A native desktop wrapper for MCP Inspector built with Tauri v2. 一款基于 Tauri v2 的 MCP Inspector 原生桌面封装,告别浏览器标签,一键调试 MCP Server。
MCPpedia last refreshed this data
Config is the same across clients — only the file and path differ.
{
"mcpServers": {
"mcp-inspector-desktop": {
"args": [
"-y",
"@modelcontextprotocol/inspector"
],
"command": "npx"
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
为 MCP Inspector 打造的原生桌面封装——告别浏览器标签,一键调试 MCP Server。
Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.
npx -y '@modelcontextprotocol/inspector' 2>&1 | head -1 && echo "✓ Server started successfully"
After testing, let us know if it worked:
Five weighted categories — click any category to see the underlying evidence.
MCP Inspector is Vulnerable to Potential Command Execution via XSS When Connecting to an Untrusted MCP Server
An XSS flaw exists in the MCP Inspector local development tool when it renders a redirect URL returned by a remote MCP server. If the Inspector connects to an untrusted server, a crafted redirect can inject script into the Inspector context and, via the built-in proxy, be leveraged to trigger arbitrary command execution on the developer machine. Version 0.16.6 hardens URL handling/validation and prevents script execution. > Thank you to the following researchers for their reports and contributi
MCP Inspector proxy server lacks authentication between the Inspector client and proxy
Versions of MCP Inspector below 0.14.1 are vulnerable to remote code execution due to lack of authentication between the Inspector client and proxy, allowing unauthenticated requests to launch MCP commands over stdio. Users should immediately upgrade to version 0.14.1 or later to address these vulnerabilities. Credit: Rémy Marot <bughunters@tenable.com>
Be the first to review
Have you used this server?
Share your experience — it helps other developers decide.
Sign in to write a review.
Others in other
Compress tool outputs, logs, files, and RAG chunks before they reach the LLM. 60-95% fewer tokens, same answers. Library, proxy, MCP server.
Pi Coding Agent extension (CLI-first) — routes bash/read/grep/find/ls through lean-ctx CLI for strong token savings. Optional MCP bridge can register advanced tools.
One local source for the MCP servers, tools, and memory your AI coding agents share, synced into each tool's native config with a review gate and a receipt for every change. No daemon, no lock-in.
97% token reduction for AI coding sessions — zero deps, 21 languages, MCP server
MCP Security Weekly
Get CVE alerts and security updates for Mcp Inspector Desktop and similar servers.
Start a conversation
Ask a question, share a tip, or report an issue.
Sign in to join the discussion.
为 MCP Inspector 打造的原生桌面封装——告别浏览器标签,一键调试 MCP Server。
English | 中文

启动页

Inspector 运行界面

前往 Releases 页面下载对应平台的安装包:
| 平台 | 格式 |
|---|---|
| Windows | .exe / .msi |
| macOS | .dmg(Universal Binary) |
| Linux | .AppImage / .deb / .rpm |
libwebkit2gtk-4.1-dev应用依赖全局安装的 MCP Inspector:
npm install -g @modelcontextprotocol/inspector
应用启动时会自动检测,如未安装会提示安装命令。
git clone https://github.com/cicbyte/mcp-inspector-desktop.git
cd mcp-inspector-desktop
npm install
npm run tauri dev
点击 "停止" 按钮即可终止 Inspector 进程,之后可重新启动。
日志颜色说明:
| 颜色 | 含义 |
|---|---|
| 蓝色 | 系统消息 |
| 灰色 | 标准输出 |
| 红色 | 错误输出 |
std::process::Command 启动 mcp-inspector CLI 子进程Session token: 行,提取认证令牌portpicker 自动选择可用端口MCP_AUTO_OPEN_ENABLED=false 阻止浏览器自动打开| 层级 | 技术 |
|---|---|
| 前端框架 | React 18 + TypeScript |
| 构建工具 | Vite 6 |
| 样式方案 | Tailwind CSS 3.4 |
| 桌面框架 | Tauri v2 |
| 后端语言 | Rust (Edition 2021) |
| 进程通信 | Tauri Commands / Events |
| 端口选择 | portpicker |
# 开发模式(前端热重载 + Rust 自动重编译)
npm run tauri dev
# 仅前端开发
npm run dev
# 构建生产版本
npm run tauri build
采用两步式发布,CHANGELOG 自动生成 + 人工审核:
# 1. 生成 CHANGELOG 条目 + .version 文件
python scripts/gen_release_notes.py # 自动递增版本号
# python scripts/gen_release_notes.py 0.1.0 # 或指定版本号
# 2. 审核 CHANGELOG.md 内容
# 3. 执行发布(同步版本号 + commit + tag + push)
python scripts/release.py
Tag 推送后 GitHub Actions 自动构建多平台安装包并创建 Release。
mcp-inspector-desktop/
├── src/ # React 前端
│ ├── components/
│ │ ├── Launcher.tsx # 启动页(启动按钮 + 日志面板)
│ │ └── InspectorView.tsx # 运行时视图(iframe + 可收起日志)
│ ├── App.tsx # 根组件,视图切换
│ ├── lib/utils.ts # cn() 工具函数
│ └── styles/globals.css # Tailwind + CSS 变量主题
├── src-tauri/ # Rust 后端
│ ├── src/
│ │ ├── main.rs # Tauri Builder 配置
│ │ ├── commands.rs # Tauri Command 定义
│ │ ├── state.rs # 全局状态(Mutex)
│ │ ├── inspector/
│ │ │ ├── mod.rs # 错误类型 + 跨平台命令解析
│ │ │ └── process.rs # 子进程管理核心
│ │ └── config/
│ │ └── storage.rs # 配置持久化
│ └── tauri.conf.json # Tauri 应用配置
└── package.json
应用未经 Apple 公证,首次打开时 Gatekeeper 会阻止运行。
方法一:通过系统设置(推荐)
方法二:通过终端移除隔离属性
xattr -c
... [View full README on GitHub](https://github.com/cicbyte/mcp-inspector-desktop#readme)