ArcGIS MCP Bridge runs on your own machine — the client starts it, so there is no endpoint to ping. 199 installs a week from pypi. Last commit 22 Oct 2026.
Secure local-first MCP server for licensed ArcGIS Pro and ArcPy on Windows.
What the code does
We read the source, 2 d ago · rules 995398eba69f
What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.
proc = subprocess.run(
Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.
This code can reach further than it looks
We found places where it runs commands, builds paths or queries from values it is given. None of that is a flaw by itself — it becomes one when the code changes, and code changes quietly between releases. We re-read it on every one.
Connect this server
This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.
claude mcp add arcgis-mcp-bridge -e 'ARCPY_PYTHON_PATH=<ARCPY_PYTHON_PATH>' -- uvx arcgis-mcp-bridge{
"mcpServers": {
"arcgis-mcp-bridge": {
"command": "uvx",
"args": [
"arcgis-mcp-bridge"
],
"env": {
"ARCPY_PYTHON_PATH": "<ARCPY_PYTHON_PATH>"
}
}
}
}[mcp_servers.arcgis-mcp-bridge]
command = "uvx"
args = ["arcgis-mcp-bridge"]
env = { ARCPY_PYTHON_PATH = "<ARCPY_PYTHON_PATH>" }{
"mcpServers": {
"arcgis-mcp-bridge": {
"command": "uvx",
"args": [
"arcgis-mcp-bridge"
],
"env": {
"ARCPY_PYTHON_PATH": "<ARCPY_PYTHON_PATH>"
}
}
}
}{
"servers": {
"arcgis-mcp-bridge": {
"type": "stdio",
"command": "uvx",
"args": [
"arcgis-mcp-bridge"
],
"env": {
"ARCPY_PYTHON_PATH": "<ARCPY_PYTHON_PATH>"
}
}
}
}Put your own value in place of
<ARCPY_PYTHON_PATH> (Path to the licensed ArcGIS Pro Python interpreter or cloned arcgis-mcp-env interpreter).
The author’s registry entry marks it as required.
Optional settings from the registry entry, left out of the block above:
ARCGIS_MCP_ALLOWED_ROOTS (Optional semicolon-separated PathGuard boundary roots for local GIS data), ARCGIS_MCP_SCRATCH_GDB (Optional default output workspace. If set, it must point to an existing file geodatabase), ARCGIS_MCP_MAX_WORKERS (Optional maximum number of concurrent ArcPy worker subprocesses. Defaults to 2).
Alternatives to ArcGIS MCP Bridge
same job, measured the same wayControl Krita through a secure local MCP server and authenticated Windows bridge.
Local-first privacy MCP server for sensitive AI workflows
MCP server for AI assistants: read, write, edit, and manage files securely on local filesystem.
Local Windows management, diagnostics, security, cleanup, and optimization MCP server.
Secure MCP server for MediaWiki wikis — search, pages, categories, and more
Secure MCP server for public web search and URL fetching.
Domain security & privacy checker as an MCP server. 17 live checks, 0-100 score, local-first.
Open-source MCP server for secure Proxmox node, VM, and LXC operations.
ArcGIS MCP Bridge — questions
Answers built from our own checks of this server.