toolhive: Enterprise-grade platform for running and managing Model Context Protocol (MCP) servers

Security audit verdict: SAFE · quality 61/100

None of the 42 rules matched — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against 42 published rules built on the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →

The quality score combines nine heuristic checks of the repo and its README: completeness, clarity, specificity, examples, structure, agent readiness, step-by-step content, instruction quality and security notes. It rates how well the project explains itself to an agent, not the code.

Quick Facts

About toolhive

[![Release][release-img]][release] [![Build status][ci-img]][ci] [![Coverage Status][coveralls-img]][coveralls] [![License: Apache 2.0][license-img]][license] [![Star on GitHub][stars-img]][stars] [![Discord][discord-img]][discord] ToolHive - simplify and secure MCP servers Run any Model Context Protocol (MCP) server: securely, instantly, anywhere.

Compatible Skills

These tools work well together with toolhive for enhanced workflows:

• reconmap — semantic(0.22)+complementary+rare_topics+same_lang+similar_pop+shared_platform (57%)
• k8s-operator — semantic(0.22)+complementary+rare_topics+same_lang+similar_pop+shared_platform (57%)
• kubernetes-mcp-server — semantic(0.35)+rare_topics+same_lang+similar_pop+shared_platform (52%)
• quickstart-resources — semantic(0.15)+complementary+same_lang+similar_pop+shared_platform (50%)
• mcp-for-security — semantic(0.49)+rare_topics+similar_pop+shared_platform (46%)

toolhive alternative? Top 6 similar tools

Looking for a toolhive alternative? If you're comparing toolhive with other mcp server tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.

• mcp-use by mcp-use · ⭐ 10.9k

  The fullstack MCP framework to develop MCP Apps for ChatGPT / Claude & MCP Servers for AI Agents.

• arcade-mcp by ArcadeAI · ⭐ 1.1k

  MCP Server Framework and Tool Development library for building custom capabilities into agents.

• mcp-context-forge by IBM · ⭐ 4.8k

  An AI Gateway, registry, and proxy that sits in front of any MCP, A2A, or REST/gRPC APIs, exposing a unified e

• archestra by archestra-ai · ⭐ 4.4k

  Enterprise AI Platform with guardrails, MCP registry, gateway & orchestrator

• jadx-ai-mcp by zinja-coder · ⭐ 2.9k

  Plugin for JADX to integrate MCP server

• metamcp by metatool-ai · ⭐ 2.7k

  MCP Aggregator, Orchestrator, Middleware, Gateway in one docker

More MCP Server Tools

Explore other popular mcp server tools:

• n8n ⭐ 209.8k
• gemini-cli ⭐ 108.8k
• awesome-mcp-servers ⭐ 97.4k
• TrendRadar ⭐ 63.5k
• context7 ⭐ 64.3k
• UI-TARS-desktop ⭐ 39.2k
• chrome-devtools-mcp ⭐ 54.9k
• github-mcp-server ⭐ 34.3k
• gpt-researcher ⭐ 30.0k
• Scrapling ⭐ 97.0k

Popular Go Agent Tools

• github-mcp-server ⭐ 34.3k · MCP Server
• nginx-ui ⭐ 11.7k · MCP Server
• xiaohongshu-mcp ⭐ 17.0k · MCP Server
• httprunner ⭐ 4.3k · MCP Server
• ENScan_GO ⭐ 4.6k · MCP Server

How this security grade is produced

Grades come from a rule-based scan built on the SlowMist agent-security taxonomy: 42 published rules, covering credential harvesting, data exfiltration, curl | sh installers and more. It is a first-layer scan, not a manual audit — we say so rather than overstate it.

The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.

Sources & who's responsible:

• SlowMist agent-security taxonomy
• Liu et al., An Empirical Study of Agent Skill Security (2026)
• Our census dataset (DOI 10.5281/zenodo.21292799) · Hugging Face mirror
• How we grade: all 42 rules, the source tiers and known limits
• Full methodology & who runs this