x=hub

your toolset

    build deployment
    sign in

    Tkach Security

    mcpother
    io.github.ECD5A/tkach-security · v0.1.2
    deploy just this

    Fail-closed MCP adapter for untrusted model output over a local Tkach runtime.

    run it

    on your own machines, one way per deploy method
    generated from the record, not tested yet
    # once, as root:
cargo install --locked tkach-mcp --version 0.1.2 --root /usr/local

#!/usr/bin/env bash
# tkach-security (io.github.ECD5A/tkach-security), recipe baremetal (generated).
# Generated by Hub for toolset "my-agent"; started by mcp-my-agent-tkach-security.service.
set -euo pipefail
export HOST=127.0.0.1 PORT=8101
exec uvx mcp-proxy --host 127.0.0.1 --port 8101 --pass-environment -- tkach-mcp

[Unit]
Description=MCP server tkach-security (toolset my-agent), generated by Hub
After=network-online.target
Wants=network-online.target

[Service]
Type=simple
User=mcp
Group=mcp
EnvironmentFile=/etc/mcp/my-agent.env
Environment=HOME=/var/lib/mcp/tkach-security
WorkingDirectory=/var/lib/mcp/tkach-security
ExecStart=/opt/mcp/my-agent/bin/tkach-security.sh
Restart=on-failure
RestartSec=5
NoNewPrivileges=true
ProtectSystem=strict
ProtectHome=true
PrivateTmp=true
ReadWritePaths=/var/lib/mcp/tkach-security

[Install]
WantedBy=multi-user.target

    connect to it

    copy what your client needs
    tkach-mcp
# env: TKACH_HTTP_ADDR, TKACH_BEARER_TOKEN
    {
  "mcpServers": {
    "tkach-security": {
      "command": "tkach-mcp",
      "args": [],
      "env": {
        "TKACH_HTTP_ADDR": "${TKACH_HTTP_ADDR}",
        "TKACH_BEARER_TOKEN": "${TKACH_BEARER_TOKEN}"
      }
    }
  }
}
    #!/usr/bin/env bash
# Registers every server with Claude Code (run once; `claude mcp list` to check).
set -euo pipefail
set -a; [ -f .env ] && source .env; set +a
claude mcp add tkach-security -e "TKACH_HTTP_ADDR=${TKACH_HTTP_ADDR}" -e "TKACH_BEARER_TOKEN=${TKACH_BEARER_TOKEN}" -- tkach-mcp

    {
  "mcpServers": {
    "tkach-security": {
      "command": "tkach-mcp",
      "args": [],
      "env": {
        "TKACH_HTTP_ADDR": "${TKACH_HTTP_ADDR}",
        "TKACH_BEARER_TOKEN": "${TKACH_BEARER_TOKEN}"
      }
    }
  }
}
    {
  "servers": {
    "tkach-security": {
      "type": "stdio",
      "command": "tkach-mcp",
      "args": [],
      "env": {
        "TKACH_HTTP_ADDR": "${TKACH_HTTP_ADDR}",
        "TKACH_BEARER_TOKEN": "${TKACH_BEARER_TOKEN}"
      }
    }
  }
}
    name: my-agent
target: local
servers:
- hub: io.github.ECD5A/tkach-security
    • not probed yet: tools unpinned, ingest lists them

    tools

    Not probed yetThe tools appear once the hub or its worker has listed this entry. Running it still works: your client lists them on first start.