← all repositories
stacklok/toolhive

Your AI assistant's plugin habit, containerized

ToolHive exists to corral the growing herd of Model Context Protocol servers—used by Claude, Cursor, and Copilot—into isolated containers with proper identity, policy, and observability.

toolhive
Velocity · 7d
+33
★ / day
Trend
accelerating
star history

What it does

ToolHive runs Model Context Protocol (MCP) servers inside isolated containers instead of directly on host machines, exposing no local credentials. It provides a gateway that enforces identity and access policies per request, a registry for curating approved servers, and a runtime that deploys locally via Docker or Podman and at scale through a Kubernetes operator. Developers connect through a desktop app, browser UI, or CLI to discover and install servers while admins retain centralized control.

The interesting bit

The README claims ToolHive can reduce token usage by up to 85% through semantic tool search and description filtering—turning a security control into a cost optimization. It also ships a full Kubernetes operator with CRDs, OpenTelemetry traces, and Prometheus metrics, treating MCP servers as production infrastructure rather than local developer conveniences.

Key highlights

  • Runs MCP servers in isolated containers with minimal permission files and no local credentials
  • Gateway enforces per-request identity, access policies, SSO via OIDC/OAuth, and audit logging
  • Kubernetes operator includes Custom Resource Definitions, multi-namespace support, ingress integration, and fleet management
  • Registry server integrates with the official MCP registry while supporting custom servers, provenance verification, and signing
  • Cross-platform desktop and cloud UIs provide one-click server installation compatible with hundreds of AI clients

Caveats

  • Core platform components (desktop UI, cloud UI, registry server) live in separate repositories; this repo contains the CLI, API, and operator
  • The “up to 85%” token reduction figure is self-reported, not independently benchmarked
  • Some advanced capabilities referenced in the documentation are reserved for the commercial Stacklok Enterprise tier

Verdict

Platform engineers who need to stop shadow MCP deployments and enterprises with compliance requirements that prohibit SaaS AI gateways should look here. Solo developers running one-off local servers may find the policy and Kubernetes machinery overkill.

Frequently asked

What is stacklok/toolhive?
ToolHive exists to corral the growing herd of Model Context Protocol servers—used by Claude, Cursor, and Copilot—into isolated containers with proper identity, policy, and observability.
Is toolhive open source?
Yes — stacklok/toolhive is open source, released under the Apache-2.0 license.
What language is toolhive written in?
stacklok/toolhive is primarily written in Go.
How popular is toolhive?
stacklok/toolhive has 2.2k stars on GitHub and is currently accelerating.
Where can I find toolhive?
stacklok/toolhive is on GitHub at https://github.com/stacklok/toolhive.

heatdrop uses Google Analytics to see which pages get read — nothing else. Your call. How we handle data.