A lightweight utility designed to simplify the deployment and management of MCP servers, ensuring ease of use, consistency, and security through containerizatio
A lightweight utility designed to simplify the deployment and management of MCP servers, ensuring ease of use, consistency, and security through containerization by [StacklokLabs](https://github.com/StacklokLabs)
README
The open source MCP platform trusted by developers and enterprises
ToolHive runs every MCP server in an isolated container, enforces identity and access policy per request, and gives platform teams the observability they need to put MCP in production.
Why ToolHive?
Here are some of the more common use cases for ToolHive:
Developers. Run MCP servers with more security and more (token) savings
Platform Engineers. Run MCP on your existing Kubernetes infrastructure
Enterprises. Self-host MCP servers and stay in control of your data
Connect Claude Code, Cursor, GitHub Copilot, or your preferred client to MCP servers with a single click or command.
ToolHive wraps every MCP server in an isolated container with a minimal permission file (no local credentials) and uses semantic tool search to reduce your token usage by up to 85%.
Put an end to shadow MCP use by your developers, and give your security team the audit logs and identity enforcement they require.
ToolHive includes a Kubernetes operator, so you can declare policies, integrate with your IdP and observability stack, emit OTel traces, and more … all with familiar tools and patterns.
Most MCP solutions are SaaS, but your compliance requirements prohibit sensitive info from being processed by SaaS providers.
ToolHive is the exception that allows you to self-host your MCP registry, gateway, etc. You can pilot the entire platform, and when you’re ready to scale, Stacklok’s got the added capabilities and expert team ready!
Make it easy for admins to curate MCP servers and tools
Automate server discovery
Install MCP servers with a single click
Compatible with hundreds of AI clients
How it works together
Admins curate and organize MCP servers in the Registry, configuring access and policies.
Users discover and request MCP servers from the Portal, and ToolHive orchestrates installation and access.
Runtime securely deploys and manages MCP servers across local and cloud environments, integrating seamlessly with existing SDLC workflows, exporting analytics, and enforcing fine-grained access control.
Gateway handles all inbound traffic, secures context and credentials, optimizes tool selection, and applies organizational policies.
Flexible deployment
Desktop experience
Individual developers can get started in minutes with the desktop UI or CLI, then apply the same concepts in enterprise environments.
Key features:
Run any MCP server from a container image, or build one dynamically from common package managers
Manage encrypted secrets and control network isolation with simple, local tooling
Test and validate MCP servers using built-in tools like the official MCP Inspector
Optimize token usage and tool execution with the MCP Optimizer
ToolHive's complete solution for teams and enterprises supports MCP servers across all environments: on developer machines, inside your Kubernetes clusters, or hosted externally by trusted SaaS providers.
End users access approved MCP servers through a secure, browser-based cloud UI. Developers can also connect using the ToolHive CLI or desktop UI for advanced integration and testing workflows.
Enterprise teams can also leverage ToolHive to integrate MCP servers into custom internal tools, agentic workflows, or chat-based interfaces, using the same runtime and access controls.
Contributing
We welcome contributions and feedback from the community!
Stacklok Enterprise
