Atlas / MCP servers / mcpany / MCP Any

MCP AnyBLOCK

Name: MCP Any
Author: mcpany

mcp/mcpany/mcp-any

MCP server by mcpany · Audited 2026-10-10

⚑ Report / re-scan Source ↗

Verdict

BLOCK

Grade

Trust score

31 /100

Exposed tools

47 43r · 4w · 0d

Transport

sse · stdio · streamable-http

License

Apache-2.0

Stars

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

Elevator Pitch

What is this? MCP Any is the Universal Adapter for AI agents. Why does it exist? It empowers developers to build secure, capability-enabled APIs (REST, gRPC, GraphQL, Command-line) through lightweight YAML/JSON configurations, serving as an ultimate universal bridge and eliminating the need to write custom boilerplate adapters. It acts as the backbone of interoperable autonomous systems.

Architecture

MCP Any relies on a "Configuration over Code" pattern. Users deploy a single binary which reads dynamically loaded capability definitions. The architecture supports gRPC, OpenAPI, HTTP, GraphQL, and CLI tools seamlessly without touching the underlying source code.

Key Design Patterns & Features:

Dynamic Tool Registration: Add and modify capabilities purely via configuration files at runtime.
Safety Policies: Robust constraint engines and safety layers designed to restrict arbitrary code execution and contain side effects safely.
Upstream Authentication: Out-of-the-box identity federation with various standard identity providers.
Multi-Tenant Isolation: Safe-by-default execution spaces that maintain boundary domains between differing agent systems.

High-Level Flow

graph TD
classDef agent fill:#f9f,stroke:#333,stroke-width:2px;
classDef core fill:#bbf,stroke:#333,stroke-width:2px;
classDef target fill:#bfb,stroke:#333,stroke-width:2px;

A[Client Application / Agent Framework]:::agent -->|Model Context Protocol| B(MCP Any Adapter Hub):::core

subgraph Config [Capability Configurations]
B --> C{Dynamic Router}
end

C -->|REST/OpenAPI Specs| D[REST/HTTP API]:::target
C -->|Protobuf/Reflection| E[gRPC Service]:::target
C -->|GraphQL Schema| F[GraphQL Endpoint]:::target
C -->|Standard I/O| G[Command Line Tools]:::target

Getting Started

Follow these step-by-step instructions t

Read from source at commit 3517ea122951OBSERVED · 2026-10-10

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.

claude-code

claude mcp add nextn --env MCPANY_API_KEY=${MCPANY_API_KEY} -- npx -y [email protected]

claude-desktop

{
  "mcpServers": {
    "nextn": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ],
      "env": {
        "MCPANY_API_KEY": "${MCPANY_API_KEY}"
      }
    }
  }
}

Exposed tools (47)

43 read · 4 write · 0 destructive.

Tool	Risk	Description
`ALLOWED_PATH`	read	Path to expose (e.g. /home/user/projects)
`Cloudflare`	read	Manage Cloudflare resources.
`DB_PATH`	read	Path to SQLite database file
`Everything`	read	Reference server with all MCP features.
`Filesystem`	write	Read/Write access to local files and directories.
`GITHUB_PERSONAL_ACCESS_TOKEN`	read	Personal Access Token (classic or fine-grained)
`GitHub`	read	Access GitHub repositories, issues, and pull requests.
`Linear`	read	Linear issue tracking integration
`PostgreSQL`	read	Connect to a PostgreSQL database.
`Puppeteer`	read	Browser automation and scraping.
`SQLite`	read	Query and manage SQLite databases.
`Sentry`	read	Access Sentry issues and errors.
`Slack`	read	Interact with Slack channels and messages.
`Test`	read	Test
`Time`	read	Check the current time in any timezone.
`calculator`	write	Performs basic arithmetic operations (add, subtract, multiply, divide)
`calculator_add`	write	Add two numbers
`db_query`	write	Run a database query
`diff_test_tool`	read	Test diffing
`disabled-tool`	read	A disabled tool
`echo`	read	Echoes back the input message
`echo_tool`	read	Echoes back input
`get_user`	read	Get user details
`get_users`	read	Returns a list of users in a table
`get_weather`	read	Get weather for a location
`ghost_tool`	read	Heavy and unused
`heavy_tool`	read	A very heavy tool
`light_tool`	read	Light
`list_directory`	read	List files in a directory
`new_tool`	read	New Tool Description
`process_payment`	read	Process a payment via Stripe.
`read_file`	read	Read a file
`repeated_string`	read	list of strings
`say`	read	Says a message using cowsay.
`special-tool`	read	A very special tool
`system_info`	read	Returns basic system information (simulated)
`test-prompt`	read	A test prompt
`test-tool`	read	A test tool
`test_tool`	read	A test tool
`tool-1`	read	A test tool
`tool-2`	read	Description 2
`tool-3`	read	Description 3
`tool1`	read	Tool 1
`tool2`	read	Tool 2
`tool3`	read	Tool 3
`used_tool`	read	Used
`weather`	read	Get current weather for a location

Trust audit

BLOCKgrade F · trust 31/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.

Layer	What it checks	Result
L0	Provenance & inventory	PASS
L1	Static analysis of the code	FAIL
L2	Instruction surface (what it tells the agent)	FAIL
L3	Class-specific surface	PASS
L4	Behavioural (sandbox)	SKIPPED