LocalBridge

LocalBridge is a local MCP bridge application for Windows 11 x64, designed to let MCP clients such as ChatGPT access local development workspaces, execute development tasks within a user-authorized boundary, and perform administrator operations when needed through a separate UAC/Broker path.

Tool Structure

LocalBridge's public Agent API maintains 8 regular core tools + 1 privileged extension:

• workspace_context: Workspace, project, runtime environment, and permission status discovery.

• agent_workflow: Orchestration for diagnostics, fixes, features, refactoring, testing, builds, documentation, and recovery.

• exec_command: Regular command/process execution constrained by permission mode.

• command_control: poll / read / write / kill for running commands.

• task_control: get / cancel for the current high-level task.

• git_workflow: Git status / log / show / diff / blame.

• document_workflow: Controlled document reading and generation.

• view_image: Controlled image reading and scaling.

• elevated_exec: Privileged extension; administrator routing is only available in Administrator mode and after the Broker has been authorized by the user via UAC.

Related MCP server: bridge-mcp

Permission Modes

Edit mode only allows structured file, Git, and editing operations within the current active workspace; it does not allow launching regular shells/processes.

Full mode allows cmd, PowerShell, and development processes, but processes always use the current Windows standard user token. LocalBridge's structured paths, workdir, Git, document, image, and editing inputs remain restricted to the active workspace; LocalBridge does not claim to provide additional OS-level filesystem sandboxing for child processes.

Administrator mode does not elevate the entire LocalBridge. The regular route still uses the current user token; only the explicit elevated_exec → Privileged Broker → Windows UAC route can obtain an administrator token. LocalBridge's own control plane is never modifiable via MCP.

Security Model

• The Runtime API Key is stored only in Windows Credential Manager, never written to regular configuration, command lines, or logs.

• Local listening remains loopback-only.

• Unknown capabilities and unvetted privileged behaviors fail closed.

• Administrator capabilities require in-app risk confirmation and Windows UAC; background startup does not automatically pop up UAC.

• Runtime and third-party tools are pinned to fixed versions and checksums; the application runtime does not automatically download updates for itself.

• No telemetry, no automatic crash uploads.

For a more complete security boundary and vulnerability reporting process, see SECURITY.md.

Installation

After the first stable release, it is recommended to obtain the Windows 11 x64 installer from GitHub Releases and verify the release information. Before the stable release, you can build from source using the steps below.

LocalBridge uses the system WebView2 and does not bundle the WebView2 Runtime; it does not depend on system Python, and the release package carries a fixed Python Embedded Runtime.

Development Build

Requirements:

• Windows 11 x64

• Node.js 24

• Rust 1.85 or a newer compatible stable toolchain (MSVC)

• Windows system curl.exe and a standard Windows SDK/MSVC build environment

npm ci
node scripts/prepare-lb018-resources.mjs
npm test
npm run build
cargo test --manifest-path src-tauri/Cargo.toml --locked -- --test-threads=1
cargo clippy --manifest-path src-tauri/Cargo.toml --locked --all-targets -- -D warnings
node node_modules/@tauri-apps/cli/tauri.js build --bundles nsis

aria2c, 7z, and jq are only fetched during the build preparation stage from fixed sources with SHA-256 checksums; they are not automatically downloaded or updated at runtime.

Known Limitations

• Currently only supports Windows 11 x64.

• v0.1 does not provide WSL/container/remote shells, custom shell registry, or general task history/snapshot rollback.

• Child processes in Full mode have access to the OS resources that the current Windows user can access; the active workspace restriction only constrains LocalBridge's own structured inputs and does not constitute an additional OS sandbox.

• Tunnel/ChatGPT connections require the user's own valid configuration.

• The application does not include an auto-updater; upgrades are delivered as full LocalBridge version releases.

License

LocalBridge's own source code uses the MIT License. Third-party runtimes and dependencies retain their respective licenses; see THIRD_PARTY_NOTICES.md for details.