MCP Toolkit
A collection of production-ready MCP servers for PostgreSQL, SQLite, Redis, File System, and GitHub API, enabling database operations, file management, and GitHub interactions through natural language.
Caution. Specific findings reduced this grade. They are listed on the page. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.
How we verified
Verified is a snapshot. Live keeps it current, and builds your track record.
⚡ Connect GitHub → continuous verification on every pushwhy connect →Who stands behind it
fastprosecurity
Source: Glama
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for our deepest verification, Live Monitored: read-only, revoke anytime. What we access →
Install from
The grade above is for the source repository. Registries can serve a different version, so we mark the ones we were not able to read.
These names and descriptions are the publisher's own, as the running server reported them. We print them as written. Our assessment is the findings above, not this list.
read_fileRead the contents of a file. Args: path: Path to the file (relative to root).
write_fileWrite content to a file. Args: path: Path to the file (relative to root). content: Content to write.
list_directoryList contents of a directory. Args: path: Directory path (relative to root, default: root).
create_directoryCreate a new directory. Args: path: Directory path (relative to root).
delete_fileDelete a file. Args: path: Path to the file (relative to root).
move_fileMove or rename a file. Args: source: Source path (relative to root). destination: Destination path (relative to root).
search_filesSearch for files matching a pattern. Args: pattern: Glob pattern to match. path: Directory to search in (default: root).
list_reposList repositories for a user or organization. Args: owner: Repository owner (default: authenticated user). sort: Sort by: created, updated, pushed, full_name. per_page: Results per page (max 100).
get_repoGet detailed repository information. Args: owner: Repository owner. repo: Repository name.
list_issuesList issues in a repository. Args: owner: Repository owner. repo: Repository name. state: Issue state: open, closed, all. per_page: Results per page.
create_issueCreate a new issue. Args: owner: Repository owner. repo: Repository name. title: Issue title. body: Issue body. labels: Optional list of labels.
list_prsList pull requests in a repository. Args: owner: Repository owner. repo: Repository name. state: PR state: open, closed, all. per_page: Results per page.
get_fileGet file contents from a repository. Args: owner: Repository owner. repo: Repository name. path: File path. ref: Optional branch/tag/commit (default: default branch).
search_codeSearch for code across repositories. Args: query: Search query. owner: Optional owner filter. repo: Optional repo filter. per_page: Results per page.
queryExecute a SELECT query and return results. Args: sql: SQL SELECT query. params: Optional query parameters.
executeExecute an INSERT, UPDATE, or DELETE statement. Args: sql: SQL statement. params: Optional query parameters.
list_tablesList all tables in the database.
describe_tableGet detailed schema information for a table. Args: table_name: Name of the table to describe.
explain_queryGet the execution plan for a query. Args: sql: SQL query to explain.
getGet the value of a key. Args: key: The key to get.
setSet a key-value pair. Args: key: The key to set. value: The value to set. ex: Optional expiration time in seconds.
deleteDelete one or more keys. Args: keys: List of keys to delete.
keysList keys matching a pattern. Args: pattern: Pattern to match (default: *).
hgetGet a field value from a hash. Args: name: Hash name. key: Field name.
hsetSet a field in a hash. Args: name: Hash name. key: Field name. value: Field value.
lrangeGet a range of elements from a list. Args: name: List name. start: Start index. end: End index (-1 for all).
publishPublish a message to a channel. Args: channel: Channel name. message: Message to publish.
vacuumOptimize database storage by running VACUUM.
GITHUB_TOKENREDIS_URLTool annotations
No tools have read-only/destructive annotations
Add readOnlyHint or destructiveHint annotations to every tool so hosts can warn users before invoking.
All four hints declared on every tool
32/32 tools missing one or more hints — read_file (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); write_file (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); list_directory (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint), +29 more. OpenAI's directory rejects tools where any of the four hints are missing or non-boolean.
For every tool, set all four hints (readOnlyHint, destructiveHint, idempotentHint, openWorldHint) to explicit true/false values that match the handler’s actual behaviour.
Destructive tools are labelled
1 tool perform destructive updates without destructiveHint — delete_file deletes at line 148 (shutil.rmtree(file_path))
Add destructiveHint:true to any tool whose handler calls .delete(), .upsert(), .update(), unlink, rm, DELETE, DROP, REPLACE INTO, or any operation that overwrites existing data.
Tool test coverage
Only 1/32 tools referenced in tests (3%)
Write tests that reference each tool by name so every tool has at least one test.
Claim the listing to review these findings one by one and send us a correction where you disagree, straight to the team. Claiming also means we tell you when the grade moves, and reach you first if we find anything urgent.
[](https://m8ven.ai/mcp/fastprosecurity/mcp-toolkit)?variant=verified from the URL.Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.
https://m8ven.ai/api/mcp/tool-check