← Index

io.github.cyanheads/toolkit-mcp-server

io.github.cyanheads/toolkit-mcp-server·v2.0.0·Maps & Location

Generate IDs, QR codes, and hashes, encode values, geolocate IPs, plus gated host diagnostics.

Trust verdict · v1 advisory · method
NOT YET SCREENEDno verdict on file

Verdict not yet evaluated for this tool. The semantic screen takes adversarial cases first; coverage rolls out as the corpus expands (15/150 labels to graduation). The deterministic conformance probe is built but has not yet run on the public corpus, so a recorded verdict here is REVIEW or UNVERIFIED, never a clearing ALLOW. Until a verdict is recorded, an agent should treat this tool as not-yet-cleared and fall back to its own checks. Method: the eval, four-state verdict, honest limits.

Own this server? Screen its description →

Environment variables
MCP_LOG_LEVEL

Sets the minimum log level for output (e.g., 'debug', 'info', 'warn').

TOOLKIT_ENABLE_NET_DIAGNOSTICS

Register the gated toolkit_check_network tool. Off by default — leave off for hosted/shared deployments.

TOOLKIT_ENABLE_SYSTEM_INFO

Register the gated toolkit_check_system tool. Off by default — only meaningful on a local deployment.

TOOLKIT_ALLOW_PRIVATE_NETWORK

With network diagnostics enabled, permit private/reserved/loopback targets. The second explicit gate; off by default.

TOOLKIT_GEO_PROVIDER

IP-geolocation provider id. Default 'ip-api' is the keyless free tier.

TOOLKIT_GEO_API_KEY
secret

API key for the geolocation provider, if it requires one. The default ip-api tier is keyless.

TOOLKIT_GEO_BASE_URL

Base URL for the geolocation provider. Default is the keyless ip-api endpoint.

TOOLKIT_GEO_CACHE_TTL_SECONDS

Geolocation cache TTL in seconds. Geolocation is stable, so repeats are cached.

TOOLKIT_GEO_RATE_LIMIT_PER_MIN

Max geolocation requests per minute before backoff slows. Default 45 matches the ip-api free tier.

MCP_HTTP_HOST

The hostname for the HTTP server.

MCP_HTTP_PORT

The port to run the HTTP server on.

MCP_HTTP_ENDPOINT_PATH

The endpoint path for the MCP server.

MCP_AUTH_MODE

Authentication mode to use: 'none', 'jwt', or 'oauth'.

MCP_LOG_LEVEL

Sets the minimum log level for output (e.g., 'debug', 'info', 'warn').

TOOLKIT_ENABLE_NET_DIAGNOSTICS

Register the gated toolkit_check_network tool. Off by default — leave off for hosted/shared deployments.

TOOLKIT_ENABLE_SYSTEM_INFO

Register the gated toolkit_check_system tool. Off by default — only meaningful on a local deployment.

TOOLKIT_ALLOW_PRIVATE_NETWORK

With network diagnostics enabled, permit private/reserved/loopback targets. The second explicit gate; off by default.

TOOLKIT_GEO_PROVIDER

IP-geolocation provider id. Default 'ip-api' is the keyless free tier.

TOOLKIT_GEO_API_KEY
secret

API key for the geolocation provider, if it requires one. The default ip-api tier is keyless.

TOOLKIT_GEO_BASE_URL

Base URL for the geolocation provider. Default is the keyless ip-api endpoint.

TOOLKIT_GEO_CACHE_TTL_SECONDS

Geolocation cache TTL in seconds. Geolocation is stable, so repeats are cached.

TOOLKIT_GEO_RATE_LIMIT_PER_MIN

Max geolocation requests per minute before backoff slows. Default 45 matches the ip-api free tier.

MCP quality score · maturity, not trust · methodology
freshness
25
completeness
10
installability
25
documentation
15
stability
10
Alternatives in Maps & Location