MCPBox
Health Warn
- License — License: Apache-2.0
- Description — Repository has a description
- Active repo — Last push 0 days ago
- Low visibility — Only 6 GitHub stars
Code Pass
- Code scan — Scanned 12 files during light audit, no dangerous patterns found
Permissions Pass
- Permissions — No dangerous permissions requested
No AI report is available for this listing yet.
Control center for managing MCP servers with project-based organization, web UI, and audit logging.
MCPBox
MCPBox is a Go-based control plane for MCP servers. It lets you group local and remote MCP backends by project, inspect what they expose, monitor traffic, and publish a single project URL for AI clients such as Claude, Cursor, Codex, LM Studio, and local Ollama-based workflows.
Click any screenshot to open it in full size.
Why MCPBox
Managing several MCP servers quickly turns into a mix of JSON snippets, terminal tabs, and half-documented local setup. MCPBox gives you one embedded UI and one local binary for the operational side of that work.
Key capabilities:
- Project-based organization for local
stdioand remoteHTTP streamingMCP servers - One project MCP endpoint at
/mcp/{project_token}that aggregates all enabled servers in the project - Built-in Knowledge Base / RAG collections with local indexing for code, text, CSV, XLSX, DOCX, PPTX, and text-based PDF
- Live inspection of
tools,resources,prompts, and nearby README files for localstdioservers - Health checks on create, update, manual check, and local server start
- Audit log for MCP traffic and control actions
- Project pause/resume and per-server enable/disable controls
- Embedded Market / Catalog flow for syncing, installing, verifying, and uninstalling integrations
- One-click Ollama launcher for local MCP testing through embedded
mcphost/sdk - Single-binary deployment with embedded React UI and local SQLite storage
What Is New In 1.2.2
- New
Launch Projectdialog that groups local launch actions in one place instead of exposing only a direct Ollama button - LM Studio launch support with
Add to LM Studioflow through a generatedlmstudio://add_mcpdeeplink - Better Ollama launch UX with model refresh inside the dialog and clearer empty-state handling when Ollama is not installed or has no local models
- Server
Checkaction now returns the latest health result immediately so the UI can show success or failure feedback without waiting for a full project reload - Aggregated project MCP traffic now writes explicit audit events for
tools/list,tools/call,resources/list,resources/read,prompts/list, andprompts/get - Health checks are much deeper for both local
stdioand remoteHTTP streamingservers: afterinitialize, MCPBox now verifies list endpoints and can run a safe follow-up probe such as DB query checks or filesystem listing - Health-check traces now record sanitized diagnostic details in the audit log, while masking secrets in command arguments, headers, URLs, and JSON payloads
- Catalog install flow now supports
install.strategy: "go_install"for Go-based integrations and maps managed binaries back into the generated server command - Registry cleanup on stop is safer: stopped server runners are removed from the in-memory registry instead of being left behind
- Market view now auto-syncs the catalog on open, so the page can populate without an extra manual sync in the common case
What Is New In 1.2.1
- Market page cleanup and refactor so the catalog UI is no longer a large monolithic block inside
App.tsx - Catalog source switcher with support for syncing from a remote URL or a local JSON file
- Default catalog source migrated from
webeasy.kzto mcpbox.sh - Better Market UX with improved install flow, clearer installed state, and package usage visibility
- Installed package lifecycle controls including safe uninstall when a package is not used by any project
Add to projectis shown only for packages that are already installed- Project duplication flow with a new name and full cloning of servers, integrations, package links, and connected knowledge bases
- Per-tool enable/disable inside each MCP server so individual tools can be turned off without disabling the whole server
- Disabled tools are filtered out from the aggregated project
tools/listresponse and blocked fromtools/call - Project creation/edit UI is simplified by removing the root path field from the modal
- Manifest support for
icon_url - Manifest support for
system_dependencieswith pre-install runtime checks - Manifest support for
default_env,env_schema,secret: true, andenv_var - Secrets from catalog install forms now flow into environment variables instead of staying in visible command arguments
- Project UI masks sensitive command arguments and secret environment/header values
- Catalog sync failures are now written to the audit log
- Manifest support for
health_checkto verify integrations after adding them to a project - Docker runtime MVP with
runtime.type: "docker"andinstall.strategy: "docker_pull"for stdio-oriented Docker-backed MCP servers - Better Python runtime fallback so installations work on systems with
python3but nopython - Logs view now includes built-in performance monitoring with latency, error, traffic, top-server breakdowns, and compact trend charts
What Is New In 1.2.0
- Built-in Knowledge Base / RAG workflow with a dedicated
Knowledge Basepage in the UI - Global knowledge collections that can be connected to one or many projects
- Local indexing and search for code, text, CSV, XLSX, DOCX, PPTX, and text-based PDF
- Project-level MCP tool
search_project_knowledgefor querying connected knowledge bases through the project endpoint - Better audit visibility for Knowledge Base tool calls and search activity
- Improved local document context with section metadata such as
Sheet,Slide, andPage
What Was New In 1.1.1
- Windows Ollama launch fix: the embedded
Launch Ollamaflow now starts correctly on Windows through a dedicated PowerShell path - Safer command execution on Windows: quoted paths and paths with spaces are handled more reliably
- Better Windows terminal startup: the launched chat session now respects the project working directory
- Automatic Windows recovery: if the Ollama daemon is not ready, MCPBox starts
ollama servebefore opening chat
What Was New In 1.1.0
- Embedded Ollama support for one-click local MCP testing
- New Market page and catalog-based integration flow
- Better project auto-start so all enabled local servers come up correctly
- Cleaner Filesystem MCP logs during normal operation
Quick Start
- Download the binary for your OS from the latest release, or build from source.
- Run
MCPBox. - Open
http://127.0.0.1:38180/if the browser does not open automatically. - Create a project.
- Add local
stdioservers or remoteHTTP streamingservers. - Copy the project endpoint from the UI and connect your AI client to
/mcp/{project_token}.
For local Ollama testing:
- Make sure
ollamais installed. - Open a project that has at least one enabled MCP server.
- Choose a local Ollama model in the UI.
- Click
Launch Ollama.
For LM Studio:
- Open a project that has at least one enabled MCP server or connected knowledge base.
- Click
Launch Project. - Choose
Add to LM Studio. - Confirm the deeplink in LM Studio when your OS opens it.
Build From Source
Requirements:
- Go
1.26+ - Node.js and npm
Build steps:
npm --prefix html install
npm --prefix html run build
go build -o MCPBox .
Run from source:
go run .
Default port: 38180
Documentation
- README-ru.md - Russian user guide
- DEVELOPER.md - developer guide, API notes, and architecture
- DEVELOPER-ru.md - Russian developer guide
Notes
- MCPBox uses a local SQLite database by default.
- The current Knowledge Base / RAG implementation uses local full-text indexing with Bleve. It does not build or require embedding indexes at this stage.
- The Docker runtime support in
1.2.1is intentionally an MVP. Advanced container features such as compose-style orchestration, custom networks, and volume presets are not fully implemented yet. - The
go_installpackage flow in1.2.2assumes the target integration can be installed throughgo install module/path@versionand exposed through a concrete binary entry point. - Secret masking is applied in the UI and catalog install flow. Existing manually configured servers that still pass secrets directly in command arguments should be migrated to environment variables for full process-list safety.
- Future
Procapabilities are documented separately inPRO-ROADMAP.mdand are not part of the current1.2.2implementation. - The Ollama launcher is shown only when
ollamais installed on the machine. - Local server inspection is available for
stdioservers only.
Reviews (0)
Sign in to leave a review.
Leave a reviewNo results found