mcpclerk
Click on "Deploy Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@mcpclerkapprove the pending write_file call"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
MCPClerk
Manage MCP configuration for Claude Code and Codex. MCPClerk is a local CLI for inspecting configured servers, editing native host settings, keeping an operation catalog, and checking task-scoped MCP calls.
MCPClerk edits configuration; Claude Code and Codex still run MCP servers and own runtime approval and trust. It does not proxy tool traffic or launch servers during inventory. A listed entry is configured state, not proof of a live connection.
Install
MCPClerk requires Python 3.10 or newer. From a checkout:
python -m pip install .
mcpclerk --helpFor development, install .[dev] and run python -m pytest.
Related MCP server: mcp-policy-gateway
Start here
list inspects native configuration without launching MCP processes. Its inventory omits commands, URLs, environment values, and headers:
mcpclerk list
mcpclerk list --host codex --project /path/to/projectTo add a server, put its native definition in a JSON file and choose a host and scope. For example, server.json can contain a stdio definition:
{"command":"npx","args":["-y","@modelcontextprotocol/server-filesystem","/path/to/project"]}Then add it to a user configuration:
mcpclerk add files --host claude --scope user --file server.jsonThe command reports an undo transaction ID. Use mcpclerk undo ID to restore the previous file if it has not changed since. See the command guide for project scopes, per-tool settings, catalog policy, and task judging.
Catalog policy is separate from host approval. mcpclerk judge reads one JSON request from standard input and returns a classification and decision without echoing its arguments. Keel calls it for MCP tool events; the decision uses declared task permissions and project target policy.
Claude Code and Codex remain the runtime authorities for native configuration and project trust. Managed settings, project trust, session flags, and live connections can change effective availability beyond what a local file inventory can establish.
License
MIT.
This server cannot be deployed
Maintenance
Related MCP Connectors
Governed MCP gateway: one endpoint for your tools, with credential custody and audit log.
MCP server for mandates, delegation, policy-gated execution, credential grants, and audit.
Security & DLP proxy for MCP: tool-poisoning scans, PII redaction on tool args/results. Beta.
- gatewayOAuthai.sealgate
MCP gateway with runtime security policy, tool-call-level control, and audit of agent actions.
Related MCP Servers
- AlicenseNot gradedqualityDmaintenanceA least-privilege enforcement proxy for MCP servers. It sits between MCP clients and upstream servers, enforcing tool policies, hiding denied tools, requiring human approval for risky actions, and providing a structured audit trail.MIT
- AlicenseNot gradedqualityAmaintenanceAn authorizing reverse proxy for MCP servers that enforces per-call policy rules on tool arguments with audit logging, dry-run, and rate limiting.Apache 2.0
- AlicenseAqualityCmaintenanceProvides a security governance layer for AI agents to safely access upstream MCP servers, enforcing tool-level RBAC, parameter constraints, authentication via static tokens or OIDC, and tamper-evident audit logging.21Apache 2.0
- FlicenseNot gradedqualityBmaintenanceEnforces default-deny policies, budgets, and tamper-evident audit logging for MCP tool calls before they reach upstream servers.-