McpHub

Secure MCP gateway for Cursor, Claude and VS Code: 3 tools instead of hundreds (-99.9% tokens), code mode, macOS sandbox, tool pinning, OAuth in the Keychain. Single Rust binary.

What does this entry provide?

McpHub is an MCP server entry in ChatHome Skills, sourced from GitHub MCP Search and scored 32/100. Secure MCP gateway for Cursor, Claude and VS Code: 3 tools instead of hundreds (-99.9% tokens), code mode, macOS sandbox, tool pinning, OAuth in the Keychain. S. As a Model Context Protocol server, it exposes tools that MCP-compatible LLM clients such as Claude, Cursor, and Copilot can call directly, extending an agent's reach beyond its built-in capabilities. ChatHome Skills discovered this entry through its daily ingest of official registries and GitHub discovery queries, and re-verifies repository facts, freshness signals, and install metadata on every run. The quality score weighs official-registry presence, a working install command, license clarity, GitHub star trajectory, and repository freshness — the full formula is on the Sources page. The install command above is ready to copy. Review the last-pushed date and repository status before adding McpHub to a production agent workflow; the snapshot facts below are point-in-time values from the most recent ingest.

Snapshot facts

Source: GitHub MCP Search
Quality: 32/100
Install method: source code
Repo: Soflutionltd/McpHub
Repo updated: Oct 26, 2026

Source checkout

git clone https://github.com/Soflutionltd/McpHub.git

Install method: source code

Review the upstream source before running this command.

GitHub project Homepage

Quality

Repo stars

Repo updated

Oct 26, 2026

How is this score calculated?

Weighted across six dimensions, scored 0-100.
Provenance (25): listed in an official or curated registry.
Installability (25): a runnable install command beats a declared transport, which beats a source checkout.
Maintenance (20): recency of the last push; archived entries score zero here.
Adoption (20): repository stars on a log curve.
Documentation (10) and description quality (10): parsed manifest or SKILL.md frontmatter, and a real description rather than a placeholder.

Security signals

highMatched in: skillBody
Downloads a script and pipes it straight into a shell, executing remote code with no review.
curl -fsSL https://raw.githubusercontent.com/Soflutionltd/McpHub/main/get.sh | bashDispute this flag?
highMatched in: skillBody
Recursively force-deletes a root, home, or wildcard path — capable of wiping user data.
rm -rf ~Dispute this flag?
mediumMatched in: skillBody
Contains language that tries to override an agent's prior instructions (prompt injection).
ignore previous instructionsDispute this flag?

MCP manifest

{
  "fullName": "Soflutionltd/McpHub"
}

Discovery note

Secure MCP gateway for Cursor, Claude and VS Code: 3 tools instead of hundreds (-99.9% tokens), code mode, macOS sandbox, tool pinning, OAuth in the Keychain. Single Rust binary.

Report an issue with this listing