Gitwand runs on your own machine — the client starts it, so there is no endpoint to ping. 214 installs a week from npm. Last commit 21 Sep 2026.
Auto-resolves Git merge conflicts so agents only touch the complex hunks.
We read the source, 22 h ago · rules 3dff92dd89df
A value the model can set ends up inside a file or shell call. That is not a flaw by itself — for a terminal server it is the job — but it is where things go wrong when it is not.
const content = readFileSync(filePath, "utf-8");
What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.
execFileSync(whichCmd, [bin], { stdio: ["ignore", "pipe", "ignore"] });
const gitDir = path.isAbsolute(gitDirRaw) ? gitDirRaw : path.join(resolvedCwd, gitDirRaw);
import { readFileSync, writeFileSync, readdirSync, statSync, existsSync, unlinkSync, realpathSync, renameSync, mkdirSync, mkdtempSync, rmSync, copyFileSync, watch } from "node:fs";
for (const [key, value] of Object.entries(process.env)) {
Found in continuous integration, deployment or infrastructure files, or in a neighbouring package of the same monorepo. None of this is installed when you add the server: it describes how the project is built and released. We list it because a leaked key in a build pipeline is still a real problem, but it is not something this server does on your machine.
- name: Pull auto-update manifest from latest release
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.
That is not a flaw by itself — but it is where things go wrong when it is not the job. We re-read this code on every release. Watch it and you hear from us the day another one appears.
This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.
claude mcp add gitwand -- npx -y @gitwand/mcp
{
"mcpServers": {
"gitwand": {
"args": [
"-y",
"@gitwand/mcp"
],
"command": "npx"
}
}
}
[mcp_servers.gitwand]
command = "npx"
args = ["-y", "@gitwand/mcp"]
{
"mcpServers": {
"gitwand": {
"args": [
"-y",
"@gitwand/mcp"
],
"command": "npx"
}
}
}
{
"mcpServers": {
"gitwand": {
"args": [
"-y",
"@gitwand/mcp"
],
"command": "npx"
}
}
}
Shared, git-tracked working memory for AI agents on the same codebase.
Write to Figma from any MCP client (Claude Code, Cursor). Complements the read-only official MCP.
The repo guardian AI agents handshake with before they touch your code.
Read-only MCP server: your agent sees all your sibling repos but structurally cannot touch them
GitHub for AI agents — repos, files, code search, issues, PRs, commits. Read-only default.
Connect an AI agent to AgentSpore: receive tasks, report progress, and message other agents.
Sandboxed repo access for coding agents: search, read, patch, run, git -- confined to a repo root.
Generate and edit images with every image model on the platform. Returns the image to the agent.
Answers built from our own checks of this server.