Omahub
← All plugins
E

MCP Manager

by EF-Code

Discover and safely manage MCP servers across your Omarchy coding agents.

GitHub

Security review

No obvious issues detected

Deterministic scan — not a security guarantee

None
Risk level
None
Analyzed commit
39a658c
Scanned
1 month ago

No potentially dangerous behavior detected in the analyzed commit.

Automated analysis only — not a security guarantee.

AI advisory review

No obvious issues detected

Language-model assessment · ~deepseek/deepseek-v4-flash-latest — advisory only

None
AI risk level
None
Recommendation
install
Model
~deepseek/deepseek-v4-flash-latest
Analyzed commit
39a658c
Reviewed
1 month ago

The plugin is a local-first MCP configuration manager that reads and edits agent config files only after explicit user confirmation, with redaction, backups, and atomic writes. No network access, no hidden commands, and no destructive behavior were found in the sampled code or the deterministic scan.

How this check works

This review combines the deterministic scan (the rule-based results above) with an independent look at the plugin's code by a language model. The model reads a trimmed sample of the repository's files, the manifest, and the README, then gives a plain-language risk level and a recommendation: install (no notable danger), review (look closer first), or avoid (clearly dangerous).

It runs on the same analyzed commit as the deterministic scan and is strictly advisory — it is not a security guarantee and never blocks a plugin by itself. A human moderator still reviews plugins before they are listed.

AI advisory only — automated analysis, not a security guarantee.

Install
$ omarchy plugin add https://github.com/EF-Code/omarchy-mcp-manager --enable
Developer Tools #bar #quickshell #ai

MCP Manager

A native Omarchy bar panel for discovering and safely managing MCP servers across the coding agents already configured on your machine.

MCP Manager preview

MCP Manager is a local-first, offline Omarchy Quattro plugin. It combines the selected Omarchy default agent, allowlisted executables in PATH, known config files that exist, and explicit imports. It never treats the single default agent selector or omarchy.agents usage-provider list as a universal registry.

Capabilities

Agent Detection Configuration capability
Codex executable, ~/.codex/config.toml, default, import Read/write for recognized TOML MCP tables
Claude Code executable, ~/.claude.json, project .mcp.json, import Project JSON read/write; user state read-only
OpenCode executable and XDG/user/project JSON or JSONC Read/write for recognized legacy and v2 MCP shapes
Gemini CLI executable and ~/.gemini/settings.json Read/write for mcpServers
Antigravity agy or detected Antigravity MCP source Read/write only for recognized JSON source shapes
GitHub Copilot CLI executable and known user/project JSON sources Read/write for recognized JSON sources
Crush executable and known config candidates crushrc is read-only; recognized JSON is read-only until proven
Pi executable and ~/.pi/agent/settings.json Detect and explain; no native writer advertised
OMP executable and conservative candidates Detect and explain; no native writer
Grok executable and conservative candidates Detect and explain; no native writer
Generic import explicit JSON, JSONC, or recognized Codex TOML Read-only by default; manage-in-place is explicit and schema-gated

Antigravity is detected separately from Gemini. A menu override that displays Gemini while launching agy does not collapse the two identities.

Install and place in the bar

Review the repository before enabling it; Omarchy plugins run unsandboxed:

omarchy plugin add https://github.com/EF-Code/omarchy-mcp-manager.git
omarchy plugin enable io.github.ef-code.mcp-manager right

The first scan is read-only. Click the bar icon to open the anchored panel. The right mouse button refreshes discovery. Use h/l for agents, j/k for servers, [/] for sources, / for search, r to refresh, ? for help, Enter to edit, Space to preview enable/disable, and Escape to close.

Editing, imports, and recovery

Every supported mutation creates a redacted semantic and textual preview and requires explicit Apply. The helper revalidates the file immediately before writing, refuses external drift, creates a bounded owner-only backup, writes through a same-directory temporary file, and verifies the semantic postcondition. Restore and redacted history are available in the panel and through the helper.

Manual imports are explicit. Register read-only for the safest inspection, or choose manage-in-place only for the exact file after reviewing the warning. MCP Manager stores the path and authorization mode, never the file contents.

Cross-agent copy selects the destination agent's highest-precedence writable source and shows the converted, secret-safe payload first. Choose Copy to… to generate the destination's redacted textual diff, then choose Apply to commit it. Existing destination names are disclosed before planning. Embedded URL credentials, credential-bearing arguments, environment values, and HTTP header values are never copied automatically.

User-owned regular files with overly broad permissions remain visible through the redacted read-only model so the problem can be diagnosed. Editing stays disabled until the source file and its containing directory are owner-only; MCP Manager never silently changes permissions during discovery.

Static diagnostics are not health checks

Doctor checks syntax, schema, duplicate names, direct PATH presence, URL syntax, environment-variable-name presence without reading values, relative path risks, unsupported transports, literal-secret risks, and precedence conflicts. It never starts an MCP server and never claims connectivity. Individual findings can be ignored, all current findings can be cleared, and ignored findings can be restored. Ignore state contains only opaque diagnostic IDs in the plugin's owner-only XDG state directory; it does not contain source paths, labels, commands, configuration values, or credentials.

Dependencies and removal

Runtime dependencies are Omarchy Quattro/Quickshell and a portable Python 3 standard library interpreter. Node.js is used only by the JavaScript model tests. No package manager, network service, install hook, elevated access, or external runtime library is required.

To remove the plugin without touching agent configuration:

omarchy plugin disable io.github.ef-code.mcp-manager
omarchy plugin remove io.github.ef-code.mcp-manager

Removing the plugin does not delete agent MCP files. To remove only MCP Manager's state after reviewing it, delete the omarchy-mcp-manager directories under the XDG state, cache, and runtime locations. Backups should be retained if they may be needed for recovery.

Development and evidence

See CONTRIBUTING.md, SECURITY.md, and CHANGELOG.md. Static validation, automated tests, live local Omarchy interaction, and externally verified compatibility are separate evidence levels; this repository does not claim more than it has tested.