Universal Brute Workpack MCP Server

What the code does

We read the source, 3 d ago · rules 995398eba69f

A value the model can set ends up inside a file or shell call. That is not a flaw by itself — for a terminal server it is the job — but it is where things go wrong when it is not.

        if (created) await fs.unlink(temporary).catch((cleanupError) => { if (cleanupError.code !== 'ENOENT') entry.record.warnings.push('Could not clean up an owned temporary state file'); });

What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.

      const killer = spawn(join(process.env.SystemRoot || 'C:\\Windows', 'System32', 'taskkill.exe'),

  const persisted = (await fs.readdir(stateDir)).filter((name) => /^[0-9a-f-]{36}\.json$/.test(name));

    || ['.npmrc', '.netrc', '.git-credentials'].includes(base)

  for (const [key, value] of Object.entries(process.env)) {

Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.

Connect this server

This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.

claude mcp add universal-brute-workpack -- npx -y universal-brute-workpack

{
  "mcpServers": {
    "universal-brute-workpack": {
      "command": "npx",
      "args": [
        "-y",
        "universal-brute-workpack"
      ]
    }
  }
}

[mcp_servers.universal-brute-workpack]
command = "npx"
args = ["-y", "universal-brute-workpack"]

{
  "mcpServers": {
    "universal-brute-workpack": {
      "command": "npx",
      "args": [
        "-y",
        "universal-brute-workpack"
      ]
    }
  }
}

{
  "servers": {
    "universal-brute-workpack": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "universal-brute-workpack"
      ]
    }
  }
}

Optional settings from the registry entry, left out of the block above: UBW_CONFIG (Optional path to a custom Universal Brute Workpack config JSON), UBW_PROFILES (Optional path to a custom profile and deny-list JSON), UBW_ROOTS (Optional semicolon-separated filesystem roots for local file tools), TAVILY_API_KEY (Optional Tavily key for search.web before fallback providers), EXA_API_KEY (Optional Exa key for search.web before fallback providers), UBW_MEMORY_URL (Optional memory or vector service endpoint for memory.search), LLM_BASE_URL (Optional OpenAI-compatible base URL for Agent tasks), LLM_API_KEY (Optional model API key for Agent tasks), LLM_MODEL (Optional model name for Agent tasks).