Skip to main content
Glama
hishamalward

mcpclerk

by hishamalward

MCPClerk

CI Python 3.10+ MIT

Manage MCP configuration for Claude Code and Codex. MCPClerk is a local CLI for inspecting configured servers, editing native host settings, keeping an operation catalog, and checking task-scoped MCP calls.

MCPClerk edits configuration; Claude Code and Codex still run MCP servers and own runtime approval and trust. It does not proxy tool traffic or launch servers during inventory. A listed entry is configured state, not proof of a live connection.

MCPClerk manages native host configuration and evaluates task policy without sitting in the MCP traffic path.

Install

MCPClerk requires Python 3.10 or newer. From a checkout:

python -m pip install .
mcpclerk --help

For development, install .[dev] and run python -m pytest.

Related MCP server: mcp-policy-gateway

Start here

list inspects native configuration without launching MCP processes. Its inventory omits commands, URLs, environment values, and headers:

mcpclerk list
mcpclerk list --host codex --project /path/to/project

To add a server, put its native definition in a JSON file and choose a host and scope. For example, server.json can contain a stdio definition:

{"command":"npx","args":["-y","@modelcontextprotocol/server-filesystem","/path/to/project"]}

Then add it to a user configuration:

mcpclerk add files --host claude --scope user --file server.json

The command reports an undo transaction ID. Use mcpclerk undo ID to restore the previous file if it has not changed since. See the command guide for project scopes, per-tool settings, catalog policy, and task judging.

Catalog policy is separate from host approval. mcpclerk judge reads one JSON request from standard input and returns a classification and decision without echoing its arguments. Keel calls it for MCP tool events; the decision uses declared task permissions and project target policy.

Claude Code and Codex remain the runtime authorities for native configuration and project trust. Managed settings, project trust, session flags, and live connections can change effective availability beyond what a local file inventory can establish.

License

MIT.

Related MCP Connectors

Related MCP Servers

  • A
    license
    Not graded
    quality
    D
    maintenance
    A least-privilege enforcement proxy for MCP servers. It sits between MCP clients and upstream servers, enforcing tool policies, hiding denied tools, requiring human approval for risky actions, and providing a structured audit trail.
    MIT
  • A
    license
    Not graded
    quality
    A
    maintenance
    An authorizing reverse proxy for MCP servers that enforces per-call policy rules on tool arguments with audit logging, dry-run, and rate limiting.
    Apache 2.0
  • A
    license
    A
    quality
    C
    maintenance
    Provides a security governance layer for AI agents to safely access upstream MCP servers, enforcing tool-level RBAC, parameter constraints, authentication via static tokens or OIDC, and tamper-evident audit logging.
    2
    1
    Apache 2.0
  • F
    license
    Not graded
    quality
    B
    maintenance
    Enforces default-deny policies, budgets, and tamper-evident audit logging for MCP tool calls before they reach upstream servers.
    -