Atlas / MCP servers / milisp / Linker

LinkerCAUTION

Name: Linker
Author: milisp

mcp/milisp/linker

MCP server by milisp · ai · awesome · claude · Audited 2026-10-03

⚑ Report / re-scan Source ↗

mcp store manager, add & syncs MCP server configurations across clients like Claude code, Cursor💡mcphub

Verdict

CAUTION

Grade

Trust score

82 /100

Exposed tools

19 16r · 3w · 0d

Transport

streamable-http

License

AGPL-3.0

Stars

328

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

[](https://github.com/milisp/mcp-linker/stargazers) [](https://github.com/milisp/mcp-linker/releases) [](#) [](CONTRIBUTING.md)

🌐 Languages: 中文 | 🌍 Other Languages

One-click add and sync MCP servers across AI clients — No LLM calls needed, Built-in marketplace

[!TIP] ⭐ Star the repo and follow milisp on Twitter and GitHub for more!

🚀 Why MCP Linker?

⚡ Instant — Add MCP servers in seconds
🧠 Multi-Client Support — Works with all major AI clients

✨ Features

Local Sync — Sync MCP server configs across multiple clients
Official MCP Registry — Browse and install servers straight from registry.modelcontextprotocol.io
Multi-Client Support — Claude Desktop/Code, Cursor, VS Code, Cline, Windsurf, Codex, Roo Code. see Detail
Cross-Platform — macOS, Windows, Linux
Smart Detection — Auto-detect Python, Node.js, uv environments
GUI for OpenAI Codex CLI — based on Codexia

🚀 Quick Start

Installation

Arch Linux (AUR)

yay -S mcp-linker-bin

macOS (Homebrew)

brew install --cask milisp/mcp-linker/mcp-linker

Windows / Linux / macOS (Direct Download) Download the: 📥latest Releases

[!Note] If you have subscribed, please relaunch the app after logging in for the first time.

Getting Started

Browse MCP servers in the built-in marketplace
Click "Get" to show configuration
Click "Add" to install

Read from source at commit e17eed024281OBSERVED · 2026-10-03

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.

claude-code

claude mcp add mcp-linker -- npx -y [email protected]

claude-desktop

{
  "mcpServers": {
    "mcp-linker": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ]
    }
  }
}

Exposed tools (19)

16 read · 3 write · 0 destructive.

Tool	Risk	Description
`airtable`	write	Read/write records, manage bases and tables
`asana`	read	Interact with your Asana workspace to keep projects on track
`atlassian`	read	Manage your Jira tickets and Confluence docs
`clickup`	read	Task management, project tracking
`cloudflare`	read	Build applications, analyze traffic, monitor performance, and manage security settings
`figma`	read	Access designs, export assets (Requires Figma Desktop with Dev Mode MCP Server)
`intercom`	read	Access real-time customer conversations, tickets, and user data
`invideo`	read	Build video creation capabilities into your applications
`linear`	read	Integrate with Linear
`notion`	write	Read docs, update pages, manage tasks
`parallel-search`	write	Opt in by clicking Add. User-provided search objectives, search queries, and requested URLs are sent to Parallel.
`paypal`	read	Integrate PayPal commerce capabilities, payment processing, transaction management
`plaid`	read	Analyze, troubleshoot, and optimize Plaid integrations. Banking data, financial account linking
`sentry`	read	Monitor errors, debug production issues
`socket`	read	Security analysis for dependencies
`square`	read	Use an agent to build on Square APIs. Payments, inventory, orders, and more
`stripe`	read	Payment processing, subscription management, and financial transactions
`workato`	read	Access any application, workflows or data via Workato, made accessible for AI
`zapier`	read	Connect to nearly 8,000 apps through Zapier

Trust audit

CAUTIONgrade B · trust 82/100 Install with care. The audit found things worth knowing before you trust its output.

Layer	What it checks	Result
L0	Provenance & inventory	WARN
L1	Static analysis of the code	WARN
L2	Instruction surface (what it tells the agent)	PASS
L3	Class-specific surface	WARN
L4	Behavioural (sandbox)	SKIPPED

What the source does

Filesystem: declared (3 observation(s))
Network: declared (6 observation(s))
Shell: none-observed
Dependencies: not all pinned
Secrets in source: none-found

Findings (17)

MEDIUMInventory / provenance · inv.binary · CWE-1104

src-tauri/icons/icon.icns

icon.icns

Why it matters. a compiled or binary member cannot be reviewed from source

Fix. ship source, or explain the binary in the README

MEDIUMNetwork egress · net.raw_ip · CWE-200, CWE-319

src/components/claude-code/PreConfiguredServersDialog.tsx:143

url: "http://127.0.0.1:3845/sse"

MEDIUMAuth / authz · mcp.remote_no_auth · CWE-287, CWE-862

streamable-http

Why it matters. a network transport with no auth environment variable found

Fix. require a token

LOWInventory / provenance · inv.hidden_file · CWE-1104

.prettierignore

.prettierignore

Why it matters. hidden member outside the usual dotfiles

Fix. review its purpose

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

src/components/server/form/NetworkConfigSection.tsx:2

import { LabeledInput } from "../../shared/LabeledInput";

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

src/components/server/form/ServerConfigForm.tsx:3

import { LabeledInput } from "../../shared/LabeledInput";

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

src/components/server/form/ServerTemplateForm.tsx:2

import { LabeledInput } from "../../shared/LabeledInput";

LOWObfuscation / stealth · obf.decode_call · CWE-506, CWE-94

src/hooks/useGithubReadmeJson.ts:47

const readme = atob(data.content.replace(/\n/g, ""));

LOWObfuscation / stealth · obf.decode_call · CWE-506, CWE-94

src/pages/InstallApp.tsx:26

const decodedConfig = atob(config);

LOWObfuscation / stealth · obf.decode_call · CWE-506, CWE-94

src/pages/InstallApp.tsx:30

return atob(config);

LOWObfuscation / stealth · obf.decode_call · CWE-506, CWE-94

src/utils/urlHelper.ts:21

const binary = atob(base64);