Is io.github.beycom/onetool-mcp safe to use?

io.github.beycom/onetool-mcp has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments. Licensed under GPL-3.0.

How do I install io.github.beycom/onetool-mcp?

io.github.beycom/onetool-mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.

What AI clients work with io.github.beycom/onetool-mcp?

io.github.beycom/onetool-mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.

Is io.github.beycom/onetool-mcp actively maintained?

io.github.beycom/onetool-mcp is actively maintained — last commit was 0 days ago. It has 22 GitHub stars.

io.github.beycom/onetool-mcp

skills

One MCP for devs incl Brave,Google,Tavily,Context7,AWS,Excalidraw,DB,GitHub,DevTools,Playwright

22 10.7M/wk GitHub npm

No known CVEs

GPL-3.0 license

Actively maintained

Last commit 0d ago

Works with most clients

Transport: stdio, sse, http

0 tools

Grade F

MCPpedia last refreshed this data 7h ago

Edit this pageView history

Browser Search

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, sse, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "io-github-beycom-onetool-mcp-2": {
      "args": [
        "-y",
        "skills"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-beycom-onetool-mcp-2)](https://mcppedia.org/s/io-github-beycom-onetool-mcp-2)

Read me

What io.github.beycom/onetool-mcp does

Works with Claude Code, Cursor, Codex - any MCP client

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.

npx -y 'skills' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

65/100across 5 weighted dimensions

How we score →

0255075100

−35

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked skills against OSV.dev.

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.beycom/onetool-mcp safe to use?: io.github.beycom/onetool-mcp has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments. Licensed under GPL-3.0.
How do I install io.github.beycom/onetool-mcp?: io.github.beycom/onetool-mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What AI clients work with io.github.beycom/onetool-mcp?: io.github.beycom/onetool-mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.
Is io.github.beycom/onetool-mcp actively maintained?: io.github.beycom/onetool-mcp is actively maintained — last commit was 0 days ago. It has 22 GitHub stars.

Similar servers

Others in browser / search

View all →

Context797

Context7 Platform -- Up-to-date code documentation for LLMs and AI code editors

59.8k 2

Puppeteer MCP Server96

Browser automation with Puppeteer for web scraping and testing

88.9k 5

Tavily Mcp96

Production ready MCP server with real-time search, extract, map & crawl.

2.3k 4

Brave Search MCP Server96

Web and local search using Brave Search API

88.9k 2

MCP Security Weekly

Get CVE alerts and security updates for io.github.beycom/onetool-mcp and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

Browser Search

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, sse, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "io-github-beycom-onetool-mcp-2": {
      "args": [
        "-y",
        "skills"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-beycom-onetool-mcp-2)](https://mcppedia.org/s/io-github-beycom-onetool-mcp-2)

Read me

What io.github.beycom/onetool-mcp does

Works with Claude Code, Cursor, Codex - any MCP client

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.

npx -y 'skills' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

README

🧿 One MCP for developers - no tool tax, no context rot.
250+ tools your agent calls as Python code: search, docs, files, databases, diagrams, vision, memory - plus a proxy for every MCP server you already use.

Works with Claude Code, Cursor, Codex - any MCP client

The Problem

Every MCP server re-sends its tool definitions on every request: 3K-30K tokens each. Connect 5 servers and you've burned 55K tokens before the conversation starts. Connect 10+ and you're at 100K.

The math is brutal: Claude Opus 4.5 at $5/M input tokens, 20 days × 10 conversations × 10 messages × 3K tokens = $30/month per MCP server - even if you never use the tools.

And then there's context rot - your AI literally gets dumber as you add more tools (Chroma Research, 2025).

The Solution

OneTool is one MCP server that exposes tools as a Python API. Instead of reading tool definitions, your agent writes code:

__onetool brave.search(query="react 19 server components")

Configure one MCP server. Use unlimited tools - ~2K tokens no matter how many you add.

"Agents scale better by writing code to call tools instead. This reduces the token usage from 150,000 tokens to 2,000 tokens...a cost saving of 98.7%"

— Anthropic Engineering

97% fewer tokens. 30× lower cost. No context rot. (Measured - 47,660 → 1,131 input tokens against 18 MCP servers.)

📖 Read the full story

Code Is the Interface

Because tools are Python functions, your agent does things tool-call JSON can't: batch, chain, loop, compose.

__onetool
page = webfetch.fetch(url="https://fastmcp.dev/changelog", output_format="markdown")
notes = ot_llm.transform(data=page, prompt="Summarise the breaking changes")
mem.write(topic="deps/fastmcp", content=notes)

Three packs, one request. Intermediate results flow between tools as variables - the page body never touches your context window, and the summarising runs on a cheap model instead of your expensive coding agent.

Every call is explicit and reviewable - __onetool brave.search(query="...") shows you exactly what runs. No tool-selection guessing.

And the runtime is built for how agents actually type:

mem.search(q="auth") works - any unambiguous parameter prefix resolves (q= → query=)
wb.draw(...) works - packs have short aliases (wb, ctx, img)
github.listRepositories() works on proxied servers - snake/camel/Pascal all resolve
A typo'd tool gets a did-you-mean, a disconnected server names the command that fixes it
Oversized results come back as a searchable handle instead of flooding the window

Install

Bootstrap (installs uv if missing, installs OneTool, initialises config, prints MCP config):

curl -LsSf https://onetool.beycom.online/install.sh | sh          # macOS / Linux
irm https://onetool.beycom.online/install.ps1 | iex               # Windows (P

... [View full README on GitHub](https://github.com/beycom/onetool-mcp#readme)

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

65/100across 5 weighted dimensions

How we score →

0255075100

−35

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked skills against OSV.dev.

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.beycom/onetool-mcp safe to use?: io.github.beycom/onetool-mcp has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments. Licensed under GPL-3.0.
How do I install io.github.beycom/onetool-mcp?: io.github.beycom/onetool-mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What AI clients work with io.github.beycom/onetool-mcp?: io.github.beycom/onetool-mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.
Is io.github.beycom/onetool-mcp actively maintained?: io.github.beycom/onetool-mcp is actively maintained — last commit was 0 days ago. It has 22 GitHub stars.