MCP Hangar runs on your own machine — the client starts it, so there is no endpoint to ping. 4 261 installs a week from pypi. Last commit 4 Nov 2026.
Policy enforcement plane for MCP: every tool call ends in a verdict. Self-hosted, MIT.
We read the source, 3 d ago · rules 995398eba69f
What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.
elapsed = now - self.last_update
self.tokens = min(self.capacity, self.tokens + elapsed * self.rate)
result = subprocess.run(
"docker": "/var/run/docker.sock",
Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.
We found places where it runs commands, builds paths or queries from values it is given. None of that is a flaw by itself — it becomes one when the code changes, and code changes quietly between releases. We re-read it on every one.
This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.
claude mcp add hangar -- uvx mcp-hangar
{
"mcpServers": {
"hangar": {
"command": "uvx",
"args": [
"mcp-hangar"
]
}
}
}
[mcp_servers.hangar]
command = "uvx"
args = ["mcp-hangar"]
{
"mcpServers": {
"hangar": {
"command": "uvx",
"args": [
"mcp-hangar"
]
}
}
}
{
"servers": {
"hangar": {
"type": "stdio",
"command": "uvx",
"args": [
"mcp-hangar"
]
}
}
}
Optional settings from the registry entry, left out of the block above:
MCP_CONFIG (Path to config.yaml declaring the upstream MCP servers and policy. Without it Hangar reads ./config.yaml, else ~/.config/mcp-hangar/config.yaml (written by `mcp-hangar init`), and refuses to start if neither exists).
Credential enforcement middleware for MCP servers — verifies scoped tokens on every tool call
Deterministic policy enforcement and MCP management for AI agent tool calls.
Journals every MCP tool call with secrets redacted; with a policy, holds risky calls for approval
Run MCP tool calls through Runestone Gatekeeper — policy enforcement, human approval, audit.
AI governance MCP server for policy enforcement, cost control, and observability.
Agent control plane for DCC and engine hosts: one MCP endpoint, one tool contract.
Scans self-hosted multi-tenant AI-agent platforms for tenant-isolation gaps via an MCP tool.
Self-hostable policy control plane for AI coding agents.
Answers built from our own checks of this server.