mcpbeat Sign in

GuestKit MCP Server

local only

GuestKit runs on your own machine — the client starts it, so there is no endpoint to ping. Last commit 20 Oct 2026.

Read-only evidence and boot-readiness tools for one VM disk image, offline.

—
Installs / week
not published
9
Stars
0 open issues
20 Oct 2026
Last commit
from GitHub
Apache-2.0
License
Rust

What the code does

We read the source, 5 d ago · rules 995398eba69f

Evidence

Things with no honest explanation: a promise that contradicts the code, code that runs at install time while hiding what it does, data leaving the machine.

Claims read-only, but the code runs commands integration/python/guestkit_wrapper.py:92, deploy/ui/serve-https.py:31
            result = subprocess.run(
        let mut cmd = Command::new("mkfs.vfat");
Capabilities

What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.

                    ("virtualbox-guest", &["/usr/bin/VBoxControl", "/opt/VBoxGuestAdditions"]),
const SENSITIVE_WORLD_WRITABLE: &[&str] = &["/etc", "/etc/cron.d", "/etc/sudoers.d"];
            result = subprocess.run(
    if has_cmd("docker") && Path::new("/var/run/docker.sock").exists() {
        let ak = format!("{}/.ssh/authorized_keys", f[5]);
In the project's build, not in the package

Found in continuous integration, deployment or infrastructure files, or in a neighbouring package of the same monorepo. None of this is installed when you add the server: it describes how the project is built and released. We list it because a leaked key in a build pipeline is still a real problem, but it is not something this server does on your machine.

Page executes code built at runtime deploy/ui/index.html:249
  el.innerHTML=state.vms.map(vm=>{

Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.

We found things in this code

Code changes quietly between releases, and nobody reads the diff of a dependency. We do, on every release — watch GuestKit and you get told the day something new turns up.

Three servers free · no card

Alternatives to GuestKit

same job, measured the same way
MCP Us Business Data
by avabuildsdata

Official-source US business, permit, and WHOIS evidence via read-only MCP tools.

answering
Agent evidence
by probityai

Offline, read-only tools that verify AI claims against evidence and replay conformance vectors.

835 installs/wk local only
MentionedOn Discovery Evidence Tools
by mentioned-on

Assess AI-discovery readiness, plan visibility fixes, and summarize scan evidence. Read-only.

9 tools answering
ProvenTools
by proventools

Read-only ProvenTools business ideas, evidence, build prompts, and validation reports.

24 installs/wk local only
agentgate
by ciceroyang

Read-only evidence for the tools agents run: MCP server records, coverage and policy.

39 installs/wk local only
GENESIS ProofRelay MCP Verifier
by genesisre

Read-only verifier for 25 ProofRelay MCP tools and non-confidential evidence bundles.

26 tools answering
Reality Graph Verification Tools
by realitygraph

Read-only AI coding tools for change verification, release readiness, capacity, and guidance.

10 tools answering
One AI Guide
by oneaiguide

Read-only approved AI tools, public stacks, guides, and evidence-aware comparisons.

7 tools answering

GuestKit — questions

Answers built from our own checks of this server.

Why is there no uptime for GuestKit?
GuestKit runs on your own machine over stdio — there is no network address to reach, so uptime cannot be measured for it by anyone.
Is GuestKit open source?
Yes — it is published under the Apache-2.0 licence, written in Rust and 9 stars on GitHub. The source link is on this page, so you can read exactly what it does with your data before you connect it.