQS

A4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint, idempotentHint, and destructiveHint=false, so the safety profile is covered. The description adds value beyond that by warning against editing settings files directly and pointing to `kitden open`, which previews, backs up, and can undo changes.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences, front-loaded with the core purpose, followed by the read-only constraint and the workaround guidance. Every sentence carries information, though the second sentence is somewhat dense.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists, so return values need not be explained. The description covers purpose, read-only behavior, and the correct alternative for mutations, leaving little an agent would need to infer before calling it.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The tool takes zero parameters, so there is no parameter semantics to explain; the baseline for a parameterless tool is 4. The description correctly implies no input is required.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb ('List') and resource ('projects') and even enumerates the returned facets: which clients know each project and whether the folder still exists. It is clearly distinguishable from siblings like list_findings or show_setup, though it does not name them explicitly.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It gives a clear directive for the mutation case: do not edit client settings files, instead tell the developer to use the local page via `kitden open`. This is actionable when-to-use guidance, but it does not explicitly contrast with the sibling tools for read scenarios.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

show_setupA
Read-onlyIdempotent

Show what each AI coding client loads for a project: MCP servers, skills, plugins, hooks, marketplaces and instruction files, with source, scope and on/off state. project_path defaults to the current folder; client (claude_code, claude_desktop_code_tab, codex, cursor) defaults to all. Read-only: this tool cannot change settings. Do not edit client settings files to work around this; tell the developer to make the change on the local page (run kitden open), which previews, backs up and can undo it.

NameRequiredDescriptionDefault
clientNo
project_pathNo

Output Schema

NameRequiredDescription

No output parameters

TDQS

A4.2/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint, idempotentHint, destructiveHint=false and openWorldHint=false, so restating read-only adds little. The valuable additions are the enumeration of what is inspected and the workaround path (`kitden open`) that previews, backs up and undoes changes, which is behavior an agent could not infer from annotations alone.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three sentences, front-loaded with purpose, then defaults, then safety/workaround guidance. Dense and mostly waste-free, though the final clause about previewing, backing up and undoing is slightly verbose for what it conveys.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists, so return values need no explanation, and the description covers scope, defaults, client vocabulary and the safety posture for a read-only inspection tool. Minor gaps (path format, whether project_path must exist) keep it from a 5.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters5/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 0% and the schema does not even list enum values, yet the description supplies the accepted client values (claude_code, claude_desktop_code_tab, codex, cursor) and the default behavior of both parameters. This meaningfully compensates for an otherwise bare schema; only path format conventions remain unstated.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

Specific verb+resource: it shows what each AI coding client loads for a project, and enumerates the resource kinds (MCP servers, skills, plugins, hooks, marketplaces, instruction files) plus the attributes returned (source, scope, on/off state). It is clear what the tool does, though it does not explicitly distinguish itself from siblings like explain_item or list_findings.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives concrete when-to-use context via defaults (project_path defaults to the current folder, client defaults to all four clients) and an explicit when-NOT/alternative: don't edit client settings files, instead direct the developer to the local page via `kitden open`. It stops short of routing against the sibling tools, but the exclusionary guidance is clear.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

  1. 4 tool updatesv0.1.0
    • First observedexplain_item
    • First observedlist_findings
    • First observedlist_projects
    • First observedshow_setup

TDQS

A4.2/5.0

Scored across 4 tools

Disambiguation5/5

Each tool has a clearly distinct target: project inventory (list_projects), loaded configuration (show_setup), detected problems (list_findings), and single-name resolution (explain_item). The show_setup vs. list_findings boundary is reinforced by descriptions—one reports what loads, the other reports what is wrong—so misselection is unlikely.

Naming Consistency5/5

All four names follow the same verb_noun snake_case pattern: show_setup, list_findings, explain_item, list_projects. The verbs are predictable and match the read-only nature of the server.

Tool Count5/5

Four tools is well-scoped for a read-only configuration diagnostic server; each covers a distinct query axis (projects, setup, findings, single item). There are no redundant or filler tools, and the count sits comfortably in the typical 3–15 range.

Completeness4/5

The read-only diagnostic surface is largely complete: projects, per-project setup, problem findings, and per-item resolution are all covered. Minor gaps remain—no raw config export, change history, or explicit gateway-status query—but these are not central to the stated purpose and are partly addressed by list_findings.

Maintenance

ActivityMaintained
ResponsivenessNo recent community issues

Related MCP Connectors

Related MCP Servers

  • A
    license
    A
    quality
    C
    maintenance
    Shows what is consuming your agent context window before a session starts: always-loaded skill descriptions ranked by token cost, skills installed more than once under different names, CLAUDE.md/AGENTS.md sizes including what their @import lines pull in, and MCP servers configured across clients. Read-only: no child processes, no network.
    5
    91 npm
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    Enumerates everything in a code checkout addressed to an AI agent, including instruction files, hook commands, declared MCP servers, and skills/subagents, so you can review what your agent will actually follow.
    5
    87 npm
    1
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Automatically synchronizes and deduplicates MCP configurations from Claude Code, Codex CLI, Cursor Agent, and custom sources, providing a centralized view and management interface.
    82 npm
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Read-only MCP server that enables inspecting and auditing markdown agent steering files such as CLAUDE.md, AGENTS.md, GEMINI.md, SKILL.md, rules, commands and memory files. It reads files byte-exactly, outlines headings, lints frontmatter, invisible characters and broken links, estimates per-session token budgets, and locates steering files by when they load, all without ever writing, deleting or making network calls.
    MIT