MCP Package Manager

install MCP servers like packages

smith installs, composes, and audits MCP servers. one command instead of ten steps of json editing. rust. no runtime. no node.

Stop editing
json by hand

every MCP server install is the same ritual. open config, paste json, set paths, restart, hope. smith does it in one command.

Installed Servers
filesystem
git8t
memory
search
postgres
Learn more

Aligned with your
workflow

effortlessly hand off complex MCP server management with simple natural language commands.

AI
install
compose
SEC
scan
verify
profile
config
Read the docs

Security
first

static analysis on every MCP server before it runs. detects env access, shell execution, and filesystem writes.

blocks dangerous patterns by default. shell exec. env leaks. unsafe file writes. caught before execution.
Scanned 23 servers
Get started

one command beats ten steps. no json, no copy-paste, no manual restarts.

Run a scan
Security Results
filesystem
safe
memory
warn
shell_exec
blocked
847
servers indexed
1cmd
install any server
312
servers installed
0json
config editing
$ smith install filesystem done

MCP without the manual labor

install, compose, and audit MCP servers. no json editing. no manual restarts. no security surprises.

One command install

smith install filesystem. that's it. parses the package, writes the config, verifies the server, lists available tools.

smith install [name]

Compose servers

merge multiple MCP servers into one endpoint. smith compose fs git memory. one port, all tools, zero config.

smith compose [names]

Security analysis

static analysis before install. detects env access, shell execution, and filesystem writes. blocks by default.

smith scan [name]

stop editing json. start shipping.

every MCP server install is the same ritual. smith automates it all. install, compose, scan.

Install log

smith parses the package, writes the config, verifies the server starts. no json editing, no manual restarts.

smith installok
config writtenauto
server verifiedrunning
manual jsonn/a

Compose status

merge multiple MCP servers into one endpoint. one connection, many tools. automatic json-rpc multiplexing.

filesystemmerged
gitmerged
memorymerged
total tools23

Security scan

static analysis on every server before it runs. detects dangerous patterns, env leaks, unsafe file access.

file readpath: safe
env accessprocess.env.*
shell execblocked

Registry status

847 servers indexed and ready to install. verified, scanned, and composed from one binary.

64%
available847
installed12
audited23

manage your MCP fleet

smith ships with a dashboard. see installed servers, tool counts, security status, and compose endpoints.

Server Registry
smith config: ~/.config/smith/servers.toml
Live
Installed Servers
12
across 3 compose endpoints
Total Tools
189
merged and queryable
Security Issues
2 found
1 warning, 1 blocked
filesystemsafe
env_accesswarn
shell_execblocked
smith cli
smith install filesystem
package parsed: filesystem@1.2.0
config written: ~/.config/smith/servers.toml
server verified: 12 tools available
smith install git memory
installed: git (8 tools)
installed: memory (3 tools)
smith compose fs git memory
composing 3 servers into one endpoint
merged: 23 tools on port 9847
smith scan filesystem
file read: safe
env access: warning
shell exec: blocked
# no json. no copy-paste. no manual restarts.

three steps, zero config

install servers, compose them, scan for security. smith handles the rest.

1

Install

pick a server from the registry. smith parses it, writes the config, and verifies it's running. one command.

$ smith install filesystem
2

Compose

merge multiple servers into one endpoint. all tools available on a single port. no manual json editing.

$ smith compose fs git memory
3

Scan

static analysis of any server before install. detects env access, shell execution, and filesystem writes.

$ smith scan filesystem

npm made js installable. cargo made rust installable. smith makes MCP installable

stop editing json by hand. stop copy-pasting config blocks. install MCP servers the way you install everything else.