Atlas / MCP servers / txbm / Local Dev

Local DevCAUTION

mcp/txbm/local-dev

Let LLMs manage your local dev environments

Verdict
CAUTION
Grade
B
Trust score
89 /100
Exposed tools
4 1r · 3w · 0d
Transport
stdio
License
—
Stars
28
01

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

Let AI handle your local development environments while you focus on building amazing things!

✨ What's This?

A local development environment manager that lets LLMs configure and manage dev environments for you. Built for AI assistants to handle environment setup, dependency management, and testing automatically.

🏃 Quick Start

  1. Install Claude Desktop from the MCP quickstart guide
  2. Add the following to your Claude Desktop config:
{
"servers": {
"local_dev": {
"command": "uvx",
"args": [
"--from",
"git+https://github.com/txbm/mcp-local-dev@main",
"mcp-local-dev"
]
}
}
}
  1. Point Claude at any GitHub repository and ask it to set up a dev environment!
  1. Have it run the tests and report coverage!
  1. Have a discussion, poke around or clean it up if you're done!

🎯 Core Features

Test Runners

  • 🧪 pytest with coverage reporting
  • ⚡️ Vitest with V8 coverage
  • 🃏 Jest with detailed coverage metrics
  • 🔬 unittest with coverage support

Runtime Support

  • 🐍 Python with UV package management
  • 📦 Node.js with NPM
  • ⚡️ Bun runtime and package manager

Environment Management

  • 🏗️ Automatic runtime detection
  • 📦 Smart package manager selection
  • 🔒 Sandboxed environments
  • 🧹 Automatic cleanup
  • 🔄 GitHub repository support
  • 📂 Local project su
Read from source at commit 7a7b222fb79eOBSERVED · 2026-10-08
02

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.

claude-code
claude mcp add stats-example -- npx -y [email protected]
claude-desktop
{
  "mcpServers": {
    "stats-example": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ]
    }
  }
}
03

Exposed tools (4)

1 read · 3 write · 0 destructive.

ToolRiskDescription
local_dev_cleanupreadClean up a local development environment
local_dev_from_filesystemwriteCreate a new local development environment from a filesystem path
local_dev_from_githubwriteCreate a new local development environment from a GitHub repository
local_dev_run_testswriteAuto-detect and run tests in a local development environment
04

Trust audit

CAUTIONgrade B · trust 89/100 Install with care. The audit found things worth knowing before you trust its output.

LayerWhat it checksResult
L0Provenance & inventoryWARN
L1Static analysis of the codeWARN
L2Instruction surface (what it tells the agent)PASS
L3Class-specific surfacePASS
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
none-observed
Network
none-observed
Shell
none-observed
Dependencies
not all pinned
Secrets in source
none-found

Findings (4)

MEDIUMInventory / provenance · inv.binary · CWE-1104
fixtures_data/javascript/vitest-project/bun.lockb
bun.lockb
Why it matters. a compiled or binary member cannot be reviewed from source
Fix. ship source, or explain the binary in the README
MEDIUMSupply chain · supply.git_dep · CWE-829, CWE-1357
pyproject.toml:14
"mcp@git+https://github.com/txbm/python-sdk",
LOWInventory / provenance · inv.no_license · CWE-1104
Why it matters. no LICENSE file and no repo licence
Fix. add a licence
LOWSupply chain · supply.unpinned · CWE-829, CWE-1357
fixtures_data/javascript/jest-project/package.json
jest
Why it matters. 1 dependency range(s) float
Fix. pin exact versions or ship a lockfile

Gates applied: no_behavioural_pass, no_license.

Audited 2026-10-08 · audit v0.4.1 · source sha 7a7b222fb79efull audit observations/trust-audit/mcp-server/txbm__local-dev.json · Report an issue / request a re-scan
05

Audit history

Every audit this server has had. A grade with a past is a grade somebody is still checking.

DateSourceVerdictGradeScoreChange
2026-10-087a7b222fb79eCAUTIONB89first audit
06

Questions

What is the Local Dev MCP server?

Let LLMs manage your local dev environments

What tools does Local Dev expose?

4 in total: 1 read-only, 3 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.

Is Local Dev safe to connect to an agent?

With care. The audit graded it B (89/100) and found 4 things worth knowing before you trust this server, listed below with the exact line each was found on.

What credentials does Local Dev need?

No credential environment variables were found in its source, so it appears to need none.

How does Local Dev run?

It speaks stdio, so it runs as a local process your client starts. It is published on npm as stats-example at 0.1.0.

How current is this page?

The grade is for one exact copy of the source (7a7b222fb79e), read on 2026-10-08. The repository is watched and re-audited when it changes.

Advertisement