toolhive — security grade SAFE, quality 61/100

Security audit verdict: SAFE · quality 61/100

No red flags found in any of the 11 categories — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →

by stacklok · MCP Server · ★ 2.2k

Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h

🔒 Is toolhive safe to install? View the security audit →

About toolhive

[![Release][release-img]][release] [![Build status][ci-img]][ci] [![Coverage Status][coveralls-img]][coveralls] [![License: Apache 2.0][license-img]][license] [![Star on GitHub][stars-img]][stars] [![Discord][discord-img]][discord] ToolHive - simplify and secure MCP servers Run any Model Context Protocol (MCP) server: securely, instantly, anywhere. ToolHive includes everything you need to use MCP servers in production. Rather than build or combine components yourself, use ToolHive's Registry Server, Runtime, Gateway, and Portal to get up and running quickly and safely. ToolHive keeps you in control of your MCP estate. Integrate with popular clients in seconds and deploy pre-vetted MCP servers in locked-down containers with a single click or command. ToolHive is available as a desktop app, web app, CLI, and Kubernetes operator. Why ToolHive? Instant deployment: Start any MCP server with one click or command, using Docker or Kubernetes. Secure by default: Every server runs in an isolat

aiai-securityaicodeassistantgolangkubernetesmcpmcp-securitymcp-serversmcp-toolsmodel-context-protocol

Quick Facts

Stars2,205
Forks302
LanguageGo
CategoryMCP Server
LicenseApache-2.0
Quality Score60.5688567608087/100
Open Issues366
Last Updated2026-09-22
Created2025-03-12
Platformsgo, k8s, mcp
Est. Tokens~18k

Compatible Skills

These tools work well together with toolhive for enhanced workflows:

  • reconmap — semantic(0.22)+complementary+rare_topics+same_lang+similar_pop+shared_platform (57%)
  • k8s-operator — semantic(0.22)+complementary+rare_topics+same_lang+similar_pop+shared_platform (57%)
  • kubernetes-mcp-server — semantic(0.35)+rare_topics+same_lang+similar_pop+shared_platform (52%)
  • quickstart-resources — semantic(0.15)+complementary+same_lang+similar_pop+shared_platform (50%)
  • mcp-for-security — semantic(0.49)+rare_topics+similar_pop+shared_platform (46%)

toolhive alternative? Top 6 similar tools

Looking for a toolhive alternative? If you're comparing toolhive with other mcp server tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.

  • mcp-use by mcp-use · ⭐ 10.7k

    The fullstack MCP framework to develop MCP Apps for ChatGPT / Claude & MCP Servers for AI Agents.

  • arcade-mcp by ArcadeAI · ⭐ 1.0k

    MCP Server Framework and Tool Development library for building custom capabilities into agents.

  • mcp-context-forge by IBM · ⭐ 4.5k

    An AI Gateway, registry, and proxy that sits in front of any MCP, A2A, or REST/gRPC APIs, exposing a unified e

  • archestra by archestra-ai · ⭐ 4.3k

    Enterprise AI Platform with guardrails, MCP registry, gateway & orchestrator

  • jadx-ai-mcp by zinja-coder · ⭐ 2.7k

    Plugin for JADX to integrate MCP server

  • metamcp by metatool-ai · ⭐ 2.7k

    MCP Aggregator, Orchestrator, Middleware, Gateway in one docker

More MCP Server Tools

Explore other popular mcp server tools:

View all MCP Server tools →

Popular Go Agent Tools

Frequently Asked Questions

What is toolhive?

toolhive is ToolHive is an enterprise-grade platform for running and managing Model Context Protocol (MCP) servers.. It is categorized as a MCP Server with 2.2k GitHub stars.

What programming language is toolhive written in?

toolhive is primarily written in Go. It covers topics such as ai, ai-security, aicodeassistant.

How do I install or use toolhive?

You can find installation instructions and usage details in the toolhive GitHub repository at github.com/stacklok/toolhive. The project has 2.2k stars and 302 forks, indicating an active community.

What license does toolhive use?

toolhive is released under the Apache-2.0 license, making it free to use and modify according to the license terms.

What are the best alternatives to toolhive?

The top alternatives to toolhive on Agent Skills Hub include mcp-use, arcade-mcp, mcp-context-forge. Each offers a different approach to the same problem space — compare them side-by-side by stars, quality score, and community activity.

How this security grade is produced

Grades come from a rule-based scan built on the SlowMist agent-security taxonomy, covering 11 red-flag categories including credential harvesting, data exfiltration, and curl | sh installers. It is a first-layer scan, not a manual audit — we say so rather than overstate it.

The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.

Sources & who's responsible:

View on GitHub → Browse MCP Server tools