# ToolHive

An open-source platform that runs every MCP server in an isolated container, enforces identity and access policy per request, and gives platform teams a Kubernetes operator and audit logs for running MCP in production.

ToolHive runs Model Context Protocol servers inside isolated containers, each with a minimal permission file and no local credentials, and connects clients such as Claude Code, Cursor and GitHub Copilot to them with a single click or command. Semantic tool search is used to reduce the token overhead of exposing many MCP tools to a model, cutting reported usage by up to 85%.

When configured with an authentication source, it enforces identity and access policy on every request and gives platform and security teams audit logs, ending unmonitored shadow use of MCP servers by developers. A Kubernetes operator lets policies be declared and MCP run on existing Kubernetes infrastructure, integrated with an identity provider and an observability stack through OpenTelemetry traces.

It can be self-hosted for organizations whose compliance requirements prohibit sensitive data from reaching a SaaS provider, is built on a modular Gateway, Registry Server and Runtime architecture accessible through a UI and CLI, is written in Go, and is licensed under Apache-2.0.

Website: https://stacklok.com/download/