mcpbeat Sign in

Every App Is Open Source MCP Server

by thomasisalwayslate Your server? Claim it
local only

Every App Is Open Source runs on your own machine — the client starts it, so there is no endpoint to ping. 3 541 installs a week from pypi. Last commit 24 Oct 2026.

Native reverse engineering with Ghidra and evidence on Apple Silicon macOS. Setup required.

Installs per day peak 881 · avg 118
a month agotoday
3 541
Installs / week
pypi · every-app-is-open-source
0
Stars
0 open issues
24 Oct 2026
Last commit
from GitHub
Apache-2.0
License
Python

What the code does

We read the source, 1 d ago · rules 995398eba69f

A tool parameter reaches a dangerous call

A value the model can set ends up inside a file or shell call. That is not a flaw by itself — for a terminal server it is the job — but it is where things go wrong when it is not.

A tool parameter reaches a dangerous call calculate.expression → src/eaos/backend.py:607, calculate.expression → src/eaos/calculator.py:36, calculate.expression → src/eaos/backend.py:901 и ещё 1
        process = subprocess.run([sys.executable,'-I',str(Path(__file__).with_name('calculator.py'))],
Capabilities

What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.

    return repr(eval(compile(tree, '<calculator>', 'eval'), {'__builtins__': {}, **NAMES}, {}))
            subprocess.run(['/usr/bin/ditto','-x','-k',str(archive),str(staging)],check=True)

Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.

A tool parameter here reaches a dangerous call

That is not a flaw by itself — but it is where things go wrong when it is not the job. We re-read this code on every release. Watch it and you hear from us the day another one appears.

Three servers free · no card

Connect this server

This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.

run in your terminal
claude mcp add every-app-is-open-source -- uvx every-app-is-open-source
~/Library/Application Support/Claude/claude_desktop_config.json
{
  "mcpServers": {
    "every-app-is-open-source": {
      "command": "uvx",
      "args": [
        "every-app-is-open-source"
      ]
    }
  }
}
~/.codex/config.toml
[mcp_servers.every-app-is-open-source]
command = "uvx"
args = ["every-app-is-open-source"]
.cursor/mcp.json
{
  "mcpServers": {
    "every-app-is-open-source": {
      "command": "uvx",
      "args": [
        "every-app-is-open-source"
      ]
    }
  }
}
.vscode/mcp.json
{
  "servers": {
    "every-app-is-open-source": {
      "type": "stdio",
      "command": "uvx",
      "args": [
        "every-app-is-open-source"
      ]
    }
  }
}

Optional settings from the registry entry, left out of the block above: EAOS_RUNTIME_DIR (Optional custom Java/Ghidra directory. Use the same value when running eaos setup).

Alternatives to Every App Is Open Source

same job, measured the same way
Meaning Model
by emergent-wisdom

Revisable general-purpose models with opt-in story and ideation add-ons. Rust engine required.

196 installs/wk local only
HexWitness
by siaginw

Durable, build-scoped reverse-engineering evidence memory and query tools for AI agents.

13 installs/wk local only
MCP Reverse Engineering
by daedalus

A sandboxed MCP tool for reverse engineering with multiple tool integrations

170 installs/wk local only
MCP Reverse Engineering
by daedalus

A sandboxed MCP tool for reverse engineering with multiple tool integrations

170 installs/wk local only
Fathom
by qompass

Reverse-engineering tools for agents over MCP/A2A, with evidence-carrying findings.

local only
open-signals
by civops-platform

Public hazard, water, weather and EPA data with source, age and licence on every reading.

9 tools answering
Metal GPU Trace
by partprogramming09

Measure Wine and macOS programs' GPU use on Apple silicon with Metal System Trace

1 881 installs/wk local only
Argus
by r0ptik

Reverse-engineering evidence from a running Windows process, not the binary on disk.

local only

Every App Is Open Source — questions

Answers built from our own checks of this server.

Why is there no uptime for Every App Is Open Source?
Every App Is Open Source runs on your own machine over stdio — there is no network address to reach, so uptime cannot be measured for it by anyone. What can be measured is adoption: the pypi package every-app-is-open-source was installed 3 541 times last week.
How do I connect Every App Is Open Source?
Copy the ready config from this page. We generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each in the form that client actually reads. It runs locally, so the command pulls every-app-is-open-source straight from pypi; nothing to host, nothing to sign up for.
How many people use Every App Is Open Source?
The pypi package every-app-is-open-source was installed 3 541 times in the last week. We show installs rather than GitHub stars on purpose: a star is a bookmark, an install is someone actually running it.
Is Every App Is Open Source open source?
Yes — it is published under the Apache-2.0 licence, written in Python and 0 stars on GitHub. The source link is on this page, so you can read exactly what it does with your data before you connect it.