ArcGIS MCP Bridge runs on your own machine — the client starts it, so there is no endpoint to ping. 242 installs a week from pypi. Last commit 7 Aug 2026.
Secure local-first MCP server for licensed ArcGIS Pro and ArcPy on Windows.
We read the source, 21 h ago · rules 3dff92dd89df
What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.
proc = subprocess.run(
Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.
We found places where it runs commands, builds paths or queries from values it is given. None of that is a flaw by itself — it becomes one when the code changes, and code changes quietly between releases. We re-read it on every one.
This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.
claude mcp add arcgis-mcp-bridge -- uvx arcgis-mcp-bridge
{
"mcpServers": {
"arcgis-mcp-bridge": {
"args": [
"arcgis-mcp-bridge"
],
"command": "uvx"
}
}
}
[mcp_servers.arcgis-mcp-bridge]
command = "uvx"
args = ["arcgis-mcp-bridge"]
{
"mcpServers": {
"arcgis-mcp-bridge": {
"args": [
"arcgis-mcp-bridge"
],
"command": "uvx"
}
}
}
{
"mcpServers": {
"arcgis-mcp-bridge": {
"args": [
"arcgis-mcp-bridge"
],
"command": "uvx"
}
}
}
This one needs environment variables set before it will start:
ARCPY_PYTHON_PATH (Path to the licensed ArcGIS Pro Python interpreter or cloned arcgis-mcp-env interpreter.), ARCGIS_MCP_ALLOWED_ROOTS (Optional semicolon-separated PathGuard boundary roots for local GIS data.), ARCGIS_MCP_SCRATCH_GDB (Optional default output workspace. If set, it must point to an existing file geodatabase.), ARCGIS_MCP_MAX_WORKERS (Optional maximum number of concurrent ArcPy worker subprocesses. Defaults to 2.).
The author declared them in the registry entry; get the values from the project itself.
Control Krita through a secure local MCP server and authenticated Windows bridge.
Local-first privacy MCP server for sensitive AI workflows
MCP server for AI assistants: read, write, edit, and manage files securely on local filesystem.
Local Windows management, diagnostics, security, cleanup, and optimization MCP server.
Secure MCP server for MediaWiki wikis — search, pages, categories, and more
Secure MCP server for public web search and URL fetching.
Domain security & privacy checker as an MCP server. 17 live checks, 0-100 score, local-first.
Open-source MCP server for secure Proxmox node, VM, and LXC operations.
Answers built from our own checks of this server.