mcpbeat Sign in

Firekeep MCP Server

by kapella-hub Your server? Claim it
local only

Firekeep runs on your own machine — the client starts it, so there is no endpoint to ping. 1 608 installs a week from pypi. Last commit 8 Sep 2026.

Self-hosted operating layer for AI agents: knowledge, continuity, coordination, and governance.

Installs per day peak 1 328 · avg 409 · -25% w/w
a month agotoday
1 608
Installs / week
pypi · firekeep-client
2
Stars
0 open issues
8 Sep 2026
Last commit
0 releases in 90 days
NOASSERTION
License
Python

What the code does

We read the source, 18 h ago · rules 3dff92dd89df

A tool parameter reaches a dangerous call

A value the model can set ends up inside a file or shell call. That is not a flaw by itself — for a terminal server it is the job — but it is where things go wrong when it is not.

A tool parameter reaches a dangerous call relay_release.resource_id → relay/app/mcp_server.py:125, get_evolution_timeline.repo → symdex/src/firekeep_symdex/tools/get_evolution_timeline.py:57, relay_release.resource_id → relay/app/mcp_server.py:111 и ещё 2
    return await r.eval(RELEASE_LUA, 1, key, agent_id)
Evidence

Things with no honest explanation: a promise that contradicts the code, code that runs at install time while hiding what it does, data leaving the machine.

File ships in the package but is absent from the source [пакет] firekeep_client/hooks/destructive.py:1, [пакет] firekeep_client/__init__.py:1, [пакет] firekeep_client/adapters/__init__.py:1 и ещё 57
файл ставится пользователю, в репозитории его нет, и в нём есть опасный вызов
    (r"\brm\s+-\w*[rf]\w*[rf]\w*",              "rm -rf"),
Capabilities

What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.

        base = os.path.normpath(os.path.join(importing_dir, module_name)).replace("\\", "/")
      const child = spawn(executable, [...args], { detached: true, stdio: "ignore", windowsHide: true });
      - name: Assemble and sign the isolated Studio update channel
        shell: bash
        env:
          FIREKEEP_SIGNING_KEY: ${{ secrets.FIREKEEP_SIGNING_KEY }}
Executes code built at runtime hands/src/firekeep_hands/backends/win.py:91
    return __import__(name)
      dl.innerHTML = d.domains.map(name =>
Asks for container control access sentinel/app/config.py:8
    DOCKER_SOCKET: str = "/var/run/docker.sock"
  Object.assign(process.env, receiverEnvironment);

Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.

A tool parameter here reaches a dangerous call

That is not a flaw by itself — but it is where things go wrong when it is not the job. We re-read this code on every release. Watch it and you hear from us the day another one appears.

Three servers free · no card

Connect this server

This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.

run in your terminal
claude mcp add firekeep -- uvx firekeep-client
~/Library/Application Support/Claude/claude_desktop_config.json
{
  "mcpServers": {
    "firekeep": {
      "args": [
        "firekeep-client"
      ],
      "command": "uvx"
    }
  }
}
~/.codex/config.toml
[mcp_servers.firekeep]
command = "uvx"
args = ["firekeep-client"]
.cursor/mcp.json
{
  "mcpServers": {
    "firekeep": {
      "args": [
        "firekeep-client"
      ],
      "command": "uvx"
    }
  }
}
.vscode/mcp.json
{
  "mcpServers": {
    "firekeep": {
      "args": [
        "firekeep-client"
      ],
      "command": "uvx"
    }
  }
}

Alternatives to Firekeep

same job, measured the same way
aictrl
by vasparshin

Governance layer for AI coding agents: knowledge-graph grounding, session audit, policy controls.

answering
A
AgentBoard
by agentsknow

Agent-native knowledge, memory, task coordination, and self-governed collaboration.

70 tools answering
Base Multi Wallet MCP
by lordbasilaiassistant-sudo

MCP server for AI agents to manage multiple wallets with coordinated trading and batch operations on

45 installs/wk local only
Aim
by startaiming

Market knowledge layer for AI agents: competitors, opinions and regulations shaping your market.

answering
Sports Context Protocol
by dswane

Self-learning operational context layer for AI sports agents. Profile 001: golf.

42 installs/wk local only
Seenpaid
by justinasrolando-cpu

Open-source, self-hosted posting layer with an MCP server for AI agents. 25+ platforms.

local only
C
LedgerBeaver Finance
by ledgerbeaver

Governed finance operations for AP, AR, GL, approvals, reporting, and payments.

answering
Connapse
by destrayon

Self-hosted knowledge backend for AI agents with hybrid search and MCP tools

local only

Firekeep — questions

Answers built from our own checks of this server.

Why is there no uptime for Firekeep?
Firekeep runs on your own machine over stdio — there is no network address to reach, so uptime cannot be measured for it by anyone. What can be measured is adoption: the pypi package firekeep-client was installed 1 608 times last week.
How do I connect Firekeep?
Copy the ready config from this page — we generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each with the file path that client actually reads. It runs locally, so the command pulls firekeep-client straight from pypi; nothing to host, nothing to sign up for.
How many people use Firekeep?
The pypi package firekeep-client was installed 1 608 times in the last week. Week over week that is -25%. We show installs rather than GitHub stars on purpose: a star is a bookmark, an install is someone actually running it.
Is Firekeep open source?
We cannot say that it is. On our reading no licence is declared for it, which is not the same as open source: source code can be public and still be proprietary. Check the terms with the vendor before you build on it.