toolport

Name: toolport
Author: btsouth

BLOCKgrade F · trust 37/100

Local-first MCP gateway. One port for every tool and every AI client: lazy discovery (~90% token savings), tool integrity + quarantine, secrets in the OS keychain.

aiai agentsanthropicclaudecursordeveloper toolsgatewayllm

Overview

From the repository's own README, as read at the audited commit.

# Toolport[![CI](https://github.com/btsouth/toolport/actions/workflows/ci.yml/badge.svg)](https://github.com/btsouth/toolport/actions/workflows/ci.yml)[![Latest release](https://img.shields.io/github/v/release/btsouth/toolport?label=release)](https://github.com/btsouth/toolport/releases)[![License: MIT](https://img.shields.io/badge/license-MIT-blue.svg)](LICENSE)[![Discord](https://img.shields.io/badge/Discord-join%20the%20community-5865F2?logo=discord&logoColor=white)](https://discord.gg/Xsn27MxdBA)[![Glama quality](https://glama.ai/mcp/servers/tsouth89/toolport/badges/score.svg)](https://glama.ai/mcp/servers/tsouth89/toolport)**Set up your MCP servers once. Use them in every AI client.**Toolport is a local gateway for MCP, the protocol that gives AI apps access totools like GitHub, Slack, and databases. Connect your servers once, then sharethem across Claude, Cursor, Codex, VS Code, and other clients.[Download](https://toolport.app/download) · [Website & demo](https://toolport.app) · [Discord](https://discord.gg/Xsn27MxdBA)![Toolport on Linux with the Tokyo Night theme](docs/screenshots/servers-tokyo-night.png)## Why Toolport?- **Less context overhead.** Agents search for tools when they need them instead  of loading every tool definition up front. See the [benchmarks](BENCHMARK.md).- **One setup for every client.** Add and authenticate each server once. Use  profiles to choose which servers each client can access.- **Keys stay local.** Credentials live in your OS keychain, outside client configs.- **Control over tool calls.** Disable tools, require approval for destructive  calls, and review activity in one place.- **Shared agent rules.** Write instructions once and apply them to supported  clients, with a preview before changes are written.## Get started1. [Download Toolport](https://toolport.app/download) for Windows, macOS, or Linux.2. Add a server from the catalog, import an existing setup, or paste a server config.3. Authenticate the server, then open **Clie

Exposed tools (28) 20 read · 7 write · 1 destructive

Blast radius: 1 tool can delete or overwrite. An agent that can be talked into calling a tool can be talked into calling this one.

Tool	Risk	Description
`Developer`	read	A developer stack.
`GitHub`	read	Work with repositories and issues.
`Operations`	read	An ops stack
`a`	read	a
`b`	read	b
`calendar_create_event`	write	Create a calendar event with attendees, start time, and end time.
`calendar_list_events`	read	List existing calendar events in a time range.
`cloudflare_get_cache_rules`	read	Read the configured Cloudflare CDN cache rules for a zone.
`cloudflare_purge_cache`	destructive	Purge cached assets for a Cloudflare zone.
`daily-report`	write	Create a daily report
`emit_resource_updated`	read	Emit resources/updated for a subscribed URI
`filesystem_read_file`	read	Read text content from a file on the local filesystem.
`filesystem_search_files`	read	Search local file names and paths without reading file content.
`github_create_pull_request`	write	Open a new GitHub pull request from a branch with a title and body.
`github_list_pull_requests`	read	List existing open GitHub pull requests and their branches.
`postgres_explain_query`	read	Explain the execution plan for a PostgreSQL query without running it.
`postgres_run_query`	write	Execute a SQL query against a PostgreSQL database and return rows.
`resend_list_emails`	read	List transactional email messages previously sent through Resend.
`resend_send_email`	write	Send a transactional email message to a recipient.
`restart-smoke`	write	real-process restart fixture
`sentry_get_issue`	read	Get details for one known Sentry issue identifier.
`sentry_list_issues`	read	List recent application errors and unresolved issues from Sentry.
`slack_list_messages`	read	List recent messages from a Slack channel.
`slack_post_message`	write	Post a message to a Slack channel.
`stripe_list_refunds`	read	List previous Stripe payment refunds for a customer.
`stripe_refund_payment`	read	Refund a Stripe payment or charge to the customer.
`vercel_get_project`	read	Get configuration for one known Vercel project.
`vercel_list_projects`	read	List the projects deployed in a Vercel account or team.

Details

Source: btsouth/toolport
Transports: stdio · streamable-http
Credentials it reads: LLM_API_KEY
License: MIT
Stars: 214 · pushed 0d ago

Trust audit

Do not install this without reading the findings. The audit found something that could harm you or your machine.

Layer	What it checks	Result
L0	Provenance & inventory	WARN
L1	Static analysis of the code	FAIL
L2	Instruction surface (what it tells the agent)	FAIL
L3	Class-specific surface	WARN
L4	Behavioural (sandbox)	SKIPPED

What the source does

Filesystem: declared (14 observation(s))
Network: declared (15 observation(s))
Shell: declared (2 observation(s))
Dependencies: not all pinned
Secrets in source: found

Findings (25)

CRITICALHard-coded secrets · secret.github · CWE-798, CWE-321

src-tauri/src/registry.rs:3796

"rejected token ghp_abcdefghijklmnopqrstuvwxyz0123456789",

CRITICALHard-coded secrets · secret.github · CWE-798, CWE-321

src-tauri/src/registry.rs:3804

&& !redacted.contains("ghp_abcdefghijklmnopqrstuvwxyz0123456789"),

CRITICALHard-coded secrets · secret.github · CWE-798, CWE-321

src-tauri/src/routine_advisor.rs:703

json!({ "repoName": repo, "token": "ghp_0123456789abcdef0123456789abcdef0123" }),

CRITICALHard-coded secrets · secret.github · CWE-798, CWE-321

src-tauri/src/routines.rs:1138

"const token = 'ghp_abcdefghijklmnopqrstuvwxyz123456';"

CRITICALHard-coded secrets · secret.stripe · CWE-798, CWE-321

src-tauri/src/pii.rs:665

ip 192.168.1.7 key sk_live_abcdefghijklmnop phone +14155550123",

CRITICALHard-coded secrets · secret.stripe · CWE-798, CWE-321

src-tauri/src/pii.rs:684

"sk_live_abcdefghijklmnop",

HIGHNetwork egress · net.metadata_ip · CWE-200, CWE-319

src-tauri/src/downstream.rs:7960

("https://169.254.169.254/latest", "private, loopback"),