Atlas / MCP servers / hideya / Langchain MCP Tools

Langchain MCP ToolsCAUTION

mcp/hideya/langchain-mcp-tools

MCP to LangChain Tools Conversion Utility / Python

Verdict
CAUTION
Grade
B
Trust score
87 /100
Exposed tools
9 7r · 2w · 0d
Transport
streamable-http
License
MIT
Stars
29
01

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

MCP to LangChain Tools Conversion Library / Python [](https://github.com/hideya/langchain-mcp-tools-py/blob/main/LICENSE) [](https://pypi.org/project/langchain-mcp-tools/) [](https://dependents.info/hideya/langchain-mcp-tools-py)

A simple, lightweight library to use Model Context Protocol (MCP) server tools from LangChain.

Project Status

This library currently supports MCP Protocol version 2025-03-26. It does not support the MCP 2026-07-28 specification.

For new projects, we recommend using LangChain's official LangChain MCP Adapters library, which provides comprehensive MCP integration for LangChain.

This project is now in maintenance / dormant mode. Existing users may continue using it with MCP servers compatible with the 2025-03-26 specification, but new MCP protocol features will not be actively implemented here.

Introduction

A simple, lightweight library to use Model Context Protocol (MCP) server tools from LangChain.

Its simplicity and extra features for local MCP servers can make it useful as a basis for your own customizations. However, it only supports text results of tool calls and does not support MCP features other than tools.

LangChain's **official LangChain MCP Adapters** library, which supports comprehensive integration with LangChain, has been released. You might want to consider using it if the extra features that this library supports are not neces

Read from source at commit 2a53d2d939bdOBSERVED · 2026-10-08
02

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.

claude-code
claude mcp add langchain-mcp-tools --env BRAVE_API_KEY=${BRAVE_API_KEY} --env GITHUB_PERSONAL_ACCESS_TOKEN=${GITHUB_PERSONAL_ACCESS_TOKEN} -- uvx langchain-mcp-tools
claude-desktop
{
  "mcpServers": {
    "langchain-mcp-tools": {
      "command": "uvx",
      "args": [
        "langchain-mcp-tools"
      ],
      "env": {
        "BRAVE_API_KEY": "${BRAVE_API_KEY}",
        "GITHUB_PERSONAL_ACCESS_TOKEN": "${GITHUB_PERSONAL_ACCESS_TOKEN}"
      }
    }
  }
}
03

Exposed tools (9)

7 read · 2 write · 0 destructive.

ToolRiskDescription
addwriteAdd two numbers together.
authenticated_echoreadEcho back a message with authentication context.
create_documentwriteCreate a new document for the authenticated user.
echoread
get_current_userreadGet information about the currently authenticated user.
get_user_inforeadGet information about the authenticated user.
greetreadReturn a greeting message.
helloread
list_user_documentsreadList documents accessible to the authenticated user.
04

Trust audit

CAUTIONgrade B · trust 87/100 Install with care. The audit found things worth knowing before you trust its output.

LayerWhat it checksResult
L0Provenance & inventoryPASS
L1Static analysis of the codeWARN
L2Instruction surface (what it tells the agent)PASS
L3Class-specific surfacePASS
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
none-observed
Network
declared (10 observation(s))
Shell
none-observed
Dependencies
pinned
Secrets in source
none-found

Findings (8)

MEDIUMInformation disclosure · disclose.log_secret · CWE-209, CWE-532
testfiles/sse_auth_test_server.py:349
print(f"Bearer {token}")
MEDIUMInformation disclosure · disclose.log_secret · CWE-209, CWE-532
testfiles/streamable_http_bearer_auth_test_client.py:119
print(f"🔑 Using token: {token[:50]}...")
MEDIUMNetwork egress · net.raw_ip · CWE-200, CWE-319
testfiles/streamable_http_bearer_auth_test_client.py:63
"url": "http://127.0.0.1:8001/mcp",
MEDIUMNetwork egress · net.raw_ip · CWE-200, CWE-319
testfiles/streamable_http_oauth_test_client.py:202
"url": "http://127.0.0.1:8003/mcp",
MEDIUMNetwork egress · net.raw_ip · CWE-200, CWE-319
testfiles/streamable_http_oauth_test_client.py:272
"url": "http://127.0.0.1:9999/mcp",
MEDIUMNetwork egress · net.raw_ip · CWE-200, CWE-319
testfiles/streamable_http_oauth_test_client.py:297
"url": "http://127.0.0.1:8003/mcp",
MEDIUMNetwork egress · net.raw_ip · CWE-200, CWE-319
testfiles/streamable_http_oauth_test_client.py:303
"url": "http://127.0.0.1:8001/mcp",
LOWInventory / provenance · inv.hidden_file · CWE-1104
.env.template
.env.template
Why it matters. hidden member outside the usual dotfiles
Fix. review its purpose

Gates applied: no_behavioural_pass.

Audited 2026-10-08 · audit v0.4.1 · source sha 2a53d2d939bdfull audit observations/trust-audit/mcp-server/hideya__langchain-mcp-tools.json · Report an issue / request a re-scan
05

Audit history

Every audit this server has had. A grade with a past is a grade somebody is still checking.

DateSourceVerdictGradeScoreChange
2026-10-082a53d2d939bdCAUTIONB87first audit
06

Questions

What is the Langchain MCP Tools MCP server?

MCP to LangChain Tools Conversion Utility / Python

What tools does Langchain MCP Tools expose?

9 in total: 7 read-only, 2 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.

Is Langchain MCP Tools safe to connect to an agent?

With care. The audit graded it B (87/100) and found 8 things worth knowing before you trust this server, listed below with the exact line each was found on.

What credentials does Langchain MCP Tools need?

It reads BRAVE_API_KEY and GITHUB_PERSONAL_ACCESS_TOKEN from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.

How does Langchain MCP Tools run?

It speaks streamable-http, so it runs as a service you connect to over the network. It is published on PyPI as langchain-mcp-tools.

How current is this page?

The grade is for one exact copy of the source (2a53d2d939bd), read on 2026-10-08. The repository is watched and re-audited when it changes.

Advertisement