How do I use mcp-server-toolkit?

1. Click on "Install Server". 2. Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state. 3. In the chat, type @ followed by the MCP server name and your instructions, e.g., "@mcp-server-toolkit review the code in src/utils.py and summarize the README" That's it! The server will respond to your query, and you can continue using it as needed. Here is a step-by-step guide with screenshots.

mcp-server-toolkit

by isamkhan1809

Overview Schema Related Servers Score Discussions

Python

Overview

MCP Server Toolkit is a production-ready Model Context Protocol server that exposes 8 powerful tools to Claude Desktop and any MCP-compatible client. With a single config entry, Claude gains the ability to read and write files, run shell commands, search the web, fetch URLs, and perform AI-powered code reviews and text summarisation — all with built-in security controls.

Features

Tool	Description
`read_file`	Read file contents with size guard (10 MB limit) and encoding detection
`write_file`	Write / create files, restricted to CWD with auto parent-dir creation
`list_directory`	List directory with file types, sizes, and modified timestamps
`execute_shell`	Run shell commands against a strict allowlist with dangerous-pattern blocking
`web_search`	DuckDuckGo Instant Answer API — returns structured results with snippets and URLs
`fetch_url`	Fetch and parse any web page, strips nav/ads/scripts, returns clean text + links
`code_review`	Claude-powered code review with issues, severity ratings, security analysis, verdict
`summarise_text`	Claude-powered summarisation with key points, structured paragraphs, takeaway

Security Model

Path sanitisation: Blocks .. traversal, symlink abuse, and access to sensitive system files (~/.ssh, ~/.aws/credentials, /etc/shadow, etc.)
Write isolation: write_file is restricted to the current working directory
Command allowlist: execute_shell only permits a curated set of safe commands (ls, grep, git, python, curl, etc.)
Pattern blocking: Chains like ; rm, | sh, fork bombs, and decode-and-exec patterns are rejected before execution
Output truncation: Shell stdout/stderr capped at 512 KB; web content at 256 KB

Architecture

mcp-server-toolkit/
│
├── server/
│   ├── main.py                  # MCP server — tool registration & dispatch
│   ├── security.py              # Path sanitisation + command allowlist
│   └── tools/
│       ├── __init__.py          # Re-exports all tool functions
│       ├── file_tools.py        # read_file, write_file, list_directory
│       ├── shell_tools.py       # execute_shell (with validation)
│       ├── web_tools.py         # web_search (DuckDuckGo), fetch_url (aiohttp + BS4)
│       └── ai_tools.py          # code_review, summarise_text (Claude API)
│
├── claude_desktop_config.json   # Drop-in config for Claude Desktop
├── requirements.txt
└── README.md

Request flow:

Claude Desktop  →  stdio transport  →  server/main.py (MCP Server)
                                              ↓ dispatch
                                   tools/file_tools.py   ← local filesystem
                                   tools/shell_tools.py  ← subprocess (allowlisted)
                                   tools/web_tools.py    ← aiohttp / DuckDuckGo
                                   tools/ai_tools.py     ← Anthropic Claude API

Quick Start

1. Clone & Install

git clone https://github.com/isamkhan1809/mcp-server-toolkit
cd mcp-server-toolkit
python -m venv venv && source venv/bin/activate
pip install -r requirements.txt

2. Set Environment Variables

export ANTHROPIC_API_KEY="sk-ant-..."   # required for code_review + summarise_text

3. Test the Server

python -m server.main

The server communicates over stdio and is ready for MCP client connections.

4. Connect to Claude Desktop

Copy the following into your Claude Desktop configuration file:

macOS: ~/Library/Application Support/Claude/claude_desktop_config.json Windows: %APPDATA%\Claude\claude_desktop_config.json

{
  "mcpServers": {
    "mcp-server-toolkit": {
      "command": "python",
      "args": ["-m", "server.main"],
      "cwd": "/absolute/path/to/mcp-server-toolkit",
      "env": {
        "ANTHROPIC_API_KEY": "sk-ant-your-key-here",
        "PYTHONPATH": "/absolute/path/to/mcp-server-toolkit"
      }
    }
  }
}

Restart Claude Desktop. You will see the toolkit listed under available tools.

Project Structure

server/main.py          — MCP server, tool registration, call dispatcher
server/security.py      — sanitise_path(), validate_command(), blocked prefixes & patterns
server/tools/
  file_tools.py         — read_file, write_file, list_directory
  shell_tools.py        — execute_shell (subprocess + security gate)
  web_tools.py          — web_search (DuckDuckGo API), fetch_url (aiohttp + BeautifulSoup)
  ai_tools.py           — code_review, summarise_text (Claude claude-sonnet-4-5)
claude_desktop_config.json  — Ready-to-paste Claude Desktop config
requirements.txt

Usage Examples

Once connected to Claude Desktop, you can ask Claude:

"Read the file ./src/main.py and review it for bugs"
→ calls read_file, then code_review

"Search for 'MCP protocol specification' and summarise the top result"
→ calls web_search, then fetch_url, then summarise_text

"List my project directory and show me what's in the src folder"
→ calls list_directory

"Run git status in my project"
→ calls execute_shell("git status")

"Write a new file called notes.md with today's meeting notes"
→ calls write_file

Configuration

Environment Variables

Variable	Required	Description
`ANTHROPIC_API_KEY`	For AI tools	API key for `code_review` and `summarise_text`

Allowed Shell Commands

The following base commands are permitted by execute_shell:

ls  find  cat  head  tail  wc  file  stat  du  df
grep  awk  sed  sort  uniq  cut  tr  jq  diff
git  python  python3  pip  pip3  node  npm
pytest  ruff  mypy  black
echo  pwd  whoami  date  uname  env
curl  wget

To add a command, append it to ALLOWED_COMMANDS in server/security.py.

Extending with New Tools

Add your function to the appropriate server/tools/*.py file
Export it from server/tools/__init__.py
Register a new types.Tool entry in server/main.py's list_tools()
Add a dispatch branch in call_tool()

This server cannot be installed

license - not tested

Not graded

quality - not tested

maintenance

How are these scores calculated?

Maintenance

–Maintainers

–Response time

–Release cycle

–Releases (12mo)

Commit activity

Resources

GitHub Repository

Need Help?

Related Servers

Unclaimed servers have limited discoverability.

Looking for Admin?

If you are the server author, to access and configure the admin panel.

Related MCP Connectors

royal-mcp
Security-first WordPress MCP server. 129 tools for Claude, ChatGPT, Gemini. Free on wp.org.
secureflows-mcp
MCP server for secureFlows: token-free URL builders and integration-linting tools for AI agents.
MCP Fortress
Security scanner for MCP servers. Detect vulnerabilities, prompt injection, and tool poisoning.

View all MCP Connectors

Latest Blog Posts

Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)
By Om-Shree-0709 on July 25, 2026.
mcp
Agent Identity
OAuth 2.1
Your AI Chatbot Just Exposed Your CEO's Salary to an Intern
By Om-Shree-0709 on July 2, 2026.
Agent Identity
MCP Security
OAuth Delegation
Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)
By Om-Shree-0709 on June 30, 2026.
Agentic Ai
Prompt Injection
WebAssembly

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/isamkhan1809/mcp-server-toolkit'

If you have feedback or need assistance with the MCP directory API, please join our Discord server