This server has a remotely hosted endpoint. Open its connector listing for connection details, authentication requirements, and setup instructions:
One MCP to rule them all. Toolkien is an MCP gateway in "code mode": connect one MCP server to your clients (Claude, Codex, Cursor…) and use every remote MCP server configured in your workspace. Instead of hundreds of tool definitions, the agent searches tools, reads their TypeScript declarations and runs one TypeScript script in a Deno sandbox. Every call is checked against explicit permissions; writes can pause for a human approval and resume without repeating calls. Tokens are encrypted, content is never logged.
Open source (AGPL-3.0) and available as a managed service. Product spec: docs/spec.md (Italian) ·
Decisions: DECISIONS.md · Conventions: docs/conventions.md · Client compatibility:
docs/compatibility.md.
Part | What it does |
App (SvelteKit 3) | Web UI, |
Database (libSQL) | Turso in production, a local file in development; Drizzle migrations in |
OpenBao | Transit key that wraps one data key per workspace (envelope encryption of credentials and paused executions) |
Runner ( | Deno supervisor: type-checks scripts in a sandboxed TypeScript compiler, runs each one in a permission-less Deno process; tool calls come back to the app's bridge |
Egress proxy ( | The only way out to upstream MCP servers and the email provider (CONNECT, port 443, SSRF rules) |
Email (Resend) | Passwordless sign-in (code + link) and workspace invitations |
Flow: the agent calls tools_search → tools_describe → execute. The app resolves the
workspace and the visible tools, generates .d.ts declarations, and sends the script to the
runner over a WebSocket. Each tool call goes through the bridge: kill switches, permission level
(allow / ask / block), approval gate, encrypted credential, upstream call, sealed result for
durable replay, audit (metadata only).
Related MCP server: MCPilot
Requirements: Node 22+, pnpm 10 (corepack enable picks the pinned version), Deno 2.
pnpm install
cp .env.example .env # then fill:
# BETTER_AUTH_SECRET=$(openssl rand -base64 32)
# TOOLKIEN_DEV_MASTER_KEY=$(openssl rand -base64 32)
# Leave RUNNER_URL empty: the app starts a local runner with your `deno`.
# Leave RESEND_API_KEY empty: sign-in codes and links are printed to the server console.
pnpm db:migrate # creates local.db from the migrations
pnpm dev # http://localhost:5173 — sign up with any email, you land in your personal workspaceConnect a client: add http://localhost:5173/mcp as a remote MCP server (Streamable HTTP). It
discovers OAuth, opens the consent page and asks which workspace to start in. For a local MCP
server to connect to, development (only) accepts http://localhost… connector URLs.
Useful commands:
pnpm check # svelte-check
pnpm lint # prettier --check + eslint
pnpm test # vitest: server (node) + component (browser) projects
pnpm build # production build (adapter-node)
pnpm db:generate # migration from schema changes (src/lib/server/db/schema/*)
pnpm auth:schema # regenerate Better Auth tables after changing auth plugins
pnpm directory:validate # check directory/servers/*.json
cd runner && deno task test # runner (sandbox, checker, escape attempts)
cd egress && deno task test # egress proxy
pnpm exec playwright install chromium # once, for component testsEvery environment variable is declared and documented in src/env.ts.
One docker compose project (app, OpenBao, egress proxy, runner): see
docs/self-hosting.md, and docs/deploy-coolify.md
for Coolify. Migrations run when the app container starts.
The curated server directory is data: one JSON file per server in directory/servers/. Read
directory/CONTRIBUTING.md, add or edit a file, run
pnpm directory:validate, open a pull request.
Placeholders that need real values:
The repository URL is REPOSITORY_URL in src/lib/brand.ts.
Legal drafts in legal/*.md: operator legal name and address, privacy / DPO / security /
contact emails, VPS provider and region, Resend legal entity, transfer mechanism and sending
region, liability cap, governing law, notice periods. All drafts need review by a lawyer or DPO.
Resend: verified sender domain (EU region), EMAIL_FROM, an API key with sending access only.
VPS provider (EU) for the compose stack; Turso database in an EU region.
OG image endpoint (not implemented).
AGPL-3.0. If you run a modified Toolkien as a network service, you must offer its source to its users.
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
Loading tool schema changelog…
This server cannot be deployed
Governed MCP gateway: one endpoint for your tools, with credential custody and audit log.
One MCP endpoint for your company's tools, with per-person sign-in, policy and audit.
MCP server for your apps' tools and custom tools, plus hosted AI agents and approval-gated workflows
Toolstile is a managed MCP gateway that connects remote MCP servers behind one endpoint, with per-agent permissions, shared accounts and activity logs. Connect at https://mcp.toolstile.com/mcp over Streamable HTTP with OAuth; sign in at https://toolstile.com, select a workspace and connect your upstream servers. Available tools, resources and prompts depend on that workspace and the agent's granted access.
