Atlas / MCP servers / shadowcz007 / Executable

ExecutableBLOCK

Name: Executable
Author: shadowcz007

mcp/shadowcz007/executable

MCP server by shadowcz007 · cursor · exe · mcp · Audited 2026-10-07

⚑ Report / re-scan Source ↗

小智 & Cursor 的 MCP 启动器 - MCP For Cursor&xiaozhi。打包成可执行文件。Turn MCP server into an executable file

Verdict

BLOCK

Grade

Trust score

69 /100

Exposed tools

11 10r · 1w · 0d

Transport

sse · stdio

License

MIT

Stars

166

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

小智 & Cursor 的 MCP 启动器 - MCP For Cursor&xiaozhi

MCP Server.exe 是一个强大的可执行服务器,它不仅能够运行标准的 MCP (Model Context Protocol) 服务,更提供了丰富的高级功能:

工具链式调用:支持将多个工具按序组合,实现复杂的自动化流程
多 MCP 服务组合:可同时运行和管理多个 MCP 服务,支持 SSE 和 stdio 双模式
插件化工具系统:支持自定义工具的动态加载和配置
灵活的部署选项:从单机运行到分布式部署,满足各类集成场景
自动重载:监听 --mcp-config 与 --mcp-js 变更,自动重启生效

MCP Server.exe is a powerful executable server that not only runs standard MCP (Model Context Protocol) services, but also provides rich advanced features:

Tool Chain Execution: Support sequential combination of multiple tools for complex automation
Multiple MCP Services: Can run and manage multiple MCP services simultaneously, supporting both SSE and stdio modes
Pluggable Tool System: Support dynamic loading and configuration of custom tools
Flexible Deployment: From standalone operation to distributed deployment, meeting various integration scenarios
Auto reload for config changes

Usage

# 推荐:通过 CLI 运行(无需本地构建)
npx mcp_exe --mcp-config ./examples/mcp.json

# 或运行打包后的可执行文件(Windows/macOS)
./executables/mcp_server-win-x64.exe --mcp-config ./examples/mcp.json

🎯 主要使用场景 | Main Usage Scenarios

1. WebSocket 连接模式 | WebSocket Connection Mode

支持通过 WebSocket 连接到其他 MCP 服务,特别适合连接到 xiaozhi.me 等的接入。通过配置文件,可以轻松地将多个 MCP 服务接入到 xiaozhi.me。

Support connecting to other MCP services via WebSocket, especially suitable for connecting to WebSocket-enabled MCP services like xiaozhi.me. Through configuration files, you can easily integrate multiple MCP services with xiaozhi.me.

# 使用配置文件连接到 xiaozhi.me / Start in WebSocket mode
npx mcp_exe --ws wss://api.xiaozhi.me/mcp/?token=...xxx --mcp-config ./examples/mcp-sse.json

配置示例 | Configuration Example (mcp-sse.json):

{
"mcpServers": {
"Model Server sse": {
"url": "http://127.0.0.1:3000"
}
},
"serverInfo": {
"serverName": "ws-client-mcp-s

Read from source at commit 0f7cd6fcc99aOBSERVED · 2026-10-07

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.

claude-code

claude mcp add mcp_exe -- npx -y [email protected]

claude-desktop

{
  "mcpServers": {
    "mcp_exe": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ]
    }
  }
}

Exposed tools (11)

10 read · 1 write · 0 destructive.

Tool	Risk	Description
`custom-tool`	read
`echo`	read
`exampleTool`	read	示例工具
`get-current-time`	read	Get the current date and time
`get_product_hunt_url`	read	get product hunt url
`greet`	read	问候工具
`integration-test`	read	集成测试工具
`load_product_hunt_js_code`	read	load product hunt js code
`math-add`	write	Add two numbers together
`test-echo`	read	Echo back the input message
`user`	read	store user

Trust audit

BLOCKgrade D · trust 69/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.

Layer	What it checks	Result
L0	Provenance & inventory	WARN
L1	Static analysis of the code	FAIL
L2	Instruction surface (what it tells the agent)	PASS
L3	Class-specific surface	PASS
L4	Behavioural (sandbox)	SKIPPED

What the source does

Filesystem: declared (1 observation(s))
Network: declared (4 observation(s))
Shell: declared (1 observation(s))
Dependencies: not all pinned
Secrets in source: none-found

Findings (15)

HIGHCode injection · code.eval_exec · CWE-78, CWE-94, CWE-95

src/utils/cursorLink.ts:22

exec(command, (error) => {

Why it matters. evaluates text as code

Fix. remove; use a parser or a dispatch table

MEDIUMInventory / provenance · inv.binary · CWE-1104

executables/notifier/InfoPlist.strings

InfoPlist.strings

Why it matters. a compiled or binary member cannot be reviewed from source